Error: rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
File:                     6PGxJJvlwqpW85t1sE69AeTGnRM.mft (raw, json)
Hash identifier:          FTjd3w022NurtzyISRwRksJ/r4x6xx97PFieQwPhZfQ=
Subject key identifier:   84:79:BB:52:36:B1:EA:6F:63:E3:1C:BB:55:78:EA:27:F8:AD:C0:1B
Authority key identifier: E8:F1:B1:24:9B:E5:C2:AA:56:F3:9B:75:B0:4E:BD:01:E4:C6:9D:13
Certificate issuer:       /CN=F363BEDEAF/serialNumber=E8F1B1249BE5C2AA56F39B75B04EBD01E4C69D13
Certificate serial:       0308
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
Manifest number:          0305
Signing time:             Wed 14 Oct 2026 04:29:04 +0000
Manifest this update:     Wed 14 Oct 2026 04:29:03 +0000
Manifest next update:     Fri 16 Oct 2026 04:29:03 +0000
Files and hashes:         1: 6PGxJJvlwqpW85t1sE69AeTGnRM.crl (hash: VCBxcAjy9ZpKBr42Ks3rvwStr30mAb2eZ1qo4quwedg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 04:29:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 776 (0x308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BEDEAF, serialNumber=E8F1B1249BE5C2AA56F39B75B04EBD01E4C69D13
        Validity
            Not Before: Oct 14 04:29:03 2026 GMT
            Not After : Oct 16 04:29:03 2026 GMT
        Subject: CN=6acf050f-6ab9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:f1:5c:7b:3e:e1:6b:0b:bf:e3:3d:44:e0:
                    3a:b1:d3:84:ad:75:e3:47:7e:79:a9:9d:f6:14:1f:
                    70:7e:22:a5:cd:60:cc:90:ec:36:bb:cf:03:2b:74:
                    58:dd:fc:3d:2f:e4:d4:3f:9d:64:cf:27:63:09:78:
                    58:28:ba:08:62:18:cd:2d:a5:09:af:2d:e8:92:6f:
                    ec:b9:14:87:eb:26:c9:d5:85:1a:06:a4:2a:52:91:
                    d7:80:45:0d:5e:fd:0d:bf:9c:45:1f:27:83:89:2f:
                    fe:13:95:e4:ce:9d:93:92:ae:10:ff:0b:e0:ab:c1:
                    35:64:60:05:a9:fb:40:95:1a:90:f6:56:20:de:92:
                    65:4b:6f:9a:0b:11:99:8c:c8:fd:ca:dc:d2:c8:0f:
                    68:3a:af:57:bd:a7:35:92:b5:bc:0c:bd:be:22:ff:
                    e6:94:27:82:d9:61:a7:0b:96:52:87:4e:27:db:ef:
                    59:f2:51:a5:cc:22:75:f7:8c:93:e0:fa:c9:26:c2:
                    f0:32:cb:d4:e2:af:e3:80:b5:35:99:74:29:a9:43:
                    ca:94:6a:0f:9d:9f:e7:af:8f:4b:47:a7:5f:e6:e5:
                    5a:d2:8f:2a:0b:36:4b:e0:1c:4d:0f:1d:c4:3f:ba:
                    bf:e8:0f:df:6a:b3:9c:23:a9:e0:db:f4:55:f1:3c:
                    88:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:79:BB:52:36:B1:EA:6F:63:E3:1C:BB:55:78:EA:27:F8:AD:C0:1B
            X509v3 Authority Key Identifier:
                keyid:E8:F1:B1:24:9B:E5:C2:AA:56:F3:9B:75:B0:4E:BD:01:E4:C6:9D:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6PGxJJvlwqpW85t1sE69AeTGnRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BEDE/50DE07F874C511EFA2EC1F93762E951A/6PGxJJvlwqpW85t1sE69AeTGnRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:b0:e8:8f:77:23:2a:39:7f:d1:d1:56:6a:31:33:1e:03:6c:
         5b:76:82:b0:5e:1c:e7:c2:f3:2d:d0:73:bb:d1:2e:ec:20:ad:
         33:2a:71:b7:e3:5f:18:6d:70:21:52:04:05:30:80:29:44:40:
         8d:4f:4d:a8:ad:90:0a:13:c5:40:30:71:c7:30:4b:b5:f6:bb:
         a6:36:36:5d:7f:40:44:27:c9:08:9b:a5:4a:ea:8a:fa:17:ea:
         d7:5e:a9:c0:77:bb:38:55:50:3c:62:90:62:dc:59:30:0b:c1:
         c4:3e:ae:16:3f:38:c9:41:aa:67:e7:e6:92:29:0b:c6:54:35:
         89:31:a3:78:a9:5b:07:0e:09:1a:e4:98:df:ba:e3:9d:39:fa:
         19:1f:0d:0a:74:ec:39:90:dc:d1:46:9b:b1:1d:67:62:21:30:
         4a:9a:a5:f2:e7:ac:8f:05:2d:cf:98:53:8b:5d:66:39:a7:52:
         5d:1e:ce:d9:ef:32:1f:75:3d:c4:08:a5:5f:68:37:98:f8:75:
         4c:a6:b3:c7:96:99:15:d8:2a:4d:a4:b7:ac:63:37:a2:16:c6:
         c1:de:02:76:d8:f4:8a:00:4a:dc:91:38:76:f2:ad:b6:cb:0d:
         fb:74:c4:02:5c:35:a1:0b:4e:54:2f:e7:51:bf:0a:38:26:1a:
         45:d7:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:20:56 2026 by rpki-client