Error: rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
File:                     4DauCP4DQW9YiHqdGV2_2GolYDw.mft (raw, json)
Hash identifier:          IrbMBCRVdp6BFN8urSxTMUSWqNBeR8ltzvUn6jTi0oQ=
Subject key identifier:   0A:D9:52:06:97:48:BB:F9:53:E5:31:08:66:09:67:AE:39:24:7C:42
Authority key identifier: E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C
Certificate issuer:       /CN=F36BF59BAF/serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
Certificate serial:       0424
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
Manifest number:          0412
Signing time:             Wed 04 Nov 2026 04:00:58 +0000
Manifest this update:     Wed 04 Nov 2026 04:00:57 +0000
Manifest next update:     Fri 06 Nov 2026 04:00:57 +0000
Files and hashes:         1: 4DauCP4DQW9YiHqdGV2_2GolYDw.crl (hash: jVHHOhXpJqW/q3cJtHWNyAI8tLxLp9pXF8Rf/YpBKXc=)
                          2: A2097100F22B11F08B8C38A9DAE4EC9C.roa (hash: pgofEA1JKv6J0QyvR8PTfDQrVo0AqDPbmJIOB5ay5zU=)
                          3: 3C958764E73111F09C666E9EDAE4EC9C.roa (hash: fVdYrlrooDNQRHbalW2EII4S7EJlQJMERwsN9flm4IM=)
                          4: 3581D3BCE72F11F0A99EF990DAE4EC9C.roa (hash: 5RjZs62O7vwmy22YIdLlbngdIKkVBJ+4r9M/hh5yfj4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060 (0x424)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BF59BAF, serialNumber=E036AE08FE03416F58887A9D195DBFD86A25603C
        Validity
            Not Before: Nov  4 04:00:57 2026 GMT
            Not After : Nov  6 04:00:57 2026 GMT
        Subject: CN=6aeaadfa-982d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:24:13:0d:bb:d7:34:ce:7a:a5:33:d1:f1:a3:
                    96:98:f3:6d:29:1c:09:3a:65:7c:1a:86:5d:49:31:
                    8a:da:1d:9e:b6:75:d7:df:d3:d3:a9:a8:a4:24:b3:
                    30:3b:84:d0:7d:82:62:47:58:23:66:55:0c:a3:dc:
                    3a:54:8f:7a:b2:47:f2:54:6e:47:ce:ce:af:15:68:
                    33:42:03:bb:d0:c0:11:71:89:8c:a9:4e:da:a4:c9:
                    05:49:92:74:e4:c3:58:35:b3:04:41:f3:d4:6a:4a:
                    8b:cf:4c:f1:5c:fc:98:0b:be:87:4d:cd:b3:2b:d1:
                    e8:48:fb:ca:96:47:b4:12:2d:a8:14:61:e4:dd:5c:
                    38:8d:fe:19:a1:9a:6c:fe:42:6d:5a:b2:29:38:d1:
                    d1:6f:6d:7c:32:40:fa:3c:de:3f:af:43:f5:c0:ea:
                    05:6c:8d:7f:dd:92:f3:e7:d0:dc:1b:a2:56:0a:a3:
                    ef:94:83:de:2d:9b:c1:46:a4:4d:60:f7:f0:a3:9d:
                    dd:1c:03:8d:ee:76:85:32:34:58:62:ca:1f:76:96:
                    20:e2:9b:af:62:bf:59:af:5a:05:37:2b:95:eb:87:
                    e6:61:18:f6:93:51:4d:78:e2:54:85:5d:5c:f3:4b:
                    d4:10:52:68:e5:94:71:76:a4:f3:6e:bc:df:79:6f:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D9:52:06:97:48:BB:F9:53:E5:31:08:66:09:67:AE:39:24:7C:42
            X509v3 Authority Key Identifier:
                keyid:E0:36:AE:08:FE:03:41:6F:58:88:7A:9D:19:5D:BF:D8:6A:25:60:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4DauCP4DQW9YiHqdGV2_2GolYDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF59B/4AAAA214C75111EEA02EB392775412E6/4DauCP4DQW9YiHqdGV2_2GolYDw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:16:94:8a:f2:12:f8:17:ee:37:73:9a:01:05:6d:03:7a:b0:
         2d:02:fb:cd:a4:87:62:e3:1b:2d:d1:fc:1c:55:d9:43:3c:93:
         d8:4b:f5:5b:6e:96:70:f8:dd:0b:b6:2f:f3:a9:b9:a8:af:a0:
         5e:94:d0:b4:a8:3b:c4:30:97:ba:41:86:dd:2f:44:bd:c5:09:
         5c:20:33:c7:af:0f:35:e6:e9:87:65:63:2b:c3:97:a8:b4:93:
         7d:04:b7:ca:89:d3:78:15:77:ac:a2:67:08:5d:6f:53:fc:c2:
         a1:fa:b1:d8:37:96:77:e2:c9:d0:86:e5:f8:f3:c1:e6:59:66:
         cf:89:2c:82:57:95:e7:4d:58:9d:21:6b:99:de:41:f1:b0:75:
         75:ac:d2:1b:db:c9:e7:d7:f1:c9:ad:d2:84:7a:84:41:92:28:
         1c:80:29:32:4f:12:b0:74:62:88:05:62:76:0b:75:76:97:f4:
         04:03:74:b9:3d:22:d1:47:ac:f9:1f:4d:00:e7:b5:52:5b:63:
         c5:bf:9e:c6:74:41:a5:d7:08:31:02:48:8e:d2:c3:b9:e2:12:
         d4:8e:66:f6:26:55:5b:81:37:a0:69:65:cc:86:64:03:83:66:
         e6:6c:72:3c:f3:87:73:22:74:e0:d7:a7:f9:15:9d:77:f3:e3:
         c6:31:a9:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:19:35 2026 by rpki-client