Error: rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
File:                     xE0y1JF8eCux2zJK4FcIfAY8cLk.mft (raw, json)
Hash identifier:          7S3SKODAhbHeF5Ewf4pG4+Ku19qY2/RkuOOknbpMhu8=
Subject key identifier:   B8:E5:21:C4:06:F8:C4:10:94:A9:7C:00:80:0F:B7:E1:7B:81:B3:C2
Authority key identifier: C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9
Certificate issuer:       /CN=F36A94BDAF/serialNumber=C44D32D4917C782BB1DB324AE057087C063C70B9
Certificate serial:       D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
Manifest number:          CD
Signing time:             Thu 08 Oct 2026 05:31:39 +0000
Manifest this update:     Thu 08 Oct 2026 05:31:38 +0000
Manifest next update:     Sat 10 Oct 2026 05:31:38 +0000
Files and hashes:         1: xE0y1JF8eCux2zJK4FcIfAY8cLk.crl (hash: 8k0L1Vh2wSzXZvKgBAZrU9raiSWXcrqLZO09/STAsbg=)
                          2: B369AC28381F11F18DCA46B3CE1D38B0.roa (hash: YZtyT6PDtXJ4qALzjjOrC5/HQfvWf0WK/SUWLEjJyYY=)
                          3: ED340E44376B11F1B04FA1E2CE1D38B0.roa (hash: 4ObZ7bDEQ2jHZa0f9dc6g+W1O0wVtCUpYVVLDLjdphU=)
                          4: 5640FC4E382A11F1A6805EF0CE1D38B0.roa (hash: o5aNp5VzCf07pR6zEaALvtNhU23Ddi97zee6Hwc02BA=)
                          5: 37A037F0376711F196F2C2C7CE1D38B0.roa (hash: s4mQ/4xdr4CVChAjeed6+fk5zrUn/6l56aaZ5pNmYt4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 05:31:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212 (0xd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A94BDAF, serialNumber=C44D32D4917C782BB1DB324AE057087C063C70B9
        Validity
            Not Before: Oct  8 05:31:38 2026 GMT
            Not After : Oct 10 05:31:38 2026 GMT
        Subject: CN=6ac72aba-5cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:6b:08:74:ea:44:a6:43:12:53:45:e8:6e:
                    c5:cd:d1:ec:f5:41:ec:eb:4e:93:49:10:ef:37:64:
                    8d:1f:f8:47:33:49:9a:0d:17:f4:3d:69:a1:e5:66:
                    40:b6:22:79:84:1a:70:1d:86:26:02:95:01:cb:48:
                    e8:c5:2c:9b:71:b4:52:3d:e6:21:44:c2:9d:ac:7f:
                    fb:35:29:34:c8:08:9c:de:2f:4a:9e:e2:3a:11:90:
                    ea:47:03:e4:64:c3:18:6d:81:9d:65:6e:66:89:7f:
                    db:55:83:81:63:63:47:4e:d8:8c:3e:dd:42:25:33:
                    e0:35:01:11:88:d1:f5:a0:ea:64:6e:50:69:c7:53:
                    62:3b:56:c1:e3:a5:62:f0:0e:37:00:c2:c7:04:2a:
                    23:8f:8d:d2:57:f2:41:8e:b2:80:13:4f:bd:8c:9c:
                    4f:84:3c:0d:0f:fd:18:6f:b6:23:26:2c:94:fa:c9:
                    78:45:8c:75:e4:f4:d4:61:2b:95:0a:b3:29:09:b3:
                    96:ef:b3:7a:78:33:45:b5:76:87:ff:15:45:39:79:
                    95:87:b6:03:9e:e1:87:47:f5:0b:70:16:69:5f:54:
                    c8:8a:15:94:de:2b:bb:2b:d7:35:82:f6:fe:99:02:
                    8e:8a:ab:92:4f:bc:f1:68:b6:d1:ed:20:38:78:62:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E5:21:C4:06:F8:C4:10:94:A9:7C:00:80:0F:B7:E1:7B:81:B3:C2
            X509v3 Authority Key Identifier:
                keyid:C4:4D:32:D4:91:7C:78:2B:B1:DB:32:4A:E0:57:08:7C:06:3C:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE0y1JF8eCux2zJK4FcIfAY8cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A94BD/2340EFBE342611F1AD21E606CF1D38B0/xE0y1JF8eCux2zJK4FcIfAY8cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:41:f7:71:60:40:8f:0e:6c:0c:bc:d3:5d:fe:10:93:c5:
         ae:d1:3c:9b:2b:e9:36:7c:f9:6d:4f:c1:4f:b9:37:8a:90:39:
         df:65:89:e7:47:12:b8:e7:5a:43:2d:31:f5:e7:96:0d:cc:43:
         33:8a:a7:f4:a7:6c:d7:6a:c0:01:f2:83:c9:9d:18:b0:28:ce:
         f7:b5:84:86:9c:cf:4f:d1:38:01:c7:5e:e9:8a:e4:4a:36:be:
         58:57:64:5b:e7:42:8c:28:79:b4:92:c1:00:ea:45:79:12:f5:
         60:b5:26:55:e9:d2:e1:0f:88:0d:b6:c1:4e:aa:6b:6a:d6:ac:
         f3:ec:36:4f:5b:df:cf:74:c9:34:78:09:09:ec:76:0b:c0:13:
         0b:bd:82:84:56:0f:69:93:9e:69:23:3f:b0:27:eb:9c:09:12:
         da:48:45:59:e8:ad:ed:4a:8e:41:ab:c7:e3:95:da:4f:97:72:
         7d:69:be:9c:53:d4:62:e4:6c:8b:57:80:aa:cd:b7:4c:33:b0:
         d1:a6:7b:39:12:64:48:28:4e:95:af:67:a5:35:60:75:35:69:
         02:71:a3:1e:59:22:5e:a6:7d:bf:c9:59:20:83:50:be:ed:62:
         1a:e6:08:eb:ae:d7:15:7a:35:e1:ed:4a:ce:78:2f:63:8e:e6:
         09:fc:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:24:28 2026 by rpki-client