Error: rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
File:                     J9ZRBLhSABrB1WULLAw3SPxdaVA.mft (raw, json)
Hash identifier:          WAW7X0rTCfgg9gWJ5hXZj1B9/x5d8Zb3dvG1YHUFbBw=
Subject key identifier:   A4:82:2C:07:0E:79:FE:C9:CC:EB:E0:CD:1D:E0:46:F5:42:16:93:54
Authority key identifier: 27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50
Certificate issuer:       /CN=F36A413FAR/serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
Certificate serial:       0273
Authority info access:    rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
Manifest number:          0271
Signing time:             Tue 22 Sep 2026 04:43:52 +0000
Manifest this update:     Tue 22 Sep 2026 04:43:52 +0000
Manifest next update:     Thu 24 Sep 2026 04:43:52 +0000
Files and hashes:         1: J9ZRBLhSABrB1WULLAw3SPxdaVA.crl (hash: 0GFzt1XL+G1W0Spf9tl5NLE89MKRT4j9IY8ztY0nPiY=)
                          2: 485660E2D33B11EFB36E4BBC762E951A.roa (hash: miJkwutQdLFlKKXwBXo4jomSNflYIN5M9tkEV2QPIO0=)
                          3: 0D036F94D33B11EF941C0BBC762E951A.roa (hash: EIHN0q7Gf2yEMmUmQTz3WgcUrSDB0YHCZOvy1CApRc0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                          rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A413FAR, serialNumber=27D65104B852001AC1D5650B2C0C3748FC5D6950
        Validity
            Not Before: Sep 22 04:43:52 2026 GMT
            Not After : Sep 24 04:43:52 2026 GMT
        Subject: CN=6ab20788-4664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:95:3c:da:6f:d9:cb:61:9f:66:b1:da:4d:d8:
                    84:d2:3e:f9:e1:a7:46:56:be:a4:4f:ce:87:7e:a7:
                    cf:3d:f8:a1:71:57:90:1e:8c:42:dd:cd:5e:d2:52:
                    8f:ab:71:d8:2d:46:af:b8:51:b8:50:48:24:9b:6e:
                    bf:1e:86:ea:bf:f4:2e:02:29:2c:28:65:c9:2d:42:
                    f0:ef:4a:0c:54:6d:35:0d:02:8d:3d:1a:36:c8:2d:
                    ae:23:be:0c:a8:a2:66:bd:12:bc:c5:04:47:ec:8c:
                    86:e4:45:71:4a:57:58:d7:93:cb:fd:d6:00:e6:da:
                    ae:d1:d5:9c:53:c9:cd:c3:1d:1a:16:85:eb:5c:3e:
                    26:32:34:2c:c4:0b:ce:5a:e0:63:1f:bd:7d:cd:54:
                    40:e1:07:e1:94:d5:fc:b1:61:d7:56:41:6d:27:d0:
                    ed:e4:ba:ab:39:4c:be:c0:20:6c:87:a7:51:48:42:
                    c2:f4:e0:3f:57:05:21:51:5f:e8:14:e3:47:f6:7d:
                    5c:72:bf:40:03:33:c7:12:b1:fb:26:c6:a6:70:a1:
                    09:9b:cc:5c:d5:71:a4:27:9b:58:17:94:27:e7:99:
                    97:ba:2f:6c:37:43:c9:76:a7:49:77:e3:47:d4:e5:
                    ff:c7:e5:7a:8e:85:5b:01:3a:4f:29:e8:17:a1:89:
                    83:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:82:2C:07:0E:79:FE:C9:CC:EB:E0:CD:1D:E0:46:F5:42:16:93:54
            X509v3 Authority Key Identifier:
                keyid:27:D6:51:04:B8:52:00:1A:C1:D5:65:0B:2C:0C:37:48:FC:5D:69:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/J9ZRBLhSABrB1WULLAw3SPxdaVA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/D8EC92AED33911EFA750A6B3762E951A/J9ZRBLhSABrB1WULLAw3SPxdaVA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3a:47:fe:39:e7:1b:a1:92:18:81:4f:29:10:ef:9c:de:15:
         de:76:12:6a:14:7c:4d:10:0d:c2:5a:89:ab:4d:87:85:e2:6a:
         96:66:a3:3b:b1:42:fd:a5:97:78:4d:45:42:1f:f7:86:14:82:
         71:7f:be:9f:08:ce:2b:32:fa:4d:e5:80:ab:76:f6:48:47:b3:
         d8:1b:7f:2e:78:cf:43:2c:e6:ae:72:b8:67:cd:bc:1f:5e:85:
         a1:a8:b6:68:45:64:d3:9c:bd:06:33:78:41:c4:88:6a:68:ff:
         ea:0e:82:75:0c:fe:9d:b7:09:70:1c:ad:27:3a:f3:b3:57:dd:
         76:1a:45:4e:f1:44:c0:bf:21:86:3a:fd:55:11:14:48:f0:c5:
         a6:25:ee:f3:ed:ae:c2:c4:bc:c4:38:e1:07:36:64:9b:59:a7:
         24:e4:e7:81:69:4b:ad:d4:4d:dd:a2:29:20:89:2d:f5:6f:af:
         61:27:83:cc:af:6b:53:0c:16:02:c2:30:c4:7c:fc:ec:20:e5:
         fa:0e:8a:2d:4c:bc:72:e5:08:52:f1:e4:0a:11:66:4f:66:c4:
         f9:4c:0c:04:1e:a3:41:d0:62:c4:91:bb:c4:2c:5a:8a:8b:81:
         76:90:c3:50:bb:6e:9a:c9:ac:3f:ac:ee:11:25:b0:b3:7d:4d:
         d8:ea:d9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:26:27 2026 by rpki-client