Error: rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
File:                     e5q4nC36bjo-yHXuV_4sDZpxQcA.mft (raw, json)
Hash identifier:          /opCjAI44HRSzrlY7WgUK9pbyknD8ycZsSX8nspGYos=
Subject key identifier:   E4:59:61:70:CE:79:F2:2E:80:5B:06:62:0F:96:E0:71:12:B7:DF:06
Authority key identifier: 7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0
Certificate issuer:       /CN=F36E6854AF/serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
Certificate serial:       037A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
Manifest number:          0376
Signing time:             Wed 14 Oct 2026 04:12:00 +0000
Manifest this update:     Wed 14 Oct 2026 04:12:00 +0000
Manifest next update:     Fri 16 Oct 2026 04:12:00 +0000
Files and hashes:         1: e5q4nC36bjo-yHXuV_4sDZpxQcA.crl (hash: /xfvxLgYjnKeDYS/bjoWVLIqDPHXSzotatvtBqj4950=)
                          2: E9537D34D68E11F0804EF19CDAE4EC9C.roa (hash: Yi7WlpDmrDcsEUphgJQV/qjToEbUEGi7uC9aoYVJh9s=)
                          3: 3E1DF6B4D68F11F0A85E0F9FDAE4EC9C.roa (hash: 7mBMpJhGiYcULHhIUFAn1tr0Xgd9cXpIwxF3yIIhjfE=)
                          4: 41B9BD06230F11EF89072D357DDC24C2.roa (hash: Vju6CP63vk7sWntfujwYKbfkTEsNT3KYrBm9nMWtFv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 04:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6854AF, serialNumber=7B9AB89C2DFA6E3A3EC875EE57FE2C0D9A7141C0
        Validity
            Not Before: Oct 14 04:12:00 2026 GMT
            Not After : Oct 16 04:12:00 2026 GMT
        Subject: CN=6acf0110-e29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2c:a8:77:bb:ea:7f:0a:c4:20:88:51:82:79:
                    d1:d8:66:20:2f:d3:79:33:97:b3:6a:06:f5:cd:46:
                    ec:cb:43:4d:27:8f:17:ed:18:20:1f:1b:da:c0:1a:
                    a5:a9:fe:6c:df:b8:f2:12:85:d5:32:75:20:0a:fd:
                    c7:ec:7f:15:38:ea:49:cb:bf:c2:d6:a5:a2:8c:58:
                    c7:84:74:98:ad:3f:6d:81:69:34:01:f0:d6:2f:ae:
                    e1:1f:78:b3:79:1e:a5:d4:26:29:e0:76:b5:3b:24:
                    be:e8:6b:67:0a:76:34:23:9b:98:5d:8e:04:05:0a:
                    48:90:eb:21:b7:d3:99:3b:d8:db:5a:19:01:7c:df:
                    72:3f:28:89:4b:aa:b5:2c:a7:aa:9f:ea:d0:ac:e4:
                    bc:cb:43:ee:9d:bf:b7:14:1a:7a:f8:dd:51:f0:98:
                    19:34:23:ed:2e:6d:41:26:5c:fb:17:a2:d2:f0:48:
                    bf:8f:0a:02:8c:19:db:3a:0d:5f:7c:96:b2:ba:e5:
                    db:13:98:5d:e5:78:9e:ac:0b:d7:72:7a:8d:8d:d4:
                    42:24:6a:92:2c:7f:74:e8:40:cf:01:ac:76:59:ac:
                    9b:64:28:f1:d6:8b:6f:5b:a4:f6:a9:fe:48:87:c6:
                    76:ee:82:bc:45:1b:fc:0c:56:bd:85:02:b4:c0:11:
                    e5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:59:61:70:CE:79:F2:2E:80:5B:06:62:0F:96:E0:71:12:B7:DF:06
            X509v3 Authority Key Identifier:
                keyid:7B:9A:B8:9C:2D:FA:6E:3A:3E:C8:75:EE:57:FE:2C:0D:9A:71:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5q4nC36bjo-yHXuV_4sDZpxQcA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6854/385FBE92230D11EFA27C81277DDC24C2/e5q4nC36bjo-yHXuV_4sDZpxQcA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:df:0a:e3:c8:19:ea:27:a2:75:33:15:13:2a:1c:fe:25:3a:
         9a:be:9c:5a:4b:64:18:ab:33:e3:df:9c:b1:85:fa:fa:3b:9a:
         d4:dd:d8:99:bd:e4:b3:8e:57:2e:b0:44:17:fa:3b:08:3c:1d:
         0d:dc:96:8e:42:9f:17:4f:df:51:26:ba:ab:08:3f:e3:c7:96:
         d4:03:67:25:91:07:21:9f:8c:2d:79:aa:95:df:ac:cf:32:c9:
         a0:b9:9c:a8:3b:04:16:cc:e4:6e:ac:24:ae:7c:c6:09:5f:be:
         6b:dd:92:22:86:a4:fd:7e:0f:ac:46:39:8c:3a:63:42:17:14:
         5e:c6:bb:3b:4d:c0:f0:9e:03:0a:f5:3d:f5:b5:44:c0:c3:a0:
         b5:ab:1e:18:b8:eb:c6:47:59:38:8e:cd:eb:74:a4:21:8d:82:
         e0:b5:0a:4e:c6:90:59:09:ec:6d:4e:2d:9d:f1:66:7e:19:c9:
         8a:03:76:90:a1:83:3c:10:d7:8d:b8:7a:a9:bb:72:ac:db:ba:
         73:15:ab:fa:5b:c7:d4:f6:57:99:72:33:25:c8:9d:db:db:b2:
         77:b8:b7:b4:b1:76:aa:67:6f:1e:db:db:38:32:3d:b6:5a:a9:
         0c:3a:77:51:9f:00:a4:5f:f4:bf:94:9c:9a:c7:74:bd:fb:78:
         6d:06:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:32:53 2026 by rpki-client