Error: rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File:                     tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier:          EM0YZ6ruNJ3fyR9EQdH2PDR1D+e7f3eUgwonGwGMCYQ=
Subject key identifier:   62:45:F0:55:30:90:CF:20:62:56:87:BD:A7:45:9F:75:E1:2B:A0:5B
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer:       /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial:       049D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number:          0497
Signing time:             Sat 26 Sep 2026 03:38:24 +0000
Manifest this update:     Sat 26 Sep 2026 03:38:24 +0000
Manifest next update:     Mon 28 Sep 2026 03:38:24 +0000
Files and hashes:         1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: PpWnH1FA1se/+wFjmA9sUozCJUJai5bnHhek32807EE=)
                          2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
                          3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
                          4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
                          5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
                          6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181 (0x49d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
        Validity
            Not Before: Sep 26 03:38:24 2026 GMT
            Not After : Sep 28 03:38:24 2026 GMT
        Subject: CN=6ab73e30-0493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:d0:5d:e1:4e:58:83:28:a0:66:55:58:da:
                    35:de:00:a4:59:60:19:cd:4f:dc:85:31:72:df:7f:
                    e7:53:0b:9c:f6:bc:48:4b:49:f6:47:10:2c:73:88:
                    3c:02:55:03:bf:6e:cf:90:ac:86:24:9f:32:c3:24:
                    bc:6a:f8:e3:36:b8:11:cf:af:36:2c:86:b1:b0:32:
                    23:0a:52:f3:ed:e0:c8:ea:7e:ed:33:c6:9b:50:7c:
                    46:25:1e:ab:dd:0c:59:cd:b2:79:46:2c:ad:44:6f:
                    7a:4b:99:9d:18:44:98:35:8d:52:c3:81:05:46:75:
                    31:39:d5:fc:e9:e4:c2:d6:cb:12:83:b1:13:ad:64:
                    4b:33:8f:c6:15:b1:a8:14:a7:3a:b9:ef:06:b4:1c:
                    2e:de:0e:a5:85:fb:bd:16:86:1b:60:e4:7b:57:df:
                    b1:1d:89:70:39:83:39:e4:25:4e:d7:9a:8b:d5:f4:
                    99:3e:ac:d6:a8:7c:8a:15:ef:bf:56:4d:18:d0:7c:
                    f7:48:79:ff:f3:b2:17:1f:2c:e7:e4:66:cb:e7:e8:
                    9b:81:18:14:0a:26:d4:74:2a:08:21:01:89:67:1c:
                    8e:94:46:26:67:b7:5a:50:a2:04:f4:24:61:82:64:
                    d2:b0:0f:73:71:e2:87:38:f2:ed:f2:99:c3:a6:ac:
                    36:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:45:F0:55:30:90:CF:20:62:56:87:BD:A7:45:9F:75:E1:2B:A0:5B
            X509v3 Authority Key Identifier:
                keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7a:c9:04:3f:49:cf:a2:db:27:39:dc:e2:ee:46:af:de:b9:
         a0:0a:f3:ac:9c:2b:c9:6c:22:08:8d:45:c7:46:99:28:3c:c7:
         6c:eb:67:fa:74:86:47:3e:f8:3a:72:99:12:0a:61:5d:b0:24:
         5a:8c:70:d4:42:70:25:be:01:4f:8b:60:13:4b:68:bc:2c:29:
         8f:b5:d9:77:b0:4b:40:67:b8:8f:14:c2:97:75:3f:fa:bf:28:
         d3:99:6b:81:1a:e5:52:81:b9:f2:be:77:32:dc:b2:99:59:b2:
         05:a2:3e:89:47:38:e4:9f:fa:df:df:e1:17:1a:d2:b3:0e:25:
         f1:cc:9e:a6:5e:58:86:9c:27:43:39:4f:e2:df:99:8b:26:77:
         94:9e:85:d5:b2:bd:79:4e:99:08:af:e5:39:cf:83:b7:f3:46:
         1f:65:de:1c:70:cf:6d:35:45:ad:a5:a5:56:f0:87:d5:2e:94:
         10:6c:5e:e2:ca:d8:9b:dc:9e:72:75:ef:70:c8:03:0d:19:02:
         3e:65:16:f9:aa:ce:01:4d:fd:ce:a6:c3:6b:36:57:4d:df:90:
         be:e6:ca:17:41:70:64:8f:76:3f:f0:50:00:4c:51:3d:3b:ef:
         7d:02:77:cd:bc:91:4a:0a:29:d0:b5:e5:c5:40:9c:d0:01:73:
         1d:56:31:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:15:29 2026 by rpki-client