Error: rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
File:                     rTNWCjX9wk4yt-GkeeIbDolqKw8.mft (raw, json)
Hash identifier:          d88vWfOGPkwDY6xCagdY2NN3z+27AJ0rTcu1IyNRqC8=
Subject key identifier:   96:C0:29:BE:4F:44:06:0E:51:CD:AE:2C:67:BD:19:F2:B7:BE:3F:A6
Authority key identifier: AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
Certificate issuer:       /CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Certificate serial:       071A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
Manifest number:          070F
Signing time:             Wed 28 Oct 2026 02:33:45 +0000
Manifest this update:     Wed 28 Oct 2026 02:33:44 +0000
Manifest next update:     Fri 30 Oct 2026 02:33:44 +0000
Files and hashes:         1: rTNWCjX9wk4yt-GkeeIbDolqKw8.crl (hash: u0abZXJdasUsTm9E1jkupGQleWY27kV0651ZaMggDWw=)
                          2: 5E81A05CF6C111F090F814B9DAE4EC9C.roa (hash: CXgFQ1uTo16cJcLpTaAS0b6W9qW/z2voqXHY06fFv7o=)
                          3: BF8F48A6F6BF11F095810AAFDAE4EC9C.roa (hash: VEsebwVhKZL3/XUSHJqAh+mFFUO9Y2ZvSaUxglQg0CQ=)
                          4: 7229C2C2F6B911F0BB42E288DAE4EC9C.roa (hash: NGWL7WTp2+vDw0UYE0HTCquOeakOVgnzWPmFK84KCSI=)
                          5: 3ECF1FD6C4BF11EE8B2737C5775412E6.roa (hash: 3Te+eK/mIojMdAzwZB8nPJY3HNmC7bWhD0CTw4iHG3c=)
                          6: B0C41976F6BC11F0AC80729EDAE4EC9C.roa (hash: 2ZnGHKJr9GknAn0GSNTFw5APOwhZJEhr/CLUu2Z00eE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1818 (0x71a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F9BF2AR, serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
        Validity
            Not Before: Oct 28 02:33:44 2026 GMT
            Not After : Oct 30 02:33:44 2026 GMT
        Subject: CN=6ae15f09-6499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:ac:2a:7d:bb:ef:32:17:0a:d5:24:65:24:
                    3c:55:84:bf:7e:10:58:1a:97:0d:07:15:99:17:ab:
                    1a:a1:e3:b1:4b:40:b6:b3:f9:89:47:09:ca:bd:3b:
                    8a:73:46:da:60:ef:f8:40:67:d5:56:8d:7e:15:c5:
                    e3:e3:a5:b9:37:72:bb:39:7b:a1:07:5e:8c:b5:33:
                    70:8c:cb:a3:b7:bb:4f:fc:a7:a8:31:ef:e6:32:c1:
                    2d:03:1d:b6:14:79:7d:17:7e:be:f6:1b:78:8c:07:
                    47:8b:a0:eb:34:af:0d:ea:de:3a:e2:96:91:6a:1a:
                    f3:e9:02:9e:a5:1f:d5:0e:c2:6d:ef:0b:cd:2c:bb:
                    30:f2:b0:9d:45:b9:64:ac:00:32:af:ef:5e:80:9b:
                    af:20:6f:cb:0d:81:45:9f:1d:e0:24:02:39:83:71:
                    34:da:79:1b:be:bd:ae:d4:85:f2:bc:e9:6e:f4:15:
                    2d:fc:fb:f1:97:87:de:34:ec:4f:43:d7:1a:50:38:
                    4a:f7:2a:f7:7a:18:cc:c0:26:aa:11:6e:c7:13:a0:
                    c8:c4:b3:37:42:70:89:27:0f:ad:6d:f4:6e:7d:e1:
                    12:46:1f:41:e8:f0:d9:62:9d:42:2d:20:74:9b:36:
                    50:f6:40:3b:e7:85:5d:22:15:d2:39:91:4f:53:dc:
                    3b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C0:29:BE:4F:44:06:0E:51:CD:AE:2C:67:BD:19:F2:B7:BE:3F:A6
            X509v3 Authority Key Identifier:
                keyid:AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:19:42:c3:81:bb:e2:c6:bc:55:ff:1e:66:68:e0:a2:65:ab:
         17:46:e7:b8:95:91:5d:cf:f1:a6:ff:0a:90:93:93:4c:16:c1:
         23:8a:c6:45:91:40:6d:55:c3:0d:a8:02:90:fd:e4:cd:b9:a4:
         61:34:a4:10:86:b7:f8:6f:78:d8:19:bc:6a:5b:72:14:ce:86:
         d4:f0:fb:12:ef:49:bf:f5:1f:d6:f8:0e:23:65:ef:9b:19:79:
         94:81:8b:40:18:02:df:09:0a:f2:26:08:21:ec:6d:90:ea:84:
         cc:59:9d:94:fb:14:35:39:6a:e9:f8:5d:16:60:b8:47:f9:55:
         73:54:4f:ad:b0:80:4f:f9:d4:d5:0d:f1:ae:53:30:9b:aa:98:
         e3:2b:6c:00:4a:e9:5b:28:8f:6b:08:99:a5:bc:55:23:e0:49:
         27:6e:9c:db:cb:e7:d6:9e:58:f1:bc:b8:e3:67:b7:29:66:30:
         bb:7f:ec:d0:50:9e:82:3c:a8:7f:82:18:30:a1:fa:f5:f5:89:
         75:1d:73:3f:ba:e5:f9:75:b7:1a:23:93:4b:d6:f1:70:3b:ae:
         cc:70:d7:4f:c6:1b:a4:95:64:14:84:aa:1b:6e:b7:af:9a:9b:
         68:69:99:37:8e:2b:d0:91:01:7d:c8:36:85:ff:23:83:30:42:
         14:3e:6e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:48:14 2026 by rpki-client