Error: rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
File:                     7cVihK_vMTf8afnaeD_pzHg6baw.mft (raw, json)
Hash identifier:          8/mmJrz9/By1VXNXYju5EwjRwI7xL8imjctH8nubFYc=
Subject key identifier:   91:DC:A4:94:75:04:AA:17:8B:CB:94:34:07:DC:1F:32:7B:BD:1D:8E
Authority key identifier: ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC
Certificate issuer:       /CN=F36C1D14AF/serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
Certificate serial:       0981
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
Manifest number:          097F
Signing time:             Sat 26 Sep 2026 01:43:57 +0000
Manifest this update:     Sat 26 Sep 2026 01:43:56 +0000
Manifest next update:     Mon 28 Sep 2026 01:43:56 +0000
Files and hashes:         1: 7cVihK_vMTf8afnaeD_pzHg6baw.crl (hash: THxUqeGuyqpplIblBWC2ziUH39FG0MhydwWzlm2KB7w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 01:43:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2433 (0x981)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1D14AF, serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
        Validity
            Not Before: Sep 26 01:43:56 2026 GMT
            Not After : Sep 28 01:43:56 2026 GMT
        Subject: CN=6ab7235d-cfd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:40:08:ed:fc:9e:14:26:92:91:da:94:c6:99:
                    36:51:6d:3b:5d:5d:13:53:db:cd:af:b8:d3:65:ca:
                    5a:39:25:db:02:c2:51:68:2a:49:dc:2e:6f:85:3e:
                    72:4d:f3:4b:6a:e1:85:86:f5:9f:6e:e4:1f:20:27:
                    6e:95:9c:ce:b2:09:ff:0f:10:33:a4:65:53:11:e0:
                    73:8d:b7:4c:ac:3f:13:47:5f:a8:4e:2f:9a:de:5a:
                    11:7b:e7:ff:34:8b:71:1c:6f:13:75:dc:17:74:ff:
                    61:56:e4:84:7e:63:6b:03:38:02:88:e1:c8:38:84:
                    9f:78:66:fa:8f:f5:c6:59:b6:6b:b5:55:c3:23:19:
                    6a:f6:d6:63:aa:77:eb:e9:61:8e:5d:cc:82:72:32:
                    66:6b:20:c9:a1:8e:10:cf:be:3f:ed:4f:5b:72:22:
                    0a:80:e8:60:5b:0a:bd:62:83:1b:22:bb:3a:72:cd:
                    56:15:d1:a5:0d:f9:88:8d:57:25:9a:ad:0b:57:99:
                    77:1b:41:15:48:a7:85:47:d2:9a:ae:d0:d4:6e:ce:
                    27:ce:d0:ea:44:1e:27:45:26:06:01:c1:f6:76:fd:
                    b0:52:04:76:b4:07:95:f6:2e:8e:71:39:7b:4e:03:
                    25:c2:6f:2a:17:f5:e8:f9:bd:f1:54:64:5d:7b:6a:
                    58:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DC:A4:94:75:04:AA:17:8B:CB:94:34:07:DC:1F:32:7B:BD:1D:8E
            X509v3 Authority Key Identifier:
                keyid:ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:1a:e9:f8:a3:b1:f8:0c:0f:a4:90:85:c4:65:1a:64:e6:58:
         64:fc:ba:df:7f:28:e4:b0:e5:83:05:4e:dd:20:29:b8:34:dd:
         b4:fc:15:80:b0:3c:3e:3e:42:27:30:43:f5:47:62:03:e0:8f:
         51:65:f3:31:9e:3d:fd:17:ba:ec:dc:61:be:a8:03:18:62:a1:
         43:95:c6:36:8e:0e:3d:2e:aa:81:6d:16:9b:29:18:a1:7e:40:
         b6:f4:d1:8b:05:62:17:f1:4f:8d:8c:39:3a:76:47:c2:aa:d5:
         24:82:96:12:ba:03:5c:50:ce:80:05:a7:7f:30:be:76:4f:17:
         74:ed:da:56:f8:40:51:2b:de:26:fe:6c:d7:ce:a1:a7:a6:9f:
         26:24:4e:62:37:79:a3:e1:2f:6b:4d:da:a4:6a:3b:2b:a5:6e:
         70:97:28:1d:bc:a7:9e:1f:6e:37:b3:cb:26:87:fa:34:44:ea:
         9b:65:50:6f:94:84:e9:2c:3e:1f:b2:11:40:a4:96:f5:19:9b:
         c4:9b:53:05:b5:97:0b:0b:a5:de:53:4d:7e:50:56:09:e4:b6:
         ea:72:ab:6a:73:2b:42:7f:75:97:a1:37:4d:e7:3c:29:19:2f:
         77:b2:e3:1c:cd:c7:67:c0:e2:c3:36:9c:c7:a2:f7:ce:ee:90:
         7d:e3:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:21:17 2026 by rpki-client