Error: rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
File:                     wD_daU9RquOPBRRWEBYXxW_YnEo.mft (raw, json)
Hash identifier:          5xWT9lJuttoy+hFNNTfScjswO+QOq/B3cKK9G8Pttvg=
Subject key identifier:   6A:1B:1F:82:77:E5:32:30:12:49:27:BB:1B:39:99:AE:01:8F:73:21
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Certificate issuer:       /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial:       05DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
Manifest number:          05CD
Signing time:             Sun 11 Oct 2026 03:05:35 +0000
Manifest this update:     Sun 11 Oct 2026 03:05:34 +0000
Manifest next update:     Tue 13 Oct 2026 03:05:34 +0000
Files and hashes:         1: wD_daU9RquOPBRRWEBYXxW_YnEo.crl (hash: LsTgRnbFMcj1YwRKrGT/rZXPes6VT5KWjvX8dK64Wm8=)
                          2: F998A4B4A68111EF83490D8F762E951A.roa (hash: gRJbn7TUJdVqzLN1VGDb0fJr1Lg413PCOuxRtaJJTFU=)
                          3: 49293CEC8C1711F1B40012BDCE1D38B0.roa (hash: UGIZ11vI+AloPkuFQufQtNgRRaZ7czAPvHXq/fiHA+E=)
                          4: F65069468C1611F19B4A1EB9CE1D38B0.roa (hash: PlId2XWtYjHJ/3qsp/QHOEHdxAmP0q8lXCpxMSmNdfg=)
                          5: 6069E9FA190611EFAAC79456017001B1.roa (hash: qaWE3oZP6UDJiJvSf/qTz0gA6Weypu8kgh11g/Q7Yjc=)
                          6: E621A12E190511EF8A909B51017001B1.roa (hash: /esz7AIhM5t30ub8s0aOAXHtnxsPkykRU/r4aTbVw0Y=)
                          7: 6DC5038018FE11EF8B80B516017001B1.roa (hash: prIb+/59lGAY5m7ee/w0QfgAEg0BFXE2ZtOJctQ1wsI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1498 (0x5da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
        Validity
            Not Before: Oct 11 03:05:34 2026 GMT
            Not After : Oct 13 03:05:34 2026 GMT
        Subject: CN=6acafcff-7170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c5:ab:6d:a7:19:3d:40:04:12:15:87:f3:61:
                    de:cb:35:5f:2f:2d:e3:c9:1d:66:c3:7c:6d:4a:80:
                    aa:81:f4:24:b4:02:8f:a9:20:b9:73:40:64:e3:27:
                    a7:ed:79:81:4e:be:0e:1f:0e:60:e6:0d:c6:23:c6:
                    78:81:82:d8:77:7b:a5:1c:c5:e1:f3:e6:26:63:fd:
                    a3:5e:2f:7c:4f:67:0a:7e:ce:6e:2f:8b:0a:41:fa:
                    85:79:ad:fa:4c:b0:68:2f:27:9a:a9:d2:bd:62:10:
                    17:27:56:64:51:2b:0a:04:13:09:bf:b2:2a:51:49:
                    b0:48:da:fa:fc:51:e1:ef:07:8b:c4:c9:c5:fe:16:
                    3a:6a:0b:d1:8c:13:a6:41:bd:5b:07:66:75:00:c8:
                    1d:8e:2d:aa:36:f3:2f:88:1a:e1:04:b5:86:11:98:
                    86:c6:c7:7c:22:61:8e:e7:c9:fc:41:5a:21:9b:77:
                    fe:67:b5:6d:5d:eb:6f:d5:18:6a:dd:eb:96:9e:3c:
                    a0:2d:19:e8:17:5e:73:e3:ef:18:98:9f:40:ea:18:
                    e1:e6:ae:d2:ed:36:27:85:db:e6:af:5f:a7:d2:17:
                    54:29:80:1e:0c:09:b3:bb:8a:0f:db:0b:70:65:d8:
                    bf:ce:b3:60:2a:e6:86:66:14:16:52:6a:aa:d6:21:
                    e0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:1B:1F:82:77:E5:32:30:12:49:27:BB:1B:39:99:AE:01:8F:73:21
            X509v3 Authority Key Identifier:
                keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:86:04:fc:70:3e:e3:f4:46:1c:75:c9:c5:99:19:05:02:0d:
         d9:c0:73:0a:57:ce:ee:30:7b:16:06:78:0f:e8:b5:1a:c4:a9:
         f8:95:a7:ca:ba:ee:67:fe:d5:31:f5:58:89:b8:b8:d2:ba:6f:
         f4:4b:6c:8d:4b:10:49:10:26:77:1b:fb:bd:91:16:1b:fa:8f:
         9a:cd:a3:66:f4:e2:20:a1:18:25:38:0b:f7:99:ad:9e:66:56:
         87:d9:1e:c5:0a:db:b3:d7:9a:c1:06:39:57:a1:67:29:70:d2:
         e5:81:86:43:46:24:1a:63:ab:df:c0:67:dc:8b:32:88:ef:a0:
         a9:61:de:ee:d2:92:a7:19:a6:60:57:a3:10:b0:ad:4d:d4:93:
         24:38:7e:3b:18:2c:f4:52:db:a3:f1:d5:76:7a:e4:1c:cd:28:
         60:ea:03:0a:46:ad:12:ad:4a:07:11:fb:70:59:51:3c:e5:45:
         88:ad:08:ad:46:25:45:a0:f7:23:a6:ce:a3:43:c9:ea:48:eb:
         de:4c:6c:43:49:03:fa:b2:9c:10:7c:e0:0c:31:a5:03:a9:21:
         41:25:42:6d:c8:8f:70:c2:dc:9c:b6:a3:76:ba:f8:92:35:34:
         c6:27:04:95:f5:e8:5b:61:15:fa:7b:43:7b:16:60:10:96:3d:
         a2:1e:99:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:55:29 2026 by rpki-client