Error: rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft
File:                     BuG8jS00FbJ5CfKppUQcUPdQCfc.mft (raw, json)
Hash identifier:          DGq/TAcIJyf/HIt208uUF4UmzUV82jlMENawuH0hVUQ=
Subject key identifier:   C6:6D:C6:4E:89:0A:13:04:1C:64:AD:E6:34:57:6B:5E:94:56:C3:6A
Authority key identifier: 06:E1:BC:8D:2D:34:15:B2:79:09:F2:A9:A5:44:1C:50:F7:50:09:F7
Certificate issuer:       /CN=F36FDE36AF/serialNumber=06E1BC8D2D3415B27909F2A9A5441C50F75009F7
Certificate serial:       0905
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BuG8jS00FbJ5CfKppUQcUPdQCfc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft
Manifest number:          0903
Signing time:             Thu 10 Sep 2026 01:51:41 +0000
Manifest this update:     Thu 10 Sep 2026 01:51:40 +0000
Manifest next update:     Sat 12 Sep 2026 01:51:40 +0000
Files and hashes:         1: BuG8jS00FbJ5CfKppUQcUPdQCfc.crl (hash: tnzEiUai14EdNUdcwpwAuKVjfUA1VPBKkfheGrpKbCU=)
                          2: 111AAB5C5C9711F097D0649DDAE4EC9C.roa (hash: 2ilbNmm7Dtw5c2UyIMm7YdRpQpxsgFasGENfbivKomw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BuG8jS00FbJ5CfKppUQcUPdQCfc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 01:51:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2309 (0x905)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDE36AF, serialNumber=06E1BC8D2D3415B27909F2A9A5441C50F75009F7
        Validity
            Not Before: Sep 10 01:51:40 2026 GMT
            Not After : Sep 12 01:51:40 2026 GMT
        Subject: CN=6aa20d2c-3891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:84:5a:94:3b:6d:f9:52:29:f2:f3:af:da:36:
                    f2:05:d7:ab:5a:00:9e:05:3d:e7:09:8e:4f:e2:d0:
                    d1:ef:2a:9b:9e:22:34:c0:e2:eb:bc:3e:5a:86:0c:
                    ba:bd:37:87:5c:6c:96:3a:bb:0c:a6:1f:fd:48:a3:
                    7b:52:88:46:39:ca:0e:3b:9b:81:7d:78:17:d5:9b:
                    73:37:af:07:ad:7f:0d:df:91:3f:59:2e:08:98:03:
                    59:42:79:df:60:c9:1b:a0:3e:d5:f8:33:f2:8d:8e:
                    a0:69:d1:1a:92:51:ac:9a:23:8b:5e:01:ec:95:49:
                    cc:58:8d:10:6b:53:1c:47:8b:5b:35:0b:3d:d1:a1:
                    4d:a2:68:aa:86:e7:61:fa:91:4d:10:d9:d6:a5:a2:
                    61:30:c8:42:0b:7f:a9:5c:0f:32:ac:ea:0f:dd:82:
                    55:d5:4e:12:d1:95:21:7f:f4:4a:8a:07:2b:f2:ab:
                    ac:86:f9:23:51:e1:3f:9f:42:68:fe:37:65:43:f9:
                    dc:a4:ce:ee:de:56:25:f7:40:99:62:a7:22:c5:02:
                    fc:1c:4e:47:b1:3d:17:96:6c:bb:82:e0:19:26:27:
                    7e:c4:99:c6:95:cf:5c:7e:80:7f:b1:96:ee:f1:97:
                    ed:98:68:05:6e:5e:65:ac:af:bd:b7:fa:f6:91:aa:
                    6b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:6D:C6:4E:89:0A:13:04:1C:64:AD:E6:34:57:6B:5E:94:56:C3:6A
            X509v3 Authority Key Identifier:
                keyid:06:E1:BC:8D:2D:34:15:B2:79:09:F2:A9:A5:44:1C:50:F7:50:09:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BuG8jS00FbJ5CfKppUQcUPdQCfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:61:7e:06:5b:08:2c:a8:45:68:70:64:39:02:a5:80:b3:48:
         6e:bd:d8:21:94:fe:82:93:fe:6d:cd:49:05:7f:50:c7:12:66:
         96:10:c5:6e:f2:f5:55:2f:8f:c3:34:df:44:53:e9:e6:c7:76:
         e7:e5:89:a5:aa:b8:c5:2b:d3:df:c4:64:e7:53:71:02:95:bf:
         a2:bf:63:50:fb:7a:98:67:6c:18:b8:8b:45:b2:4e:c7:ca:fe:
         93:5f:c6:c2:09:19:1a:45:89:15:84:db:6a:0c:80:d2:4f:19:
         e5:a2:f7:b8:06:a9:20:1d:f6:50:5a:da:da:1d:58:41:c1:97:
         9c:43:bc:94:6c:b1:e6:99:8f:a5:19:6a:83:15:97:ab:59:0d:
         a8:61:15:d3:f7:ed:d5:5d:a4:e8:34:d8:5e:9c:82:96:18:26:
         d8:66:bf:eb:30:c7:0c:6d:64:ff:f5:48:2d:31:e9:ed:e2:05:
         67:b9:26:5d:a0:c9:83:3e:87:1c:ca:ef:5f:2b:0d:b3:da:f0:
         15:c2:04:fe:64:2e:d6:bf:5b:d0:c5:09:23:4d:50:80:db:93:
         90:d7:3a:23:ea:90:91:a3:ad:72:f1:b8:f3:52:ee:ed:31:4f:
         4c:ee:33:1b:eb:63:6e:eb:75:29:ba:a8:a2:cf:2e:2b:c2:06:
         55:d1:56:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:37:01 2026 by rpki-client