Error: rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
File:                     m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft (raw, json)
Hash identifier:          pby5SMgITjKxHl7i7Y8CWBN31e3IbXiOIAg3r/jJjRo=
Subject key identifier:   7E:0A:F1:E9:FF:8B:B9:5D:60:86:DC:D0:04:76:11:1C:1D:26:18:C6
Authority key identifier: 9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76
Certificate issuer:       /CN=F3674116AF/serialNumber=9B7CD4913D4D40C2C8E10BEA394A8596BC3FE776
Certificate serial:       0712
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
Manifest number:          070F
Signing time:             Tue 22 Sep 2026 02:31:00 +0000
Manifest this update:     Tue 22 Sep 2026 02:30:59 +0000
Manifest next update:     Thu 24 Sep 2026 02:30:59 +0000
Files and hashes:         1: m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl (hash: f3aQsm0ArFTwolQzKd7LBI7evUugp9Acxklmyrkfy6Y=)
                          2: A9B68E7E8CBD11F18B8B3EBBCE1D38B0.roa (hash: tLf+CdLndlMDwT1whxmey2nOu8LbtccCmtoIbW8U5fA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1810 (0x712)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674116AF, serialNumber=9B7CD4913D4D40C2C8E10BEA394A8596BC3FE776
        Validity
            Not Before: Sep 22 02:30:59 2026 GMT
            Not After : Sep 24 02:30:59 2026 GMT
        Subject: CN=6ab1e864-1e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ff:cc:02:83:d1:6f:4d:4e:7f:8e:df:2c:d3:
                    e3:47:05:1d:4e:47:55:c7:90:84:b8:e9:9a:d6:53:
                    0c:97:96:93:30:39:e5:0a:90:4d:08:c2:04:c0:f8:
                    b5:a8:75:48:ba:b1:4c:b4:1b:f4:93:b8:87:8f:64:
                    44:75:50:0f:09:9d:78:97:be:fc:43:4f:80:f0:92:
                    62:1a:d1:31:c9:bd:f5:63:2d:4a:01:32:cb:f5:12:
                    1a:86:76:a2:17:ee:3c:7d:f9:13:07:70:f1:79:5a:
                    99:c4:6d:37:a9:52:4b:4a:c8:7b:8f:b7:62:2b:5c:
                    96:4b:29:50:45:bf:68:52:10:5f:66:e0:d7:03:ae:
                    3c:b1:d1:95:dc:a0:cc:54:03:c6:46:3a:64:58:71:
                    47:b8:ca:1b:03:2b:30:92:a6:f2:15:90:e9:c2:35:
                    b8:36:1c:81:df:af:21:86:c5:79:b7:b8:80:21:f7:
                    b2:b4:83:45:b0:9b:1a:49:58:29:12:6a:3a:e7:56:
                    a9:f5:55:73:4d:41:cd:e2:52:ab:e3:92:aa:36:2b:
                    65:f9:74:2d:16:e9:73:c4:59:77:05:16:0d:1c:81:
                    6d:03:0a:bc:aa:8c:49:1c:85:ae:39:44:55:18:e3:
                    d8:03:eb:5c:8c:f3:29:4e:a9:7b:d3:a1:dd:a9:c2:
                    ef:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0A:F1:E9:FF:8B:B9:5D:60:86:DC:D0:04:76:11:1C:1D:26:18:C6
            X509v3 Authority Key Identifier:
                keyid:9B:7C:D4:91:3D:4D:40:C2:C8:E1:0B:EA:39:4A:85:96:BC:3F:E7:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m3zUkT1NQMLI4QvqOUqFlrw_53Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674116/9F8177DC4DC711EC99D4F415D8A014CE/m3zUkT1NQMLI4QvqOUqFlrw_53Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8c:60:d7:df:ac:cf:ab:4a:ad:74:33:01:e8:ba:79:a4:84:
         ed:11:40:bc:aa:ff:08:de:19:6b:9e:22:bc:7e:bb:26:9d:d7:
         a3:9f:69:f9:77:b2:a3:79:8a:a7:b8:0c:bf:f6:72:70:c4:02:
         17:0d:7c:9d:c9:81:ee:da:d2:05:67:e4:b9:ad:a2:b3:13:91:
         21:2d:43:21:ba:5c:e3:9d:31:3e:84:e0:09:67:77:74:78:74:
         bf:d7:cb:08:9e:ea:8a:e9:38:3a:10:e8:1d:e4:b5:e8:ba:67:
         b8:e7:a4:61:8f:28:fd:ce:e5:8d:85:b0:0a:c4:74:ea:f2:b4:
         d6:f7:39:67:12:5c:b8:fb:9d:f1:d1:cb:bb:c8:e3:16:e2:db:
         a8:21:c0:a1:f6:e4:b9:29:bb:67:d4:d0:f8:ff:47:63:e5:9d:
         4c:e3:55:72:0b:ad:c5:a9:6e:3e:a6:32:80:ef:27:1a:08:ea:
         f5:8c:6a:c7:b7:14:48:82:74:bc:9d:28:68:4c:ce:2f:ee:a3:
         f4:9b:c4:78:74:8b:ae:6c:21:c8:7a:ec:d0:c9:6a:e0:bc:1f:
         95:cc:80:34:69:08:97:d2:9f:69:6a:c7:9f:72:d2:ad:cf:bf:
         6d:f6:fc:59:6b:48:4b:b1:1b:23:6f:42:50:cc:47:a6:c3:76:
         bc:55:5f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:26:23 2026 by rpki-client