Error: rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
File:                     J8yUlEs4mAyi4IYqXfxE2GQEF88.mft (raw, json)
Hash identifier:          xyzQ9NtMOTlJpDiyW0qJYKKljV7xnu38JMTJPbLBO+w=
Subject key identifier:   2B:18:FB:42:62:45:36:48:47:F7:9C:5B:FB:5E:4D:DE:88:D6:47:88
Authority key identifier: 27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF
Certificate issuer:       /CN=F3698401AF/serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
Certificate serial:       052B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
Manifest number:          0529
Signing time:             Tue 13 Oct 2026 03:22:22 +0000
Manifest this update:     Tue 13 Oct 2026 03:22:21 +0000
Manifest next update:     Thu 15 Oct 2026 03:22:21 +0000
Files and hashes:         1: J8yUlEs4mAyi4IYqXfxE2GQEF88.crl (hash: gsVOtFOF5MCpZkXNgZHFuDkpsMG7Q4mDYAUqA4M6QuM=)
                          2: 4A5DBA668CB711F189BFE714CF1D38B0.roa (hash: fsgrd200Fbpxxe0VEF0l5IGTl8akiYumueczfz12gNg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 03:22:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698401AF, serialNumber=27CC94944B38980CA2E0862A5DFC44D8640417CF
        Validity
            Not Before: Oct 13 03:22:21 2026 GMT
            Not After : Oct 15 03:22:21 2026 GMT
        Subject: CN=6acda3ee-39a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:e4:f3:10:1c:aa:f4:16:a9:ba:de:27:bd:
                    94:01:92:b5:2a:87:f4:13:b2:f9:fe:c9:8e:80:0f:
                    d8:61:73:7d:b7:39:33:3a:8a:f6:41:ab:dd:b9:fb:
                    b5:66:76:64:52:92:11:e0:a0:22:e2:8f:27:78:2d:
                    0e:08:3f:b6:71:a5:7f:49:b2:4b:bf:71:dc:1b:8d:
                    01:a2:5b:d4:58:f9:a3:d5:6a:6f:33:81:5e:b9:fe:
                    c7:36:c8:7d:2b:bd:0a:4c:c0:9a:00:8b:72:10:1b:
                    8f:e5:48:74:96:47:c2:1b:72:6c:01:81:ff:08:4a:
                    9f:5c:35:fa:8c:59:c1:8b:51:01:b4:d8:55:b9:98:
                    71:50:1c:41:82:9e:9f:28:69:5a:85:d5:79:a8:bd:
                    cd:26:65:b6:ac:36:7b:d7:95:ed:c4:ce:5b:57:7f:
                    e8:c7:50:dc:30:f7:62:a5:ff:f7:96:eb:7b:6f:89:
                    8f:e2:de:0e:d6:30:0f:42:5e:09:2e:c9:68:ff:16:
                    06:f4:49:1b:33:ca:8d:a9:b1:62:31:59:10:1d:48:
                    97:80:b4:99:c8:59:fe:5f:75:7b:97:af:72:b1:63:
                    26:52:cf:a3:c2:47:80:fd:61:72:32:65:7f:a7:c8:
                    da:ff:0b:e3:c0:7c:07:fd:f9:64:cf:98:9c:b6:18:
                    dd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:18:FB:42:62:45:36:48:47:F7:9C:5B:FB:5E:4D:DE:88:D6:47:88
            X509v3 Authority Key Identifier:
                keyid:27:CC:94:94:4B:38:98:0C:A2:E0:86:2A:5D:FC:44:D8:64:04:17:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J8yUlEs4mAyi4IYqXfxE2GQEF88.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698401/FDAB9DBCD53211EDA1D50A99F1222468/J8yUlEs4mAyi4IYqXfxE2GQEF88.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:10:a5:bb:62:01:aa:2c:27:c4:32:7e:07:9c:5b:02:c8:62:
         f8:30:59:a3:2a:12:15:41:08:3b:0e:f0:96:d9:0b:ad:72:48:
         a0:8f:73:69:0f:f5:60:9a:98:c2:f0:2f:45:8f:ad:74:45:a3:
         90:79:56:24:bf:22:92:e9:97:b6:36:4d:bb:7c:b9:23:f4:c9:
         1e:e3:46:90:ea:bc:05:8f:f5:82:7e:30:f3:1c:b5:da:50:2c:
         d0:a0:b2:38:8f:1d:4d:37:da:b1:58:c2:4e:27:f0:be:6b:12:
         e1:44:09:f3:ac:d8:c4:cb:74:fa:34:ec:a3:0b:ef:fb:6f:c5:
         c8:a4:00:48:7e:0b:9d:99:2e:c2:30:7d:f8:e2:2b:fd:83:9e:
         6e:0e:09:86:dd:e4:d3:dd:b1:51:8e:7d:c8:bd:ae:61:08:ef:
         58:5d:de:ef:aa:79:47:89:40:75:47:78:f0:99:ae:42:f5:8d:
         75:78:ac:df:4a:ae:a1:ec:0d:ef:39:31:8c:d5:ee:54:f9:81:
         73:5e:b2:ae:79:67:d6:55:8b:d7:f7:6f:10:1f:f6:0c:71:40:
         90:bb:96:6b:96:73:2b:1c:80:ff:94:93:d3:c9:e8:de:70:4b:
         b3:ad:ad:9a:69:b9:19:43:c8:c6:6c:c9:62:87:c3:80:e5:35:
         ea:24:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 05:24:20 2026 by rpki-client