Error: rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
File:                     T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft (raw, json)
Hash identifier:          J99krzmm5NDkSOaQCdZL4YaFSwFlbkGI8wU/g/DWeYQ=
Subject key identifier:   DC:D9:24:F2:8C:73:78:F0:DB:6A:1E:24:5C:3A:FC:06:83:7B:58:C0
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Certificate issuer:       /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial:       0A05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
Manifest number:          09F4
Signing time:             Wed 28 Oct 2026 01:40:55 +0000
Manifest this update:     Wed 28 Oct 2026 01:40:54 +0000
Manifest next update:     Fri 30 Oct 2026 01:40:54 +0000
Files and hashes:         1: T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl (hash: V2nrCggDXZA3pJY0C2R4VTONb3ZwaCOTKhxb9Xaw9wU=)
                          2: F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa (hash: PW/BAXgHvih22srJgbVXfOqpna8bQSUwnKdkd55yiKw=)
                          3: 63CD6D381C6F11F1A8701690DAE4EC9C.roa (hash: c9onQMQ9ZUC32jP7lmDEH4I1JLO7mXPuFSF2QEzOxqk=)
                          4: B6B99F861C6E11F18CC2268CDAE4EC9C.roa (hash: Nk9KcupgaFrT9HYjwhwayvcsckASnFKmSYP5X4ruEFg=)
                          5: 582A85201C6E11F196474E8ADAE4EC9C.roa (hash: tXQNq5anGZuKI/N3ls0PiguA4/6L6XRyM0QYo8OFjRw=)
                          6: FEE338541C6D11F196022388DAE4EC9C.roa (hash: LVUzPTIff1K9PHg6hyLX45CbcDuYQrRZVEGZDDm6Rkg=)
                          7: 7576B97E4FFF11EF84A6EB64762E951A.roa (hash: 33ok2yqrTl57C64Sr4/sUY8EF0IDi0i5pKehUOrq0+s=)
                          8: 57CE8E244FFF11EF959DB964762E951A.roa (hash: fyxQpuVFjDxsdPdxESeE+9woq7cT+VNLSx/q/+d4MIo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
        Validity
            Not Before: Oct 28 01:40:54 2026 GMT
            Not After : Oct 30 01:40:54 2026 GMT
        Subject: CN=6ae152a7-47bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:60:17:0e:d4:76:ba:1d:81:0f:51:51:a0:ca:
                    b6:6e:59:47:89:9a:56:ca:93:38:5e:07:b3:d8:00:
                    1e:e2:dd:6b:74:ed:32:3e:f8:8e:90:13:ed:6a:88:
                    54:c6:bc:1b:f3:09:67:c0:d7:7e:11:5e:0d:e5:d3:
                    01:49:f4:cb:85:46:48:7a:17:24:2b:05:ed:9a:39:
                    68:68:dc:e5:e0:b3:84:d9:e2:82:a2:75:10:58:6c:
                    79:08:0f:36:15:67:24:a0:bc:5c:4c:20:17:34:8b:
                    59:ff:28:26:7e:79:50:4b:b7:93:3a:5d:07:42:25:
                    c9:b7:0a:a6:5d:6b:c2:49:7d:4d:44:9b:50:13:73:
                    59:f9:4d:36:c5:ef:d9:21:a9:e5:5f:ff:86:3a:6d:
                    a3:ac:65:5c:55:76:f8:83:f2:dd:c0:0d:08:90:32:
                    b6:33:b7:7c:f4:63:37:2a:be:3e:06:ea:c7:43:d8:
                    06:94:f6:27:68:ce:7b:92:ca:67:2e:db:07:33:9c:
                    e2:a8:d7:5e:46:15:d8:48:8f:34:59:3e:f1:fb:3a:
                    6d:b0:9b:60:7a:13:e0:2d:8f:1a:19:8e:af:ec:c9:
                    fd:52:3a:b1:7a:c8:91:8e:db:de:33:57:35:4d:bc:
                    dc:99:4e:5c:49:75:b1:b4:9b:93:48:27:58:29:24:
                    04:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D9:24:F2:8C:73:78:F0:DB:6A:1E:24:5C:3A:FC:06:83:7B:58:C0
            X509v3 Authority Key Identifier:
                keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b9:cf:55:bd:c4:9b:b0:01:21:ae:29:69:af:ed:f8:77:16:
         3e:90:a8:37:04:b3:92:cb:9c:86:46:ff:f8:0a:99:a8:90:fa:
         9e:cd:16:32:3b:47:ad:8e:3f:4c:af:29:f4:2b:fb:5e:93:ad:
         0a:b1:e3:35:5e:0c:20:cd:57:c3:16:fa:0e:2e:8e:ac:bc:9f:
         0a:fa:fb:a2:3d:46:98:3a:3c:72:d2:be:69:0b:f6:cf:e2:fc:
         2a:b1:1e:0b:32:49:45:ec:1d:1e:ef:ec:cd:f7:1c:73:be:02:
         33:11:f9:1a:06:59:80:af:ca:e8:b9:5e:f8:f5:4b:3c:4f:97:
         a0:40:78:df:f3:f4:11:7c:30:ec:92:5d:80:76:f1:23:a0:65:
         c0:9d:6a:68:c2:7c:02:04:27:c0:9f:2c:4e:79:f2:6a:29:67:
         19:ce:0f:25:14:df:a1:16:60:71:a1:29:06:bd:39:dd:3a:89:
         ab:57:f8:0e:6c:5b:ba:72:15:6a:fd:16:cf:a6:59:9c:01:a2:
         f0:73:84:73:3e:2d:10:ac:e9:34:21:c2:c7:5e:dc:c2:96:c6:
         1d:ba:b3:8b:5a:a6:2c:1e:3b:92:ec:ce:92:d4:22:ba:32:46:
         a7:30:48:bb:18:10:db:6f:5a:db:76:d4:a4:1a:a3:2a:7a:30:
         c1:61:b3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:06:14 2026 by rpki-client