Error: rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File:                     xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier:          p5LyffqWR4UgGpY5sc7C62yFx5lERxvI0X4/Wpa7xCo=
Subject key identifier:   B4:0D:64:F3:86:45:6A:61:41:CD:CA:1A:BB:70:7E:92:E3:0C:FC:09
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer:       /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial:       0AF6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number:          0AEB
Signing time:             Tue 03 Nov 2026 01:22:46 +0000
Manifest this update:     Tue 03 Nov 2026 01:22:45 +0000
Manifest next update:     Thu 05 Nov 2026 01:22:45 +0000
Files and hashes:         1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: UQbNA7oti9HcpAO4z9yqcBB/jyujV4twPeXtzjRGt0I=)
                          2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                          rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2806 (0xaf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
        Validity
            Not Before: Nov  3 01:22:45 2026 GMT
            Not After : Nov  5 01:22:45 2026 GMT
        Subject: CN=6ae93766-2c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:8c:1d:f9:de:73:41:43:53:3c:45:84:41:f4:
                    ad:79:25:f8:57:15:6a:b3:47:b9:b3:ff:fb:9c:10:
                    e9:b3:89:17:50:27:3e:e5:e7:24:a9:ae:e9:2d:42:
                    8b:e5:a1:d7:c7:17:90:d6:01:44:d5:4f:ea:11:39:
                    b3:4a:6c:8e:39:dc:df:35:f8:06:a4:f8:35:42:be:
                    8b:01:6c:22:53:ac:84:a3:6a:a8:58:4e:2b:fc:49:
                    9c:6f:f8:12:26:e6:6e:cd:57:7b:fc:d6:8a:81:7e:
                    24:96:57:57:37:16:90:70:af:c2:14:2d:0a:1f:8c:
                    53:55:69:fe:19:97:dc:e6:ae:da:f4:a7:25:e9:bd:
                    b6:07:39:9d:77:45:8a:a2:30:aa:4b:c6:48:bd:aa:
                    74:6b:32:25:34:3d:63:91:1d:81:62:4d:c8:62:00:
                    6d:f3:a4:a6:49:c6:5a:c1:ef:b6:e8:57:fb:6d:c7:
                    5b:b6:cc:18:ac:eb:90:0b:a1:c0:90:06:2a:94:8c:
                    cb:f7:ed:68:1e:b4:cd:01:44:50:31:ae:99:f5:92:
                    f1:b1:38:51:1a:c8:2e:d4:ad:57:fe:29:a4:ae:8c:
                    25:62:99:e6:cf:21:18:82:c3:e1:69:42:50:07:35:
                    bc:4c:2d:c4:8c:ae:0a:35:14:4a:e0:84:03:2c:61:
                    b8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:0D:64:F3:86:45:6A:61:41:CD:CA:1A:BB:70:7E:92:E3:0C:FC:09
            X509v3 Authority Key Identifier:
                keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:72:da:d2:fb:d2:eb:ba:6e:4f:c8:d2:0b:dc:69:8e:f7:
         f4:6c:75:a2:ab:8e:4a:ea:46:07:0a:86:b7:8c:82:f6:d9:60:
         7b:81:e9:d1:7b:01:cb:b5:af:0b:f9:00:07:cf:af:d1:d0:50:
         d6:66:13:94:86:c8:68:a7:04:eb:64:b2:a7:cb:bb:27:77:69:
         6b:95:16:87:27:73:6d:c5:8f:a3:95:a0:7e:51:9c:67:ed:7f:
         ea:bd:9a:ae:51:6e:aa:83:14:58:bd:fb:10:17:e0:d4:be:4d:
         fa:30:41:87:60:62:89:3a:9d:8c:14:ee:39:d0:d0:35:ac:af:
         04:6c:0f:43:e3:98:92:2b:c2:8d:a2:ef:ad:5f:40:d7:97:eb:
         3c:26:53:99:be:e1:ad:12:63:65:4d:30:0b:ca:4a:54:1d:03:
         6c:de:13:7a:23:e7:9b:1a:05:21:6f:7c:13:b9:ec:a1:6e:cd:
         52:85:5f:03:7b:f1:f8:7b:83:36:50:74:2c:a5:da:ad:17:8c:
         58:dd:cc:62:b0:d0:56:f2:1a:4c:bf:6d:49:d0:55:0f:7e:c0:
         0c:b9:cb:ca:95:07:e9:04:fd:59:54:f6:bf:c4:1f:71:74:40:
         aa:76:ec:35:14:e1:a2:2e:40:b9:91:a1:da:70:31:ba:38:29:
         a7:97:bc:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 10:34:12 2026 by rpki-client