Error: rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft
File:                     ajCgGUCvnBTJmV6s4bdpIhigwqY.mft (raw, json)
Hash identifier:          hW8bBxehNIJy5CtINIk81M4ghjDWpaTxwLgP57LtG5E=
Subject key identifier:   2F:EC:A8:80:34:88:5E:C0:FF:FF:BD:1C:90:4D:BB:73:16:D1:C7:8A
Authority key identifier: 6A:30:A0:19:40:AF:9C:14:C9:99:5E:AC:E1:B7:69:22:18:A0:C2:A6
Certificate issuer:       /CN=F3652B4FAF/serialNumber=6A30A01940AF9C14C9995EACE1B7692218A0C2A6
Certificate serial:       83
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ajCgGUCvnBTJmV6s4bdpIhigwqY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft
Manifest number:          82
Signing time:             Wed 04 Nov 2026 05:41:53 +0000
Manifest this update:     Wed 04 Nov 2026 05:41:52 +0000
Manifest next update:     Fri 06 Nov 2026 05:41:52 +0000
Files and hashes:         1: ajCgGUCvnBTJmV6s4bdpIhigwqY.crl (hash: cxMv7grWk63ZNIk07t520FLSrRlfsilt+3kgzxZlGjM=)
                          2: 029DE484739A11F19EC65B1ACF1D38B0.roa (hash: jctyW7FimWluAOazH1wxQiSlUMxQbqqu1aZTbh2lZYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ajCgGUCvnBTJmV6s4bdpIhigwqY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 05:41:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652B4FAF, serialNumber=6A30A01940AF9C14C9995EACE1B7692218A0C2A6
        Validity
            Not Before: Nov  4 05:41:52 2026 GMT
            Not After : Nov  6 05:41:52 2026 GMT
        Subject: CN=6aeac5a1-4823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:45:0e:52:d5:f4:8e:7a:8c:ed:cc:ca:81:
                    64:87:d7:c6:15:a8:33:54:33:cd:29:0a:03:37:a1:
                    ed:8d:a4:24:e8:98:5a:db:6b:eb:a2:99:8e:e5:78:
                    8c:e0:1d:4b:f7:fe:39:8a:63:5e:13:df:4e:8e:ea:
                    53:50:7d:62:7a:b5:9a:67:ad:e4:67:bc:20:70:36:
                    8f:32:c4:63:7c:7f:59:6e:33:9c:2b:30:97:42:9d:
                    0a:f4:1b:ca:e7:5d:17:f8:90:b2:d3:e7:2c:85:77:
                    0d:e5:ce:56:3a:81:f3:1e:31:71:8e:85:4a:22:c4:
                    4e:fc:19:d3:65:de:ca:96:d1:bd:43:3b:ab:f4:eb:
                    70:eb:97:b8:80:88:18:cc:70:d7:8e:98:6d:9a:74:
                    e5:00:83:d0:bf:0a:62:dc:a4:e6:15:13:8b:40:73:
                    f0:b6:98:38:75:35:99:00:9f:79:49:5e:34:bb:58:
                    2f:ab:04:e7:ab:16:43:02:26:ee:c7:d8:af:0c:c2:
                    27:5f:7c:36:bc:29:b8:e8:57:7b:37:ad:0c:de:9a:
                    af:f5:3a:3e:fe:56:15:d8:6e:e4:51:24:e8:8f:37:
                    b9:4f:e8:6b:82:da:0f:07:5d:05:fe:bd:e2:8e:be:
                    64:1a:5e:fb:9d:92:4f:06:37:e7:65:d7:c9:c1:83:
                    ec:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EC:A8:80:34:88:5E:C0:FF:FF:BD:1C:90:4D:BB:73:16:D1:C7:8A
            X509v3 Authority Key Identifier:
                keyid:6A:30:A0:19:40:AF:9C:14:C9:99:5E:AC:E1:B7:69:22:18:A0:C2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ajCgGUCvnBTJmV6s4bdpIhigwqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9d:69:35:fd:f8:a1:4a:bd:38:4e:06:a6:88:01:d4:a8:33:
         c6:4c:bd:1f:e0:0f:38:2c:dd:54:3d:d8:ac:f8:63:24:e3:d0:
         60:b3:a3:8e:60:93:d4:0f:61:85:02:21:6a:f2:af:4d:e6:b7:
         0e:c5:ab:9a:f9:10:71:5b:1a:2e:c9:42:29:46:f1:c1:cd:61:
         b3:fa:d5:7d:51:2b:8d:18:29:83:a4:61:97:2f:16:5a:2f:f6:
         b0:bd:26:db:cf:02:e2:b3:b8:5b:3e:8f:fb:af:0a:c2:f7:b5:
         26:a9:26:52:80:af:5e:b6:90:1c:50:92:8b:1d:bd:54:f1:ff:
         d2:82:94:a9:db:2d:99:5e:d9:02:04:30:45:4b:a6:67:7a:f3:
         64:f7:aa:07:e8:ec:88:1c:c7:43:b4:1c:73:30:78:85:6b:ab:
         88:9e:2f:81:40:ea:83:6a:62:10:c1:42:87:ff:8c:bd:1f:cb:
         c2:5b:d6:e4:9f:5e:bb:bb:8a:ad:17:39:0b:b9:a4:0d:4c:01:
         ab:f8:df:36:83:53:b7:11:46:c3:26:9d:89:c2:aa:6d:64:ef:
         a6:c6:24:92:0d:17:a9:5a:44:31:7e:ee:4e:ff:69:fe:ab:8d:
         ba:4d:45:45:76:b2:94:7c:f5:b4:81:c6:e4:ca:53:ba:33:90:
         98:d5:62:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:43:30 2026 by rpki-client