Error: rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
File:                     7PbzU5pP4IyibRf5jcsVmgR8v-g.mft (raw, json)
Hash identifier:          BVhrEJ4rLYQWwWPm/CsikN8P37mp9qTP/Ny1X519Z60=
Subject key identifier:   53:49:1D:FD:0A:26:9D:9B:E5:EC:A1:91:A1:73:25:21:3C:2F:46:A7
Authority key identifier: EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8
Certificate issuer:       /CN=F3662F58AF/serialNumber=ECF6F3539A4FE08CA26D17F98DCB159A047CBFE8
Certificate serial:       09C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
Manifest number:          09C5
Signing time:             Sun 11 Oct 2026 01:42:30 +0000
Manifest this update:     Sun 11 Oct 2026 01:42:29 +0000
Manifest next update:     Tue 13 Oct 2026 01:42:29 +0000
Files and hashes:         1: 7PbzU5pP4IyibRf5jcsVmgR8v-g.crl (hash: IUReth61xlNj49hFVfg3UGXna570HgkhFZg2eNztoC4=)
                          2: 61D9EFE8D21F11EE9A695056775412E6.roa (hash: sHwcRAoEIh3+NnhsNE7+YK15IM8uU90vV0uO3YY5oHk=)
                          3: C6128B02498711EA8512D154F8AEA228.roa (hash: YenFdE2aLh0x++T/JYlwu3uxxzj0ygFVKQ0oMgyFqM0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2503 (0x9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662F58AF, serialNumber=ECF6F3539A4FE08CA26D17F98DCB159A047CBFE8
        Validity
            Not Before: Oct 11 01:42:29 2026 GMT
            Not After : Oct 13 01:42:29 2026 GMT
        Subject: CN=6acae986-3e37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7d:5a:9a:14:14:83:98:19:2b:42:11:8f:08:
                    04:8d:91:b6:8e:0d:0d:a9:cc:0d:f8:39:e7:1d:bc:
                    69:6d:b2:25:ae:d8:73:63:02:8d:d5:b6:4c:ef:be:
                    bf:61:4e:fc:c8:df:38:88:bc:e9:a8:b3:8a:71:dd:
                    3b:2e:8c:28:95:a0:34:4f:c6:f2:b7:0b:f9:13:92:
                    74:65:b5:e0:25:b3:14:b9:a7:b6:a1:7c:b4:35:64:
                    75:47:88:1a:ec:ab:86:c8:c1:cb:99:bf:cc:ce:dd:
                    84:35:30:f8:de:11:01:3b:e8:59:8a:94:1d:5e:88:
                    5b:40:d7:83:27:ee:96:86:2f:34:a2:bf:df:ef:e3:
                    f7:ac:36:99:6e:82:2c:bb:5d:4d:76:ee:91:57:49:
                    55:71:93:4f:3d:55:65:53:ad:92:c1:3e:9b:f0:84:
                    d1:e1:04:61:c6:49:65:92:1b:5e:6c:d0:9c:f0:fc:
                    4d:8b:59:ba:56:fe:43:79:f3:a9:9a:2d:05:09:7f:
                    03:07:8c:9c:50:bb:f1:7d:11:f4:a4:fc:6e:0d:10:
                    79:b5:a8:6d:75:45:d2:3a:e8:87:d0:8e:40:08:50:
                    1f:fc:d4:f2:6b:c4:04:d9:c0:19:38:f7:3f:db:98:
                    11:a3:cc:7b:e3:e3:d9:f9:e3:f1:a9:14:0d:2d:b4:
                    2d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:49:1D:FD:0A:26:9D:9B:E5:EC:A1:91:A1:73:25:21:3C:2F:46:A7
            X509v3 Authority Key Identifier:
