Error: rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
File:                     rTNWCjX9wk4yt-GkeeIbDolqKw8.mft (raw, json)
Hash identifier:          ampKEKcKAa0M82ddZmoxaGT1RMaQXFeyNIeKMm8o0FQ=
Subject key identifier:   0A:12:F1:54:46:20:0F:8E:05:95:17:61:EF:25:EA:A8:BC:74:B5:C8
Authority key identifier: AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
Certificate issuer:       /CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Certificate serial:       0719
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
Manifest number:          070E
Signing time:             Tue 27 Oct 2026 02:33:18 +0000
Manifest this update:     Tue 27 Oct 2026 02:33:17 +0000
Manifest next update:     Thu 29 Oct 2026 02:33:17 +0000
Files and hashes:         1: rTNWCjX9wk4yt-GkeeIbDolqKw8.crl (hash: Wo3Pm6yMQyWf7ERjJzo9MdZM+0yz7G84csQg6EP1nGA=)
                          2: 5E81A05CF6C111F090F814B9DAE4EC9C.roa (hash: CXgFQ1uTo16cJcLpTaAS0b6W9qW/z2voqXHY06fFv7o=)
                          3: BF8F48A6F6BF11F095810AAFDAE4EC9C.roa (hash: VEsebwVhKZL3/XUSHJqAh+mFFUO9Y2ZvSaUxglQg0CQ=)
                          4: 7229C2C2F6B911F0BB42E288DAE4EC9C.roa (hash: NGWL7WTp2+vDw0UYE0HTCquOeakOVgnzWPmFK84KCSI=)
                          5: 3ECF1FD6C4BF11EE8B2737C5775412E6.roa (hash: 3Te+eK/mIojMdAzwZB8nPJY3HNmC7bWhD0CTw4iHG3c=)
                          6: B0C41976F6BC11F0AC80729EDAE4EC9C.roa (hash: 2ZnGHKJr9GknAn0GSNTFw5APOwhZJEhr/CLUu2Z00eE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1817 (0x719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F9BF2AR, serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
        Validity
            Not Before: Oct 27 02:33:17 2026 GMT
            Not After : Oct 29 02:33:17 2026 GMT
        Subject: CN=6ae00d6d-bfcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:75:e7:21:5a:6a:e5:22:13:12:90:51:b3:89:
                    2f:2c:12:ea:f7:18:78:99:a9:47:ba:f2:72:6c:9f:
                    5f:ac:b4:ec:60:bb:e0:87:40:f1:20:ed:0b:5a:13:
                    89:96:45:9e:45:a4:54:94:37:79:db:a3:9c:9e:da:
                    14:d2:a7:be:ff:a7:b8:24:eb:97:13:9e:71:ba:df:
                    4e:d6:3c:77:83:82:80:69:03:d0:7d:a1:db:23:97:
                    b8:3b:67:6a:df:3b:bc:8a:71:e2:29:f9:e0:cb:5a:
                    f9:fa:9b:30:25:f3:13:b4:b8:c0:a3:e6:f5:e3:f8:
                    37:da:4b:af:62:ad:37:99:4b:58:30:36:db:00:94:
                    11:81:6b:03:34:4d:fc:37:e2:1d:4a:96:82:65:67:
                    20:55:d4:58:c1:a2:e5:6b:2e:a5:57:1d:a1:35:fd:
                    54:2c:5d:f1:2d:c9:e1:03:40:ae:d1:a0:42:24:fe:
                    a4:3a:52:b6:85:48:79:5c:87:b0:53:bb:3d:c4:27:
                    51:8c:9f:37:33:93:80:26:3d:17:96:c5:9a:00:51:
                    bf:23:e9:6f:b5:bf:28:33:0a:9e:1b:ff:74:23:8e:
                    58:b2:09:15:ca:44:80:1e:ec:e0:b5:cd:b4:8a:a2:
                    32:c8:4c:aa:1f:15:ac:d8:be:d0:cb:cb:b7:57:ac:
                    7c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:12:F1:54:46:20:0F:8E:05:95:17:61:EF:25:EA:A8:BC:74:B5:C8
            X509v3 Authority Key Identifier:
                keyid:AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:4e:33:1e:4d:d8:26:b6:0b:0a:c7:7f:49:5f:a2:c8:a4:dc:
         25:c3:bf:d6:fb:d9:c0:7c:f0:d9:52:a7:e0:e8:7c:d0:bc:27:
         a3:88:b9:33:92:f7:2b:81:71:0d:5b:77:6c:3f:19:8b:be:91:
         72:8c:3b:79:ef:6d:81:75:dc:e8:91:01:54:45:31:6d:0f:e5:
         ea:fb:6e:6b:bb:4f:77:76:34:ab:a0:f5:bf:2a:5b:66:64:ec:
         aa:31:64:30:61:9c:bc:17:61:35:b6:d9:ce:20:60:84:a6:23:
         71:f0:14:1d:f8:3f:cf:29:d0:66:27:8c:f1:48:51:43:5b:1b:
         b4:75:40:6c:9b:af:e1:2e:75:01:3b:7b:f6:0c:1d:5e:bf:e2:
         0c:1b:2a:bd:c6:91:08:2e:71:3b:c1:2a:bf:8e:79:31:d2:e7:
         92:17:31:c2:61:a4:a1:35:04:68:68:9e:2d:55:b9:95:16:e7:
         d7:c8:17:3e:72:bc:65:ef:c9:c3:79:82:4c:8a:40:8e:63:06:
         54:ab:05:22:fa:c8:96:6e:7f:96:2f:de:e8:29:24:b7:56:fa:
         d0:91:19:ef:6c:2c:89:17:16:e1:1f:df:c4:f1:70:d1:07:32:
         ea:79:e9:66:4f:f9:18:d5:36:4f:1c:ea:5e:d0:f3:eb:07:53:
         4d:f8:06:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:59:23 2026 by rpki-client