Error: rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          H7n1T0rIEuDajafymSVP2DEF8v5Mms4IZ8N3HpIJv08=
Subject key identifier:   D9:03:55:8A:C7:AF:46:5B:59:1B:43:70:19:59:B6:6E:FD:49:B9:15
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       02B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          02B5
Signing time:             Tue 13 Oct 2026 04:41:41 +0000
Manifest this update:     Tue 13 Oct 2026 04:41:40 +0000
Manifest next update:     Thu 15 Oct 2026 04:41:40 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: aF2V2irLZNqXhdLgeStMpESplS5Ay7ioDrf0eWmUmjs=)
                          2: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Validity
            Not Before: Oct 13 04:41:40 2026 GMT
            Not After : Oct 15 04:41:40 2026 GMT
        Subject: CN=6acdb685-4424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:42:90:0d:e8:82:84:a2:11:0c:5f:eb:bb:8e:
                    a5:e8:78:36:76:a9:d5:b8:6b:dc:55:c4:31:05:59:
                    f7:51:c7:85:12:93:4d:8e:e8:0b:a9:5f:9a:8f:e1:
                    9a:ef:b8:12:28:bb:a6:ef:cb:1e:3b:02:f7:e9:49:
                    9b:93:6d:f6:7a:e0:33:53:17:6b:f3:c9:e6:3c:1d:
                    a3:f5:e0:93:d9:63:c3:13:c3:90:d1:7b:d6:23:40:
                    e4:1f:70:bf:65:1f:57:c7:57:f0:70:99:a2:42:e9:
                    13:6e:e2:6a:06:b9:94:fd:89:77:17:27:37:0b:0c:
                    35:e5:77:79:07:60:c0:cb:ae:45:ba:93:25:b1:8d:
                    8c:69:61:a7:94:3c:73:26:e9:a7:3d:a1:df:de:8d:
                    dc:6c:75:4f:96:1f:ce:13:06:97:f2:1e:40:52:de:
                    44:ee:07:05:5a:69:00:0f:63:d5:ed:d6:5d:63:fa:
                    b7:dd:4b:ab:ba:62:d3:06:59:51:ad:84:a6:0b:38:
                    1b:cb:51:03:c9:a8:65:a3:7d:74:00:20:35:9c:67:
                    a7:85:9f:93:d4:29:6e:e7:8d:15:87:3f:3d:06:b6:
                    43:1d:b7:22:bc:d2:98:6d:44:2e:27:fe:3c:d2:ce:
                    59:38:23:cf:ad:9c:7d:d1:f0:b7:50:50:04:b2:39:
                    48:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:03:55:8A:C7:AF:46:5B:59:1B:43:70:19:59:B6:6E:FD:49:B9:15
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:84:ff:41:8d:2d:61:4a:70:f4:c7:e8:7d:71:9d:fd:03:cd:
         d3:94:bc:d4:3e:56:79:60:ad:7e:41:c6:19:3b:cb:5e:34:32:
         53:01:b1:b4:17:fe:e0:51:66:22:b5:56:1a:db:05:6a:65:76:
         bc:c0:94:1e:63:e5:f6:17:80:68:b0:81:5c:df:66:15:81:f7:
         c6:7d:a9:72:cd:8f:83:ff:e5:9a:58:ea:ae:86:10:45:5a:d1:
         ee:aa:92:25:13:73:25:2e:d2:2f:e9:50:c3:a9:20:f3:16:59:
         f0:56:52:09:19:ea:ce:95:db:84:0f:5f:c7:f5:49:e5:00:1c:
         5d:ea:3c:1e:63:7e:2b:23:95:eb:ac:d2:bd:f8:8c:78:a2:93:
         07:ed:dd:c7:46:d3:5e:ab:e8:54:3c:f8:d0:b1:0c:c8:92:b7:
         a2:80:df:08:03:04:16:05:f0:ee:76:af:a6:62:20:a9:f4:77:
         3c:a4:b5:c2:54:58:b7:5e:86:0c:43:13:11:91:ac:b7:96:fe:
         0d:07:07:95:ed:a3:c4:0e:5f:fa:3c:cc:6c:83:e0:35:3f:8d:
         03:6d:ca:53:d2:6a:8a:3a:6a:34:76:ef:cc:5a:2c:6e:6f:cb:
         67:ac:78:15:51:58:2a:3d:fe:95:ca:fe:55:ee:de:4e:93:d2:
         a9:dc:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:57:39 2026 by rpki-client