Error: rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
File:                     4CGdWkzYWCxPN-LQ3dcGt369n2w.mft (raw, json)
Hash identifier:          HB66CO6zFw0FzTaZNn0hKT43mSSPpMWPB3lCyEbjnvY=
Subject key identifier:   2E:64:70:BB:78:74:69:EC:BA:02:6D:35:C4:D0:B4:06:7E:DF:CD:B7
Authority key identifier: E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C
Certificate issuer:       /CN=F36663C2AF/serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
Certificate serial:       06AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
Manifest number:          069B
Signing time:             Tue 13 Oct 2026 02:42:08 +0000
Manifest this update:     Tue 13 Oct 2026 02:42:07 +0000
Manifest next update:     Thu 15 Oct 2026 02:42:07 +0000
Files and hashes:         1: 4CGdWkzYWCxPN-LQ3dcGt369n2w.crl (hash: BSgJsQ2b18MN0AH4v/bUyOQIaZdUdHSrfLDII+Qza8Q=)
                          2: 43499CAEE06111EEAD369C57775412E6.roa (hash: BqZi3Jf+58/WulzjWYWd6LnvU4vDKMabeieGFixEMoQ=)
                          3: B3406C3EE06311EE9DC9645B775412E6.roa (hash: ogaYGhijbZfnfBJbAW8m4J3DjXL9JovFwrfT8ageG8c=)
                          4: 62AAD5B8C4AD11F088EE28D5DAE4EC9C.roa (hash: V/PGdom7dT1wyeknHKrUkkzFdZubko4PFPhY+dUZjI8=)
                          5: 98D1105A2F8111F1B6797183DAE4EC9C.roa (hash: U+9nzpaWEUGpqPI6H1GyO4VQB+Kl6s6lnme7de8ebww=)
                          6: 930D3556C4AE11F088545DDBDAE4EC9C.roa (hash: pZvKmBeXmwbStC6508pXvq67gXEFBPlOqFduOBW2GH0=)
                          7: AB8B3D22C4AD11F0AEE90BD7DAE4EC9C.roa (hash: 2tRGD2oLj/HLCtH3fXvt5xrNupgPKXIIViu9/t9+M/E=)
                          8: 107A839AD49C11EE8138FA6E775412E6.roa (hash: NbPQB72+8cMeXRD62I/wbwttaa2xbNKWZ7NyDUoCiQM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36663C2AF, serialNumber=E0219D5A4CD8582C4F37E2D0DDD706B77EBD9F6C
        Validity
            Not Before: Oct 13 02:42:07 2026 GMT
            Not After : Oct 15 02:42:07 2026 GMT
        Subject: CN=6acd9a80-cddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c2:93:94:1d:fd:24:be:09:4e:f2:54:f7:d1:
                    a6:08:ff:f3:1d:bf:54:81:03:68:93:8f:b6:e5:60:
                    7a:4b:21:b8:42:5a:87:19:96:14:14:6c:6f:3a:74:
                    64:2d:52:86:ae:08:3e:87:1c:bf:6a:e6:68:49:f8:
                    b4:ab:92:f3:38:fc:66:d6:72:af:33:eb:10:dd:4b:
                    34:fd:19:bd:60:11:7c:c8:83:fd:16:1d:f0:7a:05:
                    45:1c:c4:15:10:ef:f2:1a:85:b7:3e:3b:fc:67:8c:
                    4e:b0:53:c5:ca:34:e6:6f:31:61:7f:55:c6:26:21:
                    1d:c3:a8:0b:67:84:e2:a2:d0:fd:19:81:85:ee:91:
                    8e:3e:9b:6c:0a:1d:14:d9:2a:33:bf:33:ba:82:0e:
                    f0:bb:7c:71:3a:2e:a9:49:4e:98:32:36:cd:76:74:
                    bc:a6:96:07:9e:ce:fe:71:cc:54:7b:ab:63:e4:06:
                    53:80:3c:a2:7a:bf:02:77:83:c0:1a:83:a4:0d:6e:
                    24:dd:15:ab:3f:8d:37:90:ea:99:76:a7:cd:fe:83:
                    d6:8d:a5:42:58:fb:4a:18:d3:cf:d2:1b:81:b1:89:
                    99:fb:87:4d:a3:0d:d3:3c:59:f1:b7:7b:6a:7b:8b:
                    79:19:ed:3c:ff:c1:78:e7:2b:80:c9:ff:8d:4f:cb:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:64:70:BB:78:74:69:EC:BA:02:6D:35:C4:D0:B4:06:7E:DF:CD:B7
            X509v3 Authority Key Identifier:
                keyid:E0:21:9D:5A:4C:D8:58:2C:4F:37:E2:D0:DD:D7:06:B7:7E:BD:9F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CGdWkzYWCxPN-LQ3dcGt369n2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36663C2/B390E9E8C78311ECB1982894F1222468/4CGdWkzYWCxPN-LQ3dcGt369n2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d6:c1:d6:18:66:ad:72:2f:95:43:30:74:7f:f6:c0:30:87:
         70:89:84:93:50:67:9a:df:cb:6c:ba:b6:95:29:6a:d9:52:98:
         7b:76:29:e3:06:ff:28:cf:e8:4d:fe:ff:f3:7a:34:85:14:4f:
         9b:9f:e0:29:04:93:7b:da:ec:60:04:6c:8f:d8:c7:6e:62:74:
         48:8b:9f:b2:d4:1a:2d:6e:79:06:07:a0:4b:b3:4b:d6:d8:65:
         1f:e0:72:88:39:71:26:ea:58:46:7c:f1:5c:5e:f6:c6:90:5e:
         e4:80:89:bd:9e:ea:da:8c:82:63:ad:2c:c1:5d:3b:c2:5c:bc:
         b5:01:37:1e:00:25:7f:34:a0:ba:0d:b4:e7:a5:b7:de:f4:bd:
         ac:42:e6:7f:f2:66:74:7a:5d:25:dd:fc:0a:ea:96:29:16:4c:
         40:ff:f0:c7:6a:32:4d:ef:7c:b5:5a:e7:80:57:c4:58:c0:35:
         d1:0f:28:45:b4:ef:12:31:38:52:2e:12:89:8c:1d:e0:ac:cc:
         25:66:4e:46:c3:0e:74:ec:d2:f4:8f:f1:0d:f8:35:81:79:bf:
         e9:2e:8e:78:12:1d:1e:be:e2:e2:08:92:db:12:8b:c7:30:89:
         5f:55:5d:10:c3:1a:10:28:aa:64:3c:72:c2:a5:44:b5:d2:a2:
         11:b3:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:09:52 2026 by rpki-client