Error: rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
File:                     19cqZIe9d2qLv61POGE8OxU1CYM.mft (raw, json)
Hash identifier:          rV2bn9hkAvUYoEmPABD0pi1nEZ9XJJx5yco5Pdwq+UQ=
Subject key identifier:   CA:50:84:14:5E:77:E3:E9:BC:8C:5F:F5:10:F3:FD:B5:17:6B:EF:59
Authority key identifier: D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83
Certificate issuer:       /CN=F36F62C3AF/serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
Certificate serial:       1017
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
Manifest number:          1012
Signing time:             Mon 21 Sep 2026 00:55:07 +0000
Manifest this update:     Mon 21 Sep 2026 00:55:06 +0000
Manifest next update:     Wed 23 Sep 2026 00:55:06 +0000
Files and hashes:         1: 19cqZIe9d2qLv61POGE8OxU1CYM.crl (hash: grrmYwruoWrc7jHp7qwXW7MJjuNseqDhUFYYJsQp7UA=)
                          2: 42BB6C92B57511EF951BBFBD762E951A.roa (hash: 1bWInketCzu/Dqakbj5R6DwsUfKJazNvf+AWykl+zAc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:55:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4119 (0x1017)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F62C3AF, serialNumber=D7D72A6487BD776A8BBFAD4F38613C3B15350983
        Validity
            Not Before: Sep 21 00:55:06 2026 GMT
            Not After : Sep 23 00:55:06 2026 GMT
        Subject: CN=6ab0806b-4629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:65:b1:ce:65:59:d2:e7:33:3c:af:f0:7e:20:
                    89:64:7d:5c:e1:b3:08:5c:eb:5c:6e:87:15:6b:2f:
                    96:2e:94:65:6b:e0:6a:dd:54:b3:d8:46:9e:90:de:
                    d3:31:3e:34:e3:f1:ea:96:65:ed:c9:e5:af:ba:2a:
                    db:89:d4:de:bc:cc:21:d8:0a:d6:69:28:5d:73:53:
                    49:fb:a0:8c:07:e4:01:65:40:24:8b:77:0e:2c:3e:
                    01:09:e3:9e:1e:94:9f:61:f2:4f:58:4d:f0:2a:07:
                    69:d4:4c:1a:05:dd:a1:99:20:78:2c:c8:6e:67:80:
                    b2:58:c0:f3:a0:d6:01:de:67:7b:09:6b:df:94:0d:
                    10:fb:5d:ef:c1:70:be:ea:73:44:18:de:a4:33:bc:
                    6d:bb:d5:8d:8d:63:92:97:79:02:bb:d6:01:9b:42:
                    34:a6:40:d3:59:c0:a0:ac:83:0c:f6:62:9d:82:94:
                    bb:02:68:af:2b:eb:57:fa:c6:e0:00:99:c8:11:c2:
                    82:e7:79:92:d8:f7:ac:d2:dd:64:3f:97:ae:b4:b5:
                    6b:13:ef:f4:71:02:8e:bf:79:97:c8:a7:e3:6a:fa:
                    4e:4a:fc:38:55:95:1d:ee:ec:b8:fd:08:e9:b9:1a:
                    1a:fd:f2:24:00:0b:cd:06:38:29:4f:57:65:7f:0c:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:50:84:14:5E:77:E3:E9:BC:8C:5F:F5:10:F3:FD:B5:17:6B:EF:59
            X509v3 Authority Key Identifier:
                keyid:D7:D7:2A:64:87:BD:77:6A:8B:BF:AD:4F:38:61:3C:3B:15:35:09:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/19cqZIe9d2qLv61POGE8OxU1CYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F62C3/49DEC774556911E5A9048281F8AEA228/19cqZIe9d2qLv61POGE8OxU1CYM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:12:78:58:74:bc:6c:39:46:1f:86:ac:0e:be:99:2d:08:
         80:c7:b3:c8:ef:e2:ba:8a:fd:7c:cb:e1:42:47:4d:27:97:3a:
         83:d8:cd:2d:18:87:f3:96:6e:65:8c:52:9e:ef:85:8f:c4:2b:
         a1:24:87:c0:6e:44:9b:e1:19:a5:21:45:9e:8f:de:87:af:49:
         23:0f:8f:63:64:4f:22:68:ff:7f:dd:3c:f9:f7:88:b3:52:a7:
         08:c3:ef:d4:da:5c:0e:00:a2:93:99:b3:13:ce:1b:9a:66:85:
         e6:77:d5:dd:fc:ce:ed:68:c5:09:b8:ba:36:20:a8:cb:f0:13:
         af:f5:81:ea:1d:36:ad:45:4a:7c:41:31:b4:45:42:2d:f3:0c:
         fe:f2:b5:0b:30:4d:ba:ea:fb:82:4d:78:1f:0e:7f:86:e5:c9:
         c7:85:57:e9:51:a0:ab:99:9d:b0:7e:8f:1b:98:96:ba:a0:ff:
         1b:67:06:c5:f4:24:2f:07:3b:46:c1:2c:82:d1:7e:64:15:71:
         59:ac:09:35:00:d6:54:78:3d:76:cf:a3:0b:9a:73:fb:91:28:
         e4:18:8a:59:a5:dc:ba:e2:c5:d7:6b:dd:0e:21:ac:02:e4:83:
         5d:d5:0e:fd:af:37:58:ba:75:7b:80:7e:a7:ce:8c:eb:0a:16:
         be:c9:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:18:41 2026 by rpki-client