Error: rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
File:                     Y-C7azQzzV1xpCsBab2wHiDkVX8.mft (raw, json)
Hash identifier:          B0vNvtDjRyB/hlZpcuiBLlFJUceGqjHqKre45iMnvwQ=
Subject key identifier:   98:99:85:5D:47:53:3F:D7:EA:A9:92:27:BB:C8:18:C2:89:C4:15:26
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Certificate issuer:       /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial:       082C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
Manifest number:          0811
Signing time:             Sat 03 Oct 2026 02:06:59 +0000
Manifest this update:     Sat 03 Oct 2026 02:06:59 +0000
Manifest next update:     Mon 05 Oct 2026 02:06:59 +0000
Files and hashes:         1: Y-C7azQzzV1xpCsBab2wHiDkVX8.crl (hash: C+wnMQrfu5uVDyMNE/wlXiVXX+E8CdIJU+z3L0J8ZkQ=)
                          2: 135920B0A27811F19D4416ACCE1D38B0.roa (hash: fmhmLXMYa8q81d6P+YONgMCa8MOES+3p9rjxKAsAxKE=)
                          3: 022F32CA9CCB11EFAAC38E52762E951A.roa (hash: rD0syBKiL7c261Mu8WhV/kxThDTjGQI8fG8xABHRfiA=)
                          4: BC030D72390311F18A96EAA2CE1D38B0.roa (hash: WYyd6Ed/wv8PPQDjgs5+xHAluyEuiQjLMAh/g0BWSQo=)
                          5: FCF5EF1CA27511F18A84231ECF1D38B0.roa (hash: d+sXQ3kLzvC3tMq7aiF8AqKw7el8W8Oo7Tg/AwfUeeA=)
                          6: 3E5CAEF89CCB11EF96936E54762E951A.roa (hash: NaL+5IqvHfzKEob4MeRapqEPczk8TUD17OZ5TfT8Nj0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092 (0x82c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C18CAF, serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
        Validity
            Not Before: Oct  3 02:06:59 2026 GMT
            Not After : Oct  5 02:06:59 2026 GMT
        Subject: CN=6ac06343-396d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c7:ec:40:92:11:25:5e:16:90:3d:f6:ef:fa:
                    18:54:9b:ac:e1:d8:f3:2f:a3:d5:4f:aa:2f:35:3c:
                    33:a1:78:b1:ea:7b:3b:48:87:78:3d:44:b9:21:35:
                    8a:12:f4:97:f9:c0:bb:5f:21:a2:e4:1b:db:fd:d0:
                    dc:71:8f:9d:eb:81:04:39:0c:ed:57:cc:cb:f3:f1:
                    3e:6a:a8:78:57:54:8d:ad:02:43:21:df:eb:1c:da:
                    d0:ea:c7:ca:45:0a:3b:3b:5c:46:17:36:0b:c4:1a:
                    1e:2f:f2:6a:55:dd:2a:9c:23:26:9c:1f:34:ad:5d:
                    74:53:e9:c0:df:42:b6:49:aa:0e:3a:af:8c:a1:d9:
                    4c:bb:b8:59:29:87:6d:55:55:9d:89:d3:67:6f:17:
                    4c:fa:b6:4b:b8:67:32:59:de:56:73:3d:88:13:bf:
                    e6:ae:91:06:6c:e0:43:a2:ec:46:e9:72:b4:84:05:
                    19:97:3e:ba:23:98:2a:be:99:8c:ae:b8:d1:59:9c:
                    8e:ff:ea:1b:c3:9e:c5:52:9e:d3:c8:8e:eb:06:94:
                    50:be:2f:7a:e1:10:56:64:2c:4d:48:7c:50:4a:2f:
                    94:95:4c:7d:b6:e9:aa:07:67:a8:a0:05:7b:5b:5f:
                    58:7b:29:41:22:a3:78:0b:a1:4d:cb:d9:a8:b5:f9:
                    83:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:99:85:5D:47:53:3F:D7:EA:A9:92:27:BB:C8:18:C2:89:C4:15:26
            X509v3 Authority Key Identifier:
                keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:34:2c:78:8f:74:29:73:0f:89:4a:2a:09:f0:1f:64:c1:e2:
         05:ac:a4:81:6a:d5:ea:fb:a2:ea:c6:6c:34:83:10:44:b2:00:
         a0:9f:6f:14:6c:b4:c6:b2:6b:bb:74:10:e3:71:27:8a:78:4a:
         07:ae:65:3b:d5:17:b8:0d:82:73:68:c8:d9:30:55:2f:6f:9b:
         95:2b:35:33:36:33:5d:f2:04:cc:3a:d2:f3:1d:9a:0e:91:d2:
         c7:5b:2f:fb:6c:ac:95:3c:8d:7c:91:13:a7:7d:85:e7:3a:4d:
         56:bb:31:f9:49:71:bc:37:93:be:2b:64:5c:fc:29:a9:61:3a:
         96:00:67:35:40:e2:60:07:c3:49:8b:a6:76:eb:18:eb:38:86:
         8e:fc:c9:f3:a1:6b:58:a6:2f:ba:d0:65:71:d6:84:4c:d4:55:
         70:ce:a3:4d:5c:a4:f2:88:ae:b4:17:ab:0e:c9:ec:cf:cb:79:
         37:7c:29:2f:f4:ca:78:7b:a7:8b:0e:46:c1:99:ae:41:68:db:
         54:fc:dc:6e:c3:41:93:1e:8f:d4:08:f0:1a:a0:25:3f:e3:fb:
         dd:60:77:14:ac:2c:2d:38:62:91:07:a9:a0:b2:1b:19:f6:b6:
         a3:92:1d:64:dd:ab:d1:8d:b9:c1:7d:dc:58:0c:32:e1:4e:6e:
         89:4d:e1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:24:06 2026 by rpki-client