Error: rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
File:                     w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft (raw, json)
Hash identifier:          ZueAC+cwu3OtM3CDa0mEYnOhC2XZM/z8TL5LLf5n+64=
Subject key identifier:   F8:0E:33:E3:20:8C:AE:18:45:D1:13:F2:47:E5:D1:EA:C0:D0:5A:CC
Authority key identifier: C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77
Certificate issuer:       /CN=F36CF917AR/serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
Certificate serial:       0661
Authority info access:    rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
Manifest number:          065C
Signing time:             Mon 28 Sep 2026 02:45:36 +0000
Manifest this update:     Mon 28 Sep 2026 02:45:35 +0000
Manifest next update:     Wed 30 Sep 2026 02:45:35 +0000
Files and hashes:         1: w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl (hash: ZPzBGApkPaPl3l7kvQVGnoPdzjc1QvHVX28u0XOJOFo=)
                          2: 5002074A8A8911F18559EDB9CE1D38B0.roa (hash: Z5PYBIpWyue4OBGgmLl5UAhP6vxGTSwaWTgoVmQM8bw=)
                          3: 9FD8B6BE8A8511F19A30BDA4CE1D38B0.roa (hash: 20TTeReP9LBEIc4n+ud2MuZvhWvzCQCXDYXfcGRz4u0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
                          rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 02:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1633 (0x661)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CF917AR, serialNumber=C3857421D5DB8B6144D07C3C59371F420317A977
        Validity
            Not Before: Sep 28 02:45:35 2026 GMT
            Not After : Sep 30 02:45:35 2026 GMT
        Subject: CN=6ab9d4d0-b0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:7b:11:1a:d7:bd:62:8d:90:19:27:51:68:
                    b9:95:9b:fe:0e:f6:70:9e:24:6d:b5:27:1f:bd:0e:
                    10:61:71:ff:36:f4:e5:2e:d2:77:1b:44:78:cb:ba:
                    0a:e1:f1:ef:aa:70:86:ce:bc:14:c4:5e:2b:8a:a1:
                    62:d5:ec:b8:91:1e:92:82:03:84:a9:eb:a8:9f:07:
                    47:1a:c5:30:aa:ca:8b:6f:bb:5c:31:ca:ae:a3:d5:
                    41:81:4a:1f:1e:df:67:d5:56:83:15:3a:ce:1e:e1:
                    46:9b:1d:f6:b4:17:c6:ec:8d:06:5a:2b:c5:7a:4b:
                    2b:ad:aa:34:83:9f:96:ef:5d:d4:c9:2f:1c:42:be:
                    80:12:9d:3d:30:ed:dc:b3:19:2c:ac:9b:e5:cb:63:
                    d2:b5:a6:a1:a4:78:56:15:f6:bc:58:7a:eb:4c:4c:
                    dc:95:35:e9:c7:76:b7:db:d6:3b:38:f1:4d:7a:49:
                    f3:67:d1:1c:57:23:4c:33:4b:9a:ae:49:2b:df:56:
                    1c:43:6e:e0:fd:19:e6:b0:2f:4c:a3:c8:4d:78:34:
                    c8:0b:3d:9f:df:97:01:96:71:d3:96:ae:32:d6:fa:
                    39:f8:a1:01:6d:da:38:82:a2:dc:f5:47:92:e2:e9:
                    1d:b7:f4:e5:3e:11:c0:80:eb:89:3f:71:7f:5f:70:
                    50:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:0E:33:E3:20:8C:AE:18:45:D1:13:F2:47:E5:D1:EA:C0:D0:5A:CC
            X509v3 Authority Key Identifier:
                keyid:C3:85:74:21:D5:DB:8B:61:44:D0:7C:3C:59:37:1F:42:03:17:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CF917/F9C1E412E27711ECBA278AD6F1222468/w4V0IdXbi2FE0Hw8WTcfQgMXqXc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:22:f7:2d:a2:e4:11:67:90:ce:57:9b:72:3e:4c:4f:a0:b5:
         bc:ad:fe:20:7c:86:68:c7:38:f5:b1:1b:9a:0f:74:b9:64:c6:
         a7:39:fa:b6:cf:df:f8:3c:fd:fe:21:6e:fd:be:86:28:c0:e2:
         f9:b3:8b:28:28:91:a8:eb:ee:a7:41:a0:bc:ea:29:5f:82:fd:
         f1:79:6a:0d:70:f2:f9:0f:5f:92:16:74:9b:25:11:9a:c4:76:
         b7:7c:c9:29:f9:48:be:f0:1f:c5:ec:54:1d:83:de:2e:47:87:
         7c:43:58:19:a2:75:c1:58:3c:f7:9b:03:3b:ef:09:b3:2b:4c:
         f7:be:c0:38:96:60:06:ca:8e:52:66:79:9f:10:0f:2f:7c:b6:
         3a:01:64:3d:52:92:2e:a0:a4:ce:d5:2b:43:31:4e:45:0b:00:
         39:f8:e3:de:35:db:fe:86:4c:68:4e:44:a6:65:5b:05:6d:1f:
         5b:8e:fa:35:c2:a2:d7:a4:2c:ba:e6:54:f2:e3:f0:3f:07:4f:
         dd:40:d1:4e:be:a1:93:94:97:48:0d:ca:80:9c:a3:e4:5a:56:
         59:1f:08:68:ad:a5:7e:45:a1:54:80:5e:3e:30:7d:77:c7:0d:
         24:de:ae:e2:7d:b7:47:15:82:b0:b8:1e:71:99:41:f6:9f:c5:
         de:26:42:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:33:05 2026 by rpki-client