Error: rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
File:                     _fBwBNUH4xafjwTMLtjgu_Sq38Y.mft (raw, json)
Hash identifier:          ZTtKOOHsbNH8d+mJpOWbh49zwQehSk+2/mViNJ3xix8=
Subject key identifier:   3F:AC:3E:30:0E:2D:F6:82:F0:52:59:F3:52:E4:C5:5A:E7:76:A5:AC
Authority key identifier: FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
Certificate issuer:       /CN=F36B1BD7AF/serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
Certificate serial:       0276
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
Manifest number:          0273
Signing time:             Thu 15 Oct 2026 04:46:56 +0000
Manifest this update:     Thu 15 Oct 2026 04:46:55 +0000
Manifest next update:     Sat 17 Oct 2026 04:46:55 +0000
Files and hashes:         1: _fBwBNUH4xafjwTMLtjgu_Sq38Y.crl (hash: sMtkA221cE3IdoqFPRACAlC4RfBn8Rr8oHcU8caNz84=)
                          2: 58A4F560E54E11EF908E0F81762E951A.roa (hash: RGKTeSXUz+Sp60GwrTqbGbFazRAHGX0bbtXYfxY2Mws=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 04:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1BD7AF, serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
        Validity
            Not Before: Oct 15 04:46:55 2026 GMT
            Not After : Oct 17 04:46:55 2026 GMT
        Subject: CN=6ad05abf-6aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:23:88:bf:90:39:94:ef:d8:32:e1:d9:e7:
                    e3:f8:a0:f4:5a:d4:19:59:f3:95:69:e1:0d:b2:e4:
                    e7:44:96:3d:2b:17:ff:a2:91:54:08:27:da:2e:40:
                    56:a4:a1:53:a1:b7:dc:29:a8:42:c4:a6:50:a5:31:
                    23:f2:92:e0:75:87:28:70:7d:e3:13:da:60:45:21:
                    73:d9:61:02:c4:4f:1d:05:06:6e:3e:fa:7b:6a:7d:
                    3b:47:a4:ce:1c:1c:dc:8e:5f:44:dd:7b:7d:ff:59:
                    cd:b7:51:8d:d3:bb:b7:c0:cf:79:d2:b3:9a:99:3e:
                    17:ad:0a:d1:fb:7c:e3:ce:80:de:3a:a2:4c:ab:b2:
                    70:21:32:4f:1f:1e:44:14:53:89:a9:e0:3b:6f:da:
                    75:99:25:ff:fc:03:69:7e:88:54:fe:bd:55:b7:05:
                    50:de:a7:65:19:2e:91:35:a2:31:18:42:3a:49:c3:
                    f6:26:0c:26:21:18:05:fc:01:9e:63:1e:80:14:cb:
                    1d:10:92:56:51:0a:85:7a:b2:27:df:97:7e:66:fc:
                    97:e8:20:d2:de:64:5e:7c:a7:3f:39:68:8d:4b:64:
                    cc:84:cb:0d:31:63:e5:21:b3:15:15:7e:26:47:82:
                    34:ae:25:d7:d5:da:f1:6b:7c:70:8a:4a:b5:56:67:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AC:3E:30:0E:2D:F6:82:F0:52:59:F3:52:E4:C5:5A:E7:76:A5:AC
            X509v3 Authority Key Identifier:
                keyid:FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:b9:d6:25:a3:26:53:4b:71:db:c6:ae:39:46:ad:1f:3a:
         35:3f:65:5d:7c:92:87:44:4d:c7:bd:15:22:2d:21:8a:ac:25:
         a5:4d:1f:41:03:0e:ee:09:27:ca:4f:85:d5:38:77:24:b1:e3:
         81:1a:6c:96:8a:bb:18:d2:88:09:09:04:9d:ff:b0:dc:0c:da:
         7f:0d:9b:3a:c5:9a:73:af:af:00:01:c2:7f:9f:fc:3e:f9:cf:
         d1:c6:13:28:9b:49:3f:17:8f:b5:0d:b4:5c:98:9e:7b:87:38:
         27:d2:62:c5:de:3a:75:63:0f:80:db:c6:be:6e:a9:b1:90:83:
         e1:a4:ab:52:46:bd:8f:73:dc:84:dd:82:ef:46:a5:3e:55:8f:
         8c:94:be:e0:50:5c:6a:95:83:51:8d:78:34:84:ba:01:dc:b7:
         fb:3b:fe:e1:d7:3a:f4:77:3b:b5:49:d5:4b:a8:d7:1a:e0:e3:
         73:86:48:82:a3:e5:da:a0:04:9c:f6:f8:64:56:e6:c7:87:c6:
         c5:d9:80:6a:b4:d8:91:13:e9:68:f4:7f:70:0f:c0:33:0a:d1:
         52:6e:50:10:8b:0a:0f:dd:2e:05:ae:3e:be:f6:10:9c:b2:14:
         d3:91:00:a1:d4:3d:20:6a:9f:c9:30:b2:41:41:2a:2f:1d:28:
         7c:c3:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:47:49 2026 by rpki-client