Error: rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.mft
File:                     ShihNoN8fkklQFrLpOOnPS4t9d4.mft (raw, json)
Hash identifier:          VDMuFK+Z8B9JUCUX/tnZ/X2M2EUFoKBR8gIn8sLr+vA=
Subject key identifier:   66:E8:2D:09:B6:27:23:02:60:B2:A9:E9:6E:41:B4:34:20:38:25:D2
Authority key identifier: 4A:18:A1:36:83:7C:7E:49:25:40:5A:CB:A4:E3:A7:3D:2E:2D:F5:DE
Certificate issuer:       /CN=F36E558ERI/serialNumber=4A18A136837C7E4925405ACBA4E3A73D2E2DF5DE
Certificate serial:       0180
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/ShihNoN8fkklQFrLpOOnPS4t9d4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.mft
Manifest number:          0180
Signing time:             Tue 22 Sep 2026 05:08:52 +0000
Manifest this update:     Tue 22 Sep 2026 05:08:52 +0000
Manifest next update:     Thu 24 Sep 2026 05:08:52 +0000
Files and hashes:         1: ShihNoN8fkklQFrLpOOnPS4t9d4.crl (hash: ff23tEzboyupbYzddxCuNY1J2jTex3Uf8SNzU19RNPo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.mft
                          rsync://rpki.afrinic.net/repository/ripe/ShihNoN8fkklQFrLpOOnPS4t9d4.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E558ERI, serialNumber=4A18A136837C7E4925405ACBA4E3A73D2E2DF5DE
        Validity
            Not Before: Sep 22 05:08:52 2026 GMT
            Not After : Sep 24 05:08:52 2026 GMT
        Subject: CN=6ab20d64-8131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2e:1c:97:94:04:00:2c:42:86:42:92:66:01:
                    8c:27:4a:23:7f:ef:07:6b:84:7e:25:3d:5c:09:af:
                    f4:f8:02:78:c2:dc:e3:22:3e:71:75:bf:03:bb:cd:
                    92:b5:40:6f:a9:b6:6d:ae:49:4f:35:e4:8f:f5:83:
                    b3:93:be:91:04:38:fe:6a:e2:cb:b7:4f:93:e2:e9:
                    03:03:ab:fb:6c:88:14:7f:0a:df:91:c0:fb:53:8b:
                    9c:e6:1c:32:30:f6:29:88:aa:0c:7c:5c:c6:58:4c:
                    c0:4d:e7:d4:60:b2:00:49:d2:36:b0:2f:0e:83:65:
                    57:69:97:db:9d:0c:b4:6d:5e:c9:76:5d:0a:64:57:
                    75:06:f4:a1:4b:28:7c:9a:d0:62:18:22:f2:98:4f:
                    cf:44:76:49:97:c2:8d:53:c3:a2:f3:5d:45:02:33:
                    ca:91:48:91:2d:b9:fe:c4:a8:77:31:9c:aa:b4:19:
                    e1:6e:0b:e6:44:dc:45:87:06:a1:b9:ec:07:f9:71:
                    50:96:c0:a7:df:28:7f:b2:57:59:75:56:e6:06:20:
                    57:95:28:e4:8a:f7:cc:de:6c:b4:bb:70:32:a8:2f:
                    bf:4f:9b:86:10:22:78:ea:7d:1b:0a:ad:c3:c5:a5:
                    e4:7e:9c:26:5a:c9:a4:8e:2c:aa:41:13:27:2c:87:
                    6b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:2D:09:B6:27:23:02:60:B2:A9:E9:6E:41:B4:34:20:38:25:D2
            X509v3 Authority Key Identifier:
                keyid:4A:18:A1:36:83:7C:7E:49:25:40:5A:CB:A4:E3:A7:3D:2E:2D:F5:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ShihNoN8fkklQFrLpOOnPS4t9d4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E558E/A29897C88CEF11F08BB0D17CDAE4EC9C/ShihNoN8fkklQFrLpOOnPS4t9d4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3d:cf:15:99:09:08:9f:0f:3a:39:ea:24:77:15:c6:3d:76:
         7e:31:ec:43:9e:1d:e2:61:2c:ac:0e:c6:69:d7:5b:ea:3d:eb:
         a6:42:85:57:84:c2:66:b1:ad:b4:3c:1e:a5:63:20:83:59:b9:
         24:7b:96:cf:4d:1d:fa:aa:5a:da:5e:03:8f:85:20:fd:33:99:
         07:61:13:17:4b:31:da:d6:53:20:91:f1:45:40:c9:ea:b6:5d:
         3b:bf:db:aa:eb:27:1a:2b:d8:a5:16:45:d1:1c:ec:9b:48:07:
         eb:1a:4a:40:f2:7e:03:62:90:92:0c:84:25:25:31:e7:0c:9b:
         9a:4c:ec:2f:fd:b7:f4:59:2d:e3:11:2b:38:21:30:ed:fc:ba:
         9c:be:6b:4c:75:57:1a:0c:27:3d:d3:65:9d:c5:d0:f0:a0:0e:
         ea:cc:30:b4:ea:1f:ac:ef:bd:6a:1e:01:03:a8:42:2a:2b:cb:
         84:b5:a8:4d:2a:89:e4:3e:55:83:5c:74:48:08:79:f8:7d:ba:
         cc:bd:ba:6c:95:01:bc:59:a0:ac:c7:bf:f0:97:ac:c4:07:78:
         78:35:31:6d:40:39:02:78:72:25:9b:f3:19:a5:4d:db:a8:e7:
         06:68:7b:be:db:91:ce:4e:7b:c3:a2:c6:e6:43:71:fe:73:fb:
         7e:6d:7b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:02:01 2026 by rpki-client