Error: rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
File:                     xk60GwPUwTMps2P1p5PyzZy0LLc.mft (raw, json)
Hash identifier:          SM0WHTqFzBLYA9GmUSLHlJr+LKUhbatMc02Dg5N0fNI=
Subject key identifier:   86:F1:B7:93:21:89:94:29:1A:C4:50:86:33:B1:2B:20:EB:78:ED:96
Authority key identifier: C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7
Certificate issuer:       /CN=F36B5804AF/serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
Certificate serial:       07E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
Manifest number:          07E6
Signing time:             Tue 22 Sep 2026 02:07:34 +0000
Manifest this update:     Tue 22 Sep 2026 02:07:33 +0000
Manifest next update:     Thu 24 Sep 2026 02:07:33 +0000
Files and hashes:         1: xk60GwPUwTMps2P1p5PyzZy0LLc.crl (hash: 6ps+5UIX//pk7QfoxDEje6CTG7xd9mSBPJkI7/mT4Pk=)
                          2: 4FDC1DC2F14D11EFBAC0E3A0762E951A.roa (hash: dOKqRkTfN9jocpe+O0SITKXIanbXliNmUMx3esYzAi8=)
                          3: 87E50DA6AA2B11EE9A64EA6D775412E6.roa (hash: XpYMXNR2CG5z3pCw7sOpke9QbTyJBxDxE9SukOPOH8g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025 (0x7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5804AF, serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
        Validity
            Not Before: Sep 22 02:07:33 2026 GMT
            Not After : Sep 24 02:07:33 2026 GMT
        Subject: CN=6ab1e2e6-5b17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d9:c0:c1:f3:2e:c4:07:ad:6a:49:66:99:4d:
                    30:6d:82:9e:fa:4f:38:33:a8:fd:5f:9d:89:7a:41:
                    8e:af:8b:3e:33:9a:3e:86:c8:fb:10:0b:00:d5:31:
                    72:fe:08:02:b7:90:81:1c:89:a8:17:d1:8f:b2:95:
                    f5:81:e7:6b:2d:5b:41:68:3a:94:07:83:2c:c6:1e:
                    34:c3:0a:91:9f:a9:d8:4b:90:b1:3a:32:c2:6d:ec:
                    8e:da:f2:d2:4d:40:c5:60:37:4e:c8:64:c9:c6:65:
                    73:f1:e0:ed:e6:61:8e:db:5e:ab:ed:99:a3:6e:20:
                    9c:60:c7:3f:e0:07:1c:c9:21:ca:6f:1a:e6:66:27:
                    72:a4:e0:32:ee:47:71:a8:23:08:d4:43:86:21:50:
                    94:20:87:da:bb:ab:6f:85:f4:70:b1:4e:e8:e6:db:
                    04:59:4c:03:41:9e:48:c4:ff:ef:9d:e6:de:f9:f7:
                    7a:fc:34:52:8c:d1:cb:ad:3b:c2:77:32:63:d1:2c:
                    f1:bd:1d:5d:8e:57:cf:fc:e4:db:b5:26:61:f6:64:
                    64:c8:a5:bd:c4:9c:11:ba:88:95:05:92:6a:56:d7:
                    04:a0:68:20:b6:17:21:6e:40:71:8a:57:8f:7e:85:
                    79:d4:b9:09:ad:9f:c7:39:c1:c3:76:34:e3:73:c4:
                    4a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F1:B7:93:21:89:94:29:1A:C4:50:86:33:B1:2B:20:EB:78:ED:96
            X509v3 Authority Key Identifier:
                keyid:C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f4:63:d8:d0:7e:5e:0d:8d:69:da:07:03:e5:83:4e:46:32:
         99:92:db:ed:29:ec:8d:e3:d0:67:98:32:b6:08:85:7c:b6:a6:
         00:42:00:4a:fc:7a:6e:0e:d7:dc:ee:c5:8e:71:15:38:36:5f:
         b3:96:89:8c:0c:7d:01:7b:3f:46:ce:b5:41:fc:17:82:6d:2b:
         29:d5:28:cd:b2:a4:f1:12:e7:ae:04:48:a7:44:90:cd:a0:7e:
         d9:a7:04:d1:ab:c4:96:bd:3c:1c:bd:f0:2c:5f:d2:b6:4b:39:
         20:96:82:88:7b:83:39:1a:77:7d:98:af:db:28:76:19:3f:8b:
         32:66:17:02:18:31:ac:81:01:11:b4:75:bc:a9:ce:2e:8c:ed:
         63:a7:91:b3:10:53:80:75:3a:f9:51:11:7a:6b:4c:b2:bf:5c:
         19:87:67:b2:18:3a:2c:bc:0f:85:90:25:1a:74:b4:50:e7:1c:
         26:03:63:af:b9:6b:b3:5f:55:9d:9f:18:db:7c:41:e1:00:18:
         f8:9d:ca:02:05:5e:04:24:75:ce:5f:84:14:ce:2c:52:da:98:
         90:27:ed:ce:87:d8:65:61:cd:83:aa:7a:03:d7:7a:56:e5:30:
         c0:c6:72:af:e3:9e:95:32:07:9b:e1:96:4a:2c:bf:77:8f:9a:
         b3:f4:02:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:22:57 2026 by rpki-client