Error: rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
File:                     hursQpTfunBFqIZC6d_EVRs0wlU.mft (raw, json)
Hash identifier:          0Em+zzPtbjGPDoR8pO2qf5nFNz21lLB/fD+RPzr3W3I=
Subject key identifier:   9F:28:09:02:26:B9:29:AC:98:CD:2B:F6:96:03:69:16:49:DE:7E:BB
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Certificate issuer:       /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial:       0A97
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
Manifest number:          0A8A
Signing time:             Sun 01 Nov 2026 01:35:14 +0000
Manifest this update:     Sun 01 Nov 2026 01:35:13 +0000
Manifest next update:     Tue 03 Nov 2026 01:35:13 +0000
Files and hashes:         1: hursQpTfunBFqIZC6d_EVRs0wlU.crl (hash: qLSrWi7M0GZ9w87918+CK/PmcnJ3MC4e2EIh43qP2Pc=)
                          2: 79F59A648E6611EBBC39876CF8AEA228.roa (hash: 23hasVT7STzhojJmCnzWqlWjP/WJmmjWHiydYYblzCA=)
                          3: E3CC92B2AB1811EF86C7F479762E951A.roa (hash: TFsOPlhZpWRBJYJKBHhEjMZSgDMfyDlwRle6Xdkgtls=)
                          4: D2F1A5928E6411EBBC748B6AF8AEA228.roa (hash: 6qK0G9UDQpIN5VB9HAdPfGyjLR6yeZQoNvVlRbOIFCk=)
                          5: 3F03153416A911EFA217550F017001B1.roa (hash: 9/pgGRkm3NQotfShqK62IqS8JeOjMdrxiB5oVZ+s0Go=)
                          6: D1CB5D328E6611EB8E50DC6CF8AEA228.roa (hash: Uj+iO4kxeUkmUkuThovmvQFW6hvGQ4iYoLoY2th9wkk=)
                          7: 2A782EBC8E6511EBBA24DF6AF8AEA228.roa (hash: yGZ6SnXS1RSRZj/wE1QJtTRTtRj6tcY4vFXhT5iHrl4=)
                          8: 97E367AE8E6611EB8103A46CF8AEA228.roa (hash: e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=)
                          9: A15549308E6411EBA8883A6AF8AEA228.roa (hash: rMD9Bdkw1CGzfMpgpTrn426f5jHiNnuNNjjZcqe2kgo=)
                          10: 028AE0848E6511EB9F7DB66AF8AEA228.roa (hash: 0qPx7Dwu8RjdR4H81YDiJJ6f5FFJ4STm+gTVCcpfY+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                          rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2711 (0xa97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAR, serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
        Validity
            Not Before: Nov  1 01:35:13 2026 GMT
            Not After : Nov  3 01:35:13 2026 GMT
        Subject: CN=6ae69752-28f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:69:d9:9a:94:38:47:b1:0c:16:75:ab:36:2a:
                    70:7e:22:d2:5f:54:61:92:bb:ab:25:75:e4:a6:52:
                    7f:e4:b0:1e:54:c4:38:b7:32:56:c1:1e:ec:06:33:
                    4a:b8:26:a8:cf:ec:b7:93:03:c8:40:cd:bc:59:a1:
                    9f:7e:df:c9:b0:8e:84:6f:92:53:28:4d:4b:b7:92:
                    2a:a3:01:c7:96:dc:62:98:08:58:eb:db:f1:aa:c4:
                    42:03:23:e0:da:69:0a:80:86:01:be:fd:4b:c7:84:
                    0e:5a:4b:e0:5d:c9:71:b6:8f:da:01:d8:53:5a:e3:
                    aa:05:6d:7c:78:fc:d3:f7:af:f9:fa:52:54:fd:67:
                    8f:3f:ea:cb:02:90:68:4e:83:4b:ed:ad:62:02:6f:
                    c9:ce:11:fb:9f:ac:bc:cf:21:94:07:41:a1:a7:dc:
                    17:f2:8d:7f:87:d0:c5:2c:f4:56:bd:fd:4f:7d:14:
                    81:1d:36:ae:20:27:23:76:46:ae:18:fd:5f:5f:9d:
                    44:24:c5:ba:fd:53:b3:07:6d:aa:0a:81:e3:b0:7f:
                    b5:4f:1b:3c:7e:91:5f:a4:56:c4:28:73:d1:71:36:
                    29:9e:60:da:c4:b3:ec:08:85:6a:84:98:e6:91:2c:
                    97:d3:a2:fc:ad:df:d6:65:2a:5d:a7:dc:04:f1:f5:
                    ba:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:28:09:02:26:B9:29:AC:98:CD:2B:F6:96:03:69:16:49:DE:7E:BB
            X509v3 Authority Key Identifier:
                keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:64:8f:7b:1b:52:f9:d1:fd:21:b2:e3:ee:dd:d0:d4:72:67:
         7f:25:b0:5f:48:d6:4a:88:d6:3b:0f:56:97:01:ab:53:b2:3b:
         5c:41:d8:76:61:e0:cf:53:08:04:64:78:e2:8d:87:7f:ef:ac:
         25:6e:4c:47:ef:43:9b:4c:fb:4d:cf:27:0f:f7:60:65:2f:a0:
         fb:bb:22:a8:23:c2:18:94:1f:53:4d:ec:27:19:21:5e:aa:c5:
         25:fe:c5:cc:52:ae:8b:7a:07:4d:67:c4:65:86:2d:f5:f6:bd:
         33:3a:48:dc:c8:b9:32:05:6d:95:b3:fc:66:77:d4:3d:ca:64:
         4d:26:19:25:c6:90:ac:44:df:0f:79:b5:aa:68:95:d8:a2:6b:
         7e:2c:19:b6:f4:b3:b9:44:20:1d:f5:d5:a3:9f:64:11:72:ec:
         a0:6d:88:a5:d2:99:6e:69:50:9e:2b:a0:0d:df:6b:67:f6:09:
         1e:fe:fc:af:18:11:df:7a:e1:f4:f4:d6:05:88:14:41:53:b4:
         67:db:2a:df:0e:cf:ad:2a:40:f2:7b:f1:6d:b9:3d:5f:f9:a7:
         f2:94:0e:75:3d:55:04:23:80:e7:dc:2a:e6:61:a4:ec:2a:79:
         a8:85:43:20:79:50:26:6a:f9:e1:38:f5:51:72:15:ce:a5:74:
         7e:42:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 21:48:40 2026 by rpki-client