Error: rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
File:                     8ZI823Vz-wlzku4GArwdsbV78OM.mft (raw, json)
Hash identifier:          PYaR9hyhp4B42PItplgI7BQlySQSOrFwO2i2dKLop04=
Subject key identifier:   6B:B4:6F:A8:24:6B:81:6A:4A:CA:61:19:A6:85:67:56:0F:26:1B:24
Authority key identifier: F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
Certificate issuer:       /CN=F36F731FRI/serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Certificate serial:       04A1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
Manifest number:          04A0
Signing time:             Sun 11 Oct 2026 03:39:37 +0000
Manifest this update:     Sun 11 Oct 2026 03:39:36 +0000
Manifest next update:     Tue 13 Oct 2026 03:39:36 +0000
Files and hashes:         1: 8ZI823Vz-wlzku4GArwdsbV78OM.crl (hash: ryR0uu7CBP46EggUxZQcuB76OKgNzvzEKoG9kCcfgr0=)
                          2: FC67525472E011F0A5185D9CDAE4EC9C.roa (hash: fxMVUdc7VNQmTcNtjievYVXO75cad81vUMPfW3dLOxg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                          rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FRI, serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
        Validity
            Not Before: Oct 11 03:39:36 2026 GMT
            Not After : Oct 13 03:39:36 2026 GMT
        Subject: CN=6acb04f9-45f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:07:3a:65:77:17:03:8b:20:12:40:62:09:
                    a8:71:9a:b1:17:cf:80:7c:ab:e8:f4:17:31:93:92:
                    a6:0b:f0:29:ad:3a:17:cc:f4:86:de:90:35:31:f9:
                    7a:37:de:9a:6c:a3:68:e4:e5:39:32:1a:02:76:57:
                    55:b3:04:1e:ac:66:0a:52:af:97:de:41:d1:df:72:
                    e2:ce:15:07:33:ac:a2:59:76:05:0f:26:7a:56:d6:
                    24:fe:66:ca:90:5f:a2:33:55:ba:15:d9:14:f7:a1:
                    b3:56:3a:4b:41:f8:a1:d3:92:c8:99:da:fc:ed:8f:
                    f4:cf:71:fb:63:cb:ec:06:72:cd:c4:4d:d1:dc:ee:
                    36:4f:0c:6b:d7:57:c7:7e:cb:9e:c3:bc:29:5d:cb:
                    96:75:04:19:56:d4:ad:54:8f:92:12:b6:4e:40:04:
                    69:89:f5:63:d3:3a:ea:f8:c6:0f:43:bd:44:fa:b8:
                    f4:75:32:31:eb:ad:10:3e:97:d1:a9:07:7e:28:95:
                    cc:f3:92:3d:37:22:eb:c3:69:c2:3e:3b:7e:a1:3d:
                    64:e9:86:05:25:46:17:53:44:61:25:b7:5a:17:b2:
                    56:42:4e:58:2a:c6:5b:a2:a7:a9:10:a1:a9:90:6d:
                    1e:5a:bb:98:06:9b:c6:4a:44:56:49:41:62:a5:15:
                    6b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B4:6F:A8:24:6B:81:6A:4A:CA:61:19:A6:85:67:56:0F:26:1B:24
            X509v3 Authority Key Identifier:
                keyid:F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:d6:1f:7a:14:92:fa:ce:63:a1:01:7b:04:d7:90:f8:97:a7:
         04:e4:c9:e4:77:01:44:3d:37:38:de:b3:e2:99:07:fb:b1:c0:
         4a:0e:b3:ba:b0:4b:4c:64:71:00:5f:84:53:78:b6:e5:1f:7e:
         76:cb:44:71:fe:f1:44:e6:7a:cf:82:6e:7d:c1:df:d8:55:2a:
         b6:9b:92:63:d7:4d:47:ed:f6:22:bf:3e:91:8c:d7:35:17:82:
         85:4a:ed:19:9a:b1:1a:25:c3:2e:ec:d5:ef:0d:42:bd:fc:2c:
         71:a9:f9:32:b3:12:69:4a:aa:77:d7:07:d9:c5:75:e8:00:25:
         c9:8f:6e:7a:89:e2:11:c0:78:4b:c4:af:85:0b:45:e7:ea:77:
         fa:7d:7c:1b:70:0d:21:62:d1:81:e2:bc:94:86:44:8f:a4:b0:
         b5:96:39:a1:6d:c6:39:17:91:75:a7:de:d6:2d:8f:5f:26:4f:
         d3:39:f3:92:0b:35:f4:e5:f7:af:7f:8e:ae:ed:b6:a8:92:0d:
         79:00:54:35:e8:9a:18:01:15:5e:c4:02:50:7c:b8:76:6b:8b:
         5a:84:b1:d6:f8:59:ee:6f:07:95:54:58:cc:d0:50:21:28:db:
         fb:dc:a1:2d:f4:a6:e3:21:c6:1f:c0:21:36:bd:e4:3f:45:b7:
         80:ec:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:27:40 2026 by rpki-client