Error: rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
File:                     OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft (raw, json)
Hash identifier:          RgCcETQS/p9DDSqOdN91N0GdAKPjmxZi+5pOmfQnNJI=
Subject key identifier:   C0:84:4C:63:14:9E:8F:31:2C:03:58:26:2F:CC:3A:45:47:A2:E7:8C
Authority key identifier: 38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85
Certificate issuer:       /CN=F36B4943AF/serialNumber=3876135BFCA9AAF0B00B42D87651846E70AC4785
Certificate serial:       05FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
Manifest number:          05FB
Signing time:             Sat 10 Oct 2026 02:58:28 +0000
Manifest this update:     Sat 10 Oct 2026 02:58:27 +0000
Manifest next update:     Mon 12 Oct 2026 02:58:27 +0000
Files and hashes:         1: OHYTW_ypqvCwC0LYdlGEbnCsR4U.crl (hash: Hf0bUxTSEbolN0X9ul5eYZ1k9REKVWIBeSpKhsE+nxU=)
                          2: FD84D3D88D7811F1965C44B1CE1D38B0.roa (hash: TocmYaJ25J1vTMAOAqkPqmFhR4cID/vjlusmGxJroKY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4943AF, serialNumber=3876135BFCA9AAF0B00B42D87651846E70AC4785
        Validity
            Not Before: Oct 10 02:58:27 2026 GMT
            Not After : Oct 12 02:58:27 2026 GMT
        Subject: CN=6ac9a9d3-2461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:41:14:b4:3a:a3:8d:44:25:4e:9c:fd:72:
                    23:36:db:57:c2:88:70:ed:f7:19:55:f6:6a:ec:d9:
                    4d:aa:08:4e:97:0f:c9:09:17:52:ac:de:a4:09:82:
                    6b:6b:db:cd:6d:c7:b2:e0:e8:d7:60:a2:5b:42:cb:
                    14:00:c1:e7:77:6e:7a:49:4c:6a:fb:5d:d8:92:0c:
                    75:8d:ac:4c:60:3c:e4:e0:72:bb:04:1d:6b:61:f9:
                    eb:cf:bc:5d:82:d7:0d:3b:e2:62:68:49:19:74:bc:
                    46:22:ba:d3:a0:73:85:37:d5:13:a1:bc:40:7a:6a:
                    ca:08:e9:c5:97:84:2d:21:4a:fd:34:53:97:0c:2b:
                    36:04:40:eb:88:77:7d:8a:dc:06:9a:85:cb:b3:2e:
                    6a:c2:ab:ee:8c:7c:05:43:88:ff:f9:33:7d:27:ed:
                    9a:cf:e1:bf:32:70:27:31:ac:5d:32:c2:34:46:08:
                    60:c4:27:0b:11:e4:01:58:96:5f:1f:23:67:4c:1a:
                    5e:a9:6d:b6:f6:a1:04:ca:28:e4:01:4f:d5:81:ee:
                    ae:8c:3f:69:82:a8:b2:32:76:d9:29:da:3c:21:4e:
                    d1:d1:d6:56:66:a3:41:2f:2c:be:4d:aa:f8:19:e5:
                    d2:5c:7d:a8:79:5a:58:3c:a5:be:dd:90:eb:28:2a:
                    0c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:84:4C:63:14:9E:8F:31:2C:03:58:26:2F:CC:3A:45:47:A2:E7:8C
            X509v3 Authority Key Identifier:
                keyid:38:76:13:5B:FC:A9:AA:F0:B0:0B:42:D8:76:51:84:6E:70:AC:47:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OHYTW_ypqvCwC0LYdlGEbnCsR4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4943/0196FAB6343911EDA3B58C87F1222468/OHYTW_ypqvCwC0LYdlGEbnCsR4U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6b:e8:28:32:be:37:11:a6:7c:23:4c:4e:ae:35:9d:d7:0f:
         fc:36:5f:4d:20:45:79:00:12:15:85:33:e4:53:f0:87:96:b9:
         c3:7e:8b:cb:10:c9:e9:b5:06:24:20:04:6d:a2:90:ef:44:68:
         40:f3:ff:f4:cb:c8:34:9b:d2:80:b2:9f:9e:8e:30:f9:a7:e9:
         1a:e4:90:6e:85:77:2e:ab:f3:3f:a1:b4:9e:35:d5:28:73:9f:
         dc:a9:c7:fc:80:35:94:ae:5e:84:93:64:bf:ff:65:0f:09:87:
         60:cb:91:40:75:e9:47:10:78:86:5f:fa:00:f2:29:66:50:32:
         aa:6b:e7:0f:38:0f:f4:7f:c9:c6:d1:58:6b:ff:2e:73:cd:09:
         23:27:57:a8:72:b9:9e:5e:5e:89:d9:b3:79:14:73:83:42:73:
         3b:b1:79:88:e1:a0:06:b4:ac:bd:8f:d2:80:9d:a4:08:35:a9:
         2c:16:fc:ac:59:29:22:b6:57:fc:69:46:9d:a1:d5:07:c5:eb:
         16:e2:4b:3c:18:13:ad:5e:4d:aa:7e:e6:98:8a:8c:3d:bf:78:
         a1:e3:c3:9f:36:5e:8f:b9:58:b5:b6:80:a4:03:83:77:b3:8d:
         86:a7:45:01:79:e5:4b:25:e6:b9:f2:35:24:b3:58:e5:43:95:
         63:71:85:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:43:17 2026 by rpki-client