Error: rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          UlRB79zeMEFlBvF2yqXg8nKdLEb6V0x53PE40GfBxh4=
Subject key identifier:   9C:72:3C:E1:51:2B:F2:2B:38:DC:69:3C:58:7F:AB:D9:FE:3E:F1:AE
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       03BE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          03BD
Signing time:             Tue 03 Nov 2026 04:07:00 +0000
Manifest this update:     Tue 03 Nov 2026 04:07:00 +0000
Manifest next update:     Thu 05 Nov 2026 04:07:00 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: VfBhQZZpUcbUij66+PhR6ogboBfntYO5Is1/jRDT1j0=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 04:06:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: Nov  3 04:07:00 2026 GMT
            Not After : Nov  5 04:07:00 2026 GMT
        Subject: CN=6ae95de4-02b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4a:34:52:93:f9:78:3e:94:a0:81:2c:b3:91:
                    9d:b4:04:4f:93:51:2d:72:49:3e:25:59:e9:22:ce:
                    28:52:6b:47:60:46:27:bc:57:75:9c:8a:91:81:56:
                    00:08:e2:77:14:58:42:e4:8b:86:7a:04:90:53:75:
                    71:f0:8a:99:51:de:d8:7c:5c:2a:f6:5a:27:a0:ce:
                    14:e2:0b:51:6c:cd:6e:4e:9f:2c:1c:a3:b2:af:5f:
                    7a:d7:50:de:02:4a:a6:3f:34:21:af:b4:d5:20:87:
                    04:f9:d2:36:d8:15:98:34:b9:b1:5c:72:ef:7e:17:
                    7c:a7:da:1d:55:1a:db:79:e7:12:77:1a:02:7f:7c:
                    2f:88:09:7b:be:bf:08:b2:8f:36:75:ba:a0:6f:24:
                    f3:b3:ef:18:75:02:d6:93:17:31:34:ba:7f:9a:1f:
                    18:d6:68:4f:7e:df:86:0a:05:36:7d:8c:74:45:aa:
                    9b:6d:97:c0:c8:97:0c:fc:96:76:c9:bb:df:f8:6f:
                    e1:87:2b:be:02:d4:2d:6d:bf:f8:15:61:96:7a:c7:
                    81:61:79:4f:dd:7c:88:83:d4:69:95:02:4e:57:2a:
                    04:87:68:a0:b2:1b:a4:83:9a:aa:e8:06:41:ae:58:
                    0b:9f:7e:44:a1:26:c1:85:6f:5b:92:b9:9c:07:18:
                    43:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:72:3C:E1:51:2B:F2:2B:38:DC:69:3C:58:7F:AB:D9:FE:3E:F1:AE
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8b:ed:c4:f6:6b:97:49:84:0d:d3:0a:bc:94:b4:31:4f:44:
         e1:cb:50:92:51:17:6b:90:3d:21:5f:a5:90:22:fe:af:7c:2b:
         fa:f9:4b:91:92:c0:51:1f:0a:ea:5a:af:8c:13:79:40:cb:5d:
         1a:bf:76:28:09:a4:d6:9b:77:93:ac:1d:5c:3f:78:83:e4:d1:
         f1:40:9e:df:e7:22:bd:79:94:5a:41:e4:90:4c:e3:32:d9:46:
         72:6c:18:60:5b:b3:18:26:e8:a8:fa:8b:be:31:e5:ff:91:e4:
         8a:7e:f0:7c:90:b7:0e:d5:b6:8a:06:02:90:63:02:2b:cc:fe:
         84:9d:1d:42:bf:b7:eb:fa:fc:82:0f:25:d5:a9:ee:b0:9c:8b:
         e4:d2:d5:4c:1e:f9:6d:4b:18:ce:df:cc:ea:b3:6c:f2:86:e3:
         ea:08:0b:29:d0:a5:76:b4:c8:83:f2:ec:f3:d7:45:34:f7:7f:
         21:73:6c:3e:43:37:91:0a:c1:8b:d7:46:43:41:04:66:24:5f:
         90:83:ff:34:4f:a3:45:63:a9:f9:3f:5d:93:34:5c:f8:5b:63:
         df:10:52:1f:9f:75:b0:f4:bb:0c:5b:fc:1f:b0:49:54:a1:eb:
         1b:a2:50:2f:35:56:fc:7f:5a:af:a6:03:12:e7:22:8c:3c:32:
         6d:09:b1:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:11:09 2026 by rpki-client