Error: rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
File:                     mDG4OL4rkAR85SvUJaCCldQ2HvI.mft (raw, json)
Hash identifier:          y0Oox8wbl2cdi2rnypw4+2EXhuUldd085zRJXce9c+g=
Subject key identifier:   97:EB:D7:4D:49:67:1F:CF:10:CA:94:90:B4:55:3E:31:4E:7F:61:BD
Authority key identifier: 98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Certificate issuer:       /CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
Certificate serial:       0AD0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
Manifest number:          0ACD
Signing time:             Sun 01 Nov 2026 01:30:04 +0000
Manifest this update:     Sun 01 Nov 2026 01:30:04 +0000
Manifest next update:     Tue 03 Nov 2026 01:30:04 +0000
Files and hashes:         1: mDG4OL4rkAR85SvUJaCCldQ2HvI.crl (hash: HiBZxKDtmS8QLhnANnTwId/igIs/Acnev0Qmzn8NgZk=)
                          2: 2B42CBB2841C11EA8535FD14F8AEA228.roa (hash: dahsJO63bmsOpbiHiBcDrrEKjGQByqLKcepUunArLEQ=)
                          3: 58068464849811EAA9BC2712F8AEA228.roa (hash: NPwlzjfWgkGmqApnLab/DQv5DjJ9aHzrshBcmsHKY5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                          rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F56CAAR, serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
        Validity
            Not Before: Nov  1 01:30:04 2026 GMT
            Not After : Nov  3 01:30:04 2026 GMT
        Subject: CN=6ae6961c-a3ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ec:0a:9a:d9:ad:6c:6c:1d:f6:c4:4b:38:f6:
                    eb:96:b4:7c:3c:9e:4e:c6:76:85:a6:94:84:6b:41:
                    ea:42:cd:e2:e2:6e:3f:a5:07:77:af:f4:7e:cb:cd:
                    dd:44:1c:12:f3:eb:7c:0f:4f:04:8a:40:ab:d0:32:
                    a4:b9:55:2b:01:fa:8b:18:6c:94:06:de:f2:cb:fd:
                    bb:f5:08:cc:cc:90:de:39:1a:83:02:b3:19:e1:6e:
                    ed:60:be:7a:d4:47:4e:29:af:fc:9d:ed:0b:0b:c0:
                    a1:60:68:c4:49:75:54:88:5b:35:47:d9:05:88:b6:
                    6a:44:fc:c8:f7:4c:f0:ea:69:50:93:38:2f:52:07:
                    c8:83:a1:39:33:8f:85:cb:80:72:99:fc:39:72:a6:
                    b1:b3:53:41:a1:b1:24:ab:47:d1:82:4f:7b:c1:94:
                    98:39:74:bb:1d:cf:36:62:f7:12:1c:42:6d:9c:84:
                    ae:68:75:7e:ee:d9:78:9e:6c:30:44:b9:de:82:3f:
                    ba:1b:8b:ce:0d:16:40:05:22:08:fe:14:df:e6:83:
                    f5:81:24:35:00:40:0e:29:a4:db:5b:e2:56:bc:47:
                    ee:b8:33:17:12:d3:a1:a9:32:b9:16:66:fd:83:88:
                    97:b9:87:3b:cd:9a:49:e6:a2:1e:33:4c:75:22:9a:
                    14:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EB:D7:4D:49:67:1F:CF:10:CA:94:90:B4:55:3E:31:4E:7F:61:BD
