Error: rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          dk/4dt9OQp+3b2/7UjFnl1Cw3BC9YHkS17KBbtTTWdI=
Subject key identifier:   56:E5:FA:D7:4D:19:2B:BA:15:7F:82:77:8E:73:90:36:78:75:3F:D5
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       0958
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          094F
Signing time:             Mon 21 Sep 2026 01:48:32 +0000
Manifest this update:     Mon 21 Sep 2026 01:48:31 +0000
Manifest next update:     Wed 23 Sep 2026 01:48:31 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: pfJjKhROiKkPLGT0iiFegbY5iPlVS8AqCCx9U7c0Dw8=)
                          2: 99A8625A96FE11F19C5185EDCE1D38B0.roa (hash: ECeVYVnqSVePtrNnv7WRQg4E/vshrUHBa3IjZ0zix/s=)
                          3: 5F3603A4962A11F1933886E0CE1D38B0.roa (hash: KMBACeJyVBJ0puCbfz/1XEtdPxL3K0XtxQ8Urj+oW2Q=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
                          6: F3C4F07896FE11F1AAB3ACEDCE1D38B0.roa (hash: 2/iMpDmTcl0zOebckPQ0ks803UQyEcERHUqi3OJVhhg=)
                          7: 51F67174962F11F188DB07FDCE1D38B0.roa (hash: C8vjN53fFmtWhX47uFtrZkO/tziLE7NPmO35j+SgWFQ=)
                          8: 5EFC7BDC8A6511F19E0DA0DFCE1D38B0.roa (hash: c6XaX+zU98bORccST4vkvWDGnTdu9fL1YRi4X5XYzmE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:48:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392 (0x958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Sep 21 01:48:31 2026 GMT
            Not After : Sep 23 01:48:31 2026 GMT
        Subject: CN=6ab08cf0-0ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:83:f2:6c:51:dc:ed:7b:dc:2e:78:c8:db:41:
                    5a:1e:ab:f1:f3:68:37:ca:76:36:7e:69:dd:ec:cc:
                    85:1d:37:33:18:17:42:6a:8a:c3:b6:e0:aa:0d:e4:
                    73:b6:26:f9:4b:7f:0b:94:49:ce:13:bd:95:cf:12:
                    ed:92:e2:48:fc:c2:05:f5:89:36:8b:ed:b7:73:72:
                    a7:d6:ab:a7:97:86:04:e8:0a:f7:11:c1:60:bd:93:
                    88:5e:f1:1d:f1:db:8a:f5:5e:5d:37:dc:e4:02:90:
                    a5:2c:71:95:84:2a:c3:d3:ab:24:f6:36:ec:60:3b:
                    4f:b8:af:23:05:25:ad:a9:5d:7f:91:56:f4:58:43:
                    56:2d:73:58:ce:a3:2a:2b:a0:a1:59:93:71:22:4d:
                    17:7e:73:04:86:8f:7b:12:8b:4b:05:e3:77:51:13:
                    cb:a6:e4:74:6d:a1:dc:97:13:bd:fc:4c:a7:7f:87:
                    a4:ad:d9:1d:9f:c1:f3:d5:41:90:77:f8:b9:33:93:
                    39:bb:49:48:23:6e:b8:8a:e1:de:a1:a9:67:11:cb:
                    01:b2:e3:2a:4b:45:fa:bc:bf:58:85:62:6b:2b:32:
                    33:61:5b:12:9c:63:e2:78:aa:64:e2:d0:00:61:4b:
                    09:60:5c:7a:16:72:38:f6:0b:a5:db:fd:d6:53:fe:
                    7b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E5:FA:D7:4D:19:2B:BA:15:7F:82:77:8E:73:90:36:78:75:3F:D5
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:99:5d:e0:84:85:a9:04:e4:90:0e:d0:0a:61:9a:b2:bf:b7:
         d4:f7:fe:ee:23:ae:20:82:c1:53:0d:c1:96:e3:20:31:ce:2e:
         e4:52:a5:58:05:5a:f9:6f:d3:69:36:fd:9b:cb:c0:39:ca:77:
         0a:1a:47:81:98:1e:be:a0:b5:66:c2:9b:c0:cc:f9:26:cf:cf:
         38:5b:20:5a:2a:f2:cf:27:ae:86:6f:76:b8:b1:7a:8a:6e:c2:
         a5:d4:df:33:8c:3a:61:e7:ea:ad:a7:7f:a8:9e:fb:d5:d5:1a:
         dc:75:8f:84:60:6d:fb:4a:b8:c8:27:27:12:5c:16:5e:e3:95:
         ec:6c:75:82:f1:2b:8d:7a:88:ea:53:4b:46:89:0b:34:ea:6d:
         b1:ad:43:0b:1c:2f:8a:07:38:19:ea:f6:cd:f8:26:4e:00:a6:
         40:e1:00:d0:9a:75:a7:e0:94:57:36:63:25:e4:b0:c7:be:b1:
         5f:b6:a7:cb:f1:54:85:45:c7:9c:55:a2:0d:ad:cc:d0:fe:71:
         75:2f:0c:ff:91:91:be:18:4c:f3:4e:8a:ca:40:6a:7d:46:d1:
         09:a2:90:2f:f3:4f:dd:7b:99:49:b9:7c:dc:54:51:0e:0c:8d:
         69:eb:18:2e:19:b7:ca:ad:11:ce:55:50:f6:84:29:38:aa:a3:
         30:28:38:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:11:19 2026 by rpki-client