Error: rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
File:                     Td968BKKMqOhd1sfz6DvOMh_03w.mft (raw, json)
Hash identifier:          jKYKpXJ1hKU0K+yToAHJRqfcmpy2kbsw/aXy6yZ6lFM=
Subject key identifier:   40:24:4B:19:1F:1F:FE:21:32:56:E3:0E:61:BE:FB:F5:15:B4:20:4D
Authority key identifier: 4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C
Certificate issuer:       /CN=F367C1FCAR/serialNumber=4DDF7AF0128A32A3A1775B1FCFA0EF38C87FD37C
Certificate serial:       0936
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
Manifest number:          0931
Signing time:             Sun 04 Oct 2026 01:50:36 +0000
Manifest this update:     Sun 04 Oct 2026 01:50:35 +0000
Manifest next update:     Tue 06 Oct 2026 01:50:35 +0000
Files and hashes:         1: Td968BKKMqOhd1sfz6DvOMh_03w.crl (hash: +rv1m8KyRbb3RyjydX4BVgjYlOcNEK1hvo1hpmpYQ9Y=)
                          2: E364072A015811EF9D73985D017001B1.roa (hash: mrOGweCwxtK60LtiqTq1XQPp9m+p+JqVU6IY5+6yR+M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
                          rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2358 (0x936)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C1FCAR, serialNumber=4DDF7AF0128A32A3A1775B1FCFA0EF38C87FD37C
        Validity
            Not Before: Oct  4 01:50:35 2026 GMT
            Not After : Oct  6 01:50:35 2026 GMT
        Subject: CN=6ac1b0ec-996f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3e:86:46:9a:16:b5:1a:04:db:d8:ee:41:c1:
                    1a:20:5b:cd:86:1a:91:e7:bc:9f:1d:92:c4:11:bb:
                    2a:33:f8:11:d0:b1:15:02:d7:da:81:7a:46:56:58:
                    4d:89:8c:db:86:80:42:0f:e7:68:32:8d:ae:78:c2:
                    94:19:d6:a7:c8:48:ad:7a:56:5d:5e:0d:07:3a:33:
                    65:6f:a0:1c:f4:f7:f0:1e:4d:75:13:0e:61:0c:08:
                    73:d6:08:a3:fa:80:de:57:d1:10:8d:8c:14:3a:18:
                    87:90:ab:86:ba:39:1c:6b:b2:d6:6a:52:12:fb:5c:
                    b1:b0:da:21:c3:31:9c:14:c2:52:a7:44:73:77:6f:
                    5d:81:50:9f:4a:cd:5a:e0:0f:83:e3:d0:09:e5:3a:
                    bf:20:9b:d5:ad:72:2c:d2:01:25:7c:96:5d:f5:91:
                    9a:ed:0b:68:ee:9a:e7:a7:dc:36:9b:3f:03:48:b9:
                    c9:fd:3b:b2:f7:c1:39:9e:af:00:ca:a2:ad:cb:da:
                    c2:e5:0a:e6:02:8b:6e:cd:5c:c9:76:96:e6:2a:f6:
                    6b:7a:13:56:11:4a:22:4c:53:c3:b2:3f:31:bd:e2:
                    43:6c:39:13:7d:07:21:62:80:1b:ba:b4:3b:4d:1d:
                    a3:52:62:f8:2d:8b:ad:1f:53:d8:25:47:14:9c:13:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:24:4B:19:1F:1F:FE:21:32:56:E3:0E:61:BE:FB:F5:15:B4:20:4D
            X509v3 Authority Key Identifier:
                keyid:4D:DF:7A:F0:12:8A:32:A3:A1:77:5B:1F:CF:A0:EF:38:C8:7F:D3:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Td968BKKMqOhd1sfz6DvOMh_03w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/8F441A7AB56411EA9616635EF8AEA228/Td968BKKMqOhd1sfz6DvOMh_03w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:70:6c:db:29:d3:e1:10:3d:2e:20:b1:fe:25:eb:1f:d9:93:
         f8:98:97:24:97:d7:cd:47:16:df:15:3e:cd:2c:10:9e:66:4c:
         d7:a9:6d:80:73:32:7b:81:18:28:d9:de:5b:6c:f1:12:d7:53:
         f8:ce:d4:60:94:b4:c4:0c:47:9b:e5:60:f7:f7:0a:3b:19:94:
         0f:5d:3e:4a:66:cb:f2:fb:38:09:07:48:05:f7:1d:c6:8c:b0:
         1f:77:7d:a8:5c:ea:4c:e7:ec:ef:7b:5a:80:70:57:31:2b:77:
         79:52:6e:3c:5e:3c:81:3a:8c:3d:56:7a:92:07:00:fe:76:de:
         d6:8f:1f:27:30:77:82:06:a4:73:0d:b3:10:f9:ca:ba:f2:36:
         4c:dc:02:70:6f:ff:39:b3:98:09:81:1e:fd:33:2b:bc:12:0b:
         c1:6b:93:06:3f:a4:09:b3:b4:d6:2f:16:1c:4c:e1:33:a0:a7:
         6c:96:5c:22:8e:3f:92:99:e2:da:82:a0:bd:cd:87:16:22:69:
         c3:24:a7:cc:e2:8f:90:6c:d3:35:30:f0:7e:69:8a:80:d9:d1:
         46:27:03:a0:87:7e:95:3c:8b:94:98:26:c0:0f:83:ab:8e:65:
         41:2d:c9:58:6a:50:97:02:6f:80:25:63:0d:4c:ea:ea:4c:42:
         8a:29:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:54:37 2026 by rpki-client