Error: rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft
File:                     8RynOfh_E2iVt2T04GlkdyAJ0yI.mft (raw, json)
Hash identifier:          i44mlduWEugfyUUhv4trTJ3gLc3HYPDFTOMmSWFaoH4=
Subject key identifier:   74:ED:60:A7:AC:B1:A6:52:C2:3F:92:EA:11:AE:62:3B:A2:AF:EC:2B
Authority key identifier: F1:1C:A7:39:F8:7F:13:68:95:B7:64:F4:E0:69:64:77:20:09:D3:22
Certificate issuer:       /CN=F36F4B39AF/serialNumber=F11CA739F87F136895B764F4E06964772009D322
Certificate serial:       06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8RynOfh_E2iVt2T04GlkdyAJ0yI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft
Manifest number:          05
Signing time:             Sat 19 Sep 2026 10:12:14 +0000
Manifest this update:     Sat 19 Sep 2026 10:12:14 +0000
Manifest next update:     Mon 21 Sep 2026 10:12:14 +0000
Files and hashes:         1: 8RynOfh_E2iVt2T04GlkdyAJ0yI.crl (hash: Ie+yLwaGcO9RE2EGzpnLWSfRlpiLhXqm5aoMM18dmMQ=)
                          2: D2F1E6F0B1E611F181FE93A7CE1D38B0.roa (hash: OsghJqJfIP3Ve0QJBY/T1ISmWblug/Nf14aLrATEI8Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8RynOfh_E2iVt2T04GlkdyAJ0yI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F4B39AF, serialNumber=F11CA739F87F136895B764F4E06964772009D322
        Validity
            Not Before: Sep 19 10:12:14 2026 GMT
            Not After : Sep 21 10:12:14 2026 GMT
        Subject: CN=6aae5ffe-6e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:81:12:3a:07:97:41:6a:61:a7:31:9b:b6:
                    7d:73:0e:0f:ec:5f:02:67:34:cc:8d:e1:5d:00:f9:
                    f0:eb:1f:82:43:af:7e:61:c7:03:16:fc:b6:21:60:
                    04:df:a7:9d:5f:59:bf:0b:ae:98:bf:c2:f9:a6:b8:
                    f5:40:3b:5b:84:d1:48:ce:df:95:45:7d:ed:de:26:
                    c4:17:db:95:74:dd:4c:d6:56:02:60:a1:bb:aa:75:
                    99:4e:d7:54:33:77:c8:df:a5:e7:7e:87:47:c7:19:
                    0e:50:c9:a0:dc:bc:0b:6d:4e:9d:9b:2b:15:47:bd:
                    25:4d:5b:79:2c:47:69:6c:64:b0:85:b4:ea:19:7e:
                    38:24:1f:98:5d:17:b1:c8:aa:ab:57:25:7f:11:a8:
                    1d:74:0e:52:f9:24:7e:ef:08:47:e9:2c:cc:29:2e:
                    75:b7:8a:ab:e0:1e:5a:5f:29:77:22:f9:4f:ef:6a:
                    0e:ea:7a:4b:ac:09:d3:43:4c:b0:64:ff:a8:04:f6:
                    cc:ea:e9:94:1b:0b:5c:6a:a5:90:c5:e8:13:58:cd:
                    81:e0:1f:44:ac:8c:ce:38:f5:ef:a6:f6:1d:54:0a:
                    dc:04:6b:79:ff:c3:62:e4:64:c7:31:96:d7:fc:5f:
                    48:d5:b8:f7:27:b8:93:71:64:55:c7:ec:ae:a8:d1:
                    c0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:ED:60:A7:AC:B1:A6:52:C2:3F:92:EA:11:AE:62:3B:A2:AF:EC:2B
            X509v3 Authority Key Identifier:
                keyid:F1:1C:A7:39:F8:7F:13:68:95:B7:64:F4:E0:69:64:77:20:09:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8RynOfh_E2iVt2T04GlkdyAJ0yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:22:9f:b9:6f:c0:19:31:6d:36:ac:ef:6a:6b:89:ce:a7:7d:
         39:67:43:22:7c:37:7d:2f:a8:f0:34:45:60:b4:2d:4b:c2:e5:
         e3:07:4b:28:cf:88:9b:be:6c:39:81:e1:2c:c3:c0:40:6e:66:
         55:67:79:d0:a9:9e:13:23:6b:56:4b:c6:83:c3:11:15:0d:59:
         a4:b6:72:22:6f:64:0a:e4:b4:81:6a:e5:e5:00:89:40:05:c8:
         ac:b5:73:5a:30:84:15:49:c5:8b:05:61:52:5a:ee:de:13:14:
         17:8a:48:fa:b7:97:8c:3e:39:dd:52:12:c9:97:cc:25:6e:84:
         e7:2d:18:e5:b4:4f:42:4e:07:33:ba:72:cf:0c:44:33:ab:d4:
         d1:34:4b:21:f9:9b:53:ae:51:2e:08:35:72:61:19:e2:24:61:
         f0:ae:14:66:a5:ad:12:50:25:c1:d3:0d:1e:49:43:18:1a:e9:
         69:50:2c:95:95:bc:3d:e6:f4:cf:24:bb:5a:69:2e:23:8d:bc:
         a3:44:38:12:58:b5:59:56:56:56:60:78:f0:47:7c:7b:8b:e6:
         0a:7a:09:a4:ed:f6:02:74:75:a7:64:a1:25:ba:61:84:b6:d4:
         78:95:5d:af:84:0c:26:51:c5:9c:a4:91:86:48:d5:8f:79:3b:
         3f:d7:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 12:23:49 2026 by rpki-client