Error: rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
File:                     06vZVvRTcf4p_JKYqVr8svm4PS0.mft (raw, json)
Hash identifier:          7lf4/e6TBonz7pLd+U7rFbg8Vlmnjp0dP66zVasD9Po=
Subject key identifier:   8B:A5:A1:17:A1:CC:56:ED:66:4E:76:BA:B0:95:44:20:D4:7A:48:4B
Authority key identifier: D3:AB:D9:56:F4:53:71:FE:29:FC:92:98:A9:5A:FC:B2:F9:B8:3D:2D
Certificate issuer:       /CN=F367917CAF/serialNumber=D3ABD956F45371FE29FC9298A95AFCB2F9B83D2D
Certificate serial:       19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
Manifest number:          17
Signing time:             Mon 12 Oct 2026 05:58:48 +0000
Manifest this update:     Mon 12 Oct 2026 05:58:47 +0000
Manifest next update:     Wed 14 Oct 2026 05:58:47 +0000
Files and hashes:         1: 06vZVvRTcf4p_JKYqVr8svm4PS0.crl (hash: JGL9rNdbU/OHKM7OFPG4nozwSspvWfFmwg26ArxI2/Y=)
                          2: 1C600666BCA311F1A05132B3CE1D38B0.roa (hash: TR8171nphEW7FSyz10G+DypQGdrKhMK1w29QUehHjtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 05:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367917CAF, serialNumber=D3ABD956F45371FE29FC9298A95AFCB2F9B83D2D
        Validity
            Not Before: Oct 12 05:58:47 2026 GMT
            Not After : Oct 14 05:58:47 2026 GMT
        Subject: CN=6acc7718-a845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ab:ad:3e:6a:6a:f9:63:b3:72:15:21:f8:44:
                    40:9c:49:a9:aa:e5:87:10:7f:be:62:0b:4c:64:22:
                    6d:85:e6:11:f2:f1:17:19:b8:fc:54:e8:63:fb:88:
                    62:9f:8f:17:50:34:36:65:66:be:5b:86:76:d1:be:
                    c7:6e:bb:b0:7c:d6:8e:5b:ce:c5:f8:d8:9e:07:4b:
                    8b:e1:03:86:b1:e1:14:f8:1a:61:90:af:dc:07:d4:
                    cc:99:3c:fd:c6:d3:b6:88:32:72:bf:a0:c3:0a:e9:
                    1a:23:39:41:6e:52:03:f7:c6:c2:e4:89:f8:04:70:
                    8e:b0:1b:0e:8d:06:dd:86:1c:e3:ca:f1:9e:35:88:
                    98:02:f6:db:82:47:19:19:7b:27:23:5b:3c:71:24:
                    02:a5:df:ce:d9:46:ad:73:02:ce:4d:51:6a:ac:c1:
                    e8:79:8f:ad:53:7f:4e:99:0a:00:73:bf:fa:69:df:
                    6a:cd:0d:de:4c:2c:02:39:b3:60:81:6d:fd:78:1d:
                    0d:4d:79:77:26:a1:a5:34:74:f2:54:48:35:c2:be:
                    ee:65:a5:39:4a:5b:66:1e:c7:a2:d9:0e:d2:1a:3e:
                    c1:36:a7:d0:6c:ef:cf:6a:2d:6d:94:7f:63:ee:de:
                    63:df:11:cc:18:8c:5f:45:22:9d:13:29:05:9e:e0:
                    0d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A5:A1:17:A1:CC:56:ED:66:4E:76:BA:B0:95:44:20:D4:7A:48:4B
            X509v3 Authority Key Identifier:
                keyid:D3:AB:D9:56:F4:53:71:FE:29:FC:92:98:A9:5A:FC:B2:F9:B8:3D:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/06vZVvRTcf4p_JKYqVr8svm4PS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367917C/00DB23C4B75A11F1953AF9B0CE1D38B0/06vZVvRTcf4p_JKYqVr8svm4PS0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:17:08:ae:e5:ec:c9:1a:d8:25:ac:9b:fd:a5:3c:09:02:5b:
         13:ff:8e:89:25:2c:d9:0e:75:cc:db:c2:d5:dc:49:09:e9:64:
         fd:af:f4:38:df:f5:cf:63:bd:b3:f1:fd:6b:5a:bf:e8:95:5e:
         31:c8:c4:20:51:ed:1b:09:ad:e9:12:25:b6:15:f5:8b:6f:26:
         3b:67:99:be:35:47:92:60:42:70:39:a4:b8:f8:86:b7:c3:f3:
         29:c2:ff:57:36:6d:21:e8:94:03:81:8a:f9:12:bd:d8:f1:5b:
         e1:9a:a3:14:6e:1f:59:6c:f3:8a:a1:e4:34:18:86:bf:9c:e4:
         4a:77:be:76:d9:67:cd:4f:a0:03:df:8c:ea:d6:20:55:50:27:
         c6:a6:13:d2:4c:a5:7b:83:f6:5f:fd:d3:83:01:52:87:f0:b0:
         10:4b:af:c4:a9:9e:38:c0:cc:c4:c9:8c:db:ed:d9:51:42:26:
         8c:7e:23:e1:aa:8c:a4:7a:c2:21:2c:e7:42:da:db:ee:7e:f4:
         b7:dd:bd:31:9a:95:d9:93:fe:df:f6:38:17:bb:c8:1e:5e:5b:
         8f:ab:03:7c:99:28:a7:9c:52:ca:fa:83:9b:07:42:cb:c0:94:
         f6:95:9e:b1:f4:20:a9:d7:0b:2d:22:7f:1d:4a:f5:a2:8d:01:
         ca:e0:d7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 06:14:07 2026 by rpki-client