Error: rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
File:                     KT5c_1MDCLfw9rieE_cMZPXhCZo.mft (raw, json)
Hash identifier:          g1pmqbeT84MLXFl2eMgP15eGltZZKgc9Viq5Ne0/smA=
Subject key identifier:   B4:54:F5:71:9F:E4:2B:4A:75:5D:DD:2B:2A:D0:5D:A2:A1:4A:60:58
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Certificate issuer:       /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial:       05CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
Manifest number:          05B6
Signing time:             Thu 05 Nov 2026 03:10:45 +0000
Manifest this update:     Thu 05 Nov 2026 03:10:44 +0000
Manifest next update:     Sat 07 Nov 2026 03:10:44 +0000
Files and hashes:         1: KT5c_1MDCLfw9rieE_cMZPXhCZo.crl (hash: shrpFd3cpXZtT7ZQH1E66Yy5Ve+CLUCaGhsAPHUBNM8=)
                          2: 40511982333911F186D47CE8CE1D38B0.roa (hash: VhsL8IPripVma1+4Z1gu+Qc3VhSnefO0SWTsn1gXDMM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1483 (0x5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B583CAF, serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
        Validity
            Not Before: Nov  5 03:10:44 2026 GMT
            Not After : Nov  7 03:10:44 2026 GMT
        Subject: CN=6aebf3b5-3b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e7:9d:fe:a7:c3:68:1e:0a:a7:91:ca:b1:c5:
                    63:d3:7d:a1:1b:64:89:e3:62:4f:fe:90:d7:3c:67:
                    98:8e:fe:01:f4:8e:aa:96:1c:bc:ad:50:6a:1d:e2:
                    08:ee:e6:a6:d7:2c:d4:39:9b:76:11:ef:f9:02:3d:
                    f3:cf:2c:35:ba:c4:46:81:18:2e:03:25:f2:50:34:
                    fd:d6:85:59:2b:ed:5d:91:8a:1e:b4:ae:d8:32:c0:
                    ef:2b:b5:51:c6:c6:2c:70:fc:af:4c:f2:dc:c7:66:
                    b2:3e:c1:48:98:15:f1:22:52:db:93:2e:50:bd:a1:
                    84:33:e3:28:00:1d:dc:74:22:2d:a4:51:5e:14:6d:
                    20:3a:92:e5:03:84:6e:f8:24:ff:1d:e4:de:e8:63:
                    f3:99:37:c3:f8:69:4c:31:f4:26:a3:3a:af:75:bb:
                    28:2b:6b:73:56:61:a0:c0:ea:7f:13:65:7e:d4:ef:
                    97:10:a0:9f:fb:d8:33:c1:a2:22:26:88:f2:41:a5:
                    7f:f1:d4:ef:0f:56:62:c9:35:56:13:8f:d8:cb:c5:
                    85:8c:fe:f3:7a:f6:bc:34:b3:6c:f6:cb:a5:f4:0b:
                    50:34:54:9a:3b:58:c2:5a:a3:ae:35:b7:5f:a2:62:
                    c7:b8:ea:43:5d:1b:d0:ca:2f:63:be:4d:d9:4e:35:
                    6c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:54:F5:71:9F:E4:2B:4A:75:5D:DD:2B:2A:D0:5D:A2:A1:4A:60:58
            X509v3 Authority Key Identifier:
                keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:ea:1a:c5:56:d2:b9:78:7d:9a:88:4b:f6:cf:91:08:8e:38:
         4f:0a:61:64:03:02:9d:fc:d6:a1:a4:e8:cf:52:c9:75:aa:e5:
         00:77:58:58:b9:a2:77:75:ec:9b:51:3b:98:e6:4c:8b:83:fc:
         e8:06:51:f6:cb:67:6b:f8:70:53:1d:be:76:54:15:83:92:12:
         e7:d2:b2:11:cf:d8:d5:39:a0:c8:32:7a:db:58:75:4b:37:a8:
         23:50:79:85:fe:79:7b:fd:08:90:fb:23:fa:d3:5f:1d:cb:43:
         53:66:08:30:a6:d9:0c:8b:fc:76:b5:df:a7:56:21:1c:5c:94:
         bf:c8:59:c2:70:aa:7d:23:ed:b7:0f:b2:7f:5a:46:98:8f:43:
         a7:00:b0:8c:ed:93:dc:d6:ed:0f:f7:3f:57:0e:6c:29:fe:c6:
         2b:37:d8:f2:f4:af:70:d8:f3:75:92:f5:2b:ab:ac:94:26:7f:
         20:59:b3:7a:2f:58:cd:c5:39:f0:0a:19:0e:e4:3e:d1:26:59:
         f4:0d:b3:11:39:fa:f1:81:98:5f:00:6c:bc:ba:45:66:b9:e9:
         4a:1f:96:21:ef:89:f0:0a:66:f5:57:6c:30:26:74:0f:c2:df:
         21:15:30:5f:c0:c3:03:93:f8:fa:93:be:3a:e5:28:28:d2:94:
         60:53:e4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:49:56 2026 by rpki-client