Error: rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
File:                     fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft (raw, json)
Hash identifier:          G7Ep4jE2hmxEXiSTR+Kut3MsUmLO1sMsoR195mITTVg=
Subject key identifier:   8E:CD:C3:36:93:FF:D8:7D:4F:67:1D:E5:11:2E:08:1B:E6:00:D7:E7
Authority key identifier: 7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57
Certificate issuer:       /CN=F367F176AF/serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
Certificate serial:       079C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
Manifest number:          079A
Signing time:             Thu 05 Nov 2026 02:21:41 +0000
Manifest this update:     Thu 05 Nov 2026 02:21:40 +0000
Manifest next update:     Sat 07 Nov 2026 02:21:40 +0000
Files and hashes:         1: fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl (hash: rCrWXhVi98nERCPJ8ML2hONNdgrCZG6+KZQOUS2U56g=)
                          2: EAD3728A22BB11F1804B79D3DAE4EC9C.roa (hash: L/u9CHVxjHqFq2RkIEdwQz5uVOsNvPvTRN90oLFbdBw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1948 (0x79c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F176AF, serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
        Validity
            Not Before: Nov  5 02:21:40 2026 GMT
            Not After : Nov  7 02:21:40 2026 GMT
        Subject: CN=6aebe835-86ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:11:f2:de:2b:90:49:07:9b:b3:eb:a9:ef:70:
                    39:91:4b:96:a3:00:db:34:63:19:22:73:8e:d7:9f:
                    4c:e9:fd:e8:76:ee:09:8f:5a:b0:0a:9f:71:40:dc:
                    6a:55:e9:95:8e:c0:93:65:a9:0b:9a:ac:9e:00:88:
                    5e:19:8b:4c:06:6d:ef:00:7a:6b:bb:28:c1:38:b0:
                    83:8f:b0:c1:07:5d:d0:db:04:77:a3:78:c1:14:44:
                    7c:48:4b:13:52:b6:a8:bf:26:7c:90:00:ea:c3:7c:
                    da:f0:d3:50:3b:01:df:5b:55:c4:05:72:5b:ad:cd:
                    52:51:37:98:1a:57:fa:74:f9:53:ee:51:89:9a:be:
                    a3:2a:8c:e2:cd:a0:27:7e:a8:57:cd:6f:ec:73:ff:
                    1f:9a:f0:ac:01:57:45:bc:8d:9b:a4:45:de:4e:e6:
                    bd:05:37:6e:8f:10:35:45:e8:e6:23:92:53:f9:bb:
                    0f:76:cf:d8:f8:7c:95:6d:55:fb:98:b0:70:f8:ef:
                    4e:73:8e:62:8d:07:c4:d4:ce:3b:91:f3:85:a5:38:
                    f3:79:3c:68:61:55:d6:52:d2:89:4e:a0:6f:e3:61:
                    65:6d:f9:bd:f5:0f:c5:97:e4:b9:22:c2:e6:02:62:
                    9e:a3:4b:25:92:ca:fb:64:32:89:e9:68:a3:96:86:
                    dc:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:CD:C3:36:93:FF:D8:7D:4F:67:1D:E5:11:2E:08:1B:E6:00:D7:E7
            X509v3 Authority Key Identifier:
                keyid:7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:cf:51:3c:c8:c8:07:38:8d:57:ed:7d:9a:dc:6e:84:6c:6d:
         d0:fa:a5:5a:e6:25:b0:ea:5c:27:5a:37:31:fb:c0:ff:04:11:
         54:09:af:ab:10:eb:d2:89:ef:cd:e7:db:98:b0:fe:c9:de:ec:
         72:a4:56:1d:05:b8:24:09:e9:9c:cf:d7:a9:ba:f9:9e:56:cb:
         39:9b:e9:2d:97:e6:89:7f:8d:32:26:2e:a3:70:aa:93:42:80:
         17:03:f5:cf:08:5c:ca:e2:a4:34:e5:87:57:28:1a:d2:fc:1d:
         ad:2e:4b:89:b7:61:27:2b:a5:4d:b3:74:83:27:3a:b1:7d:b3:
         41:45:21:73:5a:fb:f5:99:be:b9:b2:49:dd:d9:a9:3c:f1:64:
         85:dc:f5:af:bc:66:d8:00:73:d7:cb:27:94:af:e2:f1:a5:91:
         c2:66:41:a7:30:e3:10:37:df:b9:fa:f7:74:35:40:01:c9:6d:
         97:d2:e0:5c:c6:44:8d:23:86:63:14:f0:43:53:ab:66:3b:9c:
         dd:24:79:c4:92:76:6a:8c:69:97:70:31:08:33:24:38:e8:c8:
         3e:b2:75:1f:a3:32:38:74:34:bd:8a:c2:f8:8b:f1:56:af:29:
         ea:88:7e:b5:ce:2d:cd:72:7a:d1:6e:0c:ea:cb:52:7f:6e:bd:
         64:fb:72:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:38:58 2026 by rpki-client