Error: rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/Cuxoo6mCi7CDSumnpdfndEWI1LI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/Cuxoo6mCi7CDSumnpdfndEWI1LI.mft
File:                     Cuxoo6mCi7CDSumnpdfndEWI1LI.mft (raw, json)
Hash identifier:          TUlOM1S/BmsXgRSB8aLxEuJzL2MY+xWYqIG344mKflg=
Subject key identifier:   82:C3:EB:4D:74:CB:B4:C8:B5:B1:67:95:84:E5:BA:C2:82:FE:93:56
Authority key identifier: 0A:EC:68:A3:A9:82:8B:B0:83:4A:E9:A7:A5:D7:E7:74:45:88:D4:B2
Certificate issuer:       /CN=F364F714AF/serialNumber=0AEC68A3A9828BB0834AE9A7A5D7E7744588D4B2
Certificate serial:       0178
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Cuxoo6mCi7CDSumnpdfndEWI1LI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/Cuxoo6mCi7CDSumnpdfndEWI1LI.mft
Manifest number:          0177
Signing time:             Fri 09 Oct 2026 05:10:22 +0000
Manifest this update:     Fri 09 Oct 2026 05:10:21 +0000
Manifest next update:     Sun 11 Oct 2026 05:10:21 +0000
Files and hashes:         1: Cuxoo6mCi7CDSumnpdfndEWI1LI.crl (hash: ub5KtsOLqpQl0vhCHonSoVOD7iPfXsvR3TTJdfno/AA=)
                          2: 05D144F2A3A211F094EF37BEDAE4EC9C.roa (hash: ERKxiBeXIZ1puerCbC2zy0myehcFDS/HMq7A0ouJ9MA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/Cuxoo6mCi7CDSumnpdfndEWI1LI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/Cuxoo6mCi7CDSumnpdfndEWI1LI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Cuxoo6mCi7CDSumnpdfndEWI1LI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 05:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364F714AF, serialNumber=0AEC68A3A9828BB0834AE9A7A5D7E7744588D4B2
        Validity
            Not Before: Oct  9 05:10:21 2026 GMT
            Not After : Oct 11 05:10:21 2026 GMT
        Subject: CN=6ac8773e-08cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:01:2b:6a:4a:af:45:05:61:55:35:ab:08:43:
                    be:25:52:bd:ad:59:95:4a:58:9d:2a:63:f3:f6:64:
                    e8:e5:02:dd:09:b4:3d:df:a9:da:fe:2f:6b:e9:4b:
                    f5:df:94:0a:49:05:43:77:b6:3b:0e:2f:74:23:02:
                    eb:42:be:de:0e:ef:ed:e5:2e:ff:2b:13:97:ef:9f:
                    0e:97:98:7a:87:1f:e8:13:37:4e:92:16:e4:8d:10:
                    51:5f:09:d1:ec:a2:07:ef:35:14:36:51:f7:0e:48:
                    bd:3a:b3:e4:6c:90:51:cb:82:50:55:cc:37:4b:fb:
                    1c:b9:1a:73:e5:5b:5c:34:82:6f:d1:b8:31:e6:a7:
                    67:18:42:ea:1d:33:6a:61:68:cb:e7:d0:01:4b:ff:
                    2b:d8:cd:0b:d5:f5:92:af:25:10:af:b7:89:77:fc:
                    e4:7d:a6:3b:79:4e:a5:5a:7c:5c:27:e5:d6:3d:fc:
                    78:3f:dc:7c:34:17:6e:cf:2e:bb:45:b6:d2:2b:80:
                    52:f0:fa:e9:42:01:a5:bf:71:fd:10:66:cd:f4:2c:
                    ed:be:e0:f3:db:c6:52:3f:58:5f:67:70:22:d4:85:
                    23:8a:13:97:1d:c4:83:6b:2f:7f:6a:d8:ee:a8:6f:
                    0c:2c:cf:68:86:26:b8:31:f4:b1:ac:54:52:31:04:
                    65:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C3:EB:4D:74:CB:B4:C8:B5:B1:67:95:84:E5:BA:C2:82:FE:93:56
            X509v3 Authority Key Identifier:
                keyid:0A:EC:68:A3:A9:82:8B:B0:83:4A:E9:A7:A5:D7:E7:74:45:88:D4:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/Cuxoo6mCi7CDSumnpdfndEWI1LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Cuxoo6mCi7CDSumnpdfndEWI1LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364F714/2E9B8574A38311F08B607579DAE4EC9C/Cuxoo6mCi7CDSumnpdfndEWI1LI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:42:eb:9c:37:c3:c9:2d:18:df:27:40:93:a1:31:33:23:
         71:ba:46:19:d5:f1:a2:ad:2e:49:57:3d:9c:c0:6e:00:4a:20:
         71:b6:75:0c:d1:ec:5c:96:ff:a6:c0:df:87:b1:06:e7:ed:f5:
         1c:c4:be:eb:f9:ad:4e:d6:6b:96:97:d6:4d:d7:26:88:fe:58:
         6a:a4:e1:21:3d:a9:5f:2d:6e:bb:bb:25:a4:52:04:46:da:55:
         53:b2:c7:59:23:1a:b5:a3:e4:e6:cf:15:57:56:46:09:89:ea:
         44:0d:73:2a:df:ac:96:29:d3:16:bd:d6:c2:05:5d:d9:4f:1b:
         24:f2:36:69:0f:69:40:7e:09:50:b1:2d:c1:ef:a2:8d:be:f5:
         82:2d:e2:8f:5b:46:9e:2e:49:c6:08:d3:56:8c:79:5c:0f:1e:
         2f:8e:8f:08:11:41:3b:fd:d9:7c:64:02:59:7d:80:f9:2a:1e:
         b4:5b:98:de:f5:61:48:71:d8:1d:13:4d:0b:f3:1c:bd:be:bd:
         a9:03:60:23:f1:dd:70:3c:6c:a4:64:f4:8a:4b:5e:b7:1d:c8:
         48:5a:d2:49:32:f4:e1:71:01:53:ac:56:ab:8b:c1:ec:5e:82:
         38:cd:08:83:83:1b:d3:b4:ea:bc:0f:f4:73:24:20:60:df:73:
         46:1b:64:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:41:17 2026 by rpki-client