Error: rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
File:                     PaPdrk_VdL362y_nUk1dMDdBNSw.mft (raw, json)
Hash identifier:          jfsn8C4uDs9cdP+0t/NiBEJJemv41bdh8OY2BKaQCSA=
Subject key identifier:   44:BF:CE:7B:ED:6D:B0:4B:D5:0E:DF:D5:48:FF:54:E0:E7:2A:76:27
Authority key identifier: 3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
Certificate issuer:       /CN=F364321AAF/serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Certificate serial:       0558
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
Manifest number:          0546
Signing time:             Tue 22 Sep 2026 03:17:12 +0000
Manifest this update:     Tue 22 Sep 2026 03:17:11 +0000
Manifest next update:     Thu 24 Sep 2026 03:17:11 +0000
Files and hashes:         1: PaPdrk_VdL362y_nUk1dMDdBNSw.crl (hash: H8LYNBGvgkoz/unPy1Yz1mjyrbSint/4pm2eyIIXWeM=)
                          2: 1A1D9BECEBCB11F09E0410EDDAE4EC9C.roa (hash: njBEAYyeE13L7hwKuylMPnhFqWs8iIjgMKwO4UOalDA=)
                          3: FA23FE86EBC911F098EC42E8DAE4EC9C.roa (hash: 6WEXWYnxvkmVQEP1jzW/Pz3xmGAn2g9CkuxNT4P4jmg=)
                          4: 992FA664EBCB11F0A7D619F1DAE4EC9C.roa (hash: zZRAIBdNfBKB6fz/DNNuYj5c+DfSvaBMkWqN6VwnGPM=)
                          5: F8A9F802EBCA11F0B9AFC4ECDAE4EC9C.roa (hash: nSknsDYYYJnn+lCfqpzwlbN0d4eI+Bn18dgOsKwvrvk=)
                          6: C9FD6A66EBCA11F0B1686FECDAE4EC9C.roa (hash: KWF2f6lklc+ISvDAOfQP/bnZ/qUCac/YisXkzWEtuAw=)
                          7: 6F48BC0AEBCB11F094B6D4F0DAE4EC9C.roa (hash: 4C7RxLwmS+HXtTI3Lpt4dwbN1rnFWByFUC0JY7JL8FA=)
                          8: 4955127EEBCA11F0AAE097E8DAE4EC9C.roa (hash: mISb5qk7uM7oKcgoTiGz0TVTQJ1Qe/xAOoe6Gs8i6hI=)
                          9: 3E2015A6EBCB11F0994B08EFDAE4EC9C.roa (hash: xyumajGBZo8f2Kt7CWNuZkx9MaepmHY8lnKOJNSa75E=)
                          10: 36DE8CDCBA9A11EE8EE57253775412E6.roa (hash: Ofy9Cj7JPi8QcyiEvVuGnm/0E9xZicOnWmScEweKsok=)
                          11: 7FB7EBF0DD3C11EE8D38ADB5775412E6.roa (hash: yMYM5ilbWZrOMGdDFP4fl7JNSPCdYUXOdgDCY0ZGvMA=)
                          12: 75C1E27EEBCA11F0B98197EADAE4EC9C.roa (hash: VUwaiFh2a52KhyQLVFXCDY0kMKiUeo37HnTzfGi7QQ4=)
                          13: 99017F56EBCA11F09168A1EADAE4EC9C.roa (hash: 9iWNRVakTa4Fkk+IlMpLZh0je4RlQDz/mrMuIloUDbc=)
                          14: 68A7680A595611EFA6EA977A762E951A.roa (hash: 4KvhV/9vsC0Llr34GI+s1jGqdxl+ushBovv44svidrk=)
                          15: 9A80C77C595611EF8984CD7A762E951A.roa (hash: ZdMpYI32B75UuK8vGc3RW46+xhLMuTA2Hwcvv0zVVdA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1368 (0x558)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAF, serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
