Error: rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
File:                     ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft (raw, json)
Hash identifier:          v5ReOm/Q/uUC/JtkxRirptkbqf1yS580tO0M/pD6B8g=
Subject key identifier:   F5:C9:05:1C:2A:F5:7F:32:3F:63:C4:81:7F:06:30:72:AC:6B:F8:57
Authority key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Certificate issuer:       /CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Certificate serial:       0672
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
Manifest number:          066B
Signing time:             Tue 13 Oct 2026 02:46:20 +0000
Manifest this update:     Tue 13 Oct 2026 02:46:20 +0000
Manifest next update:     Thu 15 Oct 2026 02:46:20 +0000
Files and hashes:         1: ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl (hash: n1VMGV3YhgOcKnMM4ZFFd6GhNZcJBXdnVRJhiEcrKEU=)
                          2: C22D8994634611F1A44F9016CF1D38B0.roa (hash: dn0CiA4TD5hJ1aVLDN4K8BucDVCdQvAPyy7W2PdZhn0=)
                          3: 9EB86A96634711F19C778F1CCF1D38B0.roa (hash: IIR04ujeixANpE1nIcYKkmtOPYw3lT5knLPQfvE77Uk=)
                          4: 0F79069C634711F18E23381ACF1D38B0.roa (hash: XpA37kO4U/QHFHB+OsDeSIwJyVOkmHHBBXZIvEnz904=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 02:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1650 (0x672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0133AF, serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
        Validity
            Not Before: Oct 13 02:46:20 2026 GMT
            Not After : Oct 15 02:46:20 2026 GMT
        Subject: CN=6acd9b7c-6e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c8:e0:5d:cc:71:4b:df:e4:e2:4b:82:57:50:
                    1e:b2:df:f3:1a:43:3d:5c:cf:54:94:4b:0e:8e:0b:
                    aa:84:17:97:32:32:18:aa:39:7a:ad:5b:ec:7e:fb:
                    3d:af:e8:7c:72:3e:3b:5c:2f:fb:a0:b1:cd:56:7c:
                    bc:27:dd:0e:25:c7:77:7e:c3:d0:e2:49:8d:b5:aa:
                    ce:7b:2f:da:10:a0:1e:58:1f:62:0a:ce:8a:06:b2:
                    2b:54:c8:44:d0:09:85:db:19:57:88:dd:e2:6e:52:
                    70:72:0e:b2:3c:8d:3b:ee:7e:36:23:83:0a:41:a6:
                    ef:0d:f6:57:ac:01:d8:15:43:9c:37:78:f8:27:14:
                    43:4e:13:92:ca:1b:6a:b6:ae:69:4f:fd:4d:a9:80:
                    ad:70:ad:bf:7e:7d:75:16:ee:21:ec:f0:f2:09:94:
                    6b:16:6c:70:89:e0:7f:a4:84:d9:d2:85:08:b7:47:
                    71:b9:ba:e3:93:ac:de:cc:2d:13:ed:55:4f:1b:3b:
                    97:7d:ba:ee:53:71:8f:07:73:f2:18:a0:09:21:ac:
                    ff:f1:73:45:c5:87:e0:b3:db:82:9f:c9:25:ad:28:
                    d3:6a:0a:23:76:f5:40:1d:e4:97:ff:be:5c:5d:b2:
                    8b:e2:eb:d7:24:85:de:df:94:17:e7:43:91:09:1a:
                    f6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C9:05:1C:2A:F5:7F:32:3F:63:C4:81:7F:06:30:72:AC:6B:F8:57
            X509v3 Authority Key Identifier:
                keyid:66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6a:07:ba:0d:8c:43:08:c3:cf:f0:a1:f3:0f:cc:2d:84:e3:
         73:d2:45:0a:c6:18:32:4e:af:2d:7a:9a:ce:5e:e7:6e:c4:30:
         7e:d9:c5:67:c3:e9:ec:41:af:f9:0f:52:3d:ef:bd:a1:52:51:
         d3:8a:c7:3e:bc:6b:43:7e:84:c0:25:1f:e2:dd:4e:57:b4:79:
         49:6a:5e:78:1c:92:df:06:92:69:22:c5:02:18:44:bc:e5:1e:
         f2:48:89:3a:fb:78:2d:e3:7f:fa:c8:02:57:0a:6e:a9:79:86:
         7f:aa:b4:e4:1d:46:75:1c:f8:c3:78:a4:d7:57:6a:c3:7a:97:
         3e:93:e3:d8:a7:db:89:c8:c9:2e:0d:c7:18:dd:e0:1e:a8:2f:
         df:b8:83:b5:bb:e2:86:aa:32:6a:d4:8c:18:cd:93:14:de:a9:
         0e:e3:09:7f:a0:0c:20:f6:9f:87:7d:42:e7:1e:c0:02:b5:d6:
         e3:b2:71:e8:db:26:15:27:83:50:a4:09:d8:35:f8:1c:5e:e7:
         e1:eb:af:18:aa:a8:53:80:2c:9e:63:c5:18:76:a5:d6:54:f3:
         23:38:3a:c3:80:26:17:74:5e:b0:93:c4:e4:00:c3:b3:dc:70:
         d8:e9:08:4c:60:d0:82:b3:21:66:0e:80:3c:9c:4b:5e:28:78:
         c2:5a:c1:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:37:46 2026 by rpki-client