Error: rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
File:                     HJG1r5tg6j8cHbh-rsbafC6gqHc.mft (raw, json)
Hash identifier:          2rJzM+GWAqt13xfBG3SyqGcAmqvDOCSLNt9BrkDbdQA=
Subject key identifier:   45:C3:83:F2:9C:92:88:B9:1E:C7:E9:08:04:E3:DF:EE:0F:96:D3:32
Authority key identifier: 1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77
Certificate issuer:       /CN=F36432B6AF/serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
Certificate serial:       055B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
Manifest number:          0557
Signing time:             Wed 14 Oct 2026 03:15:34 +0000
Manifest this update:     Wed 14 Oct 2026 03:15:34 +0000
Manifest next update:     Fri 16 Oct 2026 03:15:34 +0000
Files and hashes:         1: HJG1r5tg6j8cHbh-rsbafC6gqHc.crl (hash: Tflpq/fS7ZDBk2sN7zRf8IAip4eFThCvz3Cb8Bof2QA=)
                          2: A2CB9DA88AA511F1875D4CE2CE1D38B0.roa (hash: 37pJQBHBvY5YoMd8VQVHX5sLOFC0Hze+E4R/+cVDN9s=)
                          3: A9F6AB448AA611F1AB08A6E8CE1D38B0.roa (hash: 1HF94d7nJvg5x8i0KXil+/R/nuN02veH03L12eIYLRo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 03:15:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36432B6AF, serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
        Validity
            Not Before: Oct 14 03:15:34 2026 GMT
            Not After : Oct 16 03:15:34 2026 GMT
        Subject: CN=6acef3d6-2a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:15:e2:6d:8e:98:a5:85:4b:6f:6d:13:21:98:
                    6c:7a:17:d5:02:f1:e7:8f:f5:60:86:20:5d:46:5a:
                    5e:7b:dd:05:0e:22:65:c5:98:98:29:7e:a2:e7:89:
                    91:b7:e6:2a:cf:33:49:65:84:8a:fc:ed:74:8d:2f:
                    a9:f5:ff:a1:b0:8b:8f:f9:40:b5:4c:31:02:a9:71:
                    07:50:03:9d:bd:e8:7b:11:ab:14:c3:85:e1:5a:a5:
                    f1:1a:40:e5:c5:2b:5c:18:95:96:1e:64:96:d2:df:
                    60:84:74:0e:1b:cd:38:ec:51:e8:85:51:47:f8:12:
                    4f:d6:82:29:db:c8:e3:e9:59:57:ff:75:38:c1:ee:
                    e7:fb:cb:5f:29:37:8d:b5:7d:2c:32:4a:98:fe:32:
                    a4:c3:3c:8e:06:ea:77:b7:ce:db:d7:90:82:bd:99:
                    48:6b:bd:ad:1e:7c:38:31:0a:81:b1:79:6d:90:06:
                    4f:d1:29:bc:64:59:bd:cf:12:47:7b:bf:f2:48:5f:
                    3c:5a:7b:44:5a:2f:04:06:ee:13:09:ad:39:df:60:
                    55:6c:76:0d:7f:c5:f6:ae:72:ae:15:05:0d:2c:2f:
                    dc:71:04:bf:d4:f7:61:d7:71:ca:cd:c6:15:c8:0e:
                    e9:76:b3:aa:94:d6:fa:02:12:f4:aa:e5:70:44:90:
                    f1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C3:83:F2:9C:92:88:B9:1E:C7:E9:08:04:E3:DF:EE:0F:96:D3:32
            X509v3 Authority Key Identifier:
                keyid:1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:e3:c9:f3:37:79:7f:d1:8e:00:ce:19:ba:7c:06:5a:6d:8e:
         b2:5c:13:52:9d:ec:3b:1e:99:68:e9:44:71:ac:d7:c1:55:0b:
         54:1e:f0:2e:3a:47:49:fa:a0:3f:93:06:ce:b0:2d:fc:52:42:
         cf:7e:c4:4a:29:58:eb:7e:79:1f:ad:58:7b:5a:49:71:2a:48:
         4a:e2:8d:76:14:b5:aa:de:ab:d2:93:ec:58:17:ea:13:23:93:
         10:0d:ac:d6:0d:32:e9:cf:b5:24:30:00:74:79:b8:63:5e:cb:
         af:9e:90:67:d0:80:a1:76:c8:7b:a0:b9:00:31:26:09:3c:ab:
         6f:4c:44:82:e7:7a:51:d2:08:31:bd:b1:fc:6d:a4:65:73:e1:
         9f:b3:15:0f:28:0d:0a:6d:12:8c:0f:6b:0e:01:48:7a:98:0b:
         be:92:c0:2c:4d:b4:01:9c:46:a5:4f:43:46:4a:4a:fc:55:73:
         f0:43:d7:d4:30:a5:5a:44:8c:29:9a:7c:99:7b:9a:7b:66:41:
         6d:9a:b2:12:19:22:4c:78:dd:ad:d5:1c:0c:75:0a:31:f6:ff:
         cc:67:24:15:6b:21:03:fe:f5:e9:8d:13:1b:f0:e8:f4:a3:9a:
         d0:0d:35:04:d4:14:00:2a:60:f7:91:35:6d:60:83:1f:db:84:
         76:4d:67:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:41:55 2026 by rpki-client