Error: rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
File:                     e-SeL48taNn-5zmG1EeTdhak7Yg.mft (raw, json)
Hash identifier:          e+SYQmmI/Ao1RkPRFQQvdl/Hxoc6EOnc9QYpjFxgn2c=
Subject key identifier:   C4:0C:98:C6:9D:44:28:A7:10:05:92:11:1B:96:59:09:31:61:84:B9
Authority key identifier: 7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88
Certificate issuer:       /CN=F36D987FAF/serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
Certificate serial:       4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
Manifest number:          48
Signing time:             Fri 25 Sep 2026 05:45:20 +0000
Manifest this update:     Fri 25 Sep 2026 05:45:19 +0000
Manifest next update:     Sun 27 Sep 2026 05:45:19 +0000
Files and hashes:         1: e-SeL48taNn-5zmG1EeTdhak7Yg.crl (hash: 40vQ2QHVTEyK5qZ541lV8lf0mi4OfJvvhTxr7R9h8Iw=)
                          2: 9E812784844911F1AC6FBF0FCF1D38B0.roa (hash: Zj1r2gfZfraM50g7PRhgtk7jKO4qQFKeKyiQrjo1A/0=)
                          3: FCD3D5DE844911F1A8FA5F13CF1D38B0.roa (hash: FhAGrMj5xojX6TYFKx5nozxrwXt8TLfTYJbvtMzKy44=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FAF, serialNumber=7BE49E2F8F2D68D9FEE73986D447937616A4ED88
        Validity
            Not Before: Sep 25 05:45:19 2026 GMT
            Not After : Sep 27 05:45:19 2026 GMT
        Subject: CN=6ab60a70-dc91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:d8:ef:27:4f:99:11:e5:11:bc:92:63:68:
                    be:58:bf:9f:b9:f9:2f:17:48:66:9c:5b:34:49:f4:
                    d4:c0:51:79:17:27:2b:de:0a:b2:73:b9:2d:d9:ac:
                    b9:fc:a5:d3:08:8b:fb:03:12:e4:93:11:b4:76:e8:
                    28:bd:6e:12:0b:9f:df:f7:6e:63:99:84:c5:e3:3d:
                    75:49:59:0c:31:a7:dd:dd:4c:cd:7b:94:30:84:a6:
                    f8:54:11:88:32:49:33:61:47:b0:3d:fd:1a:b7:33:
                    08:eb:0e:aa:75:a3:1b:53:cb:74:ec:4c:d5:a8:03:
                    c1:57:d0:06:33:b9:0f:8c:97:21:6e:e9:83:ac:56:
                    6e:0b:0f:f4:bc:34:fc:f1:76:25:6e:cf:a8:3f:c4:
                    e5:d4:e8:a3:33:0f:35:3b:80:da:72:56:57:57:7d:
                    bb:fc:f3:d2:1a:66:5d:64:fc:a8:f7:9f:c8:03:5c:
                    ec:60:5c:23:23:eb:29:55:1f:e7:9a:45:ca:3c:da:
                    b8:9f:ad:e0:61:ac:97:9e:75:c0:49:67:3c:cd:8e:
                    02:f1:3c:2f:7c:42:63:f7:cd:88:1d:d3:65:8f:10:
                    2e:3b:7b:86:3d:c8:dd:cb:5b:03:46:88:b9:e8:91:
                    0a:eb:20:ef:96:78:9f:05:dd:bf:d6:4a:a8:23:db:
                    c5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0C:98:C6:9D:44:28:A7:10:05:92:11:1B:96:59:09:31:61:84:B9
            X509v3 Authority Key Identifier:
                keyid:7B:E4:9E:2F:8F:2D:68:D9:FE:E7:39:86:D4:47:93:76:16:A4:ED:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e-SeL48taNn-5zmG1EeTdhak7Yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/FC8A955C844111F1849AD5E1CE1D38B0/e-SeL48taNn-5zmG1EeTdhak7Yg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:db:de:27:7b:45:36:8f:e7:45:71:93:61:28:3f:cb:51:f8:
         29:37:dc:98:3b:87:6e:89:6a:73:98:18:75:25:0d:e7:c7:35:
         b5:5b:5e:4c:29:69:a1:32:9c:a6:eb:68:a2:94:a2:b8:54:45:
         b5:c5:75:4e:58:4a:68:0f:cd:3b:0d:70:cf:1c:5a:87:1c:5a:
         db:e3:7e:78:b1:25:66:ee:86:80:a3:f6:5d:c7:cf:41:55:43:
         fb:4d:66:10:93:70:cd:be:fa:4b:bd:75:b5:ed:f2:12:20:d0:
         11:c3:ff:67:c1:ca:5f:34:70:a4:29:d4:b8:51:e1:82:63:76:
         03:88:89:fc:6e:92:8a:a7:4b:c2:fd:ad:df:11:90:3b:da:55:
         c1:09:b9:ce:33:0e:7c:e5:02:c3:42:6d:fd:ce:82:82:d4:ba:
         8b:03:b1:75:e7:55:1b:57:ac:24:b7:9c:20:a0:08:03:53:4b:
         d5:72:44:94:61:f8:89:00:6e:b1:b3:d0:18:e4:68:d7:43:0e:
         fe:1b:2b:67:97:40:9d:34:d9:7d:0a:da:b3:09:b6:2d:b6:1f:
         94:cf:6a:43:be:25:13:85:25:5a:60:d1:37:c4:41:7d:ae:5e:
         16:7d:70:0b:b6:fb:06:f2:eb:5d:6b:de:99:2a:9f:a7:0d:f1:
         5a:21:20:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:58:21 2026 by rpki-client