Error: rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
File:                     e-hZtChr4eoUuIx6MLXOT9hZgOw.mft (raw, json)
Hash identifier:          qslZJ+5CfTTb8fWNJ8LnKdUSvfq1BJ7886+k3bUJQvI=
Subject key identifier:   6D:8D:B8:C4:CF:95:B2:BD:58:C2:D3:6A:36:7E:74:C4:A9:50:33:CC
Authority key identifier: 7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC
Certificate issuer:       /CN=F36B7955AF/serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
Certificate serial:       0A03
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
Manifest number:          09FD
Signing time:             Sun 20 Sep 2026 01:39:02 +0000
Manifest this update:     Sun 20 Sep 2026 01:39:01 +0000
Manifest next update:     Tue 22 Sep 2026 01:39:01 +0000
Files and hashes:         1: e-hZtChr4eoUuIx6MLXOT9hZgOw.crl (hash: XP34L4APv6jGsKk8MA9FuwnowIKxzVXQtqssPgK8UVM=)
                          2: C9E601BE223B11EA9D6FA919F8AEA228.roa (hash: gL5tRYefTmIo2Y5cTrnfgKjwwCZ0FkaQbb7/gXP5el0=)
                          3: 0CB777ACF1FD11EAB6AEE70DF8AEA228.roa (hash: 3THAtZZdQjj5mhAwZma0JScZLOcQ+NkBW1pbNzpubLY=)
                          4: CAE2B0CE166211EA91D0A63FF8AEA228.roa (hash: 4uRc72cdg/s8r9hidk66Wt0h4klL9GdvidHhfjvfBlk=)
                          5: 82DAA7820D1111EA8AE40844F8AEA228.roa (hash: ipU6dt+Ql1oHkoWqMCQsu5Sqwuwo5xzALDOZIUeDm+E=)
                          6: A9F22C5C223B11EA90A89819F8AEA228.roa (hash: abkvsxIACMIPWrvjyOHKPEh0DsEGmj6TJS4On7OCWSo=)
                          7: 611FEFD00D1111EA8325E043F8AEA228.roa (hash: GiJz76vVEkVH9DNgj55T6CmgEM7wMPM/6p5lMG2BlFI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2563 (0xa03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B7955AF, serialNumber=7BE859B4286BE1EA14B88C7A30B5CE4FD85980EC
        Validity
            Not Before: Sep 20 01:39:01 2026 GMT
            Not After : Sep 22 01:39:01 2026 GMT
        Subject: CN=6aaf3936-0140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d6:6f:41:c2:fa:23:dd:f9:68:73:fa:d7:57:
                    00:1b:4f:1a:52:ca:c3:cf:11:33:cc:0e:57:93:2a:
                    a8:f2:f4:7d:84:c5:ec:5b:7c:54:90:6b:81:99:7c:
                    d8:a1:7a:b4:4e:55:65:92:1c:17:c0:50:e4:e3:94:
                    d7:39:4a:8c:9d:26:41:39:f3:f0:bc:93:04:52:65:
                    cf:ca:a9:20:15:03:b4:0a:8c:a0:60:ca:f7:41:84:
                    21:55:87:4d:e2:10:5b:bc:5e:4e:cc:ba:63:fc:4c:
                    a0:81:fe:a8:23:19:8d:3c:ac:25:93:29:5d:09:0e:
                    8c:b0:2c:8c:87:5e:c2:3f:90:b4:f9:25:d8:54:a2:
                    5e:e5:58:4e:bc:13:3b:c6:48:b0:8b:ad:a3:6a:66:
                    34:f8:6c:3b:96:9d:1a:ba:f9:5e:15:c3:6f:8a:2e:
                    45:06:7b:e8:09:f7:c7:bb:84:d7:b7:9d:d1:b7:8b:
                    cc:4f:53:a3:db:c3:65:49:5c:4c:5c:72:33:41:cb:
                    52:3f:f6:97:24:57:87:bf:36:76:35:cb:84:bc:b7:
                    0a:51:e5:43:76:4f:5d:f0:a9:d9:6b:c7:55:92:b1:
                    cb:9b:02:35:d6:d3:a5:2a:8a:8f:ff:4e:90:62:d7:
                    a2:16:a3:5d:df:ed:e5:62:e8:fa:e6:7b:d0:7f:69:
                    f2:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8D:B8:C4:CF:95:B2:BD:58:C2:D3:6A:36:7E:74:C4:A9:50:33:CC
            X509v3 Authority Key Identifier:
                keyid:7B:E8:59:B4:28:6B:E1:EA:14:B8:8C:7A:30:B5:CE:4F:D8:59:80:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-hZtChr4eoUuIx6MLXOT9hZgOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B7955/F50EDF2C0D1011EA8B798E43F8AEA228/e-hZtChr4eoUuIx6MLXOT9hZgOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:f9:46:84:77:0f:37:10:bb:d0:9c:55:ba:e9:c9:ae:d6:f2:
         14:d7:ca:9d:b4:76:67:31:cf:6d:e8:f2:db:8d:d4:b0:50:9a:
         34:0c:54:a3:cc:68:f8:5e:68:59:8e:c7:4a:c6:ee:6b:3d:35:
         28:80:49:a6:6d:c4:06:d1:9a:c6:f0:41:56:d0:0d:1e:f5:7e:
         f4:ff:1a:23:10:12:e0:a7:6b:34:57:f7:d4:b8:76:86:10:e5:
         63:bf:84:d9:7f:67:94:3f:b0:21:09:11:19:d8:a9:11:87:fd:
         76:72:ea:9d:11:5c:93:a2:47:a8:61:39:f4:42:99:6c:67:3f:
         ac:3b:70:c7:16:9b:77:9c:18:2e:dc:2a:15:0e:a6:0e:7d:23:
         b7:0d:af:4c:e7:4c:86:1c:d6:ab:08:9c:e8:ce:f6:c7:69:a6:
         04:b7:8a:a5:64:79:9d:47:59:6e:a1:db:e6:af:db:16:74:fa:
         24:c2:30:6a:ef:11:b0:29:08:4b:48:2e:90:26:ca:c6:d7:21:
         e5:bc:2b:94:7d:c4:01:ec:e2:61:08:ab:92:3a:59:be:09:c7:
         42:dd:4e:55:9e:f8:e8:46:e0:9f:2f:12:53:ab:bc:81:62:42:
         2e:12:2d:56:a3:cd:48:23:61:6b:1f:1c:39:2a:66:d7:52:4c:
         37:e3:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:16:14 2026 by rpki-client