Error: rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
File:                     tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft (raw, json)
Hash identifier:          6HsFSTYenU0cpzmxLzaifTvTi+UkkUAIb/Ke9a1ePOI=
Subject key identifier:   C3:07:3B:56:E4:09:BF:15:10:FE:0E:09:6B:96:DB:8C:FD:C0:FC:5F
Authority key identifier: B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D
Certificate issuer:       /CN=F36E75A9AF/serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
Certificate serial:       03DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
Manifest number:          03DA
Signing time:             Sat 26 Sep 2026 03:59:28 +0000
Manifest this update:     Sat 26 Sep 2026 03:59:27 +0000
Manifest next update:     Mon 28 Sep 2026 03:59:27 +0000
Files and hashes:         1: tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl (hash: sIjbRitbrCeNSbougvgavapM/J2zPa2r1XNVe1E6ew4=)
                          2: A95C3E7CC46711EE9DAAFFA7775412E6.roa (hash: 5YGMUo45vZOEsVw7rxMl98qm2QPWhnBn5cPNqxBly50=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 987 (0x3db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E75A9AF, serialNumber=B5C74246EE5E3C8FA999841DDC443653F854BA7D
        Validity
            Not Before: Sep 26 03:59:27 2026 GMT
            Not After : Sep 28 03:59:27 2026 GMT
        Subject: CN=6ab7431f-526b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:18:88:bc:d6:26:ce:74:36:fa:1c:54:53:
                    4e:83:6f:eb:0b:d0:df:37:37:bc:bd:ff:1f:cc:8d:
                    fd:1a:27:30:1f:bf:11:f4:2d:bd:29:cc:68:28:63:
                    45:02:1a:09:e7:1b:fe:34:b2:d9:37:c0:ed:93:25:
                    d2:77:c5:ed:c0:d5:20:f5:f3:3f:ac:a3:cd:ea:18:
                    a2:e9:b5:fa:27:a6:63:05:54:f0:9d:ab:f3:fa:12:
                    88:75:fa:54:54:03:61:a7:f3:b2:4c:6e:68:5f:4a:
                    82:05:e9:3e:2a:1c:52:7e:76:37:37:d1:12:bc:13:
                    88:47:f7:d8:c8:44:ef:8c:0c:57:de:25:ec:e1:93:
                    8b:42:a6:39:f2:76:a4:d9:88:75:ce:e7:3f:41:7e:
                    ad:de:cf:6d:8c:08:44:d0:56:3e:e7:ab:8e:d9:72:
                    7b:6f:3c:0a:b5:c1:6c:6e:c4:1e:38:65:40:5c:db:
                    2d:59:29:84:c2:52:20:82:14:c2:ac:7c:6e:d2:f0:
                    12:60:0a:5e:f3:cd:92:82:6a:f8:17:05:7e:86:a0:
                    40:5e:e0:a4:91:0d:d7:03:30:50:bd:f6:4d:42:24:
                    be:71:7a:1a:a7:cb:e0:ce:35:a1:1a:cc:d0:5d:10:
                    66:d1:8e:9a:20:ef:3e:61:f4:71:9a:dd:2f:18:cb:
                    97:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:07:3B:56:E4:09:BF:15:10:FE:0E:09:6B:96:DB:8C:FD:C0:FC:5F
            X509v3 Authority Key Identifier:
                keyid:B5:C7:42:46:EE:5E:3C:8F:A9:99:84:1D:DC:44:36:53:F8:54:BA:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tcdCRu5ePI-pmYQd3EQ2U_hUun0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E75A9/55520340C40611EE8F4A288D775412E6/tcdCRu5ePI-pmYQd3EQ2U_hUun0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:33:b6:4b:2d:4d:96:f0:00:92:41:10:73:36:cb:45:f0:b2:
         ef:2c:e3:82:0e:ea:04:9b:3b:3f:bb:37:5c:a3:52:d1:44:72:
         08:78:72:88:0d:f1:0d:4b:ab:96:f2:56:06:e8:46:9e:7a:ae:
         eb:88:8d:e7:67:e3:ee:ab:cc:86:b1:71:c2:97:68:1a:8d:1f:
         55:6f:21:17:58:72:ee:ea:8b:15:d3:42:7f:a7:ca:05:21:92:
         fe:6c:38:06:56:84:03:ad:2e:a3:79:87:0e:df:cf:87:a7:a8:
         68:65:ee:55:74:59:63:7f:fc:8f:f9:71:32:df:24:74:e0:57:
         1e:d9:c7:65:5b:a2:82:1f:b0:01:32:40:b6:26:24:57:c6:a1:
         96:a4:26:0e:fe:13:7f:c4:7d:72:b2:a7:a7:64:c1:3e:55:0d:
         8f:b3:db:3a:56:a8:2a:d0:0f:db:07:c1:62:1a:18:5b:22:b2:
         6a:dd:86:f1:88:af:87:b3:4b:f2:25:5c:75:01:be:71:f6:3a:
         69:f4:c4:74:ec:17:91:32:da:3a:c5:3c:c8:b8:25:7f:71:77:
         4d:a1:f5:3d:64:79:96:d7:ad:93:5c:9b:fc:33:e3:ac:ff:14:
         db:41:9d:78:c1:75:ff:5b:bd:75:62:33:eb:e4:70:6d:86:fb:
         c6:38:0a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:29:05 2026 by rpki-client