Error: rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
File:                     Filoib_wMb9_3nNn4t7pPLAIAoM.mft (raw, json)
Hash identifier:          N1DBk7qi5eXAneEitRUl8lzUuLV6YDUoK1kDayelLeU=
Subject key identifier:   46:4D:14:85:27:70:06:A2:87:BE:44:90:77:D7:95:81:D6:49:95:23
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Certificate issuer:       /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial:       0379
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
Manifest number:          036A
Signing time:             Tue 13 Oct 2026 04:15:31 +0000
Manifest this update:     Tue 13 Oct 2026 04:15:31 +0000
Manifest next update:     Thu 15 Oct 2026 04:15:31 +0000
Files and hashes:         1: Filoib_wMb9_3nNn4t7pPLAIAoM.crl (hash: hAgrJwuTG/WvrPzi6j8v2PWQFMLpHlmwbr3Z6xjxgyY=)
                          2: BDEC29CA919B11F1AD7E43C3CE1D38B0.roa (hash: orjJ8rJ6sip9ETuYXH/EqMDUWi0EVMZEH1jhy65ixEA=)
                          3: 5AC4BF74032511F1929BD2EDDAE4EC9C.roa (hash: Mr+VNN9Z11W7VCtSCEh7NwS5SxBn5tdF3qqSe50Nvo0=)
                          4: C7D794A2833111F0BA372F98DAE4EC9C.roa (hash: 10t3J3G0W//+SuAl6SEkRsS4xMprNtVls3DmnWSADos=)
                          5: 8FC2BDBE057A11F18F7783C4DAE4EC9C.roa (hash: AQrOFPjFaqguMhUl4BS2Zhq/YyRQNkfhZPPG0wTy2FY=)
                          6: 328118D26ED211F1A7E0B60BCF1D38B0.roa (hash: mpYwvFPIIwGBad6LgXffGJB90JE3h4W8XaZN6Yka/Yc=)
                          7: B4706624834911F0B13243B3DAE4EC9C.roa (hash: bO4CRsQGJ9Fo2uTsOo+M4VqSaZfI6VGKrX/RQl3alaE=)
                          8: 3554EEB2347311EFA6FFD08D762E951A.roa (hash: STwhEyl7QlJqy2GwaPGbVHQtRVU/mUCXwrdIoazOpVI=)
                          9: E4AD7D32057A11F1AA15C6C4DAE4EC9C.roa (hash: 2aR11taDJSSgD4ZfkhbtNmSyzLyHvlisHe10lCn519E=)
                          10: A7FC5510032811F1B2192182DAE4EC9C.roa (hash: wGkWjE/BfFbXziwaAAoO4iCbMSLXd6CDbuL/jS67JKY=)
                          11: 6B2C5254032611F1872E2AF2DAE4EC9C.roa (hash: gSEOHsrvDJwVLm0ZAjOxsE19xm6ZGQzPUV5PhKX5T5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:15:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889 (0x379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
        Validity
            Not Before: Oct 13 04:15:31 2026 GMT
            Not After : Oct 15 04:15:31 2026 GMT
        Subject: CN=6acdb063-1faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:72:55:3b:32:31:77:45:33:8e:c5:b7:27:
                    04:57:dd:8f:45:5c:4c:9f:6d:09:f7:f6:11:af:1b:
                    d1:c3:16:91:43:b6:2d:bd:97:ed:16:e6:a6:a5:cb:
                    69:ec:2e:1c:15:3c:72:14:80:7f:ec:aa:ae:9f:e4:
                    0e:d7:ff:e1:3a:3b:aa:38:46:bd:95:95:dc:65:bc:
                    5a:b6:b2:a0:76:e2:50:c5:23:54:0c:4f:6f:8d:fa:
                    2e:5d:aa:57:19:af:7a:2a:90:12:e8:3b:2f:7f:22:
                    2d:ee:ec:71:27:a1:38:3e:27:78:20:e0:84:a1:4f:
                    1f:a8:7e:6d:f3:98:15:89:d5:bf:47:25:fe:3b:8d:
                    f6:d8:a5:7f:68:90:9e:81:3d:89:78:04:25:57:75:
                    4e:fb:1d:42:38:38:ae:02:68:58:29:58:cc:37:f6:
                    da:e1:ee:76:ad:00:37:b2:a1:f2:77:7c:60:8a:00:
                    a2:f6:59:6a:3e:aa:30:9b:0d:8d:56:d4:96:11:36:
                    b9:0d:0f:cc:7a:e4:a8:fa:65:08:21:5f:68:2b:17:
                    f4:17:cb:7d:6e:f2:34:02:ae:39:78:02:1f:63:53:
                    d6:25:2f:a0:5a:f6:7e:b4:64:81:82:0c:c3:e5:e8:
                    fc:8b:fd:83:b1:a7:b3:f1:2e:0d:91:18:1f:85:56:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4D:14:85:27:70:06:A2:87:BE:44:90:77:D7:95:81:D6:49:95:23
            X509v3 Authority Key Identifier:
                keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:88:fc:56:89:7d:fb:02:9f:ea:3f:f9:9d:78:6d:eb:20:18:
         55:ce:0a:31:39:d9:98:a5:c9:b8:eb:c4:77:be:e3:0e:83:8a:
         18:f5:94:38:46:9c:17:75:61:06:4e:56:11:df:bc:f6:42:10:
         d2:1d:9c:88:7f:bb:7c:fa:0b:93:16:d9:ff:96:4c:17:1a:6e:
         b6:61:b3:c4:bd:40:21:fb:37:ad:5c:f9:c4:e7:91:44:2d:7b:
         a0:df:1a:6f:6b:cd:35:87:15:37:b5:c1:c1:cb:a4:b6:54:c2:
         f3:27:2b:de:72:fd:11:26:06:9f:9d:70:86:34:36:97:c8:83:
         8a:6a:1f:31:0f:40:83:39:68:06:d7:20:8a:60:75:e9:bf:c3:
         9d:e9:f2:e0:a8:83:77:56:19:3e:e1:88:0d:8e:8c:4e:7a:12:
         b2:6e:ac:18:63:b1:3b:ab:f9:f2:ec:0a:99:d6:46:d4:7e:40:
         72:b3:dd:ad:d3:cc:5d:12:d4:4a:42:80:73:5c:82:73:b8:60:
         a0:3a:09:1a:5b:c7:44:2a:11:48:61:96:b7:cb:73:5f:70:36:
         4e:fd:7a:c8:ac:2c:d5:a1:ca:a3:a6:9b:ef:f1:b9:90:69:95:
         60:25:de:a5:46:44:63:8c:d7:33:82:a8:eb:9b:df:8c:16:46:
         d0:9d:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 20:43:43 2026 by rpki-client