Error: rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.mft
File:                     84c7rx6oRdTx490uDOU2_0q-fjU.mft (raw, json)
Hash identifier:          HMyiXUDPoxv4/5QKuVAEoP6AnMtbU7cWfoUxloveufw=
Subject key identifier:   38:0D:4E:03:81:6A:DB:0C:75:5C:4D:59:A2:B5:5D:86:07:4F:E3:AB
Authority key identifier: F3:87:3B:AF:1E:A8:45:D4:F1:E3:DD:2E:0C:E5:36:FF:4A:BE:7E:35
Certificate issuer:       /CN=F3636478AF/serialNumber=F3873BAF1EA845D4F1E3DD2E0CE536FF4ABE7E35
Certificate serial:       42
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/84c7rx6oRdTx490uDOU2_0q-fjU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.mft
Manifest number:          41
Signing time:             Wed 04 Nov 2026 05:51:51 +0000
Manifest this update:     Wed 04 Nov 2026 05:51:50 +0000
Manifest next update:     Fri 06 Nov 2026 05:51:50 +0000
Files and hashes:         1: 84c7rx6oRdTx490uDOU2_0q-fjU.crl (hash: K64H8fZ+oQxt81tss4sobqorXhhwI+OHO65bn5Hx4oE=)
                          2: C6A2C518A6D811F1856314B4CE1D38B0.roa (hash: 4C9iMvUNWW1N4xtxbTFo5PbizcYF9/fP8iKcmchDWL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/84c7rx6oRdTx490uDOU2_0q-fjU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636478AF, serialNumber=F3873BAF1EA845D4F1E3DD2E0CE536FF4ABE7E35
        Validity
            Not Before: Nov  4 05:51:50 2026 GMT
            Not After : Nov  6 05:51:50 2026 GMT
        Subject: CN=6aeac7f7-6dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2d:93:c7:1d:7e:d3:44:aa:67:b2:c9:6b:ab:
                    45:23:1c:8e:ec:cb:c4:04:72:54:86:b1:16:d5:ff:
                    37:54:87:3c:b9:49:24:9c:c5:0c:14:ac:f7:d6:0b:
                    aa:5e:21:f8:e5:e0:7e:0b:88:16:52:6e:f7:5d:b3:
                    b2:ae:bf:e6:c0:b5:4c:a6:3a:d9:ae:4e:09:d3:ed:
                    4b:a2:47:7a:47:05:ac:08:51:54:f8:ba:13:27:84:
                    e2:e3:2a:b1:df:16:55:ad:d5:ae:44:3b:dd:a1:e2:
                    00:ab:a8:ca:bf:0b:6f:e5:6c:40:a8:d8:11:70:9f:
                    7f:25:f1:62:aa:a2:fb:96:bf:89:28:a0:20:8c:fd:
                    09:92:4e:a3:12:5a:9b:8e:2e:ac:d9:5d:1a:71:b5:
                    90:fa:23:24:d0:06:f7:e7:95:fd:92:a2:85:a2:f9:
                    1a:7a:7c:0d:be:53:7c:11:2a:8a:50:d5:18:9f:13:
                    36:a0:da:ec:d3:b9:db:3e:60:0f:d3:60:ae:4e:1e:
                    99:66:7d:ae:75:05:ac:8f:7a:8c:56:8b:2b:9e:47:
                    32:05:67:e2:41:02:d8:6e:31:4a:6f:9e:80:fc:ac:
                    32:19:4e:f4:72:9a:44:b4:11:59:7c:64:99:d9:23:
                    67:f5:07:c2:41:fa:00:50:8f:b5:fe:3a:e8:6b:6c:
                    62:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0D:4E:03:81:6A:DB:0C:75:5C:4D:59:A2:B5:5D:86:07:4F:E3:AB
            X509v3 Authority Key Identifier:
                keyid:F3:87:3B:AF:1E:A8:45:D4:F1:E3:DD:2E:0C:E5:36:FF:4A:BE:7E:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/84c7rx6oRdTx490uDOU2_0q-fjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636478/62BF4CD8A6D811F1B00C9AB3CE1D38B0/84c7rx6oRdTx490uDOU2_0q-fjU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:87:ed:8b:e9:cf:7d:0f:25:85:b3:13:8c:ad:2e:1e:90:94:
         22:fa:52:bd:ed:e9:b0:23:e2:50:d1:0a:19:ca:ce:21:17:20:
         34:fc:28:94:27:0a:5b:f8:9f:c1:a3:0d:af:f9:89:ba:e9:36:
         18:15:b2:24:3a:de:84:ad:a8:d8:8f:96:94:39:87:e2:bc:ef:
         36:a3:36:c3:4a:bb:8c:42:33:3e:eb:25:d5:a0:18:42:a0:56:
         f5:b0:80:97:47:16:3f:23:b6:71:ba:9d:2a:12:0f:84:3d:6b:
         e4:bc:43:ef:d1:ce:14:22:0b:ae:a1:e1:e8:ec:31:83:86:8a:
         e3:99:98:40:da:ac:58:5f:88:25:3e:50:38:81:b8:d4:db:45:
         d5:8a:65:19:ad:d7:e2:41:24:5a:a1:e2:c0:9f:69:c1:6d:1b:
         99:6d:82:f7:46:6d:a4:4b:65:c5:59:f0:97:37:69:ec:bf:e1:
         b2:75:2f:dd:0f:5e:6f:f1:14:2d:9e:7a:46:be:4f:04:e2:9b:
         53:a9:b1:ea:38:3d:1a:9d:20:12:21:c3:bf:f8:76:be:58:44:
         59:5d:d0:c6:78:ee:d0:17:7c:91:98:ac:96:6e:ce:7b:1f:8a:
         19:8c:5a:96:1c:1a:62:b3:46:bf:c9:03:0b:36:04:3f:75:08:
         d1:09:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:06:59 2026 by rpki-client