Error: rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft
File:                     e86nsLinQVZrXm80Yi1Yiw-2f5U.mft (raw, json)
Hash identifier:          WhtN5OHK1ozco+PNb+S2AAsK15cauW/b1ZgT0ZHpRf8=
Subject key identifier:   E7:E7:E8:50:03:AB:D5:D5:26:DA:D7:17:1C:B4:1A:94:A7:60:E8:80
Authority key identifier: 7B:CE:A7:B0:B8:A7:41:56:6B:5E:6F:34:62:2D:58:8B:0F:B6:7F:95
Certificate issuer:       /CN=F364BCB6AF/serialNumber=7BCEA7B0B8A741566B5E6F34622D588B0FB67F95
Certificate serial:       07BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e86nsLinQVZrXm80Yi1Yiw-2f5U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft
Manifest number:          07BB
Signing time:             Thu 15 Oct 2026 02:14:22 +0000
Manifest this update:     Thu 15 Oct 2026 02:14:21 +0000
Manifest next update:     Sat 17 Oct 2026 02:14:21 +0000
Files and hashes:         1: e86nsLinQVZrXm80Yi1Yiw-2f5U.crl (hash: BPNYP9PSJnyhze3Rs2HCYfV0W0zU+sVJ6tIl321fRpY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e86nsLinQVZrXm80Yi1Yiw-2f5U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980 (0x7bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364BCB6AF, serialNumber=7BCEA7B0B8A741566B5E6F34622D588B0FB67F95
        Validity
            Not Before: Oct 15 02:14:21 2026 GMT
            Not After : Oct 17 02:14:21 2026 GMT
        Subject: CN=6ad036fd-800e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:c6:4d:7a:4a:26:29:50:8d:ad:b1:26:47:
                    b6:aa:48:31:20:29:07:4a:e0:e1:5f:4b:79:6d:aa:
                    6f:ff:36:24:3d:fe:48:8c:b8:66:e1:90:82:c8:8c:
                    e4:b8:2c:7f:28:f8:ca:27:2d:11:43:fa:e5:28:4d:
                    a1:34:d1:0f:ee:b8:c9:65:25:91:ae:22:20:b8:ad:
                    bb:8f:29:43:8e:5e:48:cb:bc:b2:29:8d:45:34:eb:
                    4c:c8:3f:0c:9e:69:93:b7:9d:62:a8:f9:a7:6b:52:
                    84:1e:9f:6e:8d:e8:25:6e:8d:da:2c:1a:a8:db:ae:
                    40:45:29:be:12:d0:72:e9:0c:5f:6f:b2:77:dc:1f:
                    c9:03:9b:c0:f0:66:2e:47:27:23:b2:91:ab:8b:a7:
                    8d:a5:42:87:6e:de:75:84:c6:68:ae:06:d1:ef:ab:
                    71:9d:c6:49:b9:af:80:a5:7e:af:05:25:c9:c5:3c:
                    26:70:80:13:d1:a1:7d:a6:8d:82:4e:14:70:a4:1f:
                    1d:46:cd:1b:75:e3:07:5a:55:9a:3c:b7:7b:b8:64:
                    33:15:89:ab:e5:52:cc:e7:38:83:8a:76:b2:8d:52:
                    c3:80:73:87:ce:46:dc:c4:5d:1b:48:fc:8a:5b:ab:
                    7d:b8:a2:8c:b0:87:10:8d:88:20:37:24:ec:fc:d4:
                    a0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E7:E8:50:03:AB:D5:D5:26:DA:D7:17:1C:B4:1A:94:A7:60:E8:80
            X509v3 Authority Key Identifier:
                keyid:7B:CE:A7:B0:B8:A7:41:56:6B:5E:6F:34:62:2D:58:8B:0F:B6:7F:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e86nsLinQVZrXm80Yi1Yiw-2f5U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364BCB6/E79A860CDB3111EBB216782CF8AEA228/e86nsLinQVZrXm80Yi1Yiw-2f5U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:79:be:d6:14:19:fc:9f:37:f3:0a:08:86:de:f9:2e:d5:5d:
         18:2b:7b:93:24:28:4e:7c:da:e4:4a:25:c0:c3:24:7f:f8:a2:
         d2:2c:da:e4:ff:01:97:6b:4b:f5:21:67:0f:78:63:c4:0b:d8:
         32:4a:33:a2:c7:da:a2:5f:ed:8b:69:d2:01:9d:39:53:39:70:
         00:18:36:33:1d:89:5e:33:e3:0b:7e:dd:df:63:b0:74:8f:11:
         c6:c5:98:e1:33:2d:1b:be:da:dd:ea:1d:4b:99:95:aa:b6:47:
         7f:0f:6b:7d:51:9a:17:e7:92:e3:3d:6d:fb:6d:49:33:ec:05:
         fa:c8:89:f8:f5:53:20:5f:82:09:b8:af:d7:44:74:b9:ca:9a:
         ad:03:a6:17:be:ec:0a:11:94:ad:c7:c8:79:1a:19:81:d6:92:
         f1:a8:45:0e:9a:25:36:1a:ef:4d:bb:5c:ba:3a:07:1a:a5:f8:
         19:3d:d5:c4:14:57:3d:72:81:1a:34:45:f5:a6:29:0d:be:d2:
         1b:8b:20:05:6f:ba:46:8e:51:6e:22:02:e1:27:20:eb:e4:93:
         ef:95:c5:c3:ab:70:5e:4e:dd:31:cf:7d:51:fc:78:13:db:b6:
         fb:0a:e0:54:f8:ae:6c:86:9c:6b:55:32:db:a8:58:0f:69:87:
         c1:6a:5e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 08:26:28 2026 by rpki-client