Error: rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
File:                     2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft (raw, json)
Hash identifier:          JEB6QNOIq9w7psPgicB5UEys0vlmF4WvN/eOQCm52iE=
Subject key identifier:   9F:6C:4A:CE:88:B4:A1:9E:00:FF:E3:B0:7A:26:B4:40:75:C4:0C:F4
Authority key identifier: D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C
Certificate issuer:       /CN=F361B650AF/serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
Certificate serial:       0368
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
Manifest number:          0360
Signing time:             Sun 25 Oct 2026 04:17:24 +0000
Manifest this update:     Sun 25 Oct 2026 04:17:23 +0000
Manifest next update:     Tue 27 Oct 2026 04:17:23 +0000
Files and hashes:         1: 2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl (hash: rOlBMf5ZIOpK8LGlrdnwswv4sfWVvLjCVHj1ivhRmM8=)
                          2: CFAE3C72CDCC11F0B6625DB3DAE4EC9C.roa (hash: gzKwOZ98jgnieBv/5nWznefopJ4KkE1g7Or0zMyAoZI=)
                          3: 83DC9676CDCD11F08E2794B7DAE4EC9C.roa (hash: 4Gl9Zow27JuQ8GOMSVeAJ+sgSeivkesNbYlt5t1Eo1A=)
                          4: 31C48A88CDCD11F0A70CB3B5DAE4EC9C.roa (hash: 443cxlKgy4pnPq2qfyUo04AC7frZpxKf8kr/vGjPde4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B650AF, serialNumber=D92D971377A43C2ADC000530CDAB60B4B6760D1C
        Validity
            Not Before: Oct 25 04:17:23 2026 GMT
            Not After : Oct 27 04:17:23 2026 GMT
        Subject: CN=6add82d4-3613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:64:e7:b6:3d:24:4d:9a:f0:43:fb:1b:81:
                    a5:cc:e5:0d:7f:62:14:89:94:d7:5e:07:43:27:f6:
                    58:ce:76:b9:50:4c:8f:ae:07:aa:ef:d2:98:15:c0:
                    1f:81:11:c6:7f:85:f5:17:95:8e:ca:08:1b:e0:cf:
                    d4:54:05:9c:5b:18:64:80:29:63:76:42:d3:95:a4:
                    0e:0e:5f:51:63:8c:1f:9a:bd:46:6a:34:9b:f2:17:
                    d5:47:37:9a:58:3c:b0:02:6f:40:46:94:12:33:5f:
                    65:3d:98:1d:a2:1a:62:5e:5d:eb:8c:6d:c3:7c:ed:
                    4a:f5:55:86:b2:2a:32:cd:c0:8f:3e:c4:c3:05:c1:
                    a0:6f:68:77:c9:e8:08:d1:e1:04:6c:47:a7:80:12:
                    bb:ab:e9:f8:66:45:bf:92:75:40:30:a9:d7:99:c5:
                    61:9b:31:fd:5b:3d:b0:ca:82:5d:8d:94:84:07:4c:
                    47:7f:e0:7c:de:28:8a:d8:10:d2:65:4e:80:b1:e8:
                    3a:fe:37:ca:06:78:45:f8:db:5e:35:f9:52:bf:dc:
                    4e:fe:1d:de:f1:e0:0c:ed:0e:ff:49:aa:ca:bc:3a:
                    35:14:5e:96:d5:c3:29:f4:b1:16:28:5b:81:fb:e2:
                    3e:75:88:67:e4:6d:6a:12:3d:fd:c4:e6:07:d9:53:
                    36:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6C:4A:CE:88:B4:A1:9E:00:FF:E3:B0:7A:26:B4:40:75:C4:0C:F4
            X509v3 Authority Key Identifier:
                keyid:D9:2D:97:13:77:A4:3C:2A:DC:00:05:30:CD:AB:60:B4:B6:76:0D:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S2XE3ekPCrcAAUwzatgtLZ2DRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B650/6895B0BE3DE611EF82ED8790762E951A/2S2XE3ekPCrcAAUwzatgtLZ2DRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:d0:4b:50:72:bc:c9:e6:a6:aa:7d:ec:de:f7:17:06:0f:63:
         be:3b:b7:68:fa:62:8d:83:42:3a:c2:a7:29:22:e8:90:1b:19:
         6c:a8:75:08:60:03:b3:70:ce:43:79:91:35:8d:bd:2d:56:a9:
         4f:eb:47:e0:1b:0b:ad:9f:04:7d:d5:8a:e3:6c:0e:a3:d1:6c:
         b3:52:05:ff:eb:de:70:46:fb:10:15:da:88:8b:a0:7f:8d:47:
         f6:3e:70:d8:b0:c4:ad:31:62:f0:b7:52:53:03:af:8a:bc:56:
         5b:56:14:60:2b:0f:d1:1f:6b:34:4e:91:33:6b:3e:ec:a5:03:
         f1:28:11:5c:57:1c:1a:98:ab:98:ae:ba:5e:97:d0:73:d8:98:
         cd:56:8b:f2:49:67:f0:f5:79:6d:70:fc:51:31:66:26:49:a7:
         3d:70:6f:e1:80:ca:64:9b:66:00:1e:bf:9c:a8:69:fb:aa:ac:
         4a:8a:bc:d7:8e:7f:70:b0:1b:b5:1f:f4:29:ee:0a:f1:75:bb:
         6f:f2:8c:38:19:23:e0:93:dd:a2:78:16:39:a4:c2:d8:1f:ad:
         78:43:46:60:b6:81:22:7f:e4:28:3b:24:24:d7:a0:44:31:f2:
         40:8b:15:18:36:79:be:5c:2e:e4:f5:c2:03:5d:69:e9:3b:7b:
         fe:2f:11:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 08:57:16 2026 by rpki-client