Error: rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
File:                     kOiZk2355ouadQW_vmO4r6Cneuk.mft (raw, json)
Hash identifier:          W9FEq2kjZJH4HtkgdOu43eoWiHYZiJjEpeHXqjLDxAM=
Subject key identifier:   77:B2:A3:37:B9:90:E7:41:0D:26:D2:20:78:47:84:32:F0:90:E0:5E
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Certificate issuer:       /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial:       0916
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
Manifest number:          08FF
Signing time:             Mon 28 Sep 2026 01:53:52 +0000
Manifest this update:     Mon 28 Sep 2026 01:53:51 +0000
Manifest next update:     Wed 30 Sep 2026 01:53:51 +0000
Files and hashes:         1: kOiZk2355ouadQW_vmO4r6Cneuk.crl (hash: yqgN4JZ2t8El+IJb1sAUj06rw0h46Y7oLaHb5ZhZ4DQ=)
                          2: D318CC8C60AD11F1834B33D2CE1D38B0.roa (hash: vytVxGQ5+3+xcP2yd2fLQ/SusudZIXkMM5vt1VWGOmM=)
                          3: 897EC16E60AB11F1A8C053C5CE1D38B0.roa (hash: cOUky0Q6559nAr4pPlLRgn5KmQ7ELu+a9eo4lRfn4Mg=)
                          4: 6748080C60AC11F1928CA7C9CE1D38B0.roa (hash: aiq8sw3U5IVlccJ2GnivuZdBAxpg4+7vp5rz3mmOjQc=)
                          5: 1394835A60AE11F1B76EE6D5CE1D38B0.roa (hash: qfAk6epq64XJP4NhzfTGD3cJAx9bl2U959tuTFQxuXE=)
                          6: FABD169A60AC11F1BE76D3CDCE1D38B0.roa (hash: k55PhIufq/MeyxvA1lamTZ3k66D8nz3zhmTmmjbZpLk=)
                          7: 5EA59BFA60AD11F1AF689ED1CE1D38B0.roa (hash: cdEai7Ee3CZvUvc9U/SJDi4Blq+Yz12d2wfaw2JZgC0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326 (0x916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
        Validity
            Not Before: Sep 28 01:53:51 2026 GMT
            Not After : Sep 30 01:53:51 2026 GMT
        Subject: CN=6ab9c8b0-be18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:88:d0:70:f6:a1:28:9e:c4:f7:56:18:25:21:
                    dc:5c:d4:65:b1:90:99:cc:3c:0a:de:1c:f9:44:76:
                    58:aa:c2:4d:f7:36:c4:85:b0:6d:7c:76:a1:c5:f5:
                    63:90:1f:0a:df:c7:d3:6c:ea:09:5b:4c:e0:9b:ce:
                    1b:0c:af:bd:42:e0:a3:b0:3b:38:f8:4b:31:17:33:
                    de:28:89:86:fe:84:cd:d9:1d:8a:49:b2:91:67:2f:
                    bc:5a:a7:c0:00:9e:c2:d8:f3:c7:6c:b0:e3:e0:78:
                    eb:9b:0d:c7:1c:fe:7c:e8:51:53:93:c8:56:86:00:
                    30:37:af:f5:f6:c6:a2:93:6c:2d:a8:f0:73:6b:de:
                    ee:2b:51:9a:03:a7:eb:7f:d0:be:50:c0:58:d6:81:
                    00:91:c2:24:95:fd:a3:74:8b:f9:fa:51:cb:ad:36:
                    f0:bd:56:fa:4f:b9:94:b8:9a:b0:c0:dd:56:2e:82:
                    e1:b5:a5:8f:bf:b4:e6:8c:da:a5:e6:8e:65:cd:a7:
                    c1:fb:1f:a7:80:af:c0:5a:e3:f3:7e:db:4c:b7:77:
                    4e:04:ca:16:4d:3d:b7:c7:ee:82:f9:e1:56:bf:87:
                    33:51:99:2c:ef:03:45:17:42:96:52:5a:c6:98:e8:
                    f1:ea:39:49:20:63:1a:5d:ec:0e:42:f9:18:19:de:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B2:A3:37:B9:90:E7:41:0D:26:D2:20:78:47:84:32:F0:90:E0:5E
            X509v3 Authority Key Identifier:
                keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ad:3b:ee:0d:20:4f:00:e4:70:54:da:38:38:8b:7f:05:e3:
         86:6d:54:4b:08:24:fe:7a:fb:d9:94:56:15:92:ce:59:83:81:
         29:3b:cd:70:80:08:99:94:7b:08:8a:82:03:35:34:b8:07:23:
         28:1c:66:08:cb:ab:bb:22:61:1e:06:83:5a:85:51:36:00:2e:
         54:49:e6:bf:7d:1f:72:11:82:80:3a:ef:b9:a3:c2:e1:ca:72:
         a2:b2:d7:ac:a0:12:f5:f1:55:c4:f6:d8:a2:1d:1f:db:f2:dd:
         5c:98:09:94:e3:f9:48:4a:10:ae:5f:ff:5b:82:2a:d4:22:ce:
         84:1a:5f:4c:a2:3c:1c:2b:55:00:c7:86:e1:d9:2f:0b:27:39:
         a8:35:31:ef:dc:af:57:2a:6a:67:95:ad:1d:4e:1f:63:ee:f5:
         9a:93:c2:b6:3f:86:91:58:b2:6a:0b:cd:60:ca:0b:48:06:73:
         6e:e2:ec:ac:a6:92:d9:75:d6:1d:79:ea:56:0f:a0:aa:7c:b8:
         17:bc:fa:54:4d:f0:c2:83:ca:eb:2f:60:c9:fc:53:9d:3d:a8:
         ba:8a:71:82:bd:6c:7c:44:70:0d:44:63:ee:34:cf:52:74:f5:
         bd:86:4e:a3:8d:0d:c4:b3:0f:e9:05:c0:e3:d5:a3:ed:72:96:
         6f:44:d5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:08:44 2026 by rpki-client