Error: rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
File:                     LElzuTCDpISsLUZYJ4UCx4jQZPU.mft (raw, json)
Hash identifier:          Os039B05Zp9btxJvnL7mLML/yJOCKOSqIHVbC3QtpEI=
Subject key identifier:   58:A7:EF:88:50:F5:59:E6:03:83:F2:A6:66:96:C1:EE:5D:11:8B:1F
Authority key identifier: 2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5
Certificate issuer:       /CN=F36D96A0AF/serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
Certificate serial:       0605
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
Manifest number:          05FD
Signing time:             Fri 25 Sep 2026 02:58:58 +0000
Manifest this update:     Fri 25 Sep 2026 02:58:58 +0000
Manifest next update:     Sun 27 Sep 2026 02:58:58 +0000
Files and hashes:         1: LElzuTCDpISsLUZYJ4UCx4jQZPU.crl (hash: IpxlSLtWq1UFkV/YwFP+lYa2+fpcZsHPLVPcfng72xE=)
                          2: A7068B628CA811F1A92E63BECE1D38B0.roa (hash: T+KaTN7CnFyIm7H8bTLCLoHIYy/qXBnMRWdBkzS66ps=)
                          3: 9BE08B8E8C4E11F1BE755A05CF1D38B0.roa (hash: 07hDoRNRXMySdWEGeDHUnYW4FbI3+O15r72KVP2ufCQ=)
                          4: B8BE38148C4E11F1AE5E6605CF1D38B0.roa (hash: 22CcpPE6x9rKWvgvIIiNQvDytWYoXTxMqBgkQo1sm2M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:58:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D96A0AF, serialNumber=2C4973B93083A484AC2D4658278502C788D064F5
        Validity
            Not Before: Sep 25 02:58:58 2026 GMT
            Not After : Sep 27 02:58:58 2026 GMT
        Subject: CN=6ab5e372-9677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:43:dd:08:41:bc:3e:c4:d8:ed:fb:45:e2:51:
                    97:0c:7d:28:a1:c8:c6:07:5a:f1:48:fa:43:63:a4:
                    93:3e:cb:a2:24:de:72:45:43:1c:64:38:ca:ef:bc:
                    da:8e:e5:ec:de:ba:f4:60:96:6e:0b:e8:23:ca:0f:
                    3c:e4:f3:19:44:5c:4c:d1:5f:12:92:dd:e8:62:fe:
                    76:a7:39:10:a7:55:5c:f8:bd:ed:61:bf:95:5c:25:
                    d9:6a:c5:94:b3:9f:c4:11:11:f4:67:22:e4:a0:a5:
                    04:d6:44:fe:a3:8a:86:f7:76:2e:83:69:00:d3:f7:
                    71:f2:2a:f7:77:8f:65:a3:ff:26:85:1f:58:ff:97:
                    14:46:74:bc:86:e3:2b:32:33:92:2b:fd:2a:f4:1e:
                    b7:c7:b3:cf:f3:dc:da:f5:4c:b6:d2:b4:58:93:e6:
                    d4:bc:7e:b8:98:9f:63:54:f5:b4:f1:26:e3:63:65:
                    38:1f:b3:f8:be:6f:23:89:76:8a:08:42:f2:18:db:
                    06:60:57:03:1f:25:99:8c:6f:9d:41:15:e3:7d:b2:
                    b9:9e:69:dd:e5:8f:0a:94:e4:60:0c:90:67:cc:95:
                    cb:e4:bf:28:71:48:56:b2:8e:63:6a:ab:10:88:3a:
                    92:d6:e7:80:fc:c6:0e:5c:ae:93:a3:85:64:ea:4f:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A7:EF:88:50:F5:59:E6:03:83:F2:A6:66:96:C1:EE:5D:11:8B:1F
            X509v3 Authority Key Identifier:
                keyid:2C:49:73:B9:30:83:A4:84:AC:2D:46:58:27:85:02:C7:88:D0:64:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LElzuTCDpISsLUZYJ4UCx4jQZPU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D96A0/6796FEF2336611EDBC3AD7D5F1222468/LElzuTCDpISsLUZYJ4UCx4jQZPU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:7f:53:2f:04:8d:27:c4:ec:ae:9c:b6:b6:58:f0:8e:4a:ac:
         bc:21:a7:dd:8d:16:85:be:b0:50:b0:f4:bd:c1:46:17:71:33:
         6a:5f:a9:be:9f:dd:6b:21:89:38:52:04:41:cd:1a:12:53:6d:
         c5:97:ea:07:5e:e7:a9:ee:ac:04:39:77:2b:5e:7b:9c:f4:42:
         e9:87:d5:cc:da:e1:4d:ec:5c:11:1b:21:f5:85:26:eb:7a:a8:
         ed:8e:97:ea:b7:12:14:29:a6:4b:54:51:42:3c:5e:c4:06:f5:
         08:46:0d:00:f2:f4:8f:1b:10:3c:c4:42:52:c9:60:e8:15:24:
         6f:5d:80:ae:45:6b:53:ee:e8:38:0f:cd:44:a7:53:a1:7c:8e:
         db:34:8a:5c:b3:88:65:fe:23:c2:cf:e2:88:65:84:4d:48:3d:
         25:1b:d3:22:b6:5d:f3:cc:40:2e:86:cf:5f:a0:b3:d6:be:37:
         0a:44:45:e0:95:c2:08:4f:a4:e1:86:f4:11:c2:9c:6f:ed:13:
         4b:94:33:24:98:21:12:1d:ae:ad:64:58:a8:19:11:32:3d:96:
         f0:61:2f:3d:5b:e5:96:b7:b0:54:89:f0:e6:92:4a:07:30:87:
         3e:3c:ac:c9:1d:a5:52:4d:a1:3a:88:44:f1:2b:ec:1d:75:50:
         7b:aa:1f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:57:11 2026 by rpki-client