Error: rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
File:                     _06CSYXcD-nm1S0VaP27Fw73EEs.mft (raw, json)
Hash identifier:          Y5mA9A8YjMq3m9oxRHQSdf2jFF7ntJGSy8O9LjFj8Lc=
Subject key identifier:   26:F5:E7:27:39:87:D6:8B:16:5C:81:21:93:59:B9:B6:9D:72:91:2B
Authority key identifier: FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B
Certificate issuer:       /CN=F36EF78EAF/serialNumber=FF4E824985DC0FE9E6D52D1568FDBB170EF7104B
Certificate serial:       0334
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
Manifest number:          0331
Signing time:             Sat 24 Oct 2026 04:25:18 +0000
Manifest this update:     Sat 24 Oct 2026 04:25:18 +0000
Manifest next update:     Mon 26 Oct 2026 04:25:17 +0000
Files and hashes:         1: _06CSYXcD-nm1S0VaP27Fw73EEs.crl (hash: LoNCHMqgO8qU5FYTH5txXRSNccAJ4ZOX/nUYLDOMBs4=)
                          2: 67C1E6C25BC211EFB69DE054762E951A.roa (hash: YBb6s7P/xe4Rp31Y1/0OCerKUAL44djIVtQBiEpnlME=)
                          3: D1925D2E8CC311F083C2CFE1DAE4EC9C.roa (hash: zU8Q70WrJt2SK0TaQnBuuJzUDch8WRt6KzfF4KFZg1U=)
                          4: F663696AE24411EF9066AA7A762E951A.roa (hash: rlVcPbXsu5EET/bBWkW4TnApiJ0p61Q+bM4Ie8pECxI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF78EAF, serialNumber=FF4E824985DC0FE9E6D52D1568FDBB170EF7104B
        Validity
            Not Before: Oct 24 04:25:18 2026 GMT
            Not After : Oct 26 04:25:17 2026 GMT
        Subject: CN=6adc332e-a230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:0e:68:a3:d5:bb:78:04:b1:1f:f9:57:c0:
                    31:2c:e3:00:d8:74:a3:fb:7e:14:6e:c8:fe:31:f0:
                    0a:ef:22:ba:f5:29:32:89:94:21:33:4e:86:4c:98:
                    76:bf:3e:c0:03:d2:61:37:3a:48:7f:9f:05:28:01:
                    77:20:84:fb:3f:39:89:70:8c:21:f9:62:86:66:99:
                    6c:6b:6b:91:63:0a:d9:00:c1:1d:4b:62:d4:0e:b9:
                    ad:8b:d3:20:cf:e3:f6:e5:05:22:53:7e:61:ef:5a:
                    0e:a3:2d:07:0e:dc:cf:57:08:90:28:74:fa:c0:b2:
                    38:3f:4d:dc:ee:c5:61:a8:c8:3a:93:61:27:98:90:
                    5c:8f:e1:56:63:9e:3d:6a:f0:29:3c:4b:75:3e:a7:
                    09:6d:19:e3:16:db:e9:4d:ce:7c:b5:ad:e7:f0:b1:
                    11:eb:58:e9:9a:e3:db:43:53:36:a2:c9:f5:dd:d9:
                    9f:5b:16:83:ed:8e:94:0a:88:77:f8:cf:84:2f:f4:
                    de:22:8c:42:68:c9:ba:8c:86:c9:88:3f:da:38:12:
                    f7:21:24:53:06:bd:88:11:29:e9:5e:52:16:5a:22:
                    f4:02:47:ec:c2:f1:1e:a7:57:45:44:b9:a2:ae:7e:
                    14:7d:05:20:63:d1:26:3a:a8:66:cd:ee:d5:1b:08:
                    3e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F5:E7:27:39:87:D6:8B:16:5C:81:21:93:59:B9:B6:9D:72:91:2B
            X509v3 Authority Key Identifier:
                keyid:FF:4E:82:49:85:DC:0F:E9:E6:D5:2D:15:68:FD:BB:17:0E:F7:10:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_06CSYXcD-nm1S0VaP27Fw73EEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF78E/993956C85BC111EF8A43554E762E951A/_06CSYXcD-nm1S0VaP27Fw73EEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ba:0e:6b:b0:2c:51:0f:c7:72:81:39:70:eb:02:8e:2d:7a:
         c5:d3:c3:d4:84:cc:6f:a1:11:a4:89:f9:3b:74:bb:09:06:9d:
         0a:2c:60:cb:d3:24:b6:07:a0:2c:c7:d9:21:95:dd:48:04:10:
         97:76:af:46:e3:f9:22:a3:5b:b9:62:0f:07:2d:7c:a7:49:db:
         9a:8a:87:68:e0:e2:72:51:a6:be:07:66:e7:fc:06:7f:8f:04:
         d4:22:7d:b2:ed:b0:5b:5f:45:d3:a0:78:60:31:6e:3c:6c:26:
         34:91:1c:6b:a4:6f:f2:d4:6a:8b:a5:16:b5:74:7e:b4:4b:10:
         01:d6:02:7a:27:73:21:19:51:d7:20:31:51:55:23:6f:d8:f1:
         cc:02:e7:8f:57:ef:22:a4:09:77:d4:ca:0a:76:6a:7c:1d:7e:
         e3:a2:e3:9a:e1:96:35:39:23:c6:98:74:36:c6:40:00:7d:a8:
         1f:4c:9b:39:c6:54:e0:45:3a:7a:08:09:21:61:26:2a:c9:7a:
         e0:de:4d:59:62:83:1b:4f:be:49:cd:fb:ca:06:2b:1e:c9:01:
         3f:36:f1:5b:20:8c:77:ca:21:76:18:53:9b:32:ee:0e:70:51:
         fc:17:73:db:82:29:09:f9:27:1b:fc:d7:65:b7:f7:2a:33:e8:
         a3:fb:82:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:15:05 2026 by rpki-client