Error: rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
File:                     JrOnWLLY0r61xvaBylvZJYx593c.mft (raw, json)
Hash identifier:          BXE6p3Q6EF6c7qYZtjZO+Z3vPQ2lOEcoVrfQFrvvaNc=
Subject key identifier:   6F:79:42:6F:99:7B:65:CD:94:9B:BC:61:44:86:71:D8:DE:03:79:16
Authority key identifier: 26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77
Certificate issuer:       /CN=F36D8ADDAF/serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
Certificate serial:       083C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
Manifest number:          0839
Signing time:             Fri 25 Sep 2026 02:00:32 +0000
Manifest this update:     Fri 25 Sep 2026 02:00:31 +0000
Manifest next update:     Sun 27 Sep 2026 02:00:31 +0000
Files and hashes:         1: JrOnWLLY0r61xvaBylvZJYx593c.crl (hash: WK164bZJRl4MCEO32K8c57jZFbr4Ksmb2J+XVViaELA=)
                          2: 8725BB28177111EF81A9096D017001B1.roa (hash: 88veSwgimt5nxNF8bDTfkfTQkyjEIh0wtn0t0fyF6v4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108 (0x83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8ADDAF, serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
        Validity
            Not Before: Sep 25 02:00:31 2026 GMT
            Not After : Sep 27 02:00:31 2026 GMT
        Subject: CN=6ab5d5c0-ce46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e0:99:27:05:1a:c1:db:d2:32:a4:0c:0f:0b:
                    d5:d3:05:f7:2e:c8:0f:27:af:30:73:43:91:c2:54:
                    b9:38:da:32:d7:c8:f9:3e:8b:cc:f8:c0:a8:93:c6:
                    5f:82:85:b0:c5:95:d9:a6:f9:93:27:e7:3d:48:14:
                    69:2a:c9:3f:db:f5:95:47:dd:c7:c6:3d:26:83:81:
                    70:7e:b0:c3:c3:c9:b5:ef:31:79:41:22:44:6c:d4:
                    91:29:f2:bf:02:f5:82:fc:45:54:3f:64:d1:a0:b6:
                    f8:47:7b:40:cf:59:13:74:f7:9b:71:bb:1c:53:07:
                    1f:2e:0a:68:ce:95:e1:e9:86:88:2c:b3:b8:73:bb:
                    db:45:8e:07:7f:0d:75:87:67:e9:65:b1:c8:f4:1e:
                    85:8a:9d:c7:7e:77:22:d2:f4:b0:7f:64:09:1d:9e:
                    9b:18:2b:73:74:4a:d7:58:e9:39:cd:11:2d:88:72:
                    be:32:0e:22:b0:62:94:57:2d:bd:01:41:00:88:29:
                    3d:b7:75:a1:72:1d:41:48:43:2a:7d:a8:bb:4b:dc:
                    f8:9e:11:b9:41:54:38:f3:20:a4:08:01:42:9e:88:
                    ca:70:ec:ed:09:67:07:9e:45:97:fb:cc:25:83:45:
                    c7:81:bc:af:98:c6:e7:14:13:a1:25:39:72:e6:b8:
                    5d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:79:42:6F:99:7B:65:CD:94:9B:BC:61:44:86:71:D8:DE:03:79:16
            X509v3 Authority Key Identifier:
                keyid:26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6b:d2:8a:d1:00:9a:f5:a3:7a:46:81:8b:a1:3e:21:1b:ce:
         c3:14:a4:da:55:e4:12:22:d0:81:3e:4f:13:30:e6:87:df:a2:
         3b:b4:b3:60:f5:86:52:0d:91:7d:44:d5:18:91:24:b0:0b:9c:
         d2:3c:00:21:61:af:3a:08:95:c7:53:8b:c2:c2:44:98:d8:8b:
         38:32:ed:80:04:02:c2:da:87:b8:2b:8b:e4:db:2f:cd:b3:a3:
         23:58:b8:d6:fb:68:41:40:65:68:49:dd:70:7b:72:d3:f7:e8:
         e8:77:5d:10:1f:c9:e6:ba:41:36:ff:d4:d6:2c:a4:23:dd:75:
         12:c6:0b:f8:ae:19:f5:9d:40:e4:84:ec:ee:df:4b:d5:94:6e:
         46:57:0a:d5:26:84:af:fb:a7:a3:d2:00:60:39:47:7c:51:93:
         56:88:09:0a:64:f6:03:6e:17:3e:b0:06:02:78:2b:71:dd:94:
         d7:18:45:91:1d:bb:df:77:60:74:9a:85:9e:e5:82:26:b0:28:
         5d:8d:21:ce:bb:09:69:98:af:87:70:a6:20:f6:fa:6c:5a:3e:
         1f:e1:d7:d7:7f:b7:60:44:a2:8f:3a:e6:db:e5:9f:30:dd:6b:
         aa:81:75:33:95:78:64:aa:18:e5:f1:23:6c:d2:ea:2d:c6:ca:
         39:c9:0a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:14:54 2026 by rpki-client