Error: rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
File:                     GS9iV_wr5XP3WbXyvfg9aar_ouc.mft (raw, json)
Hash identifier:          GGyEXBVkWCMIYNcWy2oC7L09TjE7M77xTDj+2k9KedA=
Subject key identifier:   5F:F4:FE:AF:DC:E0:53:D7:1E:66:55:54:B8:85:4C:87:DE:29:24:09
Authority key identifier: 19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Certificate issuer:       /CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
Certificate serial:       04FD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
Manifest number:          04FC
Signing time:             Wed 04 Nov 2026 03:26:48 +0000
Manifest this update:     Wed 04 Nov 2026 03:26:47 +0000
Manifest next update:     Fri 06 Nov 2026 03:26:47 +0000
Files and hashes:         1: GS9iV_wr5XP3WbXyvfg9aar_ouc.crl (hash: 5+T1ko0kalieBgqi4h6VxU2uGCFxjU6hVqNsC2gRIF0=)
                          2: A147BE680D4211EF9356066C017001B1.roa (hash: QuPZYoQI7oZ3C2C6Xc4HwdYmjHFXWbZWWnj28DQTRz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                          rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 03:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AR, serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
        Validity
            Not Before: Nov  4 03:26:47 2026 GMT
            Not After : Nov  6 03:26:47 2026 GMT
        Subject: CN=6aeaa5f8-7a86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:cf:37:af:9c:05:ae:fc:8d:f8:d6:63:e4:
                    b9:ec:56:23:c5:8f:2b:8c:19:16:ef:07:de:b9:ab:
                    ae:9a:d2:9e:71:cf:03:85:04:bf:81:74:8c:12:37:
                    3e:5a:9e:a2:c0:94:85:93:eb:aa:48:74:88:67:7c:
                    2f:56:df:20:d1:17:d1:e6:c8:f9:05:e9:93:ba:bb:
                    6e:41:04:ce:01:27:b7:4a:66:dd:32:7c:ee:fc:be:
                    d4:cb:77:66:bc:71:a5:f4:d2:0d:ff:8a:0e:49:70:
                    3a:47:05:46:e9:a1:46:60:13:22:81:37:5c:7c:38:
                    d3:d6:04:a9:4d:f6:7c:28:0a:3f:da:6e:a7:5d:88:
                    fd:b4:ab:82:69:38:98:8e:41:58:1e:74:00:9f:e7:
                    c7:8f:66:38:c7:07:dc:7e:10:af:56:fe:0f:c2:a5:
                    89:97:b5:6e:f7:93:e7:87:bf:47:52:e8:26:e4:93:
                    ee:5d:5e:83:5c:7c:1b:cc:62:fd:69:04:cc:b7:07:
                    d9:91:52:bb:03:5d:05:54:14:a6:a0:92:e7:19:cc:
                    cb:cd:89:59:32:37:25:80:a9:0e:2d:d3:60:c9:63:
                    46:c2:35:4e:67:0f:d4:fc:62:06:34:27:cc:80:da:
                    21:5b:b0:e9:5d:41:41:db:cc:f2:08:3e:b6:1c:fe:
                    92:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F4:FE:AF:DC:E0:53:D7:1E:66:55:54:B8:85:4C:87:DE:29:24:09
            X509v3 Authority Key Identifier:
                keyid:19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2f:37:be:8a:e0:5f:14:13:a3:27:8d:1b:34:dd:9b:fe:5c:
         dc:cc:92:6f:50:fd:be:24:80:72:b2:f3:8c:10:d9:85:ab:2c:
         c9:3d:ab:8b:63:5c:f3:c8:af:d1:44:74:cc:bf:45:61:f6:ea:
         05:18:65:8f:57:55:c8:8f:e0:f3:11:68:7b:2e:66:11:71:00:
         02:a2:52:e4:21:18:db:88:9d:2f:90:ee:29:da:d1:ab:c9:0b:
         e0:1a:51:4b:08:8a:1a:25:3e:a1:77:76:19:51:48:ee:8a:69:
         97:1a:55:da:ca:00:43:ec:a8:f4:e6:4a:7c:a1:d7:db:c4:5b:
         be:81:89:f6:10:c4:ab:d1:b7:69:b8:99:e4:74:ae:e0:1b:f8:
         63:39:26:5b:9b:98:21:69:a4:3e:3e:dd:69:1b:d1:06:24:30:
         08:39:da:1d:31:63:cf:82:6f:45:42:19:f7:89:ef:b2:a1:d3:
         8d:b6:46:b5:dd:aa:32:d0:78:04:66:2c:fe:e6:f9:b9:42:49:
         f9:0f:8c:7b:ca:0c:8f:19:f9:35:51:08:ec:fa:c6:87:99:61:
         93:63:b2:5f:f3:49:cc:a5:1d:ef:8f:59:c4:8b:ca:ea:b1:6c:
         30:9f:a6:60:26:29:ed:b0:fe:71:72:a9:be:19:d5:c6:00:7d:
         ab:a7:38:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:23:52 2026 by rpki-client