Error: rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
File:                     SJIyUipHGpLr60FtxMHfpUo9NAA.mft (raw, json)
Hash identifier:          qKPIt01G5JAi1O/wBUwXDlov815VPm+u7/kjsMM3YDU=
Subject key identifier:   0D:C4:F5:50:F1:34:DB:DE:EA:B7:A9:28:FF:14:55:8B:40:75:07:22
Authority key identifier: 48:92:32:52:2A:47:1A:92:EB:EB:41:6D:C4:C1:DF:A5:4A:3D:34:00
Certificate issuer:       /CN=F368F7EAAF/serialNumber=489232522A471A92EBEB416DC4C1DFA54A3D3400
Certificate serial:       01B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
Manifest number:          01B8
Signing time:             Mon 21 Sep 2026 04:59:53 +0000
Manifest this update:     Mon 21 Sep 2026 04:59:52 +0000
Manifest next update:     Wed 23 Sep 2026 04:59:52 +0000
Files and hashes:         1: SJIyUipHGpLr60FtxMHfpUo9NAA.crl (hash: qd4061EOkc8DUtwiyeWaXAqeBgLqjqiXdMsygntkhl4=)
                          2: 3D3E113460A111F0BC66BDB5DAE4EC9C.roa (hash: Yz2LgMo8/maeZeqiFDXEgU1Kho0yd40MGr9r17BWqfM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F7EAAF, serialNumber=489232522A471A92EBEB416DC4C1DFA54A3D3400
        Validity
            Not Before: Sep 21 04:59:52 2026 GMT
            Not After : Sep 23 04:59:52 2026 GMT
        Subject: CN=6ab0b9c9-5c81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:52:82:80:c6:96:ca:9d:d2:75:f3:f8:8b:
                    71:ab:9b:53:61:f0:b1:8f:e8:de:26:ad:16:b4:6c:
                    e6:dc:d2:15:9d:db:76:a7:73:79:77:27:98:ed:2c:
                    63:5b:0b:0a:bf:5c:58:37:d4:47:f4:55:9f:da:ba:
                    68:dd:53:cd:e7:39:aa:2d:b8:c6:c0:48:83:13:ef:
                    0c:c7:6e:cf:19:37:3c:64:d1:47:70:86:81:79:c9:
                    5b:e2:72:35:83:a3:fe:09:17:75:d7:93:3a:e4:e0:
                    23:cc:24:bc:c6:31:ab:2e:84:c0:a8:50:00:89:7d:
                    34:de:2a:5c:ff:24:95:86:cb:d5:45:3d:a5:f3:bf:
                    23:d5:03:0e:bb:59:ea:1c:30:f7:0e:07:3a:ae:71:
                    0c:98:0a:56:56:74:e1:bc:b4:cb:a3:29:7f:95:a7:
                    b3:3e:75:d5:0b:cb:73:dc:f2:f0:ec:23:c0:c8:ac:
                    fa:c7:c6:1f:7b:da:da:f9:7c:ea:ce:48:7a:68:c5:
                    06:21:23:1e:0b:99:a0:fe:9d:3e:0f:4a:68:42:ed:
                    59:de:76:7e:97:07:94:81:7b:b4:70:df:97:a2:8e:
                    13:68:e2:42:cc:ab:d6:36:f3:cd:2b:5f:99:40:01:
                    b8:1f:a9:36:db:c8:3f:6b:b8:3c:9b:2f:ad:74:58:
                    c7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C4:F5:50:F1:34:DB:DE:EA:B7:A9:28:FF:14:55:8B:40:75:07:22
            X509v3 Authority Key Identifier:
                keyid:48:92:32:52:2A:47:1A:92:EB:EB:41:6D:C4:C1:DF:A5:4A:3D:34:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:74:e3:b4:5f:45:f5:cb:8b:e8:bb:c0:80:59:81:e4:98:55:
         72:4e:a9:93:bc:dc:03:85:f8:fd:02:4f:7b:6b:f9:fc:97:ef:
         6a:7a:3b:6b:f0:2f:73:c1:3c:a6:93:90:ba:07:a8:a8:f7:39:
         6f:a2:16:40:1a:da:d1:e0:7e:43:9c:e1:34:74:19:31:81:29:
         ea:97:8a:81:48:51:97:4b:24:7d:21:8f:71:b3:1a:be:68:19:
         b2:dc:ba:71:d3:4d:17:7c:93:6d:f0:10:c6:94:43:ce:ec:e7:
         b7:83:b7:c0:88:d5:b4:5f:4a:9c:19:74:91:0c:f0:44:25:81:
         a9:e4:b9:cd:6f:44:cf:3c:c3:d8:92:9e:4e:95:da:0b:db:c2:
         a6:86:18:f6:e8:a0:b4:73:2d:7b:32:62:bf:11:ea:bd:45:4f:
         3d:fb:49:32:4c:2a:d7:85:43:40:02:ba:98:cd:85:64:f4:9b:
         b1:66:a9:6e:50:3e:1e:d2:ed:0c:35:cd:8b:aa:c4:13:97:f0:
         fa:09:08:75:23:96:52:05:2d:ce:2b:b6:8d:49:d9:83:09:cc:
         b1:18:c5:1a:af:90:47:fd:16:91:68:cc:1a:78:80:17:7b:23:
         29:92:fc:d8:bf:4f:f1:4f:d6:83:04:37:c8:ab:fc:05:ae:a5:
         9d:8f:5b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:56:07 2026 by rpki-client