Error: rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
File:                     MSixWW8doKps7c_JneyOHWKEieU.mft (raw, json)
Hash identifier:          uPjIINeXUSkFABIqvBFQ4v5AlEz3r8V0jhnO1Wh58F8=
Subject key identifier:   17:87:BF:AF:51:AA:B2:C4:89:CE:2E:2D:D2:86:EE:D8:F1:3C:DF:88
Authority key identifier: 31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5
Certificate issuer:       /CN=F3671347AF/serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
Certificate serial:       01A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
Manifest number:          019A
Signing time:             Mon 21 Sep 2026 05:07:08 +0000
Manifest this update:     Mon 21 Sep 2026 05:07:07 +0000
Manifest next update:     Wed 23 Sep 2026 05:07:07 +0000
Files and hashes:         1: MSixWW8doKps7c_JneyOHWKEieU.crl (hash: /IWoTHIdL6kZMe6t/QoBdhS7pUQ7uT9jPPRPYKDhhpM=)
                          2: 876C9056823811F0AD50BEB6DAE4EC9C.roa (hash: FmjhNEZbCZYUjiXuK/jj96puYqt9Q9f9SSixXv/v/IY=)
                          3: 74594750819011F0BAAC22EBDAE4EC9C.roa (hash: lk3pCRLCUb/HUyRGwNR07aBltjh1UJhq7uZ69Xw/koU=)
                          4: A40FA8E0831611F099BCE1E6DAE4EC9C.roa (hash: IUydHjwonzzPSVQdQWsBCOTf4qdbBgAkGlNb6MeI1fQ=)
                          5: 39D41848831711F0B79C4EEBDAE4EC9C.roa (hash: oqrQyadBMYdawxX49jq0Jbtm2txf/130uDVG0NFFiHw=)
                          6: E932C506831611F0967706E9DAE4EC9C.roa (hash: tNuraBBdmRnBsX8T8fQalaYtxMghZ02rNoDmpK8DF4c=)
                          7: 49DF1BFA823811F0966D6EB6DAE4EC9C.roa (hash: 94vpLfKlFsg/QtwEdwPCd3PKqQroRPh8vm+klqQcxnY=)
                          8: 0ABADEAC831711F08AB92EEBDAE4EC9C.roa (hash: ZrkF0GhmCxfvqijo/YwHXsJCMK6ucZZ7bXMseXzxa9o=)
                          9: 9045DD5A823711F0A21A98B1DAE4EC9C.roa (hash: eyZ9yZrBBgy/71qSkPKciubjX/IL3eKPd8xWFBAiHnM=)
                          10: BA6C7CB0823711F0B922C0B1DAE4EC9C.roa (hash: 1sAGylLK0t+wy+kNU8P4eB9ajj4oeVIm5IaViXHc3V4=)
                          11: FCD1B060823D11F082F2DCDDDAE4EC9C.roa (hash: DEMbJ1fpxckeqnBF4G9Ph+TgPF8w10GVo9kBf+4mx1Q=)
                          12: FD2B626E823711F0854FBAB5DAE4EC9C.roa (hash: oX6C3aFWkcjYWTiygsopoqQv2/W30taLI5gR+gx6saU=)
                          13: 88670070819511F09786F98BDAE4EC9C.roa (hash: T1wOQVQ7DTYzmeNn2R6QyD9aOQXs8A6sr9yud0Xydxk=)
                          14: C62BE790831611F0848ADEE8DAE4EC9C.roa (hash: 2jF111Vd/S7zsiWrg4vZQJoQV7Acsi0SEn4OzYgJrJk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671347AF, serialNumber=3128B1596F1DA0AA6CEDCFC99DEC8E1D628489E5
        Validity
            Not Before: Sep 21 05:07:07 2026 GMT
            Not After : Sep 23 05:07:07 2026 GMT
