Error: rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File:                     XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier:          20kuhAcfZgg2Mokla+Sle+egCfGL1FLbyAHvim/22FQ=
Subject key identifier:   F7:FE:F4:29:7C:42:04:8E:EF:1C:C8:3E:06:DC:3A:B1:29:D2:8E:A0
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer:       /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial:       0A85
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number:          0A79
Signing time:             Thu 15 Oct 2026 01:34:02 +0000
Manifest this update:     Thu 15 Oct 2026 01:34:02 +0000
Manifest next update:     Sat 17 Oct 2026 01:34:02 +0000
Files and hashes:         1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: k9SowWw+39DS49jH9PfeSc1lQo/bdnkE9WcZuxGw8yI=)
                          2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
                          3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
                          4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
                          5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
                          6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
                          7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
                          8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 01:34:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2693 (0xa85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Validity
            Not Before: Oct 15 01:34:02 2026 GMT
            Not After : Oct 17 01:34:02 2026 GMT
        Subject: CN=6ad02d8a-dfff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:3a:d8:75:21:4d:92:70:d9:e8:64:f4:fe:
                    a0:b6:b4:83:2e:96:d3:b8:d6:0a:8a:95:41:a6:b5:
                    c9:a1:b4:6a:e2:f1:03:51:5f:68:ad:3d:9a:64:51:
                    b9:d7:6b:37:36:c5:34:39:e5:80:ba:e8:44:5b:61:
                    51:f5:11:e6:31:06:69:93:b9:75:de:b0:28:c1:55:
                    ed:10:1e:c6:4c:6f:93:de:22:50:9b:00:29:5b:2a:
                    3c:0a:bb:cd:6f:1a:3d:0b:3e:73:33:d2:fb:cc:bc:
                    75:c2:d8:56:ca:a5:68:ee:ed:8f:25:1a:db:66:23:
                    e6:6f:92:c2:fc:49:23:cc:45:c9:e9:52:ae:cd:2e:
                    7e:8d:93:f3:fe:b5:5c:4e:51:88:26:ad:78:88:2f:
                    7e:ca:3a:be:d2:02:9e:d5:3f:23:a0:70:0e:f8:2c:
                    10:09:87:b8:91:4b:d4:7d:94:05:b6:56:94:8b:96:
                    f5:7a:a8:4d:ff:be:42:d4:22:6c:fe:ca:4c:ad:a5:
                    13:4a:ed:7f:df:11:83:2a:56:60:39:e7:e6:99:73:
                    16:31:e9:67:28:9e:b5:58:c6:32:cd:db:e1:e2:c8:
                    95:0f:64:42:c7:2b:1f:b4:d3:35:91:78:6d:aa:fc:
                    30:29:9f:0b:6e:99:64:2c:e7:a3:85:3c:8e:2d:eb:
                    c2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:FE:F4:29:7C:42:04:8E:EF:1C:C8:3E:06:DC:3A:B1:29:D2:8E:A0
            X509v3 Authority Key Identifier:
                keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:78:42:80:42:04:a2:00:b1:91:83:90:d5:94:34:ce:42:7e:
         d6:0b:ee:28:26:8b:6e:46:de:0a:be:f7:3c:5b:1a:6b:80:d5:
         a9:24:27:be:bb:18:6b:56:84:48:fb:c0:80:6e:21:d3:60:ee:
         1b:1e:3b:45:31:f2:95:f4:c7:26:49:5b:4f:88:14:83:a6:cb:
         c2:c2:ce:14:2e:53:32:aa:93:d0:b7:f3:22:97:c0:34:de:30:
         60:03:59:3a:01:a0:8c:fa:e5:8b:0a:60:28:35:d0:1e:24:1b:
         28:e6:c3:5e:13:6a:6b:83:6e:77:d2:62:2a:5b:3f:e2:67:3d:
         82:f3:d6:ab:e5:7c:44:05:1c:a1:5b:b5:ab:23:61:9f:fa:66:
         7d:64:c1:f1:84:2b:79:5e:28:33:64:34:0c:e7:f8:bf:55:9c:
         b5:3c:a2:20:72:2b:4e:76:3e:6b:26:ac:71:28:ee:68:6f:7b:
         2a:f6:be:c7:fe:e4:00:e3:b5:67:5f:a6:9c:c7:cc:1b:3b:05:
         a2:e6:cc:bc:5a:01:a3:61:39:51:fd:df:4e:bb:fb:c8:78:6a:
         3a:b6:e0:02:0b:54:be:9d:5d:f4:64:5b:f9:67:af:23:8c:e4:
         07:a8:81:e1:35:c1:ae:22:d1:4a:8f:b3:df:65:52:39:f2:5d:
         80:fc:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:08:29 2026 by rpki-client