Error: rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File:                     zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier:          f/URhkCLaf7putTbPfAULHoEIODMwhIdZLSrMJnX8fc=
Subject key identifier:   E2:86:34:98:24:97:2B:84:70:B0:64:EA:DE:FD:DE:B7:E1:E1:0B:2F
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer:       /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial:       03DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number:          03D4
Signing time:             Tue 22 Sep 2026 04:00:45 +0000
Manifest this update:     Tue 22 Sep 2026 04:00:44 +0000
Manifest next update:     Thu 24 Sep 2026 04:00:44 +0000
Files and hashes:         1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: lZfqRCa4AJxFgjWYC5alVv5FCyAj/MKrNLVI+mzUDR0=)
                          2: FC64D1D48EE011F0B3A4FFD5DAE4EC9C.roa (hash: zY17Hz4jbMGQpgxbaFtO0TqzRfRypKeMCm7nEpXL5dE=)
                          3: 2C041FAC923411F0874B46D6DAE4EC9C.roa (hash: tpKq8PaEgXxqsGmsi4xOkcd5uGMB++pELB/BO/L5apA=)
                          4: 1D9C2C128EE111F0A05232D6DAE4EC9C.roa (hash: 7/mPJegDzNGobxEPvcoOh9hmADeWp/7DZNVsknf5CfY=)
                          5: BDE21C828EE011F09E89A7D5DAE4EC9C.roa (hash: cEX5P0LZESnFW9UZ+j/fDOgJ1NZiXq4fEZ5TJVNJvnU=)
                          6: 22722218325311F0BEE5CBA8DAE4EC9C.roa (hash: 7FOq4iC+f8KGAzh35/6t4/kdL+NWHJr1WwivNfCgRGY=)
                          7: 06029CE8923411F0959B1BD6DAE4EC9C.roa (hash: KM6FaZ3N+6xYLUdr8UC2IJ+8T0cxiZ1kpB+SMdMA704=)
                          8: DE17D8988EE011F09D4FC2D5DAE4EC9C.roa (hash: Zz8H6d1f6QpmD+EtnMHU3iTAeKWNSu5vjH3b+kGHQZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
        Validity
            Not Before: Sep 22 04:00:44 2026 GMT
            Not After : Sep 24 04:00:44 2026 GMT
        Subject: CN=6ab1fd6c-bad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:11:97:db:35:4b:bb:5f:aa:72:c6:3b:e8:
                    69:52:d9:3e:79:b6:6e:ba:a3:cf:48:5d:e7:11:53:
                    1f:2b:a3:0d:f9:4d:11:d5:06:b9:19:cf:8a:fb:4f:
                    7d:03:d0:b9:ca:44:fa:cb:73:31:36:84:6e:ec:48:
                    ce:a8:ac:48:eb:b7:fa:1a:90:33:62:24:00:22:86:
                    23:20:26:cb:ca:5f:63:b0:4c:87:fa:9f:f1:20:d5:
                    ff:1b:3a:a9:2f:a0:66:14:03:00:78:cc:e6:82:bd:
                    86:56:a5:a2:66:8f:73:77:2d:f9:ea:50:cd:df:39:
                    fa:07:4f:1c:c9:4e:4c:fd:32:fd:82:7d:7e:d9:82:
                    80:51:87:c7:2a:9d:53:f5:88:3a:89:e5:e5:01:9a:
                    35:be:5d:d8:23:ef:14:41:e3:2a:89:f5:4c:8f:63:
                    36:f0:39:b9:bf:f9:0b:f2:f0:cf:b9:b1:78:67:16:
                    11:51:07:6f:a2:04:d5:a4:f3:21:c1:7c:3c:4b:54:
                    83:e4:a2:8e:21:cd:af:23:c4:47:9a:ed:c7:f5:01:
                    e3:92:97:fb:9d:68:cc:98:d7:f5:4a:32:52:a5:ce:
                    61:fd:6e:d0:d3:96:c5:b5:72:43:79:17:19:aa:bd:
                    54:bd:45:7a:83:9c:dc:44:a6:dd:59:e9:53:e7:08:
                    84:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:86:34:98:24:97:2B:84:70:B0:64:EA:DE:FD:DE:B7:E1:E1:0B:2F
            X509v3 Authority Key Identifier:
                keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e8:3b:07:b9:5a:a8:07:82:e2:89:1f:95:90:2f:30:f7:db:
         a6:5c:69:bf:ad:04:72:5e:62:4f:25:b3:87:6a:66:83:e7:0c:
         05:14:dd:d2:47:41:7a:f8:72:ab:cd:b2:a0:e1:e5:8c:ea:71:
         f5:24:4a:55:ba:f3:0b:3e:50:6d:be:49:65:81:d5:3f:9f:ff:
         0f:1c:b0:ca:37:88:56:d2:a6:4a:e4:86:49:67:45:f3:cd:22:
         30:c6:9c:96:b1:0b:1d:19:63:8f:7b:a0:e2:5e:03:47:07:0e:
         ef:06:44:62:bd:1a:ba:3b:88:3b:bd:7e:92:47:e4:60:2e:72:
         70:f8:1b:a1:c1:2a:e8:1b:65:9f:54:1a:1b:41:04:a0:d2:b3:
         8f:61:30:47:ee:bc:40:45:67:1a:1a:44:41:18:81:54:5c:41:
         bd:b5:44:5e:7a:74:39:46:87:c3:bf:38:d7:e6:47:24:34:4e:
         4c:85:da:4a:77:51:fa:d0:9d:05:e7:56:3e:61:64:a3:24:b0:
         76:47:5e:12:f9:40:a0:9d:0c:d5:70:62:4d:34:68:92:17:42:
         f0:5b:67:63:9f:6f:96:74:99:61:6f:dd:a1:c4:c0:76:c5:60:
         1e:e4:90:fe:af:5a:e7:47:a9:ef:29:5f:0f:1a:99:7d:45:f9:
         df:ef:d5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:37:46 2026 by rpki-client