Error: rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
File:                     biQiwqfj3wfM4NH9AdFG21Z40ds.mft (raw, json)
Hash identifier:          eLpcoF7LkxWAJmbyGfrGM8GYTS9iyLAfvRTMLZeeuXM=
Subject key identifier:   DC:95:CB:DC:09:6F:11:98:5F:F9:DD:24:57:54:05:06:A5:73:D4:97
Authority key identifier: 6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
Certificate issuer:       /CN=F36C6E36AF/serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
Manifest number:          57
Signing time:             Tue 03 Nov 2026 05:51:14 +0000
Manifest this update:     Tue 03 Nov 2026 05:51:13 +0000
Manifest next update:     Thu 05 Nov 2026 05:51:13 +0000
Files and hashes:         1: biQiwqfj3wfM4NH9AdFG21Z40ds.crl (hash: SFfi8tNz8LBwzIOc5QcTXgnr5Mew7PuGjEXPSO5ujNk=)
                          2: 2BAE2E76B2D611F1AAFB07C7CE1D38B0.roa (hash: xVwAUnrViwTntUveNDo6qYXWSRccSSgDlFmKIFO0HSM=)
                          3: 6C7FD260B2D611F193C51DC7CE1D38B0.roa (hash: +KcH4KSDhfgOgrPgucsOz0T5Y9dgTuxMI1/ms+27xx4=)
                          4: E2095C86B2D611F182DB22CBCE1D38B0.roa (hash: 0QotgG4JTFYIzqDDSEaZjrPBe1AsQnW20uL0HP117RM=)
                          5: 8EB514929BA411F18359831DCF1D38B0.roa (hash: HIgQE1FkAEHLt9W55ZyAHjmOCHWt9l42BG52dMjKpNM=)
                          6: 2721414EB2D711F19D7933CBCE1D38B0.roa (hash: L1RNC7+I9L1V3kn3iAD4GkwCCWlSqZzac+IyOHlw4BY=)
                          7: 0745CDAEB2D711F187AA27CBCE1D38B0.roa (hash: DV4zcMkbFgzhtFkdO2oTjhaIbbAWHRM/lgDhjMjNUhc=)
                          8: C53660ACB2D311F19EF6E7B6CE1D38B0.roa (hash: 5Dj/UiotHDT3B1x2BeMhtWpFuhLdGfHWKGcnmB6uC1c=)
                          9: 974C140EB2D611F1A4B778C7CE1D38B0.roa (hash: /3CPs8bAIpaxY0a9SbOCMe+TpsRY6Oe9DBQBTqL2Q24=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                          rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 05:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E36AF, serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
        Validity
            Not Before: Nov  3 05:51:13 2026 GMT
            Not After : Nov  5 05:51:13 2026 GMT
        Subject: CN=6ae97652-3955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:62:c0:c4:08:f1:95:e0:83:da:a3:cf:00:6c:
                    90:f3:30:1a:f8:c1:3a:96:13:64:ce:87:2a:18:a7:
                    ce:97:55:88:b8:6a:ca:a3:94:40:ca:ff:0c:5f:91:
                    3b:7a:9b:23:8e:0f:7d:f7:43:ab:d8:af:e2:1a:3d:
                    3e:e8:6e:a9:47:c5:71:54:78:a6:aa:55:b6:58:9d:
                    1e:f2:82:99:c0:5a:cf:02:4c:48:e3:f5:ee:6d:c0:
                    15:63:18:0d:5a:64:ab:97:cf:fb:ce:4d:91:50:ee:
                    67:85:fe:94:d5:35:06:34:45:fc:58:4c:55:2b:68:
                    07:12:28:19:1a:15:fa:9d:68:e9:53:00:5b:13:06:
                    8d:e2:67:f4:0f:17:e7:25:bf:9e:87:9b:fd:d2:64:
                    3c:79:88:4b:8b:18:cc:33:c2:c3:03:e2:d8:33:a6:
                    4b:c3:ed:c6:21:89:49:b4:ac:97:3b:8d:d7:ef:0c:
                    ef:f8:3c:b4:5b:60:3b:30:a9:fa:19:75:71:1f:c9:
                    a1:64:3f:bd:3b:fa:7c:5f:74:60:ad:86:cb:d3:42:
                    26:07:44:e6:c8:ab:a2:52:80:88:cb:04:23:5f:18:
                    43:63:f3:20:4f:70:54:8b:cc:6b:e9:b1:bf:7c:7f:
                    86:73:4c:83:1f:fb:a9:6a:f2:67:07:95:54:3d:28:
                    9a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:95:CB:DC:09:6F:11:98:5F:F9:DD:24:57:54:05:06:A5:73:D4:97
            X509v3 Authority Key Identifier:
                keyid:6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:41:75:7b:cc:26:59:2e:90:d3:db:bb:c9:db:94:6b:71:4a:
         b2:dc:6a:68:0c:48:5d:6a:53:c1:c3:f6:e2:08:7b:27:d9:cc:
         93:69:29:70:47:9d:ca:ed:4d:f0:9a:36:96:09:1f:42:eb:e5:
         2d:e2:05:9f:bd:26:d1:e0:fb:c6:04:62:fa:c5:c2:e2:8e:69:
         7c:26:88:1a:bb:5f:5d:39:cd:ce:34:5f:8f:6d:ec:97:47:a4:
         4b:36:7d:7a:4a:d9:ba:8c:5c:da:9f:3a:ff:38:04:15:88:ae:
         f5:8b:ca:a9:81:78:00:50:03:e5:05:ff:a8:e3:c9:55:e6:a8:
         5f:df:4e:83:78:97:ba:fe:d0:65:81:94:02:3a:ec:f7:54:b2:
         6e:d4:f3:aa:c8:c5:9e:ac:d3:40:a9:58:b8:41:b8:42:ae:cf:
         98:ef:01:0a:d3:b7:ed:b1:82:f0:ac:f1:49:54:95:fc:19:77:
         a4:3a:74:12:7e:8b:68:0e:21:bf:2d:7e:68:46:fb:9a:46:7d:
         1c:fb:61:48:d0:5c:7a:15:a7:44:ab:7a:b2:f7:e7:f0:7b:70:
         f1:cf:88:d4:8a:5d:bf:32:c1:a4:0a:a3:27:55:cb:48:4e:6a:
         b0:d1:5d:01:27:b8:63:64:88:28:65:3c:d0:29:fd:92:2f:19:
         c9:e5:e1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:51:41 2026 by rpki-client