Error: rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft
File:                     70yhIX5q46jhmBgRk1txzuHW5YU.mft (raw, json)
Hash identifier:          9HCXOMiG3WUm4HJTzP5gbkbKmZ+RHIYUzEc0cobsOGs=
Subject key identifier:   E8:50:AC:81:66:65:65:61:4B:52:28:8E:25:EF:9E:FE:A5:F0:C7:FC
Authority key identifier: EF:4C:A1:21:7E:6A:E3:A8:E1:98:18:11:93:5B:71:CE:E1:D6:E5:85
Certificate issuer:       /CN=F363851FAF/serialNumber=EF4CA1217E6AE3A8E1981811935B71CEE1D6E585
Certificate serial:       018E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/70yhIX5q46jhmBgRk1txzuHW5YU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft
Manifest number:          018D
Signing time:             Sun 04 Oct 2026 05:07:20 +0000
Manifest this update:     Sun 04 Oct 2026 05:07:19 +0000
Manifest next update:     Tue 06 Oct 2026 05:07:19 +0000
Files and hashes:         1: 70yhIX5q46jhmBgRk1txzuHW5YU.crl (hash: iYBACs02LgKT0/vCmjAV85DnYW0mJ/9y8K0XrVZvnjY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/70yhIX5q46jhmBgRk1txzuHW5YU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 05:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363851FAF, serialNumber=EF4CA1217E6AE3A8E1981811935B71CEE1D6E585
        Validity
            Not Before: Oct  4 05:07:19 2026 GMT
            Not After : Oct  6 05:07:19 2026 GMT
        Subject: CN=6ac1df08-35b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c8:31:e6:73:f1:88:95:f9:36:e5:f6:0c:3c:
                    0d:ca:52:81:e7:27:23:d7:cc:13:b4:17:75:e1:b5:
                    87:30:3f:2e:fa:df:56:ec:cd:33:4e:98:17:bb:32:
                    10:bd:9e:b9:09:f7:0b:c7:05:ea:6f:49:ba:52:79:
                    58:fc:ad:72:12:b2:79:9b:41:c9:e7:92:1a:4c:b1:
                    e2:fc:40:67:7c:dd:50:89:1f:9a:3d:53:12:08:65:
                    37:75:02:55:18:3c:51:42:89:a5:65:50:59:eb:b8:
                    a8:40:87:a9:16:54:b8:fb:43:6f:d2:38:66:5d:7c:
                    53:82:a6:f8:23:e1:ca:8f:ba:88:8e:6e:f2:3d:6a:
                    2b:53:ae:65:b8:fa:ee:30:d2:8b:51:43:d1:97:84:
                    49:d8:68:12:3c:8a:a3:f3:69:6c:72:22:c1:72:16:
                    aa:6d:61:f1:72:7b:fc:44:ea:33:65:96:f8:f9:cb:
                    01:85:d3:ab:11:c3:f6:1e:c3:25:4f:66:bf:a6:00:
                    12:ba:22:d9:91:cc:06:75:f1:dc:d3:7d:0c:2a:a0:
                    5f:b8:39:21:45:17:0e:7a:37:8b:40:90:01:89:d9:
                    e9:a8:1c:f4:cc:ec:f6:a6:06:47:9d:c1:fc:83:b8:
                    68:57:10:46:da:82:2b:72:31:9a:00:c6:a3:6b:b1:
                    a3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:50:AC:81:66:65:65:61:4B:52:28:8E:25:EF:9E:FE:A5:F0:C7:FC
            X509v3 Authority Key Identifier:
                keyid:EF:4C:A1:21:7E:6A:E3:A8:E1:98:18:11:93:5B:71:CE:E1:D6:E5:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/70yhIX5q46jhmBgRk1txzuHW5YU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363851F/60CED0808E4511F0836A03DDDAE4EC9C/70yhIX5q46jhmBgRk1txzuHW5YU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a6:b5:51:dc:9f:a8:c7:d8:ee:95:10:96:5e:82:a9:0a:11:
         11:39:36:c2:52:5a:01:b4:71:b6:80:8e:88:5a:d0:07:0c:11:
         d7:53:90:43:e1:77:90:de:92:9e:66:78:4e:b2:4a:c8:6f:99:
         06:d5:5f:b0:46:b7:f1:ba:fd:7d:f6:67:69:d8:02:f7:fa:9e:
         91:8a:e6:9e:cd:88:6c:60:64:a4:88:a9:2f:c6:22:83:2e:0a:
         d6:d3:71:90:e6:63:e1:22:5b:ee:0f:d8:b3:52:7f:bc:9a:2d:
         36:bd:7b:7f:fb:e4:ad:d0:ca:e5:e4:1f:94:c7:ac:bf:9e:2b:
         48:29:35:ff:0d:0c:6f:6b:91:c9:a6:84:da:e5:e4:b0:6a:f6:
         93:e0:7f:8a:d7:5e:1d:ee:49:8d:90:ed:ba:e5:3c:b1:7a:20:
         ab:fc:70:0c:ef:33:64:29:2f:3a:dd:31:50:33:1a:f5:e4:8d:
         6d:98:fb:85:15:27:d9:27:70:3c:38:1e:29:f9:43:6c:14:4d:
         d0:b7:d6:8e:c9:80:0e:42:59:1a:8b:46:fc:ff:da:7e:0b:11:
         b2:0d:4a:42:83:68:0d:e3:4a:73:b6:8a:ce:8c:97:1f:08:53:
         78:92:f4:34:65:0e:84:0c:e2:99:f1:3a:00:8f:71:ad:6c:d3:
         0e:02:55:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:01:37 2026 by rpki-client