                keyid:EC:F6:F3:53:9A:4F:E0:8C:A2:6D:17:F9:8D:CB:15:9A:04:7C:BF:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7PbzU5pP4IyibRf5jcsVmgR8v-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662F58/7594EBF2498711EA969C9454F8AEA228/7PbzU5pP4IyibRf5jcsVmgR8v-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:28:e8:2f:53:4a:af:e1:d9:02:36:e4:b9:1b:99:c4:16:20:
         a2:a5:d9:df:df:d0:94:eb:d5:e3:f3:41:7b:6c:cf:1d:3c:a1:
         1d:67:f8:69:7b:25:34:bb:8b:38:bb:dc:c2:7e:e5:d1:2f:2c:
         d9:39:4c:63:76:f1:9c:60:34:f4:44:15:0c:6b:62:5b:51:d3:
         53:27:45:9c:16:dc:70:d7:a5:b0:13:d5:ae:5f:da:1b:5f:ee:
         8d:2c:d9:2a:4f:24:84:1d:7a:c6:68:c0:6f:9e:2b:8e:1d:cf:
         d1:fb:29:f0:48:28:fa:85:b0:92:2b:05:8c:54:bd:00:7c:8e:
         63:5f:da:fa:80:e6:7b:de:9b:77:eb:76:73:1d:92:32:95:18:
         11:18:33:6e:30:0f:17:a0:8c:97:30:4e:08:15:e3:fd:76:8d:
         43:34:6a:de:10:2b:6f:61:6a:5c:df:51:4a:6f:2f:da:b4:a5:
         d6:a9:a3:03:b3:76:0c:90:3a:5f:27:ae:ac:4b:24:ed:b3:d3:
         44:a0:43:ff:64:fb:d1:91:f7:53:a8:a6:41:02:9b:31:21:98:
         72:d4:23:a3:e6:3a:d9:41:10:49:f0:95:e4:37:2c:42:3e:18:
         af:2e:bc:de:88:75:61:28:30:fc:70:46:3b:29:41:0e:c9:5c:
         81:01:97:64
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCccwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjJGNThBRjExMC8GA1UEBRMoRUNGNkYzNTM5QTRGRTA4Q0EyNkQxN0Y5OERDQjE1
OUEwNDdDQkZFODAeFw0yNjEwMTEwMTQyMjlaFw0yNjEwMTMwMTQyMjlaMBgxFjAU
BgNVBAMTDTZhY2FlOTg2LTNlMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBfVqaFBSDmBkrQhGPCASNkbaODQ2pzA34OecdvGltsiWu2HNjAo3Vtkzv
vr9hTvzI3ziIvOmos4px3TsujCiVoDRPxvK3C/kTknRlteAlsxS5p7ahfLQ1ZHVH
iBrsq4bIwcuZv8zO3YQ1MPjeEQE76FmKlB1eiFtA14Mn7paGLzSiv9/v4/esNplu
giy7XU127pFXSVVxk089VWVTrZLBPpvwhNHhBGHGSWWSG15s0Jzw/E2LWbpW/kN5
86maLQUJfwMHjJxQu/F9EfSk/G4NEHm1qG11RdI66IfQjkAIUB/81PJrxATZwBk4
9z/bmBGjzHvj49n54/GpFA0ttC3fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUU0kd
/QomnZvl7KGRoXMlITwvRqcwHwYDVR0jBBgwFoAU7PbzU5pP4IyibRf5jcsVmgR8
v+gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyRjU4Lzc1OTRFQkYyNDk4NzExRUE5NjlDOTQ1NEY4QUVBMjI4LzdQYnpV
NXBQNEl5aWJSZjVqY3NWbWdSOHYtZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdQYnpVNXBQNEl5aWJSZjVqY3NWbWdSOHYtZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjJGNTgvNzU5NEVCRjI0OTg3MTFFQTk2OUM5NDU0RjhB
RUEyMjgvN1BielU1cFA0SXlpYlJmNWpjc1ZtZ1I4di1nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrKOgvU0qv4dkCNuS5G5nEFiCipdnf
39CU69Xj80F7bM8dPKEdZ/hpeyU0u4s4u9zCfuXRLyzZOUxjdvGcYDT0RBUMa2Jb
UdNTJ0WcFtxw16WwE9WuX9obX+6NLNkqTySEHXrGaMBvniuOHc/R+ynwSCj6hbCS
KwWMVL0AfI5jX9r6gOZ73pt363ZzHZIylRgRGDNuMA8XoIyXME4IFeP9do1DNGre
ECtvYWpc31FKby/atKXWqaMDs3YMkDpfJ66sSyTts9NEoEP/ZPvRkfdTqKZBApsx
IZhy1COj5jrZQRBJ8JXkNyxCPhivLrzeiHVhKDD8cEY7KUEOyVyBAZdk
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:56:49 2026 by rpki-client