Error: rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
File:                     rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft (raw, json)
Hash identifier:          o6GYA+znG2aDB6wCYKTy6Lld3HHQVKk20kpij7yI+b8=
Subject key identifier:   9F:AC:B1:CB:94:81:43:6F:AE:0F:E2:6B:9B:23:8C:39:B4:45:60:17
Authority key identifier: AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6
Certificate issuer:       /CN=F368A3D1AF/serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
Certificate serial:       0855
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
Manifest number:          084C
Signing time:             Sun 11 Oct 2026 02:01:48 +0000
Manifest this update:     Sun 11 Oct 2026 02:01:47 +0000
Manifest next update:     Tue 13 Oct 2026 02:01:47 +0000
Files and hashes:         1: rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl (hash: 3j7S8+yPt1jpNQPMt3YhPMpWFt7TrbU566OnA1Z26+M=)
                          2: 5F38F7AE8A4911F1800CD0B6CE1D38B0.roa (hash: U/HuiLZ6Sss66UBXOUZ9CTnCo40rL1oFrzun9Wg0tRc=)
                          3: BCAF9294702811EB8791AD25F8AEA228.roa (hash: AT0o7ug7v2ZBAyMdgUq3SD/St9P0mYCt+1mdlQ+38qg=)
                          4: A0FB2C7A702811EBBEEF8C25F8AEA228.roa (hash: WRA7vUkmweseystfPnsoSmxUQdjwHDtXfkHr1rmgxF8=)
                          5: DA2A3F688A4911F1A419E0BACE1D38B0.roa (hash: Ae7lcvyzgbbhhsWy4rPPoyYkCHmjQBD2D56BJGDzKcI=)
                          6: F82C96028A4711F19641A3AECE1D38B0.roa (hash: XHS/PlTbJJf38vr8Lm2UbPHtd7t1vmvBVAYeHGDnxMk=)
                          7: 365FE0469DF411EB9F82B84AF8AEA228.roa (hash: Ws8N8X7YiONJc56TyVAJKcp66X/6QscYInYVrETeq+o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2133 (0x855)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368A3D1AF, serialNumber=AE51D25716DDB4CCA31B2E985E0A7525F7F4B9C6
        Validity
            Not Before: Oct 11 02:01:47 2026 GMT
            Not After : Oct 13 02:01:47 2026 GMT
        Subject: CN=6acaee0c-ef2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2f:3e:05:96:b2:52:f8:79:d1:92:ea:d8:0d:
                    22:91:0d:50:ae:05:7e:97:b0:94:54:9e:2b:b6:13:
                    81:5b:80:13:06:2c:95:49:a6:31:2f:19:8b:db:94:
                    23:19:f0:b6:5d:a8:c0:33:33:55:b6:85:2d:94:80:
                    1e:c0:b7:47:a1:4e:20:6c:50:6f:db:bf:c5:2b:ed:
                    9f:58:09:39:ae:7f:43:8f:50:e6:4c:51:d2:3f:0f:
                    65:8d:fa:bf:d6:93:5e:73:f0:cc:92:5f:c0:b7:65:
                    30:70:05:76:af:14:f7:b9:84:38:e9:09:16:d8:1c:
                    87:34:aa:d6:20:c7:88:09:f5:0e:34:97:da:64:18:
                    fc:54:af:f8:7b:3f:08:0d:1a:71:85:bd:9c:61:1a:
                    9f:d1:18:b7:8b:a2:fb:a6:25:42:32:37:4e:79:72:
                    01:2b:04:e6:f6:81:21:40:96:f3:f7:2d:8a:17:03:
                    15:a1:93:9a:0b:c2:2f:9b:a4:dd:54:13:3d:7b:08:
                    a5:21:08:e9:c5:0d:db:1d:74:fa:1c:88:7e:59:b5:
                    11:95:14:15:30:2f:f0:d3:9a:80:f9:15:7b:85:53:
                    c5:28:dd:fe:d0:36:fd:3e:a6:af:82:ae:0e:18:1b:
                    8c:d1:00:2a:69:f3:10:9b:fe:95:7a:44:e8:56:0f:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AC:B1:CB:94:81:43:6F:AE:0F:E2:6B:9B:23:8C:39:B4:45:60:17
            X509v3 Authority Key Identifier:
                keyid:AE:51:D2:57:16:DD:B4:CC:A3:1B:2E:98:5E:0A:75:25:F7:F4:B9:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rlHSVxbdtMyjGy6YXgp1Jff0ucY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368A3D1/73732E56702811EBB2F96825F8AEA228/rlHSVxbdtMyjGy6YXgp1Jff0ucY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:49:d2:82:8a:d4:9b:b8:41:9b:bb:58:3b:43:b3:f1:87:65:
         59:31:a8:d8:a7:15:24:ae:f1:c2:ba:90:a7:5a:33:9c:53:84:
         d8:47:de:32:c7:f7:fd:f2:b9:ac:7f:c0:16:45:e0:2b:70:2c:
         6e:10:e8:89:8b:5e:58:7a:58:43:9f:d7:3f:ce:ff:3a:1b:8f:
         f9:82:fc:b7:de:3a:fe:7a:9f:74:39:4d:38:2a:ce:f2:e5:91:
         d2:ea:d5:97:3e:17:71:fa:8f:c2:f6:56:4e:7d:7d:65:df:af:
         10:5e:dc:fe:02:c8:d3:80:9b:60:db:f7:2a:ff:90:95:83:20:
         a9:99:d6:b3:8c:6b:db:20:63:b9:92:f3:eb:fb:84:17:80:5e:
         ae:63:b6:77:07:ce:19:e4:6d:ad:44:9f:25:b0:c5:b1:d4:13:
         6c:0c:5b:1a:1c:9e:2d:1b:0c:26:75:ec:8b:7f:6d:15:50:bc:
         5f:15:ab:86:20:3a:80:c8:ca:b2:ca:35:5a:e9:e1:56:b6:01:
         04:99:b4:00:92:11:79:b0:4c:7e:ee:d6:39:c5:fa:9d:8b:34:
         f3:cb:38:c9:1b:75:59:d8:87:ca:26:6e:75:c1:6c:45:ce:7e:
         85:40:5c:37:a6:c2:f8:67:00:af:62:d2:6d:cc:9c:75:f5:f4:
         47:e5:0c:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:55:07 2026 by rpki-client