Error: rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
File:                     ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft (raw, json)
Hash identifier:          q7aaEvXMFfANRlb7v/2JDn14yP8Q2tHJJoAajRd5yI8=
Subject key identifier:   0B:38:BA:2C:F8:A2:4F:50:81:A8:3A:04:36:93:79:DA:C3:61:15:32
Authority key identifier: 92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6
Certificate issuer:       /CN=F367EEA2AF/serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
Certificate serial:       04A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
Manifest number:          049F
Signing time:             Sun 20 Sep 2026 03:35:19 +0000
Manifest this update:     Sun 20 Sep 2026 03:35:19 +0000
Manifest next update:     Tue 22 Sep 2026 03:35:19 +0000
Files and hashes:         1: ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl (hash: 814wDIAiDThIXduEVDpt9gplnGSZHfSra41Q2EBM/Aw=)
                          2: F59C135AD57111EE98F3334E775412E6.roa (hash: DlLkA76T6/DZ7xEc77ZbObEHLYWet3TzWSKSqOWWlnU=)
                          3: 43172C202F6711EEBE578C1B4AD9E6FC.roa (hash: olt87M5UNUaEOcxzcw5wRYVy43osgJdjsy53S5VrdrA=)
                          4: EA6262822EB411EEA85FC5794AD9E6FC.roa (hash: k3VP3qw0EwdYjKV3iUtgdfKB+KXoIlF7qnyQ2hPvZY8=)
                          5: 67238C7E541411F1AD2A15AACE1D38B0.roa (hash: R8x1/0rShcDb+3uaeVfuGgUMj+G8nfBNX3NNkFTszeQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367EEA2AF, serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
        Validity
            Not Before: Sep 20 03:35:19 2026 GMT
            Not After : Sep 22 03:35:19 2026 GMT
        Subject: CN=6aaf5477-c2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:aa:97:0f:84:f8:d3:40:c8:a1:6d:a3:b9:2a:
                    ff:b1:e3:ea:fe:d5:57:74:c9:b3:5c:90:de:73:ba:
                    ac:2e:f6:32:04:bd:8e:37:f5:49:43:37:5e:1a:14:
                    7c:3c:61:f3:3a:0f:61:fd:32:dc:1f:96:e5:fc:47:
                    4e:4d:7d:77:03:da:12:a9:69:8c:5f:2d:a3:da:f6:
                    49:b5:05:b8:a4:7d:f8:c3:ac:d6:c6:a4:8f:dd:ec:
                    e8:95:26:cf:f1:af:b2:da:aa:4c:b9:ff:ac:c5:13:
                    20:ea:12:b3:89:a2:b8:24:98:b3:6b:ad:98:e2:fb:
                    e1:2b:6c:fd:62:3e:26:cf:14:57:c5:3d:2c:77:28:
                    99:75:b3:45:92:a5:77:7b:a6:f5:01:36:28:15:1f:
                    aa:c8:5e:26:02:7b:4a:1e:2b:bc:07:ff:f3:6b:ad:
                    9d:27:0b:45:62:fe:7a:8e:0c:c4:4b:34:ad:bc:7c:
                    20:e5:8c:89:e2:ce:72:72:4d:d6:8c:83:5e:08:21:
                    01:16:95:75:3b:b7:8a:ed:7c:eb:cc:68:16:db:02:
                    47:4b:12:01:a9:ba:4f:46:68:6a:9a:af:90:aa:99:
                    8d:4c:91:ad:47:32:3a:0c:5c:f8:60:d6:b9:34:08:
                    51:74:70:ee:5a:d8:ce:10:86:eb:52:7a:2a:b8:26:
                    70:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:38:BA:2C:F8:A2:4F:50:81:A8:3A:04:36:93:79:DA:C3:61:15:32
            X509v3 Authority Key Identifier:
                keyid:92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:73:16:14:13:50:42:bd:93:f9:0f:2b:77:4b:c7:64:e0:fc:
         d4:d5:f6:2d:91:f1:c1:f4:05:ac:0e:67:aa:0a:45:22:ed:e3:
         85:31:e0:34:d4:6d:26:c1:c1:a5:a1:5b:a8:0f:86:1b:00:c4:
         ca:27:2c:00:28:1b:65:4d:b7:cd:c0:6f:83:76:86:73:0b:22:
         1e:b4:e0:26:9a:14:b7:6f:bb:7c:72:93:17:0b:40:c6:6b:45:
         95:52:f0:07:f8:f4:eb:d1:b7:b5:e4:c4:91:9a:e8:b4:b9:73:
         bd:85:96:c4:10:cd:bd:5b:6d:ba:7d:c3:ec:f8:2e:49:8e:51:
         bc:a8:bf:ec:47:76:21:3e:f7:40:c6:36:0f:ea:6a:b4:bd:11:
         d2:59:7f:c4:ae:69:a8:d6:94:7f:eb:31:b1:dd:7d:b0:b0:53:
         db:24:02:91:30:81:38:dc:88:11:66:71:26:fc:f8:69:e9:db:
         4e:17:ec:81:9b:59:81:44:55:55:4f:94:d5:a4:61:c3:bd:60:
         99:de:4c:97:2f:5c:2a:0e:8b:ad:29:b1:9c:ea:56:6f:76:a6:
         c0:87:78:f2:34:b2:cc:e2:25:9b:70:79:40:3a:5a:93:1f:b2:
         db:51:66:51:07:67:5f:a6:f0:f2:3c:a6:8e:22:ae:c0:3f:ca:
         fa:28:dc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:09:32 2026 by rpki-client