Error: rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          JfskoKBwn+5L2cuhrk2ALV1MFbZcWzgPOT3Gmo6PCV8=
Subject key identifier:   44:B4:DE:A2:23:C7:14:F5:01:A8:20:BD:A9:3F:53:7E:5A:D3:47:E0
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       07D5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          07D3
Signing time:             Sun 11 Oct 2026 02:13:13 +0000
Manifest this update:     Sun 11 Oct 2026 02:13:12 +0000
Manifest next update:     Tue 13 Oct 2026 02:13:12 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: KDq3GmxkZ0sgnX9vae59tLrJpX4XN3wEbJntTyeasPw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005 (0x7d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Oct 11 02:13:12 2026 GMT
            Not After : Oct 13 02:13:12 2026 GMT
        Subject: CN=6acaf0b8-aedf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:1a:93:b9:4a:3f:af:13:c6:22:3b:8f:af:
                    b6:34:ad:56:9c:88:92:72:a6:fe:18:1a:89:b9:d9:
                    3e:23:d8:b1:8e:ab:b2:75:d9:30:e1:55:93:77:65:
                    d0:b7:47:c9:78:ab:b9:9c:07:65:6c:d4:be:b3:8a:
                    fd:08:4e:97:6b:50:1f:76:c5:97:4b:6e:8a:0b:0b:
                    e5:69:b8:ee:4c:29:74:e6:98:5e:27:c2:ad:04:39:
                    0f:d9:4d:82:4f:86:57:c0:37:02:85:df:48:b2:ac:
                    6d:24:ce:b6:7b:9c:d6:58:97:19:6b:64:9c:3c:57:
                    be:8b:89:26:ce:02:d5:06:f5:96:b6:b2:97:16:b0:
                    5c:06:17:37:93:54:36:48:91:bc:12:39:06:29:98:
                    53:10:c1:84:8e:57:a6:f1:77:1b:2f:c3:8c:03:4a:
                    b1:43:2e:fd:dd:66:24:43:ea:21:00:44:1a:72:8e:
                    9b:e5:fa:4e:a0:fd:c8:39:c6:d8:96:a6:91:27:75:
                    89:92:77:73:97:84:e6:65:2a:79:61:a8:7b:dc:b8:
                    4d:b3:43:26:69:fa:58:14:97:7d:f8:1d:79:56:fd:
                    82:7b:45:26:2c:14:59:9f:52:4f:cd:3b:29:d9:42:
                    b5:8c:c7:f3:f2:2b:4e:18:c4:09:35:96:e5:84:95:
                    f1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:B4:DE:A2:23:C7:14:F5:01:A8:20:BD:A9:3F:53:7E:5A:D3:47:E0
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ec:b2:aa:4b:0d:0a:11:52:68:51:76:fa:f3:0b:c0:ac:26:
         34:22:2c:6a:01:51:31:26:94:db:de:c3:4f:df:b7:e8:08:9a:
         16:08:e2:19:59:14:ea:34:e9:08:63:3a:4d:6b:d0:87:55:9d:
         84:dc:43:fc:3c:8d:99:1b:4b:3d:81:37:c2:21:79:d6:26:26:
         eb:04:f5:2e:70:3e:23:f7:65:0f:ae:c5:5c:e8:c3:86:3c:2a:
         be:71:26:f3:e7:52:e4:c9:1b:74:50:26:cf:bb:1f:b0:59:7e:
         15:d8:11:af:88:85:34:4d:ca:68:27:e2:26:c1:a3:41:ba:ac:
         60:1f:9c:c3:37:2a:df:e3:64:7e:37:b3:55:62:70:97:b5:63:
         5c:b5:d0:10:30:09:97:d7:2a:26:94:cc:b1:a5:bd:a4:00:ef:
         9f:ed:b1:a3:69:0c:ae:3c:49:f6:fe:f6:31:3f:8e:d0:86:f4:
         06:29:5e:d8:94:3a:c2:42:07:8b:29:55:79:5b:60:a0:80:b9:
         9c:f1:4f:0d:da:54:11:b2:b2:b0:a6:59:6a:88:fc:47:a3:5b:
         ae:0b:43:6a:03:6f:8e:de:77:2b:4e:29:af:d8:54:4a:2d:7d:
         d1:4d:00:b2:8c:e3:e1:9c:cb:7c:eb:53:24:32:22:5c:f4:82:
         fc:65:39:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:29:22 2026 by rpki-client