Error: rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
File:                     xYb26TczxMU16L1GqjLQQkgHmvs.mft (raw, json)
Hash identifier:          aAN8TC7DMUHCkxqZW5xcYON2JPp6y04/Yfuaascz8/g=
Subject key identifier:   34:BF:E6:C6:DA:8E:A5:A4:B2:50:40:BC:2D:78:E3:F9:2F:5E:2A:C6
Authority key identifier: C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB
Certificate issuer:       /CN=F36FE07FAF/serialNumber=C586F6E93733C4C535E8BD46AA32D04248079AFB
Certificate serial:       01A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
Manifest number:          01A2
Signing time:             Sun 27 Sep 2026 05:05:26 +0000
Manifest this update:     Sun 27 Sep 2026 05:05:25 +0000
Manifest next update:     Tue 29 Sep 2026 05:05:25 +0000
Files and hashes:         1: xYb26TczxMU16L1GqjLQQkgHmvs.crl (hash: sV4+KEghFiihbfHHhWlIRuLQLMvQWbKubZeYXKKfdwI=)
                          2: 9E3CAFAC776E11F0A592D2CDDAE4EC9C.roa (hash: Jc6KQs8Me0jhZ9OqwSsYuwFuhZ8DtWTSRWigp2Gfn4Q=)
                          3: B8172A60776E11F0A4ED07CEDAE4EC9C.roa (hash: 466vNS7TytKtCpeQ9MYAdiBIOqEB2l2FatTpRe5swnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE07FAF, serialNumber=C586F6E93733C4C535E8BD46AA32D04248079AFB
        Validity
            Not Before: Sep 27 05:05:25 2026 GMT
            Not After : Sep 29 05:05:25 2026 GMT
        Subject: CN=6ab8a416-b5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:96:28:1f:ab:a0:f1:f9:fe:5f:3b:15:a4:
                    b4:af:1b:39:f2:42:73:2b:e9:36:cc:fb:8b:ad:ba:
                    eb:c0:c3:b9:7e:02:cc:29:16:14:d6:f0:74:81:89:
                    03:3c:14:3c:7a:1a:86:f6:de:f6:a9:9c:51:88:89:
                    4e:d0:7f:bb:28:42:e0:9f:e8:35:0c:bb:45:db:af:
                    e6:c7:dd:8e:8c:97:4f:92:57:7a:7f:bf:cd:40:ec:
                    6d:31:69:97:53:04:66:44:e9:0d:ac:11:ab:27:17:
                    b4:14:44:f8:53:65:61:5d:2e:be:d4:87:70:de:7b:
                    61:7f:46:d9:45:eb:f1:74:06:19:c4:3d:bf:2b:3c:
                    01:33:62:e8:3f:cd:8f:7b:46:e2:c7:19:ab:7b:52:
                    7e:20:3d:c6:6b:b6:97:5b:32:a3:32:de:07:89:24:
                    1d:8b:ff:66:fc:e0:57:22:ca:7f:5a:1c:b1:40:72:
                    1c:62:6e:d1:64:99:83:ec:f9:21:e4:bb:72:0f:36:
                    e6:84:b9:85:c2:19:b0:4e:1f:92:ce:0b:b4:45:b4:
                    5f:ba:dd:af:d9:42:7d:c7:94:9c:c0:29:b3:a2:bf:
                    85:64:ef:29:e0:15:cb:59:9a:dd:41:be:4d:e6:54:
                    00:d6:e9:95:5b:22:80:69:aa:ac:67:90:db:71:c6:
                    cf:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BF:E6:C6:DA:8E:A5:A4:B2:50:40:BC:2D:78:E3:F9:2F:5E:2A:C6
            X509v3 Authority Key Identifier:
                keyid:C5:86:F6:E9:37:33:C4:C5:35:E8:BD:46:AA:32:D0:42:48:07:9A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xYb26TczxMU16L1GqjLQQkgHmvs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE07F/6E91BA54776E11F095F69DCDDAE4EC9C/xYb26TczxMU16L1GqjLQQkgHmvs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:cc:97:f0:90:3c:e3:83:40:07:ed:fb:2a:07:73:52:f6:16:
         fe:4a:a3:8a:07:4e:ce:6c:c4:fc:27:fd:fc:67:23:df:00:26:
         f4:6a:8d:e4:32:8d:7d:5b:64:f1:3a:f7:9a:76:f7:82:3e:9c:
         31:62:94:12:7f:ba:8d:9c:ee:10:91:69:84:95:fb:01:7c:e4:
         12:c8:16:fe:74:66:da:4f:0c:60:02:16:0a:29:97:15:83:90:
         f4:fa:4a:57:8c:ee:02:dd:84:dd:6e:7d:61:b8:69:3e:4a:75:
         cf:7b:ad:71:d6:e6:44:3b:3f:13:f6:49:7a:6b:2f:f3:b7:cd:
         b4:93:2d:db:b3:3d:03:46:56:e7:c0:22:fc:bd:5c:ee:9e:fd:
         29:e4:44:70:b2:29:de:82:8e:d5:60:2e:d3:88:7d:57:f6:96:
         50:a8:9d:5a:da:92:96:b5:8a:64:27:9f:39:d4:af:c3:5b:21:
         d0:2f:32:99:da:0e:72:6c:68:42:6f:d3:72:b9:20:05:d4:06:
         b9:0d:61:2c:61:d9:80:49:14:fe:61:ec:22:09:11:ee:40:4e:
         90:22:4a:4b:0c:da:83:12:a8:2c:96:fd:85:f7:78:20:ab:fd:
         7a:d4:0f:26:f7:2e:88:5a:95:6d:2e:74:a8:f5:78:b7:ab:c5:
         2a:79:9d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:38:35 2026 by rpki-client