Error: rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
File:                     7CqGNogipH8Tl9jc5XNMUwJyyWU.mft (raw, json)
Hash identifier:          OL4/zJfqfdCIuzGZXkhloY1OlWd57TihKMaK8apvrwg=
Subject key identifier:   93:F1:1A:1B:8E:39:03:E3:B5:69:AE:DA:8C:5A:5A:6B:5C:36:59:43
Authority key identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
Certificate issuer:       /CN=F366DC11AF/serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Certificate serial:       0971
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
Manifest number:          0967
Signing time:             Sat 10 Oct 2026 01:48:41 +0000
Manifest this update:     Sat 10 Oct 2026 01:48:40 +0000
Manifest next update:     Mon 12 Oct 2026 01:48:40 +0000
Files and hashes:         1: 7CqGNogipH8Tl9jc5XNMUwJyyWU.crl (hash: bw2LH8WJjPLVbB7WBGkUfMkdS4tdQuSMJFYME36LS68=)
                          2: CDF267EC962A11F1AB7D3EE4CE1D38B0.roa (hash: zg4XInn5ZQ7pmwsSgpxt4x0fVKl2OnqlLN2rg8imuTQ=)
                          3: 6500DE068A6511F1B08DB3DFCE1D38B0.roa (hash: 29MXciPH3Gu1aj7UAPI2yNVj/TEMvdY5Ea0HCVpZx8U=)
                          4: F2BE981A967811EA8430035BF8AEA228.roa (hash: dllLDZtxzSgyYd/WqilpdpG05+LSe4K0PZ7Qf+hqmSQ=)
                          5: 341C8B76E6A811EAB16AE924F8AEA228.roa (hash: n6dIOaYQglTdS7hxNkLDiY5bWezfODiv8ADCJeufuHM=)
                          6: 9AAE541C962B11F1804FAEE8CE1D38B0.roa (hash: riwA4TgoDLmktylC5BL11hz6/LujdhFjN4PMwkUkvcc=)
                          7: 21EBF2FA808E11EFA13738B8762E951A.roa (hash: lyLTmMKZ2ESJbQ4/CGDElnvp4KAGPEgfFJbkcYzjAzw=)
                          8: 91B3C2A696FE11F1A55481EDCE1D38B0.roa (hash: wViezgn3zihY7XOFaUx0wP080kC6nNBg/ZnQQ9dh0pE=)
                          9: ECD9C68A96FE11F1B071A5EDCE1D38B0.roa (hash: hOsh3Ee+3Hcy2mA/n2V5pl9ECsGPo5cO1HSfr+TCQcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417 (0x971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AF, serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
        Validity
            Not Before: Oct 10 01:48:40 2026 GMT
            Not After : Oct 12 01:48:40 2026 GMT
        Subject: CN=6ac99979-a07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ca:62:bc:71:aa:ca:df:a9:10:e0:54:4c:e4:
                    c0:be:9f:0d:c7:57:7b:3f:fd:54:23:c0:6e:e1:c1:
                    93:c5:8b:93:9a:92:99:e1:ab:33:f4:41:e8:9d:6c:
                    21:aa:d0:a3:0a:17:11:77:4f:78:e0:37:c2:15:b0:
                    90:cf:ce:f2:71:19:56:dd:cf:81:65:fe:ca:bf:39:
                    0e:18:77:93:33:d5:7a:f5:66:e9:17:8a:19:ab:38:
                    7a:1d:7d:06:56:4b:d0:55:d6:ce:bd:23:72:72:4c:
                    78:c4:cf:0f:03:64:be:9c:68:ea:9e:df:92:1c:be:
                    e1:b0:68:47:6a:e0:84:43:06:dc:be:f7:a2:ce:29:
                    14:c4:75:80:6d:3d:d8:c6:66:54:f4:ff:b3:fd:ff:
                    a6:2f:8c:5a:5f:62:45:40:5c:84:d8:38:33:a8:46:
                    99:80:90:b8:7c:53:ec:a9:b0:18:ab:c3:65:7e:85:
                    a4:f0:85:15:49:fb:5c:c1:fa:40:17:a5:1f:53:a4:
                    8d:b8:80:a4:56:b1:f3:62:4c:c7:84:8c:3a:06:b3:
                    42:ce:08:02:13:84:ff:72:ff:bb:79:9a:47:b8:d3:
                    a7:0d:81:00:e8:8e:5f:97:70:cf:f6:7a:fe:47:6a:
                    02:52:d7:2a:f2:2a:2c:1a:f6:47:79:a6:9c:cf:25:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F1:1A:1B:8E:39:03:E3:B5:69:AE:DA:8C:5A:5A:6B:5C:36:59:43
            X509v3 Authority Key Identifier:
                keyid:EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:2f:7f:49:40:20:44:b5:98:26:0f:eb:00:16:f2:96:5d:63:
         69:a9:d4:fa:cb:9c:55:b2:d6:ff:00:9f:46:31:e2:9e:3e:7b:
         25:b8:17:ad:b9:24:c8:d0:c3:05:97:3d:89:c4:2c:c4:2b:fe:
         93:0d:a0:c1:f9:f5:e5:e5:17:56:a4:8a:3f:8a:e6:dc:60:2b:
         84:22:0a:40:01:7a:d5:f3:2d:51:84:24:6f:70:f6:25:58:7a:
         e9:ae:2b:f2:40:b3:45:0e:39:87:94:9e:69:8d:29:66:27:95:
         1c:a5:20:a9:ab:ee:4b:61:65:e4:72:aa:6e:bf:b8:f2:09:75:
         b5:7e:24:9e:6b:6b:f8:72:4f:c3:cf:7a:df:be:5c:73:08:e5:
         cb:a6:5e:cb:ae:31:38:04:5f:da:73:eb:02:88:82:39:c7:e6:
         15:9a:70:2a:82:b7:3f:ba:17:56:18:50:ca:f3:c5:f8:4c:2e:
         07:7a:a2:b7:3a:d4:7f:93:cf:7c:4f:62:d8:07:14:d7:6d:e7:
         58:ad:aa:5f:3f:b2:e8:15:8c:74:a1:ef:7a:1d:d2:06:be:83:
         10:78:5c:f9:f0:9b:e7:09:7b:b0:bd:df:d2:97:60:db:67:5e:
         23:f2:28:4a:d7:e6:88:ae:33:be:26:d8:d4:bd:b4:8c:d2:76:
         1e:d7:77:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:46:54 2026 by rpki-client