Error: rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
File:                     jE53-jIjScCyfwF2MjOuR7DcmvM.mft (raw, json)
Hash identifier:          JOAOift2quMhtZSZSYorxkRjjxuBfceIkjMlpAjlufc=
Subject key identifier:   56:DF:2B:86:0F:34:1E:05:3E:91:52:12:CF:E4:DD:36:44:34:6D:E6
Authority key identifier: 8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3
Certificate issuer:       /CN=F36E68C0AF/serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
Certificate serial:       033C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
Manifest number:          0339
Signing time:             Wed 07 Oct 2026 04:19:44 +0000
Manifest this update:     Wed 07 Oct 2026 04:19:44 +0000
Manifest next update:     Fri 09 Oct 2026 04:19:44 +0000
Files and hashes:         1: jE53-jIjScCyfwF2MjOuR7DcmvM.crl (hash: ysE+4jnMjZs2MgUWjXqTxxefqZIGD4qtJFu0L5H2dVM=)
                          2: 163B806EBEFF11F09AD7A978DAE4EC9C.roa (hash: /RRdqAjpsv8m7r2GyY/BKUpRLM+07+N7E0oDvFGiBQ8=)
                          3: A30290B4490311EFAD6D6848762E951A.roa (hash: 9DJDNrHzZVxc5zuNzgDbveKnN6iPIU3B9BicWnmYCZQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 04:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 828 (0x33c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E68C0AF, serialNumber=8C4E77FA322349C0B27F01763233AE47B0DC9AF3
        Validity
            Not Before: Oct  7 04:19:44 2026 GMT
            Not After : Oct  9 04:19:44 2026 GMT
        Subject: CN=6ac5c860-c374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:84:5c:fc:26:66:c8:d5:57:c4:c2:2e:85:
                    97:42:39:96:15:83:6f:31:df:c6:54:01:a1:5b:20:
                    6b:f6:3e:ca:bd:63:1b:83:52:88:de:2d:d5:88:45:
                    27:70:ef:c2:d0:29:0d:64:e8:05:84:aa:e4:13:07:
                    73:03:2a:60:e9:18:ce:21:b7:4f:dc:54:fd:04:39:
                    90:60:78:c3:a0:7b:f8:ff:81:b0:41:9a:11:ca:60:
                    54:f5:c2:ab:90:45:b7:d1:37:d4:10:e4:c2:88:74:
                    9b:90:fb:71:7e:d3:ab:37:55:a9:c3:88:fd:a0:41:
                    91:4c:b5:c6:a3:f6:40:9e:7b:f5:99:51:57:62:96:
                    78:10:2c:f0:ec:46:36:e6:a1:55:d0:8f:73:58:53:
                    74:eb:f4:5d:35:d4:65:a5:e2:03:5c:71:68:fa:52:
                    c3:32:a2:aa:aa:7a:c9:36:dd:81:17:e4:c2:9b:9c:
                    71:d5:77:ea:51:6b:9c:f9:51:0d:0e:cd:f3:07:06:
                    44:f8:a3:a5:ab:13:7c:da:d2:63:08:57:87:1e:a5:
                    86:3b:d9:89:e7:d8:f1:71:38:98:82:e1:fb:82:a6:
                    5b:9f:81:8d:9f:aa:66:32:69:94:90:07:7b:72:33:
                    9b:70:d0:d9:61:72:a7:97:78:25:2e:e4:a3:42:ed:
                    7b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DF:2B:86:0F:34:1E:05:3E:91:52:12:CF:E4:DD:36:44:34:6D:E6
            X509v3 Authority Key Identifier:
                keyid:8C:4E:77:FA:32:23:49:C0:B2:7F:01:76:32:33:AE:47:B0:DC:9A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jE53-jIjScCyfwF2MjOuR7DcmvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E68C0/3ECE895E48EF11EFBAB935BF762E951A/jE53-jIjScCyfwF2MjOuR7DcmvM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7f:d9:d7:68:0a:56:27:2c:10:01:45:4b:96:9d:47:d9:02:
         ad:da:4e:d2:7f:44:d2:5a:2e:f1:41:8a:8d:48:cb:4c:fd:57:
         39:f5:88:04:7f:87:84:17:08:95:49:0d:b9:ff:12:1c:d7:1a:
         2e:40:c5:ed:c5:a2:cb:c7:91:d5:ac:12:da:ac:64:d5:72:b7:
         01:c3:21:8f:02:5d:2e:93:43:ab:11:95:a2:b2:9c:18:52:58:
         a6:c5:f8:42:d3:94:c7:d4:4d:e0:09:aa:0a:bb:9d:c2:a3:7f:
         cd:58:0a:84:13:b6:cf:46:de:bf:89:a7:b3:6c:dd:ec:4a:41:
         01:88:a8:0d:4d:e3:2a:9f:1c:85:64:9f:8c:c1:6d:06:b6:6c:
         8f:72:26:01:2d:d6:3b:7a:05:70:46:29:ad:32:ec:21:a5:ab:
         26:ff:2d:a5:8d:c0:6a:13:27:a3:00:03:5f:0b:48:19:05:a5:
         89:aa:b2:2f:d5:47:c6:23:e5:4d:61:1a:a2:4f:0c:21:dd:b9:
         a4:07:7f:9d:36:c5:54:f9:2d:e2:82:80:8f:d9:e1:37:ef:91:
         7c:28:13:79:1e:56:64:ed:da:a1:02:56:68:4e:eb:4b:da:41:
         ec:d2:9b:31:d8:5b:12:33:9c:32:ac:52:57:70:20:72:ca:0a:
         a5:dc:f9:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:14:39 2026 by rpki-client