            X509v3 Authority Key Identifier:
                keyid:98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:ba:b4:14:e2:0b:42:63:53:50:9d:10:49:6d:6b:30:e0:8c:
         d4:9d:ff:9f:17:8c:c9:e2:31:ad:55:2c:55:5b:d5:e5:4d:6a:
         0c:be:fc:3f:0d:07:da:69:ad:c8:6d:87:8f:35:42:4d:82:5a:
         40:fd:8c:26:94:22:fe:87:d6:1a:f0:84:33:b6:7a:6a:7c:29:
         3d:80:36:03:88:4f:b3:bf:85:1d:f3:73:f3:d9:5f:f6:c5:9b:
         cb:51:e7:6b:a4:47:0c:81:98:e8:3b:d7:5c:a3:9a:25:a0:66:
         b4:e6:b4:c5:ac:dd:a2:c0:f4:98:52:a4:de:6e:52:1f:bc:c5:
         39:55:78:1c:81:c3:0e:cb:25:9a:79:e9:bd:81:d1:99:99:46:
         4c:91:87:f4:90:38:b0:9d:8b:d7:b9:80:73:a0:30:77:bd:74:
         af:7c:a8:74:e1:68:ed:82:f3:dc:47:72:34:4e:09:34:47:0d:
         fc:2a:54:72:a4:0a:2a:7e:13:c6:7e:23:0c:f9:f4:64:e8:2b:
         66:6d:76:b2:a6:96:6a:22:57:77:01:5b:7f:4c:04:19:61:aa:
         36:b5:b1:fe:6a:4f:e7:d9:28:5a:79:df:a3:7f:1d:29:a3:ae:
         8c:71:ba:86:6a:f7:6b:45:07:84:fe:4a:69:33:ae:8f:23:56:
         ba:87:76:a2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCtAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjU2Q0FBUjExMC8GA1UEBRMoOTgzMUI4MzhCRTJCOTAwNDdDRTUyQkQ0MjVBMDgy
OTVENDM2MUVGMjAeFw0yNjExMDEwMTMwMDRaFw0yNjExMDMwMTMwMDRaMBgxFjAU
BgNVBAMTDTZhZTY5NjFjLWEzZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC7Aqa2a1sbB32xEs49uuWtHw8nk7GdoWmlIRrQepCzeLibj+lB3ev9H7L
zd1EHBLz63wPTwSKQKvQMqS5VSsB+osYbJQG3vLL/bv1CMzMkN45GoMCsxnhbu1g
vnrUR04pr/yd7QsLwKFgaMRJdVSIWzVH2QWItmpE/Mj3TPDqaVCTOC9SB8iDoTkz
j4XLgHKZ/DlyprGzU0GhsSSrR9GCT3vBlJg5dLsdzzZi9xIcQm2chK5odX7u2Xie
bDBEud6CP7obi84NFkAFIgj+FN/mg/WBJDUAQA4ppNtb4la8R+64MxcS06GpMrkW
Zv2DiJe5hzvNmknmoh4zTHUimhSvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUl+vX
TUlnH88QypSQtFU+MU5/Yb0wHwYDVR0jBBgwFoAUmDG4OL4rkAR85SvUJaCCldQ2
HvIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1NkNBLzBEMDU2Q0Q0OEUwMTExRTk4NTE5NjQ0QUY4QUVBMjI4L21ERzRP
TDRya0FSODVTdlVKYUNDbGRRMkh2SS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L21ERzRPTDRya0FSODVTdlVKYUNDbGRRMkh2SS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjU2Q0EvMEQwNTZDRDQ4RTAxMTFFOTg1MTk2NDRBRjhBRUEy
MjgvbURHNE9MNHJrQVI4NVN2VUphQ0NsZFEySHZJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTurQU4gtCY1NQnRBJbWsw4IzUnf+fF4zJ
4jGtVSxVW9XlTWoMvvw/DQfaaa3IbYePNUJNglpA/YwmlCL+h9Ya8IQztnpqfCk9
gDYDiE+zv4Ud83Pz2V/2xZvLUedrpEcMgZjoO9dco5oloGa05rTFrN2iwPSYUqTe
blIfvMU5VXgcgcMOyyWaeem9gdGZmUZMkYf0kDiwnYvXuYBzoDB3vXSvfKh04Wjt
gvPcR3I0Tgk0Rw38KlRypAoqfhPGfiMM+fRk6CtmbXayppZqIld3AVt/TAQZYao2
tbH+ak/n2Shaed+jfx0po66McbqGavdrRQeE/kppM66PI1a6h3ai
-----END CERTIFICATE-----
Generated at Sun Nov 1 21:10:35 2026 by rpki-client