Error: rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.mft
File:                     _6g_-fD2ziFxW9v1xzfN3OlU53w.mft (raw, json)
Hash identifier:          yvSjL38JcwQn+KFWb24o6V/IA4WFDb/NYwh6sGOcbP0=
Subject key identifier:   45:34:46:4A:89:3D:51:D5:D7:E8:38:DA:1B:5A:A0:ED:D3:13:98:F3
Authority key identifier: FF:A8:3F:F9:F0:F6:CE:21:71:5B:DB:F5:C7:37:CD:DC:E9:54:E7:7C
Certificate issuer:       /CN=F3671DBDAF/serialNumber=FFA83FF9F0F6CE21715BDBF5C737CDDCE954E77C
Certificate serial:       0618
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_6g_-fD2ziFxW9v1xzfN3OlU53w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.mft
Manifest number:          0617
Signing time:             Mon 28 Sep 2026 02:52:51 +0000
Manifest this update:     Mon 28 Sep 2026 02:52:50 +0000
Manifest next update:     Wed 30 Sep 2026 02:52:50 +0000
Files and hashes:         1: _6g_-fD2ziFxW9v1xzfN3OlU53w.crl (hash: ZC6AV74Jw1yUA5zG989q2aZCIpQtclBZQZxGhdFZJ04=)
                          2: CD41BC4C987611F090377BD7DAE4EC9C.roa (hash: WIelbzepq8miuTgT/TViuYjo/4OwJv5AvUtvY4ekc/U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_6g_-fD2ziFxW9v1xzfN3OlU53w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1560 (0x618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAF, serialNumber=FFA83FF9F0F6CE21715BDBF5C737CDDCE954E77C
        Validity
            Not Before: Sep 28 02:52:50 2026 GMT
            Not After : Sep 30 02:52:50 2026 GMT
        Subject: CN=6ab9d683-fbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cc:bc:e9:31:b2:e3:3d:53:41:ac:a5:f6:75:
                    55:ec:6a:da:56:9b:a3:ab:9a:b3:4d:17:72:b2:86:
                    ad:1f:12:e3:75:aa:40:06:43:aa:4f:42:c4:37:f8:
                    1a:19:2b:ba:5f:1f:bd:92:93:f5:a2:21:95:22:e7:
                    76:fc:52:ac:0e:f0:79:1c:f3:49:a7:10:2c:88:fd:
                    86:5e:66:18:f1:85:11:82:bf:e5:b1:0e:a5:f0:67:
                    f8:bd:d2:11:54:0d:97:d0:44:d1:4d:51:dc:68:35:
                    ea:7a:fe:67:9c:a6:3e:fe:d3:a8:03:5c:e6:4f:46:
                    1a:8b:15:c3:ff:a9:29:61:fa:23:1c:07:15:d7:ba:
                    dc:95:15:48:a2:9c:84:8f:13:99:15:01:c6:17:39:
                    12:cd:81:cf:49:43:bf:0e:92:e0:b2:50:a8:fd:2b:
                    a7:a5:26:0c:c2:55:df:0f:7b:5e:81:cd:a2:36:42:
                    f8:01:f6:49:37:44:a8:5e:62:76:78:5c:50:39:12:
                    d8:07:8b:bc:1b:95:8b:4f:62:de:dc:1f:63:b2:4c:
                    03:a5:ca:cc:fc:06:b6:68:12:5a:1b:a6:6d:85:2f:
                    c4:bc:35:f0:1f:be:a0:37:c6:74:82:d0:00:0b:8e:
                    f4:46:8d:05:0f:72:ef:25:aa:71:cb:e3:74:a9:ff:
                    d0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:34:46:4A:89:3D:51:D5:D7:E8:38:DA:1B:5A:A0:ED:D3:13:98:F3
            X509v3 Authority Key Identifier:
                keyid:FF:A8:3F:F9:F0:F6:CE:21:71:5B:DB:F5:C7:37:CD:DC:E9:54:E7:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_6g_-fD2ziFxW9v1xzfN3OlU53w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/26986406124411EDAD5815B4F1222468/_6g_-fD2ziFxW9v1xzfN3OlU53w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:37:ff:5e:70:4d:f1:4c:01:47:cd:d9:5d:0a:0e:55:be:6f:
         d3:9c:43:85:5b:33:6e:2e:4a:91:f7:28:5d:2e:34:ef:89:ab:
         82:74:13:36:88:0b:b6:23:22:d9:51:74:97:10:09:da:b5:1f:
         d3:a1:66:ac:8b:87:5a:e6:38:ef:f6:8d:bd:c0:f9:71:aa:4c:
         65:de:46:07:ae:2c:7f:af:1b:40:6e:5f:41:9d:34:d2:fa:52:
         c2:b9:bc:97:e2:51:e2:3e:58:39:68:01:d5:68:22:e0:f2:ed:
         74:a7:a6:2c:cc:df:4d:d8:9a:d7:2f:9f:d7:bf:1e:98:ee:53:
         d4:20:54:9a:6d:ca:ec:34:a0:71:57:15:62:81:29:0f:d7:ae:
         31:6f:58:94:16:14:14:71:40:7c:3e:0b:e9:6e:00:60:20:51:
         a6:be:e5:5b:67:d7:b3:b2:19:15:cb:f9:8c:a9:da:03:c1:e8:
         e3:f8:73:04:6c:10:73:3e:af:35:45:3d:28:a9:f2:6d:35:eb:
         dc:ec:e1:e0:09:b4:f3:ff:93:1a:57:36:3f:d5:c2:54:38:df:
         cb:91:ed:37:a6:e6:84:22:99:7c:0b:07:d8:92:64:92:00:8d:
         c7:9e:65:7a:55:68:cb:9d:55:8d:97:0e:9d:f3:a9:e3:bf:f4:
         83:50:86:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:46:34 2026 by rpki-client