Error: rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
File:                     Filoib_wMb9_3nNn4t7pPLAIAoM.mft (raw, json)
Hash identifier:          EGgmfyk4cXl+zcoHtWmuoyybTtEMr6yNn/WQrYMWDQA=
Subject key identifier:   E8:2C:E3:C3:73:01:EB:B1:E2:70:F7:CF:3B:C5:24:1E:2C:CD:CB:CC
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Certificate issuer:       /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial:       038E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
Manifest number:          037F
Signing time:             Tue 03 Nov 2026 04:15:50 +0000
Manifest this update:     Tue 03 Nov 2026 04:15:49 +0000
Manifest next update:     Thu 05 Nov 2026 04:15:49 +0000
Files and hashes:         1: Filoib_wMb9_3nNn4t7pPLAIAoM.crl (hash: blHZfcSlmIikTnw0NNAxdRoKPjq2qHhRSQ18R0V4J38=)
                          2: BDEC29CA919B11F1AD7E43C3CE1D38B0.roa (hash: orjJ8rJ6sip9ETuYXH/EqMDUWi0EVMZEH1jhy65ixEA=)
                          3: 5AC4BF74032511F1929BD2EDDAE4EC9C.roa (hash: Mr+VNN9Z11W7VCtSCEh7NwS5SxBn5tdF3qqSe50Nvo0=)
                          4: C7D794A2833111F0BA372F98DAE4EC9C.roa (hash: 10t3J3G0W//+SuAl6SEkRsS4xMprNtVls3DmnWSADos=)
                          5: 8FC2BDBE057A11F18F7783C4DAE4EC9C.roa (hash: AQrOFPjFaqguMhUl4BS2Zhq/YyRQNkfhZPPG0wTy2FY=)
                          6: 328118D26ED211F1A7E0B60BCF1D38B0.roa (hash: mpYwvFPIIwGBad6LgXffGJB90JE3h4W8XaZN6Yka/Yc=)
                          7: B4706624834911F0B13243B3DAE4EC9C.roa (hash: bO4CRsQGJ9Fo2uTsOo+M4VqSaZfI6VGKrX/RQl3alaE=)
                          8: 3554EEB2347311EFA6FFD08D762E951A.roa (hash: STwhEyl7QlJqy2GwaPGbVHQtRVU/mUCXwrdIoazOpVI=)
                          9: E4AD7D32057A11F1AA15C6C4DAE4EC9C.roa (hash: 2aR11taDJSSgD4ZfkhbtNmSyzLyHvlisHe10lCn519E=)
                          10: A7FC5510032811F1B2192182DAE4EC9C.roa (hash: wGkWjE/BfFbXziwaAAoO4iCbMSLXd6CDbuL/jS67JKY=)
                          11: 6B2C5254032611F1872E2AF2DAE4EC9C.roa (hash: gSEOHsrvDJwVLm0ZAjOxsE19xm6ZGQzPUV5PhKX5T5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 04:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
        Validity
            Not Before: Nov  3 04:15:49 2026 GMT
            Not After : Nov  5 04:15:49 2026 GMT
        Subject: CN=6ae95ff6-b421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:76:27:c9:ef:97:ce:d7:c7:2b:fa:de:db:
                    43:ce:12:ab:01:b9:b0:89:54:ae:3a:41:fd:aa:b2:
                    d3:13:fe:38:c1:72:6b:7a:e9:d3:4f:63:cc:8c:11:
                    a9:98:bb:fb:fd:0d:2d:13:b3:8a:77:58:3c:52:3a:
                    eb:7c:e2:b8:51:d6:19:76:1a:79:86:87:39:b5:31:
                    78:9a:03:5e:17:e4:57:c2:c0:09:60:0e:bd:3c:54:
                    aa:48:b6:87:d0:60:51:4f:5c:0a:d4:81:9a:f7:7c:
                    56:b8:ba:57:8b:bc:74:47:af:92:59:e7:84:2b:2a:
                    84:62:d0:e7:7d:51:f4:0e:08:fb:c1:f5:48:71:da:
                    43:37:19:6d:64:f5:e5:3a:a7:18:90:1a:41:00:2d:
                    20:ef:0c:c1:23:b8:1a:3c:10:9a:3d:cc:27:e7:0a:
                    f6:10:ac:fc:24:96:74:98:47:a2:00:c6:ad:17:01:
                    ef:b9:10:cd:d9:6f:ca:7f:5d:91:f4:c1:d1:d5:55:
                    0a:1a:89:20:a9:ab:0b:57:e9:71:fa:2c:0c:0a:f7:
                    6a:53:9c:16:64:74:27:a9:4d:4e:3c:5e:ea:0b:fe:
                    70:fb:b8:a9:65:3a:04:f6:4f:4f:d1:83:b9:83:48:
                    fa:f6:fe:76:a7:1a:0b:73:6f:b3:68:c5:bc:d9:1a:
                    5c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2C:E3:C3:73:01:EB:B1:E2:70:F7:CF:3B:C5:24:1E:2C:CD:CB:CC
            X509v3 Authority Key Identifier:
                keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:97:17:bb:1f:f5:32:90:1b:37:17:e0:56:6b:52:88:50:90:
         15:96:aa:0c:e1:e9:29:6b:f4:42:86:09:15:ce:fa:85:56:d4:
         95:a7:cc:02:d3:90:96:c7:ef:04:9f:be:9b:1f:17:2c:6f:e4:
         62:bd:09:0c:9c:d9:2c:ac:3c:af:71:a8:e0:f4:bd:de:0c:65:
         39:19:2e:bc:15:ae:0a:52:2d:f2:25:50:41:7b:2a:fc:be:b2:
         60:53:cf:e7:4f:85:61:aa:be:df:bf:42:56:54:2e:d1:4d:4a:
         fe:17:91:44:1b:2d:bf:00:80:42:5f:50:36:82:b9:6c:c6:d8:
         b9:55:21:fc:6d:01:b9:f7:cb:ad:b6:54:29:01:b5:b1:de:9d:
         39:fb:9a:98:ee:61:b0:82:3b:5b:91:4f:83:8d:70:24:47:2b:
         1c:09:55:16:14:62:c1:e7:5d:8b:8f:c8:6c:ed:2c:19:6f:9d:
         3a:42:06:27:b3:cc:b0:33:78:16:cb:59:43:d1:d0:6b:94:b8:
         25:76:f6:1b:f5:47:17:a5:7d:62:4d:60:1e:1f:ca:9b:ce:5c:
         b9:93:38:aa:85:bd:30:7d:e2:25:54:ee:46:94:59:5f:39:4a:
         3b:54:f4:43:44:9d:9d:ce:81:b3:a4:90:01:78:ed:15:08:ab:
         ef:b2:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:59:59 2026 by rpki-client