Error: rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
File:                     764LPX24gpNjrt_AWoTtudQExzk.mft (raw, json)
Hash identifier:          6zvAIhc9J2KB8Hgr8aEvYaF4yKwjRLbO5ILklZoI52Y=
Subject key identifier:   E7:2F:DC:70:15:A0:87:D6:60:78:F6:65:4B:94:95:42:99:CC:3D:CF
Authority key identifier: EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39
Certificate issuer:       /CN=F36BA482AF/serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
Certificate serial:       0337
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
Manifest number:          0333
Signing time:             Wed 07 Oct 2026 04:21:45 +0000
Manifest this update:     Wed 07 Oct 2026 04:21:44 +0000
Manifest next update:     Fri 09 Oct 2026 04:21:44 +0000
Files and hashes:         1: 764LPX24gpNjrt_AWoTtudQExzk.crl (hash: 5KnINyFRg9LqDPeNBWmA31MYgPQbe9ui8vnEVxxidYY=)
                          2: 51D633A828E011F1B5EC19A7DAE4EC9C.roa (hash: 9HJBCfxyN3JJa5qVSQU2P6mbjYZKQYUaO4UYv+qOONw=)
                          3: B93A46528A9711F09F0F70C8DAE4EC9C.roa (hash: CkFb39x15nirobdbbaooeI5/m16fCdvIYH2/odp17kc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 04:21:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA482AF, serialNumber=EFAE0B3D7DB8829363AEDFC05A84EDB9D404C739
        Validity
            Not Before: Oct  7 04:21:44 2026 GMT
            Not After : Oct  9 04:21:44 2026 GMT
        Subject: CN=6ac5c8d9-7acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:e8:48:64:cd:66:4c:07:3b:ff:d5:88:a5:
                    ba:af:29:d8:ee:6e:23:a2:87:a3:d5:f5:15:d0:0c:
                    19:6a:df:d2:8b:59:30:6c:da:36:8f:bb:b8:6d:16:
                    2b:54:fd:57:fb:bc:10:77:d9:cc:7b:bc:2b:92:b3:
                    c4:30:c0:b6:e4:7c:b9:ab:0c:80:b6:49:84:41:77:
                    f5:0c:af:7c:50:39:57:f4:4c:1d:44:eb:e2:11:1d:
                    a1:7d:90:87:37:8b:d5:b0:55:ce:01:4a:b9:b8:e3:
                    36:ff:71:99:14:4a:be:8b:89:4d:1f:13:04:54:6b:
                    5d:19:78:de:1e:58:27:a3:06:0f:56:ed:fd:ab:d9:
                    2f:1b:aa:40:f1:27:bf:b0:97:00:78:6d:36:b5:97:
                    28:f0:d9:e2:a8:c9:21:c3:f2:de:27:a6:fc:0a:ae:
                    09:7b:07:1c:ad:7b:f3:1c:bd:c2:1c:2e:4f:c7:05:
                    d4:3f:c3:7f:1e:09:f5:84:96:55:3b:9e:1e:ae:4b:
                    cf:9c:fe:16:d6:bd:38:25:04:62:9d:f9:05:7d:0f:
                    cc:44:c9:e9:53:f8:f8:62:c2:65:27:d2:a1:48:2a:
                    c0:13:ed:57:f9:b9:95:88:ce:a5:32:81:e8:03:4a:
                    ad:81:1f:3c:c4:c7:fd:ad:15:ca:6f:b9:19:8f:9b:
                    9c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2F:DC:70:15:A0:87:D6:60:78:F6:65:4B:94:95:42:99:CC:3D:CF
            X509v3 Authority Key Identifier:
                keyid:EF:AE:0B:3D:7D:B8:82:93:63:AE:DF:C0:5A:84:ED:B9:D4:04:C7:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/764LPX24gpNjrt_AWoTtudQExzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA482/00E56E9E51ED11EF932A6172762E951A/764LPX24gpNjrt_AWoTtudQExzk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7f:f7:e9:33:ba:68:69:f2:35:bf:03:f4:b3:fe:3f:21:52:
         18:85:52:1a:89:32:ae:d3:5f:d9:5e:e4:26:55:0a:59:dd:7d:
         5a:1e:a1:83:4f:e4:0d:fe:a6:6a:24:f0:fc:ce:61:c5:af:1d:
         cc:64:6e:6d:4b:ee:93:fe:03:44:0b:57:75:0e:b8:da:64:2b:
         52:f6:58:1d:14:7b:5f:a9:c2:82:50:9b:01:c2:a4:5c:3d:4e:
         af:a1:eb:c2:15:ea:96:fb:f5:89:8b:0a:6b:d9:69:1f:91:c2:
         12:76:ad:9e:97:63:7d:79:b1:25:2c:68:19:fb:18:60:84:66:
         45:72:f8:55:54:07:4b:f0:8f:b4:56:c9:be:ad:79:07:a8:33:
         0a:ac:08:34:ba:ad:a7:f6:ff:45:ba:65:86:37:35:9d:45:67:
         24:5b:e0:a7:a9:6d:97:90:23:68:d5:23:08:a4:7a:5b:52:69:
         31:f1:1d:35:f7:7c:ea:1b:8f:fa:af:c4:9f:84:00:6c:82:43:
         fe:03:d7:e3:f5:87:19:b7:53:de:d0:b4:71:65:77:b1:59:09:
         0d:fa:94:67:ee:2e:e4:9b:08:c7:a7:94:5e:32:85:4f:b7:87:
         17:9b:12:61:0b:e2:9d:e3:90:0c:64:ec:4a:f7:fc:9d:1c:87:
         78:21:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 06:20:19 2026 by rpki-client