        Validity
            Not Before: Sep 22 03:17:11 2026 GMT
            Not After : Sep 24 03:17:11 2026 GMT
        Subject: CN=6ab1f338-e910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4f:63:8e:06:ad:e3:f1:c8:4c:41:87:b9:6d:
                    9c:92:a6:d9:15:43:22:6c:97:8b:1b:56:e2:44:89:
                    05:f7:60:7b:6b:ec:81:d0:d0:90:d8:9f:0c:bb:94:
                    58:54:02:b3:15:1d:32:36:25:73:88:e5:be:50:85:
                    ed:5f:e9:82:ea:0c:26:9f:e2:5c:02:c2:62:af:50:
                    90:f4:40:f7:f1:e3:00:4b:db:8a:3d:f5:5c:2e:d0:
                    22:7c:a5:5d:fa:a9:63:6c:20:3f:3e:8f:78:8d:4b:
                    af:3a:8a:00:a3:0d:2e:dd:1f:22:b6:c5:1d:80:65:
                    7a:f5:9f:99:fd:61:79:04:9a:4d:6d:e4:18:c5:54:
                    23:8e:a0:48:fb:80:cc:f3:71:7c:18:2b:05:10:e5:
                    4e:48:3f:28:96:9c:c2:84:9a:d6:1e:ec:40:49:11:
                    e4:bb:52:22:49:70:3a:1b:2f:56:1e:31:1a:4b:c6:
                    4d:fc:a4:b3:7b:ba:42:e2:f7:0e:fa:e6:a0:f3:79:
                    80:35:20:75:32:fc:14:6c:91:e3:f7:c5:53:1e:c3:
                    5a:f3:24:a5:4c:54:42:26:53:d7:8b:05:f1:22:8a:
                    46:46:b0:73:11:ea:0e:5d:7e:4e:84:f8:cf:73:66:
                    00:cb:15:a6:f2:28:69:c2:78:c7:36:e2:04:dc:ef:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:BF:CE:7B:ED:6D:B0:4B:D5:0E:DF:D5:48:FF:54:E0:E7:2A:76:27
            X509v3 Authority Key Identifier:
                keyid:3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3c:a1:cf:4f:67:98:80:60:24:8e:35:99:db:58:bd:f8:e6:
         85:bc:7f:31:ba:38:ab:71:00:bf:b4:35:be:8f:b6:1c:26:f1:
         65:7f:8a:14:dc:5b:fe:96:28:87:d4:ea:f3:bc:03:e8:cf:11:
         a8:b7:8b:fe:34:8a:96:05:98:3a:47:b1:15:82:30:35:d4:d5:
         de:54:60:4f:e3:3a:b7:fb:7a:12:29:3f:d7:46:b2:f6:d6:98:
         d4:df:c5:29:6f:6c:f2:22:65:df:f1:b4:7f:88:74:a7:33:2c:
         57:db:51:9a:0b:7b:c5:c9:9c:59:ec:88:0b:ae:c0:f1:4e:dc:
         db:24:54:e8:b2:b1:3e:56:21:01:f0:cb:b5:79:78:c2:5f:b0:
         8c:db:f9:a6:0b:e4:47:32:80:21:e2:c3:ae:56:ab:3c:1c:89:
         b1:89:88:92:1a:db:d1:2e:a3:76:c9:5b:fb:f5:0d:86:46:7a:
         c7:54:7a:1d:13:19:3b:20:9f:1c:a9:cb:18:29:b2:ba:3b:89:
         77:e2:92:21:cd:84:9f:f9:e8:45:0e:34:a8:36:28:fe:b6:c6:
         06:b6:dd:f0:f4:d8:fa:5e:af:81:db:3f:9d:9e:4e:f3:69:61:
         7f:9c:5a:f9:74:bd:10:7d:a4:e8:c1:6d:51:85:e0:64:f3:6d:
         6d:2a:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:22:06 2026 by rpki-client