Error: rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
File:                     J6gbBcpK9RHHhjK7VblPrvRxyOU.mft (raw, json)
Hash identifier:          EDP+o9fwjPTVlIHHV2UrfqZB9hhEWykH6PqMsLFA+W0=
Subject key identifier:   3D:F6:D7:BE:D8:E9:3A:1D:F7:C1:60:7C:EF:DD:0D:8A:9F:BB:5E:7E
Authority key identifier: 27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5
Certificate issuer:       /CN=F369A67FAF/serialNumber=27A81B05CA4AF511C78632BB55B94FAEF471C8E5
Certificate serial:       0231
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
Manifest number:          022D
Signing time:             Fri 25 Sep 2026 04:50:38 +0000
Manifest this update:     Fri 25 Sep 2026 04:50:37 +0000
Manifest next update:     Sun 27 Sep 2026 04:50:37 +0000
Files and hashes:         1: J6gbBcpK9RHHhjK7VblPrvRxyOU.crl (hash: qUrVwahNzxULi9Wmd4ZBxs1Cs+q+M0QNxFPPbj1E7rY=)
                          2: 34C8DFBC105011F093296B58762E951A.roa (hash: QuatNFiiwr6rSEcJFhngJgion3t9GXDa/1Qg7UY1HPY=)
                          3: 501F896C492C11F1A00643D3CE1D38B0.roa (hash: j0MYlgw2awLohs40axRmwJt8DOvmdaBZYSEu4Q3eP4I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 561 (0x231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A67FAF, serialNumber=27A81B05CA4AF511C78632BB55B94FAEF471C8E5
        Validity
            Not Before: Sep 25 04:50:37 2026 GMT
            Not After : Sep 27 04:50:37 2026 GMT
        Subject: CN=6ab5fd9e-d278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:11:e2:ec:61:5d:59:aa:c5:4c:c8:6a:9e:5c:
                    28:a6:7f:80:b6:78:21:47:89:18:82:1f:32:92:99:
                    5c:ce:3b:f2:70:4e:99:ce:5c:84:c0:1d:24:ea:36:
                    ee:01:20:46:dc:7f:e0:17:35:ba:d4:a7:8e:7a:73:
                    bd:d4:1f:1a:8e:a0:43:9f:99:ab:b6:59:be:b0:5c:
                    b9:26:13:3a:e2:d4:4a:a5:8a:81:d4:da:ac:a4:39:
                    0d:ed:14:43:4d:cc:50:4a:96:c0:80:cc:de:fa:9a:
                    1a:67:47:3e:51:9c:0d:aa:f2:6b:a7:7a:6f:13:cf:
                    2a:d3:98:18:31:af:96:3b:f3:4f:65:ca:57:58:a3:
                    80:7e:3d:61:87:0c:bf:0c:b5:dd:eb:91:77:b5:78:
                    28:d1:01:21:ed:04:5b:27:39:3c:a3:5a:5d:f9:94:
                    e0:41:06:4b:3a:c0:26:1e:83:bb:df:14:bc:60:db:
                    85:36:6f:a6:4d:97:f4:65:a0:d6:39:92:49:0d:5c:
                    3d:17:b6:d8:82:5f:95:5f:ca:52:8d:6e:5d:0e:e2:
                    5f:24:49:b5:b2:3d:41:f1:fe:2f:76:22:a1:45:4a:
                    01:7b:a6:04:2f:16:5f:da:2b:67:4c:53:d3:4f:4a:
                    b4:f4:a5:dd:24:07:0f:0c:4c:c9:f2:cd:4f:50:da:
                    ac:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F6:D7:BE:D8:E9:3A:1D:F7:C1:60:7C:EF:DD:0D:8A:9F:BB:5E:7E
            X509v3 Authority Key Identifier:
                keyid:27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:77:53:5c:f0:6d:00:16:11:b6:92:96:95:78:cc:67:39:aa:
         15:bf:8d:75:a8:63:47:65:83:c8:6b:22:f9:c1:d0:c4:03:27:
         7c:50:49:02:1e:9e:16:9c:85:5a:e2:6e:90:76:52:26:51:d8:
         c1:86:86:c8:6d:bc:96:5e:df:45:49:9c:a9:bd:a5:2d:17:f9:
         94:17:a0:ed:30:4b:4d:9a:f9:0c:3b:04:98:9e:34:4b:df:3a:
         53:b6:1b:21:b4:df:9c:8e:9a:31:19:64:26:96:55:20:a3:48:
         20:d1:8c:74:f5:14:7a:50:34:c4:c5:24:24:70:fa:f6:9e:fa:
         31:7a:49:9a:7f:2e:72:8d:1f:d4:02:19:63:a8:6d:d0:32:55:
         09:ef:d3:a4:20:9f:31:e5:07:a4:8e:7c:97:f9:db:08:04:3a:
         7d:bd:48:e8:47:6b:43:8a:82:a6:79:3d:9d:55:f6:45:39:d5:
         f7:8f:83:d9:c9:1a:27:15:de:79:bf:4a:47:07:e7:a3:13:c0:
         cd:17:ee:49:fa:ca:4d:86:dc:2d:12:4f:c1:aa:a3:55:4c:24:
         af:07:31:76:ad:61:50:c3:76:d7:a8:24:f3:f9:43:2b:88:ed:
         10:c1:5a:82:64:dc:01:57:82:e3:52:0a:1c:c7:d1:71:46:d7:
         d6:3b:1d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:06:11 2026 by rpki-client