Error: rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
File:                     DgQKv0-UXzDXfaKLvwKLasSdBCw.mft (raw, json)
Hash identifier:          31jjjSvHPzwViZ2Yf/4j7qAMBVTJv7jnYbWQnN1Eerg=
Subject key identifier:   3D:53:2A:B8:D0:42:6E:8C:22:FB:BF:B0:F9:F0:F7:E8:46:7E:1B:1E
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0AF1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
Manifest number:          0AD8
Signing time:             Sun 25 Oct 2026 01:30:54 +0000
Manifest this update:     Sun 25 Oct 2026 01:30:53 +0000
Manifest next update:     Tue 27 Oct 2026 01:30:53 +0000
Files and hashes:         1: DgQKv0-UXzDXfaKLvwKLasSdBCw.crl (hash: d85BrkfTnLxFGvbHjnlTcbUyaVu4dySnkajyJrBpKCk=)
                          2: DE9ABBFE963D11F1B08864D6CE1D38B0.roa (hash: LmmF61WGi+c5tx7diHsUKoBkDLwT10AuaotpS4JIsnQ=)
                          3: 8CD08FF6963D11F1B152F6D3CE1D38B0.roa (hash: LjBqzY7fBybv856/VtVP+nEOO3AmKuFtPd1aUQ0N8HQ=)
                          4: 4AEF13BE963D11F193B912D2CE1D38B0.roa (hash: Bz08Ul12aPFmnFeKKATupuMupMgsuN47O/3D94SpZWE=)
                          5: 72BC5C90964111F185D9FBEACE1D38B0.roa (hash: Mxu0IHDBtQ0gMB1uc7mq59dmgNdwE/tx0wzZZlIE8+8=)
                          6: 32E00976963E11F1BA5349D8CE1D38B0.roa (hash: qsn/ZGUqSLM9gPu3EBVDp2FPQBJAHeUtYE5HvF7jt10=)
                          7: FA78C2A4963711F189AD42B3CE1D38B0.roa (hash: sqnMHuAuMvtV2NgF64lasqjlK/Azxonx9qZ8oNc6bXc=)
                          8: 395614AE964211F1BA6029EFCE1D38B0.roa (hash: QyuBb1INrn+/cQ2YciuIzau9AUi/xUasqlCunSIHwdA=)
                          9: A297428E963E11F1B85B87DACE1D38B0.roa (hash: rwz2mY6LmqgsS1AN3WQHj/GNPsl7soX1ygGDhkn5Bc8=)
                          10: 3C8D028C963711F191EB1CAFCE1D38B0.roa (hash: /csTm7NNdYNrJIGKEt25hO4hUKRB4n++erm3mKTTkw4=)
                          11: 4A3694E2963811F1BF267CB5CE1D38B0.roa (hash: rtVS5HOqdqtfYhUrlLaUxNjHLjakyUDG7lf4/fsJQn8=)
                          12: 173885C6963F11F1B4DE99DECE1D38B0.roa (hash: sljKKRTTajQPxDBI0X/jcTbwc1nGR6g6Fjk6QwtmvBU=)
                          13: 0B08958C964111F1AC8EC9E8CE1D38B0.roa (hash: ncjb02+UNksMyKo4Uj1M6fyigS9dLGoCVJI4SCyLtLo=)
                          14: 73CBFB96964011F1848080E6CE1D38B0.roa (hash: aYkoDEflzTDdM24OkR3wpR411xpSYWokIlV8nq/XCgc=)
                          15: 9A7B53D0963711F1B2A05DB1CE1D38B0.roa (hash: HmyAQJnkkRmlSFFgdyH41p3xz7nklLlBMiyaitvZ59Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 01:30:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2801 (0xaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Oct 25 01:30:53 2026 GMT
            Not After : Oct 27 01:30:53 2026 GMT
        Subject: CN=6add5bce-cfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d5:9d:79:df:8a:69:d7:9e:29:49:ee:8d:aa:
                    2b:16:29:35:a5:2b:a8:39:bb:ef:b2:66:3d:aa:c3:
                    bb:14:db:f1:51:da:a1:65:a5:ad:bf:70:2d:6c:ec:
                    45:a4:3f:fd:77:29:c2:b8:a7:05:69:44:b2:36:cb:
                    7c:97:00:dd:50:bd:15:3f:8e:88:58:01:eb:b9:51:
                    12:e7:86:4f:74:40:89:f5:3e:7e:3c:8a:ce:3b:ce:
                    07:9b:c0:49:a7:dc:82:3d:8d:c7:6b:8a:c4:4e:b3:
                    e2:92:bc:f4:05:58:4f:1f:86:7a:3f:27:29:d3:88:
                    fd:d5:02:9b:e5:96:d8:df:85:0b:bd:e0:1c:07:54:
                    59:4e:0f:43:c9:7e:38:3f:35:b1:c8:b6:bb:f4:d2:
                    fb:71:22:5b:9d:7a:aa:2e:84:8f:bc:6b:fa:c9:81:
                    d1:a8:14:83:61:b0:33:b7:9a:6d:ea:aa:99:35:07:
                    fb:44:92:6b:97:98:7a:56:99:cc:c9:6a:a7:e2:7c:
                    69:56:83:35:32:80:e2:12:73:99:ad:10:34:8f:39:
                    d4:e7:67:b4:10:96:f1:26:53:52:52:8b:b3:ed:36:
                    6f:9f:ef:eb:95:ca:94:9c:9f:c3:4e:02:ff:64:f7:
                    0d:dc:65:28:77:5a:56:64:f0:a5:48:93:76:32:ca:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:53:2A:B8:D0:42:6E:8C:22:FB:BF:B0:F9:F0:F7:E8:46:7E:1B:1E
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:3d:12:67:a7:7e:5c:fe:36:0f:57:13:2e:05:08:7e:4c:98:
         9a:9e:21:e1:76:ee:6d:d7:d4:4f:0b:aa:34:8f:05:6c:c6:4b:
         ab:12:ad:6d:23:61:23:28:94:88:a4:c9:5a:3d:09:f8:ff:bc:
         b9:84:26:8d:0c:b8:d6:dc:cd:b6:bf:b8:7f:17:6a:b1:77:89:
         6b:97:87:0c:3e:a3:ab:e5:f0:3e:df:19:82:cd:57:6f:e5:74:
         f7:17:bc:bc:31:80:37:40:62:12:3f:8f:c0:83:b8:03:2c:17:
         a5:82:b9:81:3a:a4:58:ba:07:4b:41:b5:b7:67:26:d7:c3:a6:
         14:9a:35:6e:2a:60:6f:50:ef:96:35:98:a5:8d:db:fe:e1:04:
         7e:3e:d3:05:8e:cb:a5:be:76:9c:75:ac:b0:58:b4:58:e5:76:
         88:ec:6e:c6:0c:46:d6:e0:41:c1:11:6d:da:36:36:50:61:b7:
         e8:1b:bd:00:e8:69:aa:b4:a5:5f:a3:7e:c7:41:24:a0:81:3d:
         3b:40:17:43:86:46:d8:15:66:56:4f:84:71:14:b1:f1:20:5e:
         26:31:f9:74:87:7f:63:d0:52:ce:3f:ef:6e:18:08:7c:b9:22:
         aa:ac:d1:4f:b7:43:0b:50:65:e9:6c:3e:32:b8:83:34:05:7d:
         3a:81:8c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:51:15 2026 by rpki-client