Error: rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
File:                     w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft (raw, json)
Hash identifier:          13UVcLFQbn/GgcO1tYmEUnVRS8zFIeK6IKNVpGBz600=
Subject key identifier:   DF:B2:7A:62:25:64:91:CA:8B:42:1E:2F:E4:04:67:3F:F7:99:22:9C
Authority key identifier: C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01
Certificate issuer:       /CN=F365BE89AF/serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
Certificate serial:       0426
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
Manifest number:          0413
Signing time:             Fri 16 Oct 2026 03:57:17 +0000
Manifest this update:     Fri 16 Oct 2026 03:57:16 +0000
Manifest next update:     Sun 18 Oct 2026 03:57:16 +0000
Files and hashes:         1: w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl (hash: I2v37P10iqeinV5VL9NYz4JXHHo7dVSBElx0KWxidn4=)
                          2: 3B737D98EBF411EF92D3FFB8762E951A.roa (hash: pQmnrQ6q9u7W7aARZAIAyyTTaaaxPxFrGBxw2K6Ihk4=)
                          3: 2A9C4F82DB0E11EFB5D5F65C762E951A.roa (hash: NVW3v8GbViH2PMxW79Km4bUGB7n8gRCMb5uUvG/8ofI=)
                          4: 6878DD1E75A311EFB23C5586762E951A.roa (hash: VfrrZSL02g15laDfJe6nTjgG6CAFugYBtX2yjpd5cSA=)
                          5: 136813A8AB0911EFAABAE596762E951A.roa (hash: VwYAHtWC0OwThF8CtKnnBfqtYg/dU1jKuhLvi6pyo64=)
                          6: 3D3FB4EEFD8C11EFBEF68376762E951A.roa (hash: WZ+UxNc2jtefkjQfrz80B/fFxtNwMmYTFahRt37o5SQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Oct 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BE89AF, serialNumber=C3B4A3DDB2DACFC5388EEEC7359D214664496A01
        Validity
            Not Before: Oct 16 03:57:16 2026 GMT
            Not After : Oct 18 03:57:16 2026 GMT
        Subject: CN=6ad1a09d-699c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e1:a0:d9:ef:75:9e:26:07:06:27:37:33:3c:
                    62:72:d1:73:20:f0:f4:28:c3:7e:a3:62:45:70:5d:
                    37:0d:91:54:56:2a:72:17:30:3d:7e:f1:05:44:b0:
                    dc:75:37:a1:4e:b4:ea:5d:94:04:18:f4:ad:40:c8:
                    eb:31:4a:d7:0a:49:01:3d:76:76:d6:0b:6f:fe:1d:
                    9a:51:7b:75:e7:63:b1:05:c4:d5:f8:73:8a:23:c7:
                    51:de:13:5a:b7:00:68:74:1b:70:85:04:51:2e:26:
                    d6:c2:60:19:76:33:0d:47:8b:d9:76:8f:6b:54:70:
                    03:bc:45:2b:8d:05:18:8b:c6:ee:3c:72:11:cb:4b:
                    08:41:db:e5:22:f2:57:07:24:ab:a7:1b:c4:49:3e:
                    56:8c:f1:03:e8:2b:69:af:59:8e:48:a8:b7:bf:19:
                    98:34:ea:31:d0:3c:7d:98:65:9c:f6:35:bf:79:74:
                    6e:f9:77:76:0f:d2:ea:e9:8c:90:58:ec:67:03:86:
                    3b:a4:34:19:fa:41:24:cd:b4:3a:2c:81:a7:17:38:
                    73:77:5d:b4:58:8b:d3:00:4e:a7:3a:3c:ab:7b:fb:
                    f2:fb:69:f5:1b:70:ae:71:03:46:c2:ef:80:7c:51:
                    c3:1d:aa:48:3d:39:1d:93:78:c2:4b:97:be:f7:48:
                    39:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B2:7A:62:25:64:91:CA:8B:42:1E:2F:E4:04:67:3F:F7:99:22:9C
            X509v3 Authority Key Identifier:
                keyid:C3:B4:A3:DD:B2:DA:CF:C5:38:8E:EE:C7:35:9D:21:46:64:49:6A:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BE89/099B483ABE8E11EEB195A98E775412E6/w7Sj3bLaz8U4ju7HNZ0hRmRJagE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:43:e2:35:07:09:27:dd:22:1d:8c:4d:d1:70:ba:24:ad:92:
         ba:3a:95:5a:c1:dc:a2:b3:dc:68:ae:00:e9:20:41:ce:0a:da:
         f5:47:27:3c:34:59:51:9a:11:03:01:44:b0:3b:e3:6f:ee:f9:
         30:3c:ad:e1:cd:2b:a5:ca:d2:b7:81:f9:a6:90:eb:c7:aa:fa:
         ef:2f:37:c6:60:50:fa:72:9f:52:c9:40:f5:9a:8c:ee:d8:e1:
         24:a1:fb:05:4d:a2:1a:df:df:22:fb:ae:01:2c:b7:1a:02:4c:
         49:6e:de:92:79:05:bf:2d:36:05:4b:07:ba:f8:b1:9b:97:e8:
         18:cc:fd:64:34:fb:44:12:fc:1e:d5:6c:e2:08:fa:b4:f6:78:
         52:f8:47:ee:c1:f0:42:e5:5e:b9:be:5a:77:9d:3b:99:9f:bf:
         a8:dd:7c:4f:03:a4:ac:75:c5:41:4b:0f:07:77:39:a8:ce:9e:
         c4:85:f1:d2:bd:df:ae:18:73:af:8f:56:36:bc:86:99:ee:08:
         5c:57:dc:84:25:88:cc:6a:65:24:3e:12:50:12:96:95:b9:c1:
         45:9b:f9:70:6a:ba:9f:c0:43:90:55:d8:38:d5:f0:d0:41:0d:
         21:64:87:bf:6e:51:1a:c9:28:18:65:40:83:4c:7f:fe:e9:a0:
         cb:ba:a7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 09:15:23 2026 by rpki-client