Error: rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
File:                     dUDQUtEpERNWC6gtIyBCuZqopko.mft (raw, json)
Hash identifier:          qgeOyXW3cemUrp4aLhT52MyKfiMCc6GWpq0e2TTIHfI=
Subject key identifier:   49:2D:22:77:BA:3A:F4:22:D7:21:A8:20:94:35:C7:0E:4D:C4:AE:5A
Authority key identifier: 75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A
Certificate issuer:       /CN=F366C124AF/serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
Certificate serial:       0A5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
Manifest number:          0A57
Signing time:             Thu 24 Sep 2026 01:34:01 +0000
Manifest this update:     Thu 24 Sep 2026 01:34:01 +0000
Manifest next update:     Sat 26 Sep 2026 01:34:01 +0000
Files and hashes:         1: dUDQUtEpERNWC6gtIyBCuZqopko.crl (hash: 2LMTHAmpEaiFM4vyIbhCKpyimVcjV8xqe9XDQLMHX2g=)
                          2: F2B47ECE67CF11F0A078F98BDAE4EC9C.roa (hash: P3LDJsnxMQwbvrXOtqRElx5hirBS3sM/lIPVBob33/w=)
                          3: C82D839403C511EBB1822323F8AEA228.roa (hash: BRU/+9vSJaKFXnQ7Cb8Og2eSBhtx9/MwNvCd1XqLbx0=)
                          4: 6707E92063FE11F18E4F77F5CE1D38B0.roa (hash: Mbiya0jc46golC3r0vHLc0oTgvNsMn+R43Ns9ZWPs90=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2651 (0xa5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C124AF, serialNumber=7540D052D1291113560BA82D232042B99AA8A64A
        Validity
            Not Before: Sep 24 01:34:01 2026 GMT
            Not After : Sep 26 01:34:01 2026 GMT
        Subject: CN=6ab47e09-480c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:27:ec:06:91:8d:ce:3f:08:7e:8c:f8:17:3c:
                    7d:b7:1a:45:c3:95:09:8e:69:91:ac:a1:77:78:57:
                    02:b2:7c:54:b1:58:12:98:09:4f:8a:f8:95:b5:6e:
                    d2:db:bf:6a:a4:81:7b:dc:86:50:6f:f4:fa:0b:f5:
                    6d:81:4d:96:3f:ed:9c:08:47:dc:07:c0:6c:0e:42:
                    0a:29:88:c2:4e:5c:e1:84:1b:df:23:62:f0:b9:e9:
                    2d:22:a6:63:6b:ff:cb:5a:f0:64:32:ce:14:e1:9f:
                    97:21:05:5c:ce:15:11:5e:cb:4f:3b:d8:c4:4a:9b:
                    a5:16:fd:9a:12:a6:a6:3d:7e:dd:36:97:06:b7:66:
                    dc:c1:82:59:46:a1:f4:32:c9:c8:73:66:a1:e8:20:
                    09:ed:7e:89:d7:59:34:49:2d:8e:16:92:e4:55:b2:
                    59:5f:2a:a9:f2:dd:51:c2:71:be:a5:ac:e4:97:d4:
                    e3:51:16:db:2f:a1:dd:8c:fe:59:05:5f:70:b1:db:
                    da:ac:e6:26:56:18:b6:56:bc:80:43:92:c4:3c:40:
                    36:5e:9b:e7:62:dd:d0:d3:7d:3f:ec:6e:54:5d:dc:
                    a7:27:7d:ef:07:b2:f0:db:79:c8:1e:67:ff:68:ab:
                    ac:55:8d:47:24:79:86:83:7a:3c:5c:cf:29:75:e4:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2D:22:77:BA:3A:F4:22:D7:21:A8:20:94:35:C7:0E:4D:C4:AE:5A
            X509v3 Authority Key Identifier:
                keyid:75:40:D0:52:D1:29:11:13:56:0B:A8:2D:23:20:42:B9:9A:A8:A6:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dUDQUtEpERNWC6gtIyBCuZqopko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C124/21E2D0D4CAF011E98C204478F8AEA228/dUDQUtEpERNWC6gtIyBCuZqopko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5d:4c:46:b3:e1:c6:e7:23:b2:88:34:6a:f0:15:ba:e4:0e:
         29:39:8e:b5:90:b1:ef:00:25:31:56:f8:30:30:62:51:87:17:
         48:78:b2:d9:b3:50:d7:b9:2d:d1:42:b6:e4:d1:4b:ea:1d:7c:
         2c:90:ea:2d:22:e8:28:9c:ec:49:96:e2:88:15:a7:04:23:fe:
         49:24:3f:97:c8:dd:93:e0:57:8e:0b:22:e5:81:08:27:1e:a9:
         7b:07:e0:bd:54:25:c5:2c:c6:e0:ea:3f:53:a4:8c:1a:05:b3:
         53:41:23:a3:c0:8d:be:9f:0c:6a:c3:c9:49:bb:ed:cf:f0:db:
         94:65:df:e8:3f:62:07:1b:de:fc:02:20:85:42:00:15:f5:aa:
         e3:5e:cc:0e:23:30:bf:8d:1c:ec:c2:01:ff:11:ea:0e:19:54:
         0d:64:aa:5b:4b:e5:b9:b1:62:0b:1e:7d:69:56:84:5c:7f:9e:
         fd:4d:e3:21:f4:e6:4f:e5:18:1d:ec:89:57:b0:3a:d0:32:27:
         0a:45:cf:b4:37:b9:06:df:9e:46:36:fd:3b:00:75:30:88:fb:
         5f:c0:02:ea:fc:2a:b8:e0:2d:d4:10:36:81:c2:07:7f:73:fb:
         b7:71:87:47:da:b3:a3:1d:78:76:37:b5:42:64:13:20:f6:c0:
         ea:85:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:31:45 2026 by rpki-client