Error: rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
File:                     i-GoLMm4kURYOcv-vplg8wM9pUI.mft (raw, json)
Hash identifier:          bdhmSOuCiLI65K30AciO5Ua/rigIFSdoRuhQzOx7ykU=
Subject key identifier:   48:E7:A5:C9:96:D9:82:36:5D:B4:3B:A2:01:78:16:1D:DA:93:3F:E8
Authority key identifier: 8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42
Certificate issuer:       /CN=F365FABERI/serialNumber=8BE1A82CC9B891445839CBFEBE9960F3033DA542
Certificate serial:       01CF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
Manifest number:          01CD
Signing time:             Tue 22 Sep 2026 04:56:52 +0000
Manifest this update:     Tue 22 Sep 2026 04:56:51 +0000
Manifest next update:     Thu 24 Sep 2026 04:56:51 +0000
Files and hashes:         1: i-GoLMm4kURYOcv-vplg8wM9pUI.crl (hash: IApJg2Ch1cWMJ+Y/IC883p4kAX1NOsteiJFT+NW79rk=)
                          2: 71089910A43C11F0A4AF11ADDAE4EC9C.roa (hash: U5LDkkC16R2QjhJl9qo+wu8OGplriwnSfZRYIPerRao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
                          rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FABERI, serialNumber=8BE1A82CC9B891445839CBFEBE9960F3033DA542
        Validity
            Not Before: Sep 22 04:56:51 2026 GMT
            Not After : Sep 24 04:56:51 2026 GMT
        Subject: CN=6ab20a94-a447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:f5:88:48:bb:8d:7d:e7:24:ab:e6:4c:4d:
                    2b:4c:fc:9f:6a:f8:59:41:6d:bb:71:14:f8:61:73:
                    28:46:4f:00:0a:8e:88:d7:d9:af:6a:37:c4:d6:57:
                    9e:28:d5:1a:4d:18:bd:d4:89:e0:2e:ad:20:d4:2b:
                    b4:60:3d:2f:44:a3:df:bd:31:fb:7b:54:c1:eb:3e:
                    8f:36:96:cb:77:e3:b9:e0:e7:a8:ac:bd:67:d2:2c:
                    66:1b:fd:03:2b:e3:7f:c9:3b:bf:d7:6a:24:83:99:
                    a0:52:4c:9a:b5:71:0f:c6:17:3a:f5:da:b5:99:ce:
                    b0:56:c7:ce:35:af:92:5f:46:d2:05:d5:46:69:7f:
                    fa:66:cd:fe:5f:a2:57:f5:a8:28:a6:e9:7d:e7:f6:
                    c3:40:78:1d:6b:15:ea:46:4a:44:b8:35:60:e6:49:
                    8a:11:a4:73:8c:76:4f:bc:af:a7:6b:d2:f0:df:d7:
                    22:97:3d:65:b8:51:3d:ca:5d:c4:42:8c:4c:80:d7:
                    8e:9f:34:8c:6d:ca:4f:a6:f3:ff:bc:51:7c:4a:83:
                    be:b3:24:36:9d:17:91:f1:d1:63:7c:ae:55:b4:bd:
                    15:39:c1:c9:2a:7a:f4:3d:70:db:50:1f:91:cb:c9:
                    8e:80:fc:67:36:7d:c6:5c:d1:00:c8:8a:84:81:1b:
                    3c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E7:A5:C9:96:D9:82:36:5D:B4:3B:A2:01:78:16:1D:DA:93:3F:E8
            X509v3 Authority Key Identifier:
                keyid:8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:93:7d:ff:ab:05:99:aa:f7:b2:33:b1:fe:2f:bd:56:a5:f2:
         55:dd:a7:0e:0e:cc:99:28:6a:eb:bd:9d:ab:47:1e:58:27:73:
         85:b4:30:a4:20:79:8a:da:28:15:b8:db:73:f6:e5:dc:89:a0:
         21:70:e4:c1:eb:93:21:7e:b6:84:1f:56:ad:04:6e:38:bc:fb:
         f0:e0:4d:b5:45:15:1f:6b:e2:88:b9:c5:7b:e9:f4:58:34:dd:
         cc:bd:0f:20:20:8c:56:d9:c8:8f:d4:e9:fe:34:6c:3a:c0:25:
         61:74:a3:6e:f1:56:46:ee:aa:4f:2d:c1:d2:40:0c:ac:31:0b:
         21:f4:4e:11:31:15:25:73:84:f3:fd:ba:f3:4c:f6:2a:48:d4:
         60:18:04:ac:6a:94:ed:cb:05:e9:8a:a6:61:4a:a2:3e:0c:a1:
         ee:fb:31:c6:c6:cf:ea:5c:c8:3c:d2:71:d5:7f:e3:82:93:6a:
         b0:7c:d7:bb:f6:76:aa:78:c3:4a:4c:ea:2a:8f:be:4d:04:fc:
         36:04:cd:b6:e7:cc:bc:bc:28:cf:33:3a:0c:46:da:6b:7b:f0:
         4c:fe:6c:32:60:75:4e:57:a8:d4:f7:f6:23:a8:81:be:10:03:
         e0:de:8b:65:fa:61:30:40:7d:3e:6d:8b:6c:46:7c:b7:83:e4:
         d0:6a:3e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:02:32 2026 by rpki-client