Error: rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
File:                     S7AyYfFNBLALJrKXJeQg7lOe-sE.mft (raw, json)
Hash identifier:          A9K8ZElBScEtQ5FPFCgPsYEbzIrJgMcg8vO0aEMXgbg=
Subject key identifier:   DA:08:6A:47:F0:A0:8C:E7:88:BD:6F:66:BB:30:61:46:40:56:E8:24
Authority key identifier: 4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1
Certificate issuer:       /CN=F36F62C3AR/serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
Certificate serial:       1030
Authority info access:    rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
Manifest number:          102A
Signing time:             Sun 11 Oct 2026 00:55:16 +0000
Manifest this update:     Sun 11 Oct 2026 00:55:15 +0000
Manifest next update:     Tue 13 Oct 2026 00:55:15 +0000
Files and hashes:         1: S7AyYfFNBLALJrKXJeQg7lOe-sE.crl (hash: 7ScOElBgansPrBxdX/HjycqIhWkzF5wgp1N80Jptxs0=)
                          2: 3467C85EB57811EFBB258E50762E951A.roa (hash: 7B5t76JYb0weJx5foAylkCd79y67MwjACrJXbPrLiGo=)
                          3: 3F711DA2B57511EF9BE2B9BD762E951A.roa (hash: HY6X5qdCvMeHk+soAwWe9vEEWgfGLOX8rrjzYU1Pl8w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
                          rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4144 (0x1030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F62C3AR, serialNumber=4BB03261F14D04B00B26B29725E420EE539EFAC1
        Validity
            Not Before: Oct 11 00:55:15 2026 GMT
            Not After : Oct 13 00:55:15 2026 GMT
        Subject: CN=6acade74-34d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:48:a2:6c:13:fc:d2:f4:1e:21:83:1d:9a:
                    be:68:d6:2c:66:92:9e:a6:76:ed:0b:16:d6:80:fd:
                    16:40:4f:3a:0e:66:21:ed:1b:b4:2b:7d:c1:c6:69:
                    09:6f:6b:16:18:90:5c:65:73:8c:eb:6b:a6:1c:9c:
                    5a:77:b4:b0:79:b6:79:c4:94:29:5a:80:97:e3:bc:
                    a5:1e:e9:e8:d3:d4:99:29:cc:fe:65:f8:c3:90:b5:
                    85:fd:30:d9:e9:77:ba:ff:33:cd:49:6c:e7:4d:af:
                    26:b7:8a:2e:da:a1:4e:7c:72:e1:5e:c3:7f:b1:4d:
                    0b:19:90:a9:83:97:61:22:e9:4a:e4:6c:fd:2f:e3:
                    69:16:e6:7d:51:56:20:9e:fe:7a:ab:2d:29:8a:d2:
                    74:de:73:69:ff:fa:cc:2e:1e:b0:53:10:24:75:a3:
                    90:1e:59:9d:b9:58:9c:bd:3f:43:6c:55:c4:e1:67:
                    ce:7d:16:a0:fd:7c:b9:e8:1b:27:09:57:a5:ef:60:
                    34:cf:32:43:69:48:6f:a2:bb:dc:2d:5f:18:62:5f:
                    61:0c:6e:78:3b:a8:12:5f:f8:16:97:da:6c:5f:fb:
                    0b:a2:c6:de:5f:d3:a2:e8:73:af:fe:b6:47:5d:e7:
                    f7:4f:69:80:5e:07:9f:16:72:06:3c:ba:20:df:0a:
                    c5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:08:6A:47:F0:A0:8C:E7:88:BD:6F:66:BB:30:61:46:40:56:E8:24
            X509v3 Authority Key Identifier:
                keyid:4B:B0:32:61:F1:4D:04:B0:0B:26:B2:97:25:E4:20:EE:53:9E:FA:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/S7AyYfFNBLALJrKXJeQg7lOe-sE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/80A5BAEC556911E59B9AAA81F8AEA228/S7AyYfFNBLALJrKXJeQg7lOe-sE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:96:0e:72:7b:86:d6:b8:86:6a:fc:22:70:76:12:28:7f:
         59:23:88:bc:3d:ca:0c:2d:06:de:a6:ac:0c:70:fb:2e:cb:fa:
         00:f3:03:08:b9:bd:ab:f4:e8:15:97:82:d7:e2:b0:36:b9:fa:
         4d:1b:f7:ce:9f:38:fc:d1:4c:14:68:e0:3f:16:59:dc:95:5c:
         82:d4:94:5c:01:7d:1b:20:b4:86:cd:14:fa:01:c8:4c:ec:51:
         92:0b:eb:c0:50:ff:49:79:9c:5b:b1:42:12:77:20:78:66:f5:
         61:2c:4b:ee:63:a7:be:32:71:2e:f2:ab:4e:12:c5:ce:da:47:
         67:07:c2:4c:f1:66:b0:c3:77:09:95:59:09:d1:ba:d4:60:f9:
         f8:15:ed:9d:9f:9d:a4:f7:6b:fc:c2:4e:e9:94:3d:e0:31:37:
         1d:c8:a1:cd:d6:75:b3:06:d1:32:8c:3a:51:0c:97:94:b7:75:
         64:7d:ce:60:0d:31:83:9f:5b:c2:e1:c7:ed:de:68:15:b7:6c:
         83:8a:6a:87:98:c2:e4:10:3b:15:b6:40:70:24:38:48:50:37:
         99:a5:29:b8:0e:52:29:7b:25:db:83:a9:19:48:d6:a9:e9:03:
         2c:a2:df:cc:1d:df:df:9d:8f:7a:69:ac:91:f4:8d:72:ba:9a:
         7e:d3:a1:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:47:28 2026 by rpki-client