Error: rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
File:                     fs54roG_QHKx3E9vt-bLkWYlKzQ.mft (raw, json)
Hash identifier:          YwNC32B8eqIObAcoj6X+aHY6B3IIvYkHS0Xd6qTGOms=
Subject key identifier:   0B:0F:47:EC:9B:44:13:0F:36:D1:ED:18:06:C1:47:19:3A:6B:A7:FA
Authority key identifier: 7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34
Certificate issuer:       /CN=F36E1028AF/serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
Certificate serial:       06A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
Manifest number:          069D
Signing time:             Thu 15 Oct 2026 02:41:25 +0000
Manifest this update:     Thu 15 Oct 2026 02:41:24 +0000
Manifest next update:     Sat 17 Oct 2026 02:41:24 +0000
Files and hashes:         1: fs54roG_QHKx3E9vt-bLkWYlKzQ.crl (hash: nzFmqNlVqBghxBvid1HyhBbHBRgKD0+0RaSBo703Jwk=)
                          2: F2869CE2631511F1AB7816F4CE1D38B0.roa (hash: w337w6lFswzcMoF6XmD+yS8pjZh65kRgsDRKhjEyxsg=)
                          3: 05DD987EE12A11EEBF968C9D775412E6.roa (hash: GrTtmavb95kKmRvm7iTDLhvIm3hoIjSrT87MDqcdXU8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028AF, serialNumber=7ECE78AE81BF4072B1DC4F6FB7E6CB9166252B34
        Validity
            Not Before: Oct 15 02:41:24 2026 GMT
            Not After : Oct 17 02:41:24 2026 GMT
        Subject: CN=6ad03d55-fe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:18:46:a4:f5:27:6d:e8:90:fe:38:d5:a5:a8:
                    6a:46:eb:1a:38:20:6f:60:85:dc:4a:67:c6:91:05:
                    3a:3d:87:0b:eb:a1:9a:b4:15:a6:b1:99:b0:ba:c5:
                    31:f8:24:8c:12:57:ac:88:a2:f9:69:c0:b8:6c:e3:
                    82:22:1d:83:43:0a:9b:86:c4:12:49:3f:cd:e9:81:
                    27:60:e1:54:8a:b0:27:54:4f:09:60:66:12:e0:e1:
                    f3:f1:ae:32:94:ab:96:08:1b:a8:ad:4d:26:89:26:
                    26:0c:96:a6:fa:da:43:ec:ae:40:0f:64:ee:55:a4:
                    54:74:4b:31:ed:0c:b5:4b:61:7f:94:3a:53:c0:25:
                    90:7d:b4:89:4e:e7:ef:b3:1a:9d:7a:53:e9:b7:a0:
                    4a:55:f1:b6:c6:ba:8d:41:f8:5f:e3:8a:9d:a7:ef:
                    d1:c3:25:2d:ac:3f:02:f9:c1:ce:81:b8:ae:74:f4:
                    d2:72:fb:d0:f7:f8:33:7b:ea:6b:c7:74:63:8a:63:
                    4c:1b:28:fb:ab:91:0c:ff:4c:dd:10:39:7c:8d:e4:
                    9e:48:f8:6d:54:1b:54:20:31:9a:a6:11:62:44:17:
                    5f:29:21:80:44:01:31:b0:9a:10:89:bb:0d:0d:13:
                    c7:96:02:4c:eb:25:ae:99:a5:9b:ae:17:1f:d3:1c:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0F:47:EC:9B:44:13:0F:36:D1:ED:18:06:C1:47:19:3A:6B:A7:FA
            X509v3 Authority Key Identifier:
                keyid:7E:CE:78:AE:81:BF:40:72:B1:DC:4F:6F:B7:E6:CB:91:66:25:2B:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fs54roG_QHKx3E9vt-bLkWYlKzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/10D59DBCC8A411ECB5E23199F1222468/fs54roG_QHKx3E9vt-bLkWYlKzQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b2:ba:39:1e:8f:75:71:71:94:e4:aa:4d:42:dd:f4:b7:73:
         37:ff:fc:5a:f0:68:de:46:a8:a4:69:dc:b7:e1:44:20:e8:d6:
         de:2a:4b:bb:35:94:2d:10:cb:7c:cc:71:65:fe:16:eb:83:49:
         a9:fe:75:7c:96:61:80:0f:04:7f:a0:db:d8:1c:c2:3c:63:21:
         20:72:b3:bc:31:bf:e2:d2:df:37:df:aa:c3:04:1f:84:38:c4:
         2e:3d:ff:95:02:ba:22:fb:c1:1b:56:94:70:0e:27:21:e5:e8:
         6c:72:7b:fe:74:86:a6:34:47:b6:70:3d:8d:03:af:9d:c4:95:
         66:5d:47:ca:25:aa:f7:a4:74:a3:99:83:b0:93:30:d6:06:8c:
         2c:d8:ad:23:e6:f2:e2:75:e9:aa:13:c0:33:cd:c8:b0:50:c4:
         c2:25:3e:0b:62:0c:78:d3:02:1d:77:80:b8:fa:0c:58:42:e6:
         21:ec:73:49:53:23:de:d0:09:1c:e8:fa:4a:19:2c:0d:57:1f:
         a7:f3:44:99:ee:a5:6e:dd:b3:9f:61:d6:83:8e:ef:86:e2:da:
         b8:de:59:5c:08:82:4d:9a:35:9d:44:25:7b:cf:75:4e:bf:6d:
         75:aa:e1:0d:5b:4c:4c:86:1e:26:6f:6c:d3:49:c2:57:da:ca:
         11:4e:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:05:15 2026 by rpki-client