Error: rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
File:                     i2Qxm9V6EKYdSYU_G6miZt5alxM.mft (raw, json)
Hash identifier:          xKLzuS9dIjzEWHwpFfH3fHSCu3SjpETsS+8d+Oe1Yjs=
Subject key identifier:   77:6B:98:83:1A:22:A2:76:44:45:F5:DE:8A:7B:3B:A6:02:7C:ED:9B
Authority key identifier: 8B:64:31:9B:D5:7A:10:A6:1D:49:85:3F:1B:A9:A2:66:DE:5A:97:13
Certificate issuer:       /CN=F3631F16AF/serialNumber=8B64319BD57A10A61D49853F1BA9A266DE5A9713
Certificate serial:       D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
Manifest number:          D6
Signing time:             Thu 05 Nov 2026 05:32:40 +0000
Manifest this update:     Thu 05 Nov 2026 05:32:39 +0000
Manifest next update:     Sat 07 Nov 2026 05:32:39 +0000
Files and hashes:         1: i2Qxm9V6EKYdSYU_G6miZt5alxM.crl (hash: Ecp6TIuNjoj62T95f7nSHMBZNBp5vC16LUyBlLaCrlc=)
                          2: 579189BA496911F1939025C0CE1D38B0.roa (hash: 9nu+V4jDpXzggMIj8Gg2sQVf+Ps0AHWXClLk8CxZNuA=)
                          3: C508B1FE48CD11F1B044A702CF1D38B0.roa (hash: s3yIGbVsantz+OaFdDfVniwJT32Pslq46usbKBVTHVM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 216 (0xd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3631F16AF, serialNumber=8B64319BD57A10A61D49853F1BA9A266DE5A9713
        Validity
            Not Before: Nov  5 05:32:39 2026 GMT
            Not After : Nov  7 05:32:39 2026 GMT
        Subject: CN=6aec14f8-18ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:bb:20:65:36:04:6e:9b:fe:28:9e:f2:e3:7b:
                    40:5c:aa:85:d6:b9:78:0d:95:ea:30:ba:3a:b8:00:
                    b3:7f:98:2c:db:d7:ba:93:a2:22:08:64:04:e8:0d:
                    fa:06:c6:ef:49:fe:af:29:64:73:66:60:cb:bc:18:
                    13:cd:b3:8e:6a:49:88:f0:9c:94:6e:af:44:3f:01:
                    fe:86:da:4a:ae:63:71:42:d5:17:13:ea:1b:e4:b7:
                    1a:8d:0c:39:9f:28:bc:d6:e2:60:a7:b3:c0:45:79:
                    0d:e1:5c:a5:5e:d0:48:46:7d:76:18:b6:c7:36:c8:
                    4d:cb:fd:cf:c3:c4:b9:e7:85:53:74:c4:b4:5a:9f:
                    81:1d:57:20:12:94:c4:d1:81:e7:81:c1:2e:99:5a:
                    6c:93:a9:67:df:40:a2:ce:2c:cc:79:ea:ef:17:10:
                    d2:2b:24:0a:22:20:4b:e7:9a:87:f8:ea:05:8e:90:
                    3a:e3:8b:0b:ff:d1:30:98:c2:e0:2b:09:10:81:83:
                    93:b8:9a:b2:5e:50:f5:9d:58:2e:c6:e8:8e:65:a1:
                    79:99:d7:a6:cc:17:e4:b8:5f:47:15:33:6a:15:10:
                    41:86:3b:4e:3a:7d:42:b7:65:e6:31:e4:3e:fc:04:
                    e8:75:30:56:a4:92:eb:76:b0:b7:26:d1:f4:d8:78:
                    e5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6B:98:83:1A:22:A2:76:44:45:F5:DE:8A:7B:3B:A6:02:7C:ED:9B
            X509v3 Authority Key Identifier:
                keyid:8B:64:31:9B:D5:7A:10:A6:1D:49:85:3F:1B:A9:A2:66:DE:5A:97:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i2Qxm9V6EKYdSYU_G6miZt5alxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3631F16/4A3C25F4342911F18D74331BCF1D38B0/i2Qxm9V6EKYdSYU_G6miZt5alxM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:51:ee:af:78:15:35:2d:ff:d9:19:c6:e3:a1:a3:54:38:50:
         6e:0a:db:bd:63:7d:ed:14:82:03:3a:27:cc:4f:30:bd:ff:49:
         50:7a:ca:2a:13:9b:b2:9d:59:4d:60:92:3d:8f:55:41:7d:27:
         36:fd:35:fe:3f:0a:44:d6:63:e3:25:90:61:51:eb:f3:1e:db:
         f1:c8:0b:75:1e:8a:31:6e:04:9e:cf:df:38:7a:24:d6:97:d7:
         e3:20:0e:69:72:3a:39:25:3e:7b:36:49:4f:c1:ec:08:69:7c:
         b8:43:39:68:89:ae:44:db:26:35:c3:8a:87:ec:f8:09:47:c9:
         86:d2:26:7a:5b:fc:51:ce:33:fb:b6:27:1f:f0:76:6f:ff:f8:
         22:32:ea:7c:43:05:2b:ff:7d:e1:30:21:a8:80:87:4f:eb:55:
         94:c3:44:64:94:60:dc:f9:90:f2:55:0e:a5:48:d6:7e:0a:d4:
         91:35:c8:9c:b6:58:07:49:72:1d:0b:10:67:44:26:4b:17:54:
         8c:29:36:67:61:53:82:3c:10:0e:45:7c:51:96:2c:2d:7e:b0:
         6b:21:6c:79:18:0c:1a:76:49:50:6c:c1:77:53:78:e3:f5:58:
         a1:52:4b:46:a6:70:f2:33:fc:d3:60:d8:a8:0e:fa:47:df:e6:
         7c:c1:df:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 10:32:41 2026 by rpki-client