Error: rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.mft
File:                     o6qgqbpVzH3V88ned-mddWdAlOI.mft (raw, json)
Hash identifier:          WC0Ax8cYL/+563fWCw4q7y4Jgnmf3qNOd5HNOmuLziY=
Subject key identifier:   3F:43:4A:0E:45:A2:1D:E6:89:35:54:05:76:0E:5C:77:72:04:73:3F
Authority key identifier: A3:AA:A0:A9:BA:55:CC:7D:D5:F3:C9:DE:77:E9:9D:75:67:40:94:E2
Certificate issuer:       /CN=F363EA80AR/serialNumber=A3AAA0A9BA55CC7DD5F3C9DE77E99D75674094E2
Certificate serial:       0513
Authority info access:    rsync://rpki.afrinic.net/repository/arin/o6qgqbpVzH3V88ned-mddWdAlOI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.mft
Manifest number:          050F
Signing time:             Sat 26 Sep 2026 03:24:10 +0000
Manifest this update:     Sat 26 Sep 2026 03:24:09 +0000
Manifest next update:     Mon 28 Sep 2026 03:24:09 +0000
Files and hashes:         1: o6qgqbpVzH3V88ned-mddWdAlOI.crl (hash: IhVwS41J5QX+X/MK2lfwc/nbQ8ctYYkWKT2l5Bw2D3Q=)
                          2: 9C9DC7168B7311F1872835CCCE1D38B0.roa (hash: XxAqojkDc3dXUYiEKlePdg+So/9chzsgp0ShtssHsoE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.mft
                          rsync://rpki.afrinic.net/repository/arin/o6qgqbpVzH3V88ned-mddWdAlOI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363EA80AR, serialNumber=A3AAA0A9BA55CC7DD5F3C9DE77E99D75674094E2
        Validity
            Not Before: Sep 26 03:24:09 2026 GMT
            Not After : Sep 28 03:24:09 2026 GMT
        Subject: CN=6ab73ada-4185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:8d:47:bc:fb:6d:52:27:53:e4:7d:cc:c4:
                    4f:8c:92:4a:b9:47:bd:a5:b6:f2:fb:51:35:ac:cd:
                    3c:39:93:b7:96:bf:0c:62:e3:fc:e1:f6:63:8b:67:
                    25:21:6c:5a:9e:d9:eb:3c:b8:1e:fb:37:30:95:45:
                    20:94:46:5c:d2:f9:08:a5:8c:68:a4:9d:60:b3:9d:
                    51:cd:7a:ca:cd:80:a7:b7:93:1f:7f:05:84:fa:65:
                    3d:bf:9c:a6:78:73:7f:dd:32:1f:85:a5:3f:63:79:
                    df:17:c2:f6:e4:e5:88:59:54:9b:ae:22:4d:0d:9e:
                    08:6a:b7:13:3f:8d:55:bb:3d:34:26:20:36:1f:d0:
                    56:9f:81:32:c3:ce:2c:32:37:f5:c2:39:6e:3f:1e:
                    59:c0:f0:bc:58:2b:8b:23:da:6e:94:94:65:7c:20:
                    3d:58:b7:5b:31:d5:fc:a5:0c:5e:93:70:bf:22:e2:
                    5b:80:ae:fe:69:f3:2e:19:39:84:f3:b8:c6:0d:e4:
                    95:08:63:7c:22:ae:23:a4:32:c5:e7:8d:91:21:ef:
                    60:4b:4a:c6:32:19:a2:9b:26:6a:cf:56:c6:b6:e7:
                    4d:63:12:4e:c3:a7:3a:ef:1e:f8:f7:f9:2e:14:d1:
                    b2:7b:fc:19:e1:a1:74:51:31:4d:3e:16:de:f4:c5:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:43:4A:0E:45:A2:1D:E6:89:35:54:05:76:0E:5C:77:72:04:73:3F
            X509v3 Authority Key Identifier:
                keyid:A3:AA:A0:A9:BA:55:CC:7D:D5:F3:C9:DE:77:E9:9D:75:67:40:94:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/o6qgqbpVzH3V88ned-mddWdAlOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363EA80/3CD80B92DDDA11ED93C7790D306D8C1D/o6qgqbpVzH3V88ned-mddWdAlOI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:88:0a:4b:15:cb:b4:49:87:89:8e:47:24:34:8f:bf:02:90:
         ed:06:a4:00:c0:92:e4:3d:d1:9c:8c:08:05:ac:14:31:f9:8a:
         ae:a3:ce:dc:8b:33:b6:51:28:fd:ec:81:eb:8b:84:21:d6:f0:
         8a:a8:71:13:ae:68:df:f4:bb:e8:a6:92:8f:01:c1:e5:40:90:
         ff:85:4a:12:71:cf:0e:48:c6:51:75:bb:2c:4f:3a:0a:af:a2:
         79:e8:c0:fd:f0:85:52:fd:c0:7d:aa:90:79:e2:21:5b:96:5f:
         7a:46:be:03:21:94:c5:a7:6b:bd:c1:7a:fa:77:c6:3f:b5:e1:
         43:cf:a3:e5:6a:8a:4f:e0:4e:8d:c3:0e:52:de:ca:0e:4a:68:
         eb:88:fb:0c:4f:81:7c:2a:cf:99:61:9f:28:83:5b:a4:22:87:
         16:f2:78:86:83:40:34:6c:77:b3:ca:b7:df:89:78:28:33:5e:
         fe:9a:a2:eb:cb:f1:7e:82:d7:e5:86:a3:91:91:16:4d:9a:42:
         af:eb:53:6b:fb:e8:fe:bf:34:29:d6:af:57:7a:66:17:79:1c:
         30:d6:01:04:e7:b6:e1:c3:b7:74:3c:ea:12:55:fd:73:ff:fe:
         f9:4f:c5:ce:fc:a8:cf:fc:a6:6c:7b:12:6f:54:bf:78:f0:2d:
         bb:7a:4c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:32:57 2026 by rpki-client