Error: rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
File:                     MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft (raw, json)
Hash identifier:          s5zhva0RhxMq4Z0T4xjw/Lnnagz5MmJS1vpqbKhybII=
Subject key identifier:   FE:6A:5F:3C:42:DE:7B:71:BB:6C:1A:13:AB:D8:FD:E5:B7:7B:0F:5C
Authority key identifier: 31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49
Certificate issuer:       /CN=F362412ERI/serialNumber=313CBFEF72A426B047884E074BB1BB0B02FC5649
Certificate serial:       0251
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
Manifest number:          024F
Signing time:             Thu 08 Oct 2026 04:47:02 +0000
Manifest this update:     Thu 08 Oct 2026 04:47:01 +0000
Manifest next update:     Sat 10 Oct 2026 04:47:01 +0000
Files and hashes:         1: MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl (hash: XBNDqwBCnoV7u15a+nx8nXaRF26Hlyuc81McBjzUxt4=)
                          2: 26CEAFEEF9C211EF8BFA8A60762E951A.roa (hash: N5WFGVxirsRLfwzk7wqVUbAA2T7zj2v/qiYQhs/x+7c=)
                          3: 50A88FD8F9C211EF95A2B360762E951A.roa (hash: cr88gzng9AlrJw+Jt+AIyLDrpQJLkgx8iB8swVH4qZ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
                          rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362412ERI, serialNumber=313CBFEF72A426B047884E074BB1BB0B02FC5649
        Validity
            Not Before: Oct  8 04:47:01 2026 GMT
            Not After : Oct 10 04:47:01 2026 GMT
        Subject: CN=6ac72046-5d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:5c:b1:5b:17:17:c2:58:b8:fe:d7:7b:50:
                    64:5c:98:1d:32:b8:c3:61:65:b8:e0:c9:0f:54:bb:
                    52:ed:81:a6:fe:38:61:c3:63:91:2a:cd:a9:e3:16:
                    af:a4:cd:6d:60:05:60:a1:33:b1:8c:a4:fe:25:47:
                    2a:bd:21:98:f9:18:9c:18:ab:8f:14:da:89:02:bf:
                    7d:d7:27:d2:cc:d1:60:69:d4:7c:90:0f:2e:08:64:
                    14:e4:a3:43:8a:55:52:23:35:a4:17:f3:06:c0:02:
                    42:f5:89:95:1e:f8:fd:34:63:60:21:2a:34:ce:ab:
                    2c:0a:b5:0c:03:a5:7a:8b:10:32:de:5c:4f:79:8a:
                    44:20:80:e8:be:05:ea:9c:00:c9:e6:73:25:eb:d4:
                    c4:11:e5:5a:c0:90:5e:84:8e:78:b2:99:b3:ba:1e:
                    41:19:31:5c:73:b1:92:06:35:6f:25:a2:dc:57:62:
                    21:cd:60:80:ef:aa:2e:1a:db:08:3a:06:25:c5:40:
                    19:e0:25:d5:49:e2:81:79:d8:d6:be:65:47:41:ff:
                    64:60:d1:ca:52:d1:46:27:0e:52:23:ca:33:7f:59:
                    d7:a4:52:9d:77:6f:24:0c:87:55:55:89:54:23:00:
                    05:40:19:87:89:36:14:4e:b8:7a:1b:7c:06:88:0d:
                    08:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6A:5F:3C:42:DE:7B:71:BB:6C:1A:13:AB:D8:FD:E5:B7:7B:0F:5C
            X509v3 Authority Key Identifier:
                keyid:31:3C:BF:EF:72:A4:26:B0:47:88:4E:07:4B:B1:BB:0B:02:FC:56:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362412E/B43C1D72F9C111EFA1C5235C762E951A/MTy_73KkJrBHiE4HS7G7CwL8Vkk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:26:d6:b5:64:37:87:77:df:f5:e6:83:44:4d:2b:fd:b9:c7:
         7c:2a:45:b0:3f:53:34:0c:3f:c1:06:2a:16:5e:2e:55:a9:39:
         a9:37:38:53:dd:b6:5c:b0:14:a0:0d:ad:fa:7e:b1:00:cd:9d:
         85:df:f9:f5:57:4b:36:c5:84:b9:99:a5:9d:a1:45:65:3a:76:
         8a:02:42:89:76:ec:64:b7:06:1a:78:82:82:99:b9:50:80:6e:
         1d:e2:a0:9b:cd:78:46:82:70:e2:ff:4c:b8:70:5d:60:2d:99:
         1a:32:15:43:44:82:63:f8:53:aa:3e:cf:5b:b7:dc:06:97:f1:
         d2:90:8e:9f:5d:c2:d6:cc:9c:63:d2:1f:9f:b9:21:02:97:83:
         43:25:d3:8d:0d:c0:4b:0d:15:a4:9f:42:7e:f5:34:c2:a3:40:
         9d:91:45:93:42:f2:2a:30:40:4d:ba:de:9f:f4:41:ae:8a:f6:
         36:aa:59:9d:a9:7c:02:7a:33:e3:e1:2c:3f:df:d6:09:0a:e9:
         81:ef:e8:5c:f4:8a:5a:a3:71:cd:aa:3d:78:9c:68:8c:da:1b:
         68:06:4d:f7:70:20:83:01:db:28:eb:76:f7:4e:b5:e2:83:d6:
         0c:f7:e4:e1:eb:f0:c2:1d:b3:2c:8f:69:af:2d:fa:34:ce:31:
         fd:b0:a4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:32:39 2026 by rpki-client