Error: rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
File:                     GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft (raw, json)
Hash identifier:          8z8dQ0AH9imoj5yFkCDGFXWfQ6MgWLFEps+a2kdj8tM=
Subject key identifier:   2E:90:F2:3F:3E:3B:B7:E9:56:CF:0F:68:85:5B:32:20:CD:39:5F:EF
Authority key identifier: 19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
Certificate issuer:       /CN=F361935CAF/serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Certificate serial:       0666
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
Manifest number:          0661
Signing time:             Mon 19 Oct 2026 02:47:12 +0000
Manifest this update:     Mon 19 Oct 2026 02:47:12 +0000
Manifest next update:     Wed 21 Oct 2026 02:47:12 +0000
Files and hashes:         1: GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl (hash: +JiLhc+RqrwXMINF6Js6mCFMv/qcPXycfTgzCNaCw0M=)
                          2: F31DBFBA898411F1B4E85704CF1D38B0.roa (hash: 8PMDISLlU/TEBQnSnCiE3EbThwDUph7JmIcnQ4JcjVQ=)
                          3: 6B5534A2AFC311EE8606D196775412E6.roa (hash: pIBKsEr+yaxrxYpVZ5L4+xtRFFmaKt0HvuP5/hnszHs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 21 Oct 2026 02:47:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361935CAF, serialNumber=190945C50473976873EF254B4FA833BC31D9484B
        Validity
            Not Before: Oct 19 02:47:12 2026 GMT
            Not After : Oct 21 02:47:12 2026 GMT
        Subject: CN=6ad584b0-7780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d3:69:c8:95:40:68:04:68:4d:45:5c:2a:9f:
                    03:86:56:30:4d:2d:a4:03:4c:cb:c3:73:27:22:6f:
                    fd:7b:5b:5a:a1:9a:18:a7:83:a5:f0:c4:53:df:af:
                    9c:1a:5a:54:49:0c:d7:93:a3:0b:8d:45:b2:3e:1e:
                    c3:fb:65:79:de:cc:e0:41:f3:75:27:9d:a9:07:58:
                    01:5e:d3:73:ef:5e:89:7c:1e:51:4f:f2:9d:c6:e0:
                    ef:66:d1:8e:9e:ee:47:47:bf:b7:82:ea:39:57:0e:
                    13:f1:ca:9d:85:52:83:80:28:c7:70:2a:aa:cd:7e:
                    58:e6:37:96:21:84:48:5c:45:9e:fb:ec:44:1a:f5:
                    12:b1:71:b2:4c:64:e6:96:59:62:d0:78:18:0d:dc:
                    2d:ef:0d:49:6d:61:37:0f:3d:86:5a:5e:6a:3d:75:
                    8b:8a:e9:b7:e8:e8:6e:7e:63:1d:90:98:db:02:e1:
                    1f:81:23:d8:b2:8f:47:b7:02:f4:67:9c:73:e7:f1:
                    5c:05:bc:62:76:51:92:da:b9:d7:72:f4:ff:99:06:
                    07:6a:b4:75:d1:bf:1a:6e:f3:10:df:14:4c:89:ed:
                    c6:67:e5:2c:86:c7:ae:56:25:29:1f:11:f5:34:81:
                    d2:f6:63:51:49:1e:d7:29:56:6f:1c:c5:e3:96:36:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:90:F2:3F:3E:3B:B7:E9:56:CF:0F:68:85:5B:32:20:CD:39:5F:EF
            X509v3 Authority Key Identifier:
                keyid:19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:35:c1:97:f3:85:0b:10:3d:0d:b0:ff:a1:42:6d:7a:13:8b:
         8b:60:1b:99:26:62:2f:22:61:2d:1a:ec:65:0e:8c:d4:d7:07:
         f6:4a:b1:db:4c:1d:ab:fe:f6:93:0b:1c:31:da:fb:ba:f4:dd:
         af:d8:3f:82:3b:0f:bc:b8:e3:3e:66:2b:af:3d:45:93:e8:33:
         b5:0a:b3:d9:30:fe:7d:5d:c9:46:60:28:74:14:16:af:84:59:
         fe:96:39:8d:76:c0:a9:d9:f8:69:12:e4:89:f0:91:f4:aa:c0:
         b7:fa:b6:a0:6c:01:d9:10:c5:39:05:e7:64:ec:e2:d6:96:38:
         bb:11:68:81:36:94:1b:55:a7:9a:33:31:ef:66:e3:d1:ac:78:
         20:c6:fe:57:88:75:55:53:a9:2d:42:bd:81:10:91:97:35:47:
         91:b8:97:49:a8:6b:2d:02:a4:9f:d5:92:ac:40:16:41:3f:09:
         14:ff:14:fe:16:97:af:2b:e6:78:ee:69:60:54:cd:2f:a5:46:
         74:d5:69:a5:d7:17:c9:1e:b6:e7:11:4a:de:55:3f:18:b6:bf:
         25:a1:96:12:0c:9f:c7:18:1f:8b:e6:14:43:85:b6:a7:1f:fd:
         30:07:55:8f:00:13:38:e2:10:ef:de:b1:77:51:b4:74:00:79:
         de:6f:0b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:36:00 2026 by rpki-client