Error: rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
File:                     5zU0-ODMucOEExGNd_3qToCP6jE.mft (raw, json)
Hash identifier:          e7uvhOfd3idgdxSh2//s3SGQu/AkAPLLn9AjloShjMI=
Subject key identifier:   B4:A9:27:41:5D:98:82:1D:0A:5E:B8:81:D1:1A:80:B4:96:92:BB:79
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       0941
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
Manifest number:          0940
Signing time:             Wed 26 Aug 2026 01:47:15 +0000
Manifest this update:     Wed 26 Aug 2026 01:47:14 +0000
Manifest next update:     Fri 28 Aug 2026 01:47:14 +0000
Files and hashes:         1: 5zU0-ODMucOEExGNd_3qToCP6jE.crl (hash: HLnWU2M6Niw5iY5uqfgYSzHygrk7dnDPyEkT6iKFqC4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2369 (0x941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Aug 26 01:47:14 2026 GMT
            Not After : Aug 28 01:47:14 2026 GMT
        Subject: CN=6a8e45a3-83eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f8:de:13:5b:19:f2:f3:fd:01:df:d9:95:a0:
                    36:6c:24:03:b3:d2:7e:04:e2:a5:73:8c:13:4e:04:
                    26:d1:0d:d3:d4:29:20:55:4d:7a:63:13:2b:08:4e:
                    40:8e:5f:a4:20:58:0b:0e:f4:7b:08:05:9f:70:b0:
                    1d:20:be:4b:10:e9:b4:99:a3:dc:fc:ad:65:a0:9e:
                    d9:c0:35:1c:db:45:88:08:5c:39:d4:01:09:38:a4:
                    f5:41:50:df:36:bf:dc:82:c7:3f:ac:2c:b2:d2:02:
                    9c:b9:01:04:a2:6c:0d:27:c5:d3:de:b3:e6:9c:bf:
                    51:6d:5c:7f:54:16:9a:b5:f3:6b:76:3a:76:87:3a:
                    a0:20:95:ec:a9:a0:a2:bf:9d:eb:c5:d0:3f:cb:d8:
                    cd:29:0f:2b:3b:a3:2e:08:f6:b8:64:f6:95:66:5c:
                    41:67:31:3e:e5:f5:6b:3a:62:01:1f:b2:ad:8d:18:
                    fe:4c:dc:2e:04:2e:47:54:3f:32:0e:b6:cc:b2:4b:
                    eb:66:03:a3:0f:23:a2:a0:2f:1b:a4:78:21:23:57:
                    a5:95:2a:fb:f4:38:50:bd:75:de:13:d6:2e:0f:ed:
                    a7:a7:ef:c3:dc:0e:97:05:1b:8c:17:b1:47:8f:99:
                    f5:e8:73:4b:8c:15:2b:08:fe:31:47:66:55:6e:9d:
                    26:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A9:27:41:5D:98:82:1D:0A:5E:B8:81:D1:1A:80:B4:96:92:BB:79
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5e:13:e2:b5:2c:34:74:9c:00:ec:26:55:d7:ea:cf:ee:38:
         42:0b:46:c1:cc:ec:57:f1:f8:8a:18:a9:05:db:fa:95:84:0e:
         25:b2:37:d3:16:e8:79:bc:a7:aa:d1:4e:79:c4:dc:c3:10:70:
         0a:e1:a9:2f:4c:9a:ef:3d:2a:28:7f:61:b8:93:e3:3b:26:e5:
         a0:d4:01:2d:f5:45:7a:6f:8f:f2:36:ea:34:9f:cf:7c:c3:62:
         db:0d:82:71:bd:4f:00:0f:3b:33:b4:fb:b1:49:c4:a9:18:2e:
         21:cc:3d:c5:98:69:f0:5b:a0:01:90:f7:c9:1c:bc:e4:a2:d0:
         ea:23:21:0c:ae:54:e8:b8:03:d6:11:b1:11:7f:c6:56:0c:29:
         39:16:61:fe:54:4a:d4:23:5f:2a:a3:65:3f:b2:6e:97:f4:11:
         10:49:1d:10:cd:dc:4e:d5:14:82:c8:8f:ce:a9:a1:fc:9b:8d:
         d8:2f:52:89:02:d9:5f:73:7b:cc:04:0f:a8:14:63:c9:ac:a7:
         2a:24:7c:a4:04:bc:04:8e:bc:9e:f5:75:3e:53:30:b9:01:53:
         32:01:62:4b:13:a2:b2:85:42:f0:8e:f7:9a:34:4b:c2:ef:96:
         bf:20:9f:b9:ea:87:8b:21:f0:3f:53:e2:21:74:a6:9f:d6:e7:
         b8:ab:49:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:22 2026 by rpki-client