Error: rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
File:                     X-MxcqYILFSryRHxn1edSf2AmBQ.mft (raw, json)
Hash identifier:          g8Grz5V4tE7ldZG9q0rJGYYkGHTyOqw/aEmUKmBLZPM=
Subject key identifier:   CF:FA:60:F6:B8:83:6A:0C:CA:4E:D5:32:D1:87:24:0C:F4:90:39:D1
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Certificate issuer:       /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial:       0805
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
Manifest number:          0801
Signing time:             Thu 08 Oct 2026 02:05:38 +0000
Manifest this update:     Thu 08 Oct 2026 02:05:37 +0000
Manifest next update:     Sat 10 Oct 2026 02:05:37 +0000
Files and hashes:         1: X-MxcqYILFSryRHxn1edSf2AmBQ.crl (hash: W57bBb9RXaUq6ObsPLvawOGal7DcqM3xZmCaPmMubJw=)
                          2: AEEE236EC67911EEAD12F8AE775412E6.roa (hash: T0oca2AEcgFcrK1PsYZJPTBdlzaX1LQylDi6J2hgcIM=)
                          3: 74F314B2C67911EEB6CAC8AE775412E6.roa (hash: yQ5Y5mos3jGJ876UZawgqxeARaqaofzDLCBHBUrxZE4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053 (0x805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690793AF, serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
        Validity
            Not Before: Oct  8 02:05:37 2026 GMT
            Not After : Oct 10 02:05:37 2026 GMT
        Subject: CN=6ac6fa71-075f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d6:40:63:93:08:30:00:61:e4:09:76:c2:7d:
                    99:1b:ef:c0:65:f7:26:e0:99:e3:d9:77:e9:fa:ec:
                    04:6f:00:66:13:08:86:63:3f:2c:7c:2c:3b:81:c8:
                    db:d1:44:e5:6d:59:db:03:94:7b:8e:6e:8f:45:b0:
                    e9:9a:09:c5:e3:e1:0b:02:14:de:5f:61:87:a0:cd:
                    3a:1f:77:59:09:e7:b2:36:d7:4d:7f:4a:be:a0:34:
                    bf:1c:33:2e:17:d5:01:f8:13:5c:ef:59:69:6d:c7:
                    34:26:f1:b9:e1:8f:4f:1e:83:4a:3f:fe:96:c2:34:
                    a4:62:69:13:56:7d:cc:47:3d:9d:0b:b7:f8:6b:b0:
                    56:66:ea:5b:98:14:c2:f0:08:bc:be:05:dd:33:7a:
                    bc:7b:82:36:95:ba:fe:b4:ff:d8:8a:45:04:01:79:
                    0f:91:9c:16:19:77:6e:ac:16:9c:56:3d:ac:ae:62:
                    9d:6e:e1:7f:58:f7:dc:d8:25:f6:9d:4b:2a:4d:c8:
                    22:61:40:bc:e3:90:71:73:2d:d5:34:47:11:70:92:
                    0e:52:43:b4:1f:de:3c:37:50:af:a7:f5:bf:d5:38:
                    55:5c:1e:cc:38:69:18:07:94:68:ab:b2:64:5c:b8:
                    1f:40:d5:50:89:32:bd:26:58:5c:4d:05:43:e0:e4:
                    b4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:FA:60:F6:B8:83:6A:0C:CA:4E:D5:32:D1:87:24:0C:F4:90:39:D1
            X509v3 Authority Key Identifier:
                keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:35:44:2f:5e:f3:20:e5:15:be:34:c1:6f:33:80:0d:95:25:
         d8:ff:fc:63:75:77:10:17:e9:52:9f:e7:2d:76:54:cd:48:8a:
         53:84:5b:78:04:29:2f:4f:c1:b1:dc:7f:cf:ca:a0:a4:d0:4f:
         98:e1:93:6a:32:f8:fd:ec:45:d5:e9:ca:1b:06:31:e8:e4:e6:
         9c:8c:b2:72:95:a2:0f:71:23:1d:21:58:82:d3:63:00:ea:50:
         46:02:cd:4b:da:8e:d0:5f:4f:63:41:ac:28:76:6e:04:ce:96:
         39:5c:63:34:09:08:fa:52:b3:80:23:c1:ea:2e:4c:cc:cf:bb:
         e2:8f:af:4a:93:ae:5c:e0:09:83:0f:f5:0f:f4:82:3e:75:91:
         55:c7:7e:4c:f1:63:cb:8f:04:ab:68:be:65:15:7c:ef:d0:35:
         8c:a0:b0:ea:27:92:c2:73:28:3e:16:c4:ba:d5:81:a2:27:27:
         c5:52:0d:57:a7:bd:b9:34:b9:cc:66:f0:73:ee:3a:9d:1c:90:
         f6:1e:f6:5e:4a:79:57:32:ac:51:50:7f:04:66:42:7c:5c:fb:
         c0:71:2e:6e:c0:23:11:19:1a:aa:fe:d6:55:4f:97:48:4d:87:
         13:25:0f:fe:0e:e8:da:74:9e:77:c1:68:ca:f8:c4:24:de:70:
         26:42:83:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:39:02 2026 by rpki-client