Error: rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          I/B6fY2dGVG0s+1fcacNRzjlv2WT1f0kF6D1oth0NL0=
Subject key identifier:   08:78:D2:54:73:A2:E6:A4:2D:C5:94:47:40:38:BF:B7:4D:51:4C:AC
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       0B36
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          0B31
Signing time:             Thu 15 Oct 2026 01:17:20 +0000
Manifest this update:     Thu 15 Oct 2026 01:17:19 +0000
Manifest next update:     Sat 17 Oct 2026 01:17:19 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: +p8sHFmhnvSkn8BgUvjSYqWI7J8V5Nldtx3h5QDmpB8=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: 86A30800B0DE11F1BCFD8EEDCE1D38B0.roa (hash: C0T/vA48xNWnd3+iRMQmrJv+PCXqT16VLz0/ESUXyhU=)
                          4: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          5: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          6: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2870 (0xb36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Oct 15 01:17:19 2026 GMT
            Not After : Oct 17 01:17:19 2026 GMT
        Subject: CN=6ad029a0-fec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:aa:51:2b:be:8d:94:e1:dc:95:a0:1e:24:
                    2b:26:3f:31:bc:fc:6b:95:15:dd:eb:bf:8a:8a:2b:
                    ba:12:bc:de:19:df:8d:7a:16:7f:f5:9e:05:aa:ef:
                    52:e3:9c:d7:c7:e5:ef:1d:b2:93:d4:88:a8:fe:a8:
                    b4:1e:5b:a6:2e:96:de:d9:10:4e:3a:e2:3e:28:c5:
                    92:9a:7a:9d:6c:3c:37:04:81:cb:e7:26:4a:1e:02:
                    eb:2d:ee:24:eb:9e:02:a0:b4:e6:5a:08:39:50:cc:
                    61:e7:d4:86:2b:51:5b:e4:e0:b0:ec:76:fd:de:8c:
                    0a:c1:0d:1b:ed:c0:23:c3:74:1b:6b:6d:4f:c2:51:
                    3f:27:bf:a6:18:58:2a:6e:06:b8:5e:71:c9:86:4f:
                    70:7c:89:af:ab:e2:c7:aa:ad:50:9b:14:2c:f1:ef:
                    33:8a:55:76:e9:81:f6:0a:d1:a1:6c:a4:cb:35:d8:
                    f7:6f:61:d2:d6:4f:af:e7:32:8e:4c:7c:f1:5b:39:
                    35:74:53:aa:74:f1:00:c9:7a:20:03:b4:ab:51:4a:
                    9a:e5:4e:b8:53:65:26:fb:f6:a7:6c:e4:8e:dd:75:
                    26:00:63:c6:0a:7c:a9:94:49:06:c6:6c:45:3d:6a:
                    5c:60:23:a0:97:2b:3e:80:8b:c8:33:b7:8a:9b:30:
                    3b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:78:D2:54:73:A2:E6:A4:2D:C5:94:47:40:38:BF:B7:4D:51:4C:AC
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:32:9f:ba:86:f9:48:c1:a9:3e:bc:69:19:1c:23:54:8e:88:
         04:36:98:97:4f:b6:60:1d:fa:93:e9:c6:72:04:75:4e:60:4a:
         06:e6:1e:c3:2b:be:e4:0e:84:10:21:a2:75:87:de:72:94:17:
         13:26:87:a6:4f:65:b6:70:12:57:41:7f:b9:48:f5:88:c5:ed:
         f4:8d:ec:1d:59:e6:9f:8d:28:31:14:4b:ef:76:c9:f3:d7:bd:
         cd:8e:3b:dc:bd:31:c3:df:3f:8f:7b:9f:96:d9:3a:ca:bb:bc:
         23:a5:8c:18:8e:4b:6c:e7:8a:24:64:0b:92:5b:11:6c:87:58:
         e0:b3:a0:c2:d1:28:49:f3:6c:6d:1e:c7:f3:7d:6e:9e:0d:fa:
         89:ee:0d:0e:a5:8a:40:4d:a3:c1:9b:7e:44:34:9d:66:e6:d3:
         72:d7:d8:27:8b:b1:ef:f6:98:1e:d8:62:f5:15:0a:5f:75:3c:
         f4:d5:84:c8:89:ff:ad:a2:2b:d2:c5:f2:5e:e5:bf:4c:e9:93:
         72:6f:e9:76:15:ad:57:4c:09:82:10:2b:f7:67:a6:de:46:a3:
         77:5e:48:f0:d4:67:57:cc:51:2d:61:35:c7:08:54:df:ae:61:
         0f:61:43:d3:33:90:cd:fe:97:35:44:46:7a:87:a0:c1:a1:8d:
         db:63:25:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:44:28 2026 by rpki-client