Error: rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
File:                     ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft (raw, json)
Hash identifier:          Hbh/BLaGiktIkk6+WBGR1RdtPqQE7TaoPY8txG7VM40=
Subject key identifier:   15:2B:66:A6:3E:4C:53:D0:5F:F3:51:80:FE:30:FA:09:F9:65:7B:83
Authority key identifier: 64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41
Certificate issuer:       /CN=F36E3530AF/serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
Certificate serial:       0392
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
Manifest number:          038F
Signing time:             Tue 22 Sep 2026 04:07:06 +0000
Manifest this update:     Tue 22 Sep 2026 04:07:06 +0000
Manifest next update:     Thu 24 Sep 2026 04:07:06 +0000
Files and hashes:         1: ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl (hash: msdoiA3vsnHp+5ylBYqxK14Eipx3yc0wm7yANIZsR14=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 914 (0x392)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3530AF, serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
        Validity
            Not Before: Sep 22 04:07:06 2026 GMT
            Not After : Sep 24 04:07:06 2026 GMT
        Subject: CN=6ab1feea-fa3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:6f:67:28:42:6f:99:92:ca:86:98:3b:a6:4d:
                    94:72:29:69:80:d2:31:1a:31:b2:e4:6b:7d:f5:d8:
                    80:b7:22:5b:ce:4d:1b:22:3d:73:dc:1e:7d:27:7d:
                    ca:1b:89:b8:a5:9a:73:a5:3e:f2:f5:b0:46:72:5f:
                    22:3e:64:4f:87:30:cd:5f:65:90:5b:95:25:e3:a7:
                    3d:fc:ce:03:17:36:35:c6:f2:81:1e:09:14:41:85:
                    e7:61:6a:85:8b:22:4c:19:66:68:fd:77:aa:eb:25:
                    04:08:df:c1:21:4f:7d:c7:4a:f7:24:cd:00:37:45:
                    57:06:fa:de:10:26:f7:a5:12:ee:b0:dd:73:ec:d4:
                    37:97:b8:40:97:4d:fa:f1:af:9c:49:18:9a:05:1e:
                    6e:3b:e2:b8:f8:3d:22:64:30:96:44:be:40:fc:0f:
                    1a:e4:4c:72:bd:3b:ab:70:42:85:e5:6e:f1:9a:88:
                    e4:96:fd:a9:46:7d:da:fb:ae:10:9e:66:ab:bc:8f:
                    8c:25:3a:10:bd:1e:a1:9a:c2:a4:dd:d2:81:2c:72:
                    3a:77:32:0e:7f:d4:e6:5d:c7:9d:e5:11:d2:b6:02:
                    fd:63:a6:02:c7:4c:b5:6b:63:10:4f:bd:08:28:8a:
                    13:5c:ab:a6:54:e8:af:08:74:43:9a:0b:f1:f6:70:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:2B:66:A6:3E:4C:53:D0:5F:F3:51:80:FE:30:FA:09:F9:65:7B:83
            X509v3 Authority Key Identifier:
                keyid:64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:07:1b:3c:bc:97:fb:1b:2f:ec:79:08:87:9f:55:d0:cd:8a:
         13:67:5f:5d:56:88:5b:be:44:50:78:1a:38:60:cf:9f:5c:4a:
         e1:d6:47:b4:1c:fd:81:33:62:eb:91:16:19:7d:da:22:72:e0:
         8a:08:b4:4a:f2:41:77:c4:f1:bc:78:e9:c6:47:72:71:ec:89:
         03:46:91:25:c7:53:f4:03:86:c3:9a:2d:8e:f9:3e:f1:a7:08:
         b1:c5:4d:60:33:13:b9:07:0b:e3:47:e9:0d:ae:43:1a:85:21:
         ac:4d:e8:aa:8e:76:3b:f6:56:85:c3:26:c5:70:a1:2b:e2:3c:
         73:b8:26:90:83:b3:bd:fc:a3:29:37:8c:5a:20:19:f6:8d:9c:
         3f:fa:cb:8c:90:c4:7a:c5:3c:55:2a:84:4d:2d:87:c4:be:16:
         e6:51:f5:17:51:0c:86:50:ed:ea:da:0f:58:14:86:8d:b8:d3:
         66:4d:8e:54:4c:41:9a:28:29:60:30:cc:f4:33:6a:dc:14:1d:
         22:8e:41:51:a1:eb:46:17:ea:b4:42:6e:02:1e:45:ba:a0:6e:
         b7:80:14:f5:a2:90:66:1c:a5:61:7c:ed:e8:ec:bc:f9:9c:e7:
         38:2d:cf:bb:c1:fe:80:f2:0a:5b:c8:96:a8:13:13:68:64:63:
         f9:13:b7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:43:13 2026 by rpki-client