Error: rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
File:                     iyncQT61Ar1t3qMGRh4aehCExfY.mft (raw, json)
Hash identifier:          SE87C86Uqu6sBF6D4uXOyJn/kONip/bTjzgxbHIUObE=
Subject key identifier:   34:27:4E:DE:23:1C:E2:99:98:E6:BA:95:4C:88:3F:01:53:3A:0F:8C
Authority key identifier: 8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6
Certificate issuer:       /CN=F3696E5FAR/serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
Certificate serial:       0611
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
Manifest number:          060E
Signing time:             Tue 22 Sep 2026 02:54:24 +0000
Manifest this update:     Tue 22 Sep 2026 02:54:24 +0000
Manifest next update:     Thu 24 Sep 2026 02:54:24 +0000
Files and hashes:         1: iyncQT61Ar1t3qMGRh4aehCExfY.crl (hash: kUvqhg40LG9j648B4kHF+f5H3DApv3Ev1Isjq+dHzvE=)
                          2: D927C5E0646011F195E8E4BCCE1D38B0.roa (hash: 1oTp9jMogubuZz8gKPeh9PyU8dk/iK14H3bkMhWBgDE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                          rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553 (0x611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAR, serialNumber=8B29DC413EB502BD6DDEA306461E1A7A1084C5F6
        Validity
            Not Before: Sep 22 02:54:24 2026 GMT
            Not After : Sep 24 02:54:24 2026 GMT
        Subject: CN=6ab1ede0-a7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:d2:1d:34:ea:64:9f:ec:c5:92:0f:ca:e7:
                    b7:25:12:7d:d3:43:eb:27:e3:76:f7:34:96:e6:96:
                    85:2c:cd:0b:f8:cb:71:9a:20:25:5d:f9:11:4b:d2:
                    45:a5:51:91:73:0c:a4:6d:17:42:df:de:6b:e0:3b:
                    9e:34:13:d2:fa:27:07:ed:64:51:ef:1c:a2:95:2a:
                    90:32:d0:39:ad:44:2d:ec:83:51:7b:66:c3:16:79:
                    ae:de:04:dd:7d:1c:4f:96:cb:65:f3:a7:58:d0:a8:
                    89:98:40:cf:c2:94:20:bf:ab:c9:06:31:b2:85:47:
                    f4:93:de:6d:0b:bc:88:f5:64:38:e6:ee:aa:c9:ed:
                    09:73:35:79:7f:b1:e8:b7:df:a4:2b:73:e0:b9:42:
                    e5:e9:c5:31:00:7d:dc:1c:bf:c2:29:20:a2:b0:77:
                    cb:55:5c:25:85:30:ba:5d:4b:70:af:87:b5:97:95:
                    6e:f5:32:a1:3f:44:03:e5:5c:c5:b0:78:73:b5:5e:
                    75:bf:ee:49:97:9b:4b:0e:22:2b:7b:7c:99:51:b5:
                    86:6b:bd:58:d7:60:cd:2a:b5:a6:70:f7:52:4b:75:
                    26:2a:f4:09:ea:e0:03:90:2d:59:35:1b:c7:ed:32:
                    84:e0:d1:f3:1c:29:83:ce:e4:ec:db:b9:9e:ff:b2:
                    5c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:4E:DE:23:1C:E2:99:98:E6:BA:95:4C:88:3F:01:53:3A:0F:8C
            X509v3 Authority Key Identifier:
                keyid:8B:29:DC:41:3E:B5:02:BD:6D:DE:A3:06:46:1E:1A:7A:10:84:C5:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iyncQT61Ar1t3qMGRh4aehCExfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/52FE897C189711ED8059B9D2F1222468/iyncQT61Ar1t3qMGRh4aehCExfY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:b2:33:f0:68:c7:13:3c:22:4c:5e:a3:47:2f:f1:20:6f:
         ed:12:34:61:38:97:04:34:83:82:68:39:33:ce:00:41:20:1c:
         cd:be:e0:0a:9b:1a:39:a6:8f:0a:94:33:c4:13:ce:3b:72:2f:
         b9:b9:28:7b:b0:78:31:1b:79:f3:d5:3b:c0:48:41:89:ed:d7:
         d5:e8:55:ac:6c:c6:b1:73:35:d9:15:73:aa:98:58:13:58:bb:
         06:f3:f3:12:fc:ba:c6:1e:c0:81:d5:38:d1:da:60:f9:df:5c:
         5e:9d:03:48:71:f9:62:a1:33:78:f1:86:33:9d:b9:ed:49:48:
         2c:21:65:84:c0:3f:cd:5c:1a:bb:96:03:c9:9b:4b:da:b9:5e:
         2c:b4:5b:29:ef:3c:ea:1b:e9:de:fd:d4:ef:45:20:b2:0d:35:
         1f:b2:e0:21:8b:17:07:ad:fa:61:ec:4f:de:e3:0e:0e:9c:9a:
         37:86:c6:dd:3d:14:fa:39:74:ea:d5:01:93:8a:97:94:dc:50:
         60:af:32:99:21:54:be:ea:b5:ae:71:75:89:b8:5f:53:30:67:
         66:bd:cb:41:38:1c:aa:b7:34:32:14:19:ca:83:fa:44:95:fc:
         15:02:7d:30:cc:6d:c5:d6:14:88:82:d5:48:1a:ac:4f:52:9f:
         0d:14:ba:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:21:39 2026 by rpki-client