Error: rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
File:                     vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft (raw, json)
Hash identifier:          iSacI9JYiVTWBsNDaM32L2DkGDSysVyId9gwT3DnjCY=
Subject key identifier:   4F:4D:AE:2E:3E:33:23:9B:1D:3A:33:98:F8:DE:93:EE:A7:FF:48:60
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Certificate issuer:       /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial:       E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
Manifest number:          D5
Signing time:             Tue 22 Sep 2026 05:29:25 +0000
Manifest this update:     Tue 22 Sep 2026 05:29:24 +0000
Manifest next update:     Thu 24 Sep 2026 05:29:24 +0000
Files and hashes:         1: vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl (hash: Uomnm31pEn0LNOKRaVNPny/Q9MCwlkjBKA+3qPonvm0=)
                          2: 5F3F870C33ED11F180E878B3CE1D38B0.roa (hash: 7xialWnZN8O/jx++FVBr1LOwRlL8Ft6W6YRIeco4BCA=)
                          3: 12854A54342011F1B1B3FEE3CE1D38B0.roa (hash: pT0m2gWKIGIqpxCq5RWYoGgM1OEZ3jmMFyars3Vkhlo=)
                          4: F468593A341F11F19237EFE3CE1D38B0.roa (hash: T7CbuXXhwxyEGnxPwVGgVjsxTM/k3t9lVyPY1e3Aq94=)
                          5: 1FB6B30233EE11F1A6C4A8B7CE1D38B0.roa (hash: sbb9mXyfSj61UJjWbJwXmlAFr/cOrxQfzXZS3BVT1Ro=)
                          6: 35DF2FE833ED11F1B4145AB3CE1D38B0.roa (hash: A48YMHhA/dlybkCnRzYsuhf4oJk2hDb9PCemlafemBw=)
                          7: 861B94CE33ED11F1965390B3CE1D38B0.roa (hash: TggDZn/6+km0NmiNN9k3nE6i0CGJCXgqnNH4Fo/DA8k=)
                          8: 6478E0A0342011F191BE0FE6CE1D38B0.roa (hash: emC7GwLX61xHhM+cBfiU05CVWHA3VSY3bML+vXnttf4=)
                          9: D1FF3C60341F11F19A2BE6E1CE1D38B0.roa (hash: vlPWuJWoU9zTLPDgIJQsQdOrVIdbzbVOA1ve9uoqz1A=)
                          10: 3DF747BE342011F1A6EBDFE5CE1D38B0.roa (hash: 2JX7YfxLCoLtjBk/3MPBmLjpXRWBo37oy7tpgRQ6qiw=)
                          11: AA5B87D633ED11F181BB97B5CE1D38B0.roa (hash: 6Pd+u2gjjm+VgsR8IN1iRrAHY/KiGxo4zHwnk5HLQNY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
        Validity
            Not Before: Sep 22 05:29:24 2026 GMT
            Not After : Sep 24 05:29:24 2026 GMT
        Subject: CN=6ab21235-de0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e3:27:33:c4:79:8c:af:2e:2c:33:c1:79:71:
                    d9:cf:1a:a0:7c:0f:e9:68:42:6b:95:5b:59:31:42:
                    94:61:a0:8b:b0:6b:45:62:cf:f0:23:bc:a1:ff:68:
                    b7:35:a9:22:84:d6:ed:07:39:a2:83:0b:0f:bc:83:
                    90:79:63:fd:8c:a7:46:37:2e:69:3a:8b:3e:7d:cf:
                    e0:27:90:e7:79:b9:1b:9b:b4:63:16:d5:4b:93:4c:
                    6f:b3:7f:b0:c4:e4:b0:a2:a7:e3:e1:50:3c:03:fa:
                    09:3e:9b:8f:d9:12:7d:78:3e:ba:00:3f:46:96:e5:
                    35:0b:67:42:29:41:63:aa:52:1c:42:db:77:41:1f:
                    5d:9d:7e:1a:8c:0f:e8:2d:0d:8e:35:d0:96:2d:dd:
                    f5:f6:75:8a:13:05:9e:d4:22:f1:13:64:b3:86:79:
                    04:da:28:d7:41:5d:1f:81:0d:3b:21:d2:05:dd:14:
                    c3:9a:1f:9f:a7:78:76:e2:47:a0:43:9f:04:8d:45:
                    b9:14:07:34:28:c8:68:30:85:c5:b4:40:5f:f3:2a:
                    fb:ec:fb:71:35:22:57:75:4a:6e:bc:b9:11:a9:a5:
                    b8:aa:35:96:03:54:56:b5:93:de:06:53:ce:5a:32:
                    5c:99:7e:a8:17:2f:0a:72:ab:de:9f:9f:0d:4a:d9:
                    7e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4D:AE:2E:3E:33:23:9B:1D:3A:33:98:F8:DE:93:EE:A7:FF:48:60
            X509v3 Authority Key Identifier:
                keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:fc:5e:df:e2:58:ff:3e:8d:fc:18:6d:fb:4b:64:6c:74:66:
         f6:42:8d:ce:be:51:a7:a8:b9:91:0f:d4:73:ab:03:6b:96:a7:
         90:92:6d:94:70:59:3d:69:9d:15:16:fc:3c:e9:23:f7:9b:4b:
         73:ee:3a:dc:c3:6a:b5:a0:3e:53:67:d3:fb:b6:bd:07:55:1a:
         10:22:a9:f4:4d:94:5e:39:b1:1b:09:34:b6:8a:d8:c8:4a:84:
         fd:c8:dc:9c:41:8e:c0:7f:bf:99:73:fa:a2:25:28:ca:2c:dd:
         e9:6c:10:fb:08:d3:a3:c2:e8:5d:c1:fd:8e:5e:f8:da:e5:24:
         e4:5e:de:71:0e:31:66:6b:45:8e:c5:23:3f:ef:2d:89:d0:f1:
         7f:79:ce:b3:75:17:9d:d4:bd:d8:a2:40:26:13:46:4f:ce:4f:
         d6:e1:f5:47:24:78:87:17:6e:e0:97:5f:99:ca:ab:d4:56:81:
         1d:d2:6d:36:c5:e8:06:5a:d6:88:1f:fa:a8:ac:15:d8:b3:55:
         7a:48:61:6b:d0:81:9a:cc:97:15:6d:4b:6b:94:7a:53:a3:c3:
         af:7b:6c:cf:a7:17:c5:3c:0d:ff:4d:04:ed:f7:5b:44:ca:e5:
         d3:8f:58:7b:05:e6:15:f0:7a:bb:a1:51:ad:fa:f5:ab:f1:a4:
         0f:1b:ea:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:16:22 2026 by rpki-client