Error: rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
File:                     F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft (raw, json)
Hash identifier:          S8p80i43W2uIIr1LZZk65EcBT6QE2xj0el1Gn0UXlzU=
Subject key identifier:   05:DA:DE:2C:41:FD:15:96:0C:E5:E3:1C:83:A5:E0:4A:3D:A2:16:62
Authority key identifier: 17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
Certificate issuer:       /CN=F36EC460AR/serialNumber=17CB1843BCA4722435288056070A067156077FF8
Certificate serial:       06FE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
Manifest number:          06F7
Signing time:             Mon 02 Nov 2026 02:36:52 +0000
Manifest this update:     Mon 02 Nov 2026 02:36:51 +0000
Manifest next update:     Wed 04 Nov 2026 02:36:51 +0000
Files and hashes:         1: F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl (hash: /3q4LxCK51ljqHqE/mK61A+1Z0zRNvzYzccZ9SFEf2Y=)
                          2: B2494468898011F1AED1DDEBCE1D38B0.roa (hash: 0remQ5twERRNcgswmijVsLoQGf5G125XCsN1nKp/ScI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
                          rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1790 (0x6fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC460AR, serialNumber=17CB1843BCA4722435288056070A067156077FF8
        Validity
            Not Before: Nov  2 02:36:51 2026 GMT
            Not After : Nov  4 02:36:51 2026 GMT
        Subject: CN=6ae7f744-1efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:38:15:81:24:dd:46:9d:b1:6e:8a:71:76:
                    35:3e:7a:33:a4:39:ae:cb:db:6e:82:75:f0:ba:35:
                    0a:6a:56:00:9d:85:57:18:d2:98:b1:fb:0e:9a:5a:
                    1b:9a:c3:69:dd:5d:f6:2d:ce:22:7a:b6:5c:44:79:
                    6c:ae:e0:5a:01:f8:7f:e4:88:1b:28:fe:cd:20:14:
                    25:aa:9f:de:e0:d3:c1:5b:8b:7a:6a:1f:a6:ed:26:
                    51:7f:54:b0:0e:31:ff:3c:c7:9a:b9:6b:77:6d:4b:
                    41:64:db:31:b2:b4:db:42:85:a6:12:59:14:1e:1e:
                    87:92:70:5b:d2:71:20:b6:cb:35:77:27:b7:fd:4f:
                    db:75:cb:01:3f:ef:b5:ff:03:46:d9:18:95:42:38:
                    2c:11:4d:7d:64:06:bb:12:fb:c0:26:b2:70:0e:62:
                    7d:7a:a6:61:43:6c:f2:af:33:57:5c:59:19:50:e3:
                    78:db:23:62:d3:99:be:54:51:34:d8:57:b3:60:df:
                    7f:83:01:60:5a:52:5d:87:ce:ed:ec:33:84:11:13:
                    01:21:05:e1:11:59:fe:30:f9:d9:14:04:15:c3:af:
                    35:45:ab:a2:86:dc:be:12:fa:4a:0b:5e:94:66:ec:
                    a1:c6:75:93:92:0b:9e:6d:ae:4b:aa:23:e6:e9:69:
                    ec:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DA:DE:2C:41:FD:15:96:0C:E5:E3:1C:83:A5:E0:4A:3D:A2:16:62
            X509v3 Authority Key Identifier:
                keyid:17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:93:83:91:9e:86:eb:df:40:31:2a:dc:ec:f6:f8:31:9c:46:
         e8:7f:71:53:ab:8b:96:13:c5:76:ce:de:49:37:82:88:54:d6:
         94:57:cb:30:2d:4d:c3:a5:83:57:6c:cb:cd:ab:33:8e:6b:77:
         bf:ce:ae:55:84:70:59:9a:37:50:fa:d8:89:a2:1b:4d:9c:f5:
         e8:9a:05:c1:e9:51:70:b5:1d:3b:f4:e2:77:ad:3e:2c:dc:c6:
         81:af:9b:58:b6:7a:3c:a9:b0:de:87:a1:eb:da:34:5b:e3:96:
         c5:18:09:61:93:14:55:b2:93:59:b3:f3:ba:d2:b7:d4:97:cb:
         9c:d6:28:44:7f:67:ac:08:b0:66:8a:bc:76:d7:66:d3:58:60:
         25:e8:81:c6:a7:cc:55:62:68:f5:8a:f3:7a:f5:24:02:23:81:
         8f:15:ef:75:11:78:a8:27:3c:d9:97:72:66:d0:a4:1c:35:2f:
         47:3e:60:54:ea:c8:06:14:ec:34:ee:c1:a1:1e:e4:59:e5:57:
         27:af:f2:bb:d6:7a:ea:e0:2b:d4:43:73:e7:11:83:7d:11:d1:
         a6:55:17:3c:d1:28:8a:8e:02:39:d4:de:5b:a9:29:15:c9:9f:
         1d:da:ab:e7:45:08:cd:57:da:05:25:db:3f:c2:91:00:78:de:
         bb:07:47:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:38:33 2026 by rpki-client