Error: rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
File:                     kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json)
Hash identifier:          E6aRY9I8QQvhVfnwj2u6/89J18bYPeCYOys8qBgk2sk=
Subject key identifier:   B6:71:8A:B9:DE:22:CD:A5:8C:FC:A0:C1:7F:ED:64:B4:F4:A8:45:6B
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Certificate issuer:       /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial:       0568
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
Manifest number:          0557
Signing time:             Tue 13 Oct 2026 03:18:08 +0000
Manifest this update:     Tue 13 Oct 2026 03:18:08 +0000
Manifest next update:     Thu 15 Oct 2026 03:18:08 +0000
Files and hashes:         1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: Ef7TL+b8Gg7MdyRtYercIEtwbu0A+zrjLafyegkB3/8=)
                          2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=)
                          3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=)
                          4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=)
                          5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=)
                          6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=)
                          7: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=)
                          8: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=)
                          9: 8C2651F4195511F1A35B4FC0DAE4EC9C.roa (hash: pGpRj6/PqXx9Td2hUx4ugVnycXhSWNsX+vCSVgOR8bM=)
                          10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=)
                          11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=)
                          12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=)
                          13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=)
                          14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
                          rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
        Validity
            Not Before: Oct 13 03:18:08 2026 GMT
            Not After : Oct 15 03:18:08 2026 GMT
        Subject: CN=6acda2f0-cf8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0a:84:e4:cf:5f:ba:4e:c8:46:86:ea:87:92:
                    1d:f1:09:1d:51:cb:8a:7b:ac:8b:af:8a:5c:21:1a:
                    0a:d6:4f:e4:53:90:04:82:d7:d5:f6:85:81:14:4d:
                    56:a3:66:cd:5e:c7:6b:c4:b2:30:be:75:01:a2:28:
                    2f:7c:83:b6:19:4c:79:06:59:ea:60:d8:20:bc:4d:
                    a9:f6:13:39:8b:70:e2:ec:67:23:0b:33:bb:c4:61:
                    2a:11:d9:d7:5f:a6:4a:3c:e0:28:13:85:75:11:a2:
                    0d:e8:44:74:74:08:b3:5b:1a:a6:b9:30:90:8b:7e:
                    23:91:94:60:ce:00:d5:f8:65:5c:8b:10:b4:0a:56:
                    a1:17:df:e3:3f:ee:b1:35:18:28:c4:4b:a1:20:8f:
                    b5:4f:81:3e:6a:fc:26:4e:2e:a9:97:f8:64:88:b8:
                    05:8b:e3:51:15:28:33:6b:95:eb:37:d3:88:e2:6d:
                    06:79:58:b7:88:df:64:0d:fb:f8:4a:e6:f9:aa:73:
                    5f:9a:6a:01:38:19:bd:ea:d8:40:87:29:ec:09:7a:
                    00:d3:7e:6e:29:e0:55:8d:c6:80:f8:f2:6f:de:1e:
                    82:78:fc:be:ab:0c:9b:04:d7:96:91:6f:37:b0:15:
                    1f:a2:9b:7c:24:d3:ba:ab:1b:3a:3c:a7:4b:82:94:
                    b0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:71:8A:B9:DE:22:CD:A5:8C:FC:A0:C1:7F:ED:64:B4:F4:A8:45:6B
            X509v3 Authority Key Identifier:
                keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ba:a1:4d:83:5e:4a:30:83:0c:42:db:c9:98:37:51:dc:fc:
         03:bb:dc:3b:f7:18:ee:17:03:54:2f:5f:39:3a:16:4a:b2:18:
         61:11:a2:e6:4c:66:0a:f2:a4:d4:26:29:6e:67:a6:84:e7:10:
         bc:6c:67:e3:33:f9:1f:97:4b:dd:a9:9a:72:3d:61:89:30:33:
         74:34:2b:0a:b3:ac:6a:1d:bd:7e:ae:9a:00:14:48:36:49:35:
         66:80:02:4f:9b:12:f2:6c:2b:01:a4:c2:49:c9:73:55:a0:66:
         43:07:9a:82:ce:04:c1:11:5c:40:cc:4a:1b:ae:44:7c:d8:43:
         8e:b0:75:68:9b:54:2d:f1:c6:a5:ac:dd:4d:46:fb:14:3b:e0:
         09:5c:33:58:ac:a5:92:ee:0f:53:a1:21:62:97:62:9c:84:2c:
         f9:00:c4:2d:70:30:1c:f2:9b:a1:4f:8d:cd:24:e1:95:a0:6a:
         a0:2c:3a:96:97:1f:69:18:cf:f6:46:aa:e6:ae:7d:f2:13:8f:
         25:f5:1c:1b:d5:b1:ad:01:7b:4c:9d:53:63:d7:e9:cd:2a:52:
         aa:47:f0:27:f3:a4:f1:f2:72:5a:38:a1:bb:2e:32:c8:55:fd:
         bc:71:ef:7d:c6:0f:34:15:6c:81:cd:6c:20:e5:7d:27:72:28:
         a7:b8:eb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:13:31 2026 by rpki-client