        Subject: CN=6ab0bb7c-ab78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:1e:0b:03:30:74:a7:90:62:85:d6:fb:03:
                    78:3d:50:1a:83:eb:a4:90:39:84:ad:2e:4d:21:e4:
                    5d:36:bd:a2:9e:65:8a:76:58:fd:c7:fc:5d:8d:36:
                    84:a1:92:cd:95:77:64:98:c6:6d:4f:a0:e9:54:5f:
                    56:6d:b0:fc:ce:e1:68:bd:bc:07:8d:af:b4:2c:1f:
                    7f:f2:c4:a0:c7:9c:d0:0d:5e:0e:10:61:82:f6:a9:
                    a9:3e:a5:58:45:8b:10:b2:ac:e9:4b:70:20:25:79:
                    2d:b1:54:68:73:27:fd:0d:88:4a:9a:cf:c8:68:69:
                    c7:12:3e:5a:f9:c1:22:c8:f3:ae:27:ee:6d:5d:c3:
                    d3:39:5c:73:a6:34:c8:a3:e9:24:1a:00:62:ef:c3:
                    98:af:48:1e:8a:1b:db:0b:8c:70:8a:59:4f:c3:82:
                    7e:18:79:55:a5:28:2c:d7:12:17:a7:16:ff:03:16:
                    63:23:08:d8:0c:56:5d:c9:14:b0:51:c4:ad:70:f4:
                    0f:7b:dd:92:86:34:99:db:f9:1a:96:88:58:45:c0:
                    a2:6d:2c:36:a2:02:99:00:44:8f:bd:14:55:98:4c:
                    cb:4a:b0:0d:0e:25:e6:fd:27:7a:f4:6f:c9:87:ef:
                    dd:ad:6a:1b:70:e2:24:8f:e9:6e:24:90:b6:0a:94:
                    da:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:87:BF:AF:51:AA:B2:C4:89:CE:2E:2D:D2:86:EE:D8:F1:3C:DF:88
            X509v3 Authority Key Identifier:
                keyid:31:28:B1:59:6F:1D:A0:AA:6C:ED:CF:C9:9D:EC:8E:1D:62:84:89:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MSixWW8doKps7c_JneyOHWKEieU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671347/253D17E4818D11F09A3553D5DAE4EC9C/MSixWW8doKps7c_JneyOHWKEieU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:73:ef:5f:ef:54:87:54:d1:38:56:6f:06:a4:f0:4b:ce:0f:
         71:6e:50:92:70:42:4d:20:9d:0a:24:1e:d8:6b:83:3e:f8:c3:
         aa:ef:25:f4:13:c6:9f:40:e3:77:95:e0:3a:05:fd:47:72:e0:
         36:a0:ab:77:4e:42:ba:35:a3:b8:0f:97:38:bf:af:99:a7:d7:
         ac:3c:97:58:1d:be:6b:9c:9b:ed:a6:79:f8:8e:b8:3e:eb:87:
         ae:87:43:34:53:26:5a:82:8c:3c:c2:d9:28:bd:bb:7b:f1:9e:
         fd:fa:3b:6f:71:88:96:b6:92:ab:fb:0d:47:40:a0:27:a9:a4:
         3a:7c:89:c4:7f:20:51:fc:3f:24:ce:79:31:88:4f:ef:44:f4:
         0b:c6:86:af:0b:a6:91:09:54:c7:78:d7:8b:2e:c6:54:d8:e8:
         05:64:38:aa:e3:92:8c:d5:05:3a:c6:f2:f1:7b:20:54:27:70:
         c3:3b:ff:da:f9:8e:75:f1:88:8c:35:25:36:e5:93:96:f8:25:
         25:ca:49:b9:6e:64:65:dd:c1:5f:50:da:a5:76:e6:1d:6f:70:
         09:9a:28:8b:f2:54:ab:47:bb:9b:31:c0:b0:d4:bc:1f:ce:62:
         8f:01:b8:36:d3:50:4f:b2:b7:ec:a1:46:62:19:6e:bc:74:fb:
         c3:b0:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:27:45 2026 by rpki-client