Error: rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft
File:                     jNewEiWOlbG4ISGPefClXcSUX5s.mft (raw, json)
Hash identifier:          ADQhSCJCMzyxMO6JgeqsecO4RzYangyM/4cM3OwGrDI=
Subject key identifier:   0C:08:C5:12:90:A8:62:6A:BB:32:D9:C0:23:1E:12:4B:2A:14:40:06
Authority key identifier: 8C:D7:B0:12:25:8E:95:B1:B8:21:21:8F:79:F0:A5:5D:C4:94:5F:9B
Certificate issuer:       /CN=F367B3A6AF/serialNumber=8CD7B012258E95B1B821218F79F0A55DC4945F9B
Certificate serial:       0E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jNewEiWOlbG4ISGPefClXcSUX5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft
Manifest number:          0C
Signing time:             Wed 04 Nov 2026 06:06:06 +0000
Manifest this update:     Wed 04 Nov 2026 06:06:05 +0000
Manifest next update:     Fri 06 Nov 2026 06:06:05 +0000
Files and hashes:         1: jNewEiWOlbG4ISGPefClXcSUX5s.crl (hash: jSr+FygIjahlYvYZt35WMBdbHNtSBp+4htLhDUGx3wk=)
                          2: 294959A0D15B11F181341AACCE1D38B0.roa (hash: trjDKYtQU8IGt67oAsR6CF5W8Ozt6ds0LzVWkCIi2Qs=)
                          3: F8D007C4D15A11F19F3710ACCE1D38B0.roa (hash: ncnn1Fx0/5+q8yYSmPcZe1oM50v+osyKiJWvRf8FleU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jNewEiWOlbG4ISGPefClXcSUX5s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3A6AF, serialNumber=8CD7B012258E95B1B821218F79F0A55DC4945F9B
        Validity
            Not Before: Nov  4 06:06:05 2026 GMT
            Not After : Nov  6 06:06:05 2026 GMT
        Subject: CN=6aeacb4e-448d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:2c:c3:33:ea:d1:91:08:0d:aa:c8:93:eb:
                    81:b1:37:ce:b5:6f:a9:bd:89:1d:14:b8:b0:b3:2a:
                    5e:12:a0:2e:40:f5:5c:8f:10:f5:03:5d:bf:09:65:
                    42:6f:4d:8a:b1:84:c5:37:47:c6:91:10:b3:d1:36:
                    a5:40:89:2b:2e:e0:80:e6:11:89:fa:3f:32:8d:58:
                    07:29:bc:c0:66:cb:01:c6:1c:b7:c6:6a:cd:78:26:
                    81:05:48:8c:82:1b:2a:91:9b:78:a4:d9:98:70:9b:
                    49:99:cc:79:84:8b:d8:a4:5a:62:c9:fd:f0:ea:9a:
                    00:44:2c:45:f2:aa:4a:a8:6f:f6:65:3b:69:63:38:
                    b0:35:fb:35:a8:87:f6:df:ae:d8:ca:9f:d4:b8:7d:
                    01:b2:88:cc:11:99:ff:31:85:5a:81:9c:c0:2d:5a:
                    b2:f0:32:66:c8:a1:09:56:9b:6e:c1:ca:b0:ff:15:
                    1b:9d:cd:c1:9b:a3:a7:b0:10:b4:06:dc:1d:e9:5c:
                    25:d9:cb:c9:29:95:82:a9:da:e6:d8:22:ca:43:54:
                    49:a2:fd:e4:cd:99:42:57:f4:ff:72:77:73:4b:61:
                    5e:cf:fa:d6:71:19:96:c1:3a:90:77:97:07:05:4b:
                    de:2e:65:6f:b0:95:56:27:82:29:71:5c:48:d1:38:
                    04:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:08:C5:12:90:A8:62:6A:BB:32:D9:C0:23:1E:12:4B:2A:14:40:06
            X509v3 Authority Key Identifier:
                keyid:8C:D7:B0:12:25:8E:95:B1:B8:21:21:8F:79:F0:A5:5D:C4:94:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jNewEiWOlbG4ISGPefClXcSUX5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3A6/98961646D15A11F1AF1C01A8CE1D38B0/jNewEiWOlbG4ISGPefClXcSUX5s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:88:c2:08:6e:ea:a8:33:05:10:cc:21:e3:2f:63:a8:1a:29:
         05:ea:0d:f1:8c:cf:c8:71:45:3f:9e:16:8c:68:98:b7:4d:d8:
         89:ad:31:46:89:21:cf:ec:5b:5d:82:14:46:ec:85:ed:4a:4b:
         91:17:d1:5c:f1:c2:48:b2:c8:08:fc:76:a0:7a:2f:80:2b:a3:
         5b:df:03:a0:29:4b:a7:24:ca:46:92:e9:12:d4:bb:0a:71:6e:
         08:c5:f1:21:dc:7f:69:26:0b:57:7b:03:a9:1a:96:85:c8:1d:
         a4:dd:e8:bd:e3:03:09:f1:32:2b:d8:a3:92:d7:39:e6:3f:6b:
         57:d2:09:bb:13:85:3c:3c:73:ef:10:14:54:4c:95:56:ff:cb:
         80:4b:a7:f7:33:e3:0c:1a:76:f0:fd:df:13:25:57:14:6d:43:
         53:9b:bf:76:df:c1:ec:8f:dd:c7:5b:1b:2b:fb:89:b4:48:fe:
         25:f4:a9:84:50:4c:db:c4:55:99:ff:5d:71:88:4e:e1:71:77:
         0f:55:8e:19:16:3a:48:a1:c0:d7:e6:ec:b2:e2:b4:4d:d3:93:
         75:f6:ff:ef:b8:e0:8e:8e:b2:98:83:61:6e:00:a1:5c:00:72:
         ac:ac:53:fa:ec:f4:09:b3:4f:f2:1a:1b:b1:eb:d0:49:39:37:
         1d:60:bd:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:36:36 2026 by rpki-client