Error: rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
File:                     P4zuwyrakEaTvUAO9yxqKMfih0g.mft (raw, json)
Hash identifier:          vvCFhE1HoCDIXRlVoUOlFxia8LcDOyAqqlcEgJAlOiw=
Subject key identifier:   F1:0D:F4:05:C6:DD:11:5E:A4:CF:FB:EA:96:EB:04:8B:A3:50:14:AF
Authority key identifier: 3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48
Certificate issuer:       /CN=F36F550DAF/serialNumber=3F8CEEC32ADA904693BD400EF72C6A28C7E28748
Certificate serial:       0287
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
Manifest number:          0285
Signing time:             Tue 27 Oct 2026 04:45:39 +0000
Manifest this update:     Tue 27 Oct 2026 04:45:38 +0000
Manifest next update:     Thu 29 Oct 2026 04:45:38 +0000
Files and hashes:         1: P4zuwyrakEaTvUAO9yxqKMfih0g.crl (hash: 1NoQ+hawDudqPu/YJtDHFHTn9dQ7z6ZWF1juFrWp9Mk=)
                          2: D6E9120A4DC511F0AC59CEAFDAE4EC9C.roa (hash: fOsEo1LcqDjmwTrC6vczX+q3fF4EVxIT6Dh903EA+p8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 04:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F550DAF, serialNumber=3F8CEEC32ADA904693BD400EF72C6A28C7E28748
        Validity
            Not Before: Oct 27 04:45:38 2026 GMT
            Not After : Oct 29 04:45:38 2026 GMT
        Subject: CN=6ae02c73-a56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:4f:2f:b2:fb:c3:d4:9a:ec:08:ec:78:01:
                    14:67:f9:7b:d9:c7:46:c4:cd:ed:e6:36:b9:e0:49:
                    61:38:6d:9a:b8:f7:03:44:b6:9e:96:4d:df:5c:78:
                    2f:d4:e8:1f:ae:55:25:cd:52:85:d4:58:69:90:4b:
                    2c:98:72:4d:cd:48:d9:b2:76:af:3b:39:54:e0:74:
                    d7:b9:cb:a6:5f:d5:56:a6:4e:ea:df:fc:29:ae:7b:
                    eb:dd:e0:da:51:ff:f0:00:9c:1d:f2:17:46:03:77:
                    c5:ff:62:4d:ce:52:a2:1c:9e:56:79:68:e4:a2:35:
                    4c:b3:5f:50:6d:26:76:42:a1:f7:8b:5c:16:96:ad:
                    81:bd:40:12:c8:d8:10:af:36:31:e7:d5:ec:29:f1:
                    9b:51:51:dd:e1:e1:c5:7c:fa:5d:2c:16:d9:b2:0d:
                    b6:fe:8e:b1:44:49:cd:11:d4:4a:47:da:67:f0:0a:
                    ee:5f:32:e0:9d:ed:1b:f6:6a:5c:e3:79:04:27:01:
                    1a:35:d4:7e:ea:ee:52:f5:5e:a9:49:10:9d:33:95:
                    bb:7b:2c:30:8c:f9:0f:2a:e4:99:fa:8e:ef:d8:7f:
                    cc:30:e3:98:43:36:97:66:9e:fa:91:38:26:23:d1:
                    ce:1d:79:a6:36:07:49:c0:eb:64:df:b4:4c:3e:47:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0D:F4:05:C6:DD:11:5E:A4:CF:FB:EA:96:EB:04:8B:A3:50:14:AF
            X509v3 Authority Key Identifier:
                keyid:3F:8C:EE:C3:2A:DA:90:46:93:BD:40:0E:F7:2C:6A:28:C7:E2:87:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P4zuwyrakEaTvUAO9yxqKMfih0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F550D/B7BF2626E13C11EFBF2AD094762E951A/P4zuwyrakEaTvUAO9yxqKMfih0g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:63:a6:56:5a:f2:95:ae:70:28:ab:0d:13:a0:e7:bf:6f:6d:
         67:fe:57:04:0b:29:ea:9f:ce:68:0f:ce:78:41:c5:33:7d:e0:
         bb:65:8d:0a:b3:5e:c7:29:27:a2:39:f5:4f:6f:51:d8:ba:0e:
         a5:6b:4d:63:b3:7c:51:1c:7a:f9:dd:1f:98:c5:ea:d5:37:16:
         ad:54:f8:59:8e:05:0a:ac:3e:f2:56:3e:1e:54:3b:96:e8:27:
         7e:f0:39:ee:f0:21:5c:f8:87:c4:52:65:20:3a:a4:80:36:e3:
         9d:ef:88:f3:17:96:5a:f8:7d:c9:4e:de:b7:29:04:73:0d:b1:
         5e:c9:ca:a2:82:ef:05:46:41:95:a5:2e:08:10:70:de:76:7f:
         5d:4a:5b:94:33:87:74:08:e6:83:9a:f7:8c:76:89:de:60:9f:
         5c:c0:dc:b0:20:f7:7f:9b:64:1e:2c:d7:8a:13:ba:bd:62:57:
         c7:20:7b:38:f2:32:6c:fd:a2:0c:44:c0:88:55:89:11:9f:b8:
         fd:53:6c:b6:ff:e6:fc:24:b9:ab:fb:0b:7b:7d:a0:4a:83:2a:
         3d:fa:9b:7c:2b:83:7b:7c:5f:62:66:68:fd:f4:2a:57:85:82:
         00:97:59:cc:26:21:75:d5:61:43:bd:80:c8:69:e3:9a:2b:38:
         37:1c:90:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:44:50 2026 by rpki-client