Error: rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
File:                     7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft (raw, json)
Hash identifier:          KXQwfxBonmvnL7o4FHJfgNLc6mhtT/Pcx5odvsNpmi4=
Subject key identifier:   6D:4C:55:FC:96:45:73:9A:C0:6C:FA:FE:61:35:BA:74:F9:DC:DB:8B
Authority key identifier: EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04
Certificate issuer:       /CN=F361C3A1RI/serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
Certificate serial:       0BAD
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
Manifest number:          0BA9
Signing time:             Tue 27 Oct 2026 01:15:46 +0000
Manifest this update:     Tue 27 Oct 2026 01:15:46 +0000
Manifest next update:     Thu 29 Oct 2026 01:15:46 +0000
Files and hashes:         1: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl (hash: C6NSsJd/h4bfnrA3gYC/w4DrMeU+6gTUKZch7s6M5eQ=)
                          2: 672BF774187D11F1AA17F08EDAE4EC9C.roa (hash: 6jF1YxAnbb2FfRaYjhnIgikan05PqQq9CZOBEQf8wgQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                          rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2989 (0xbad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1RI, serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
        Validity
            Not Before: Oct 27 01:15:46 2026 GMT
            Not After : Oct 29 01:15:46 2026 GMT
        Subject: CN=6adffb42-a6ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:ee:9f:68:42:a1:ce:25:0e:f1:02:17:43:
                    66:be:45:24:ea:83:72:c5:49:24:bd:2d:f4:f0:9a:
                    6f:5b:1e:4f:f0:84:1a:e8:e9:05:64:93:00:79:9d:
                    a1:30:40:3f:dc:35:8e:ab:54:94:0d:fc:4f:dc:7c:
                    f4:86:1e:65:e5:e7:ad:cd:34:17:77:83:1f:90:bf:
                    c7:73:a3:d4:44:3d:98:87:89:ca:fe:95:be:48:26:
                    01:6c:d4:6e:a8:d1:5e:ac:b3:f7:d3:e5:93:0b:97:
                    d0:31:30:19:24:11:b3:9c:5c:7e:85:9b:f7:56:9c:
                    52:b6:10:c0:91:a0:93:e0:fc:3a:e6:d5:fc:6c:74:
                    fc:e2:9b:98:26:97:23:dd:14:d5:77:ae:48:a0:68:
                    47:16:fc:c5:9f:b0:7a:6b:28:22:e7:2d:b4:31:3f:
                    9a:a4:93:0b:99:2a:39:26:45:78:f6:08:f1:06:d3:
                    10:c3:81:7e:fd:3b:22:93:c6:d9:6d:a4:af:4b:90:
                    c2:5b:c1:bc:21:f3:db:fa:06:34:3c:d0:fb:b4:07:
                    78:73:f7:b0:10:fb:36:00:39:3b:74:3f:2f:18:c3:
                    02:9e:2b:54:a6:1b:cb:1b:07:24:c4:47:36:64:07:
                    07:69:79:fa:8f:f3:83:2a:db:10:b3:41:3a:37:7b:
                    72:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4C:55:FC:96:45:73:9A:C0:6C:FA:FE:61:35:BA:74:F9:DC:DB:8B
            X509v3 Authority Key Identifier:
                keyid:EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ad:2a:0d:7d:03:ce:14:d2:6d:c9:b3:be:21:f3:f9:c3:83:
         20:b5:cc:70:52:1a:86:d0:48:b2:e3:24:53:39:26:7f:41:ec:
         9e:e1:9b:13:bd:1a:1e:1b:cd:4f:e5:be:90:37:7b:9d:50:1e:
         ec:3e:80:b4:1b:ff:e9:0f:4c:d8:e5:53:e3:6a:27:73:e9:df:
         5d:f3:3f:53:7e:ea:52:6b:72:3e:6c:84:f4:54:56:0f:7a:ad:
         50:79:da:27:9d:6a:6f:80:16:27:69:60:13:ce:f3:78:9c:a0:
         df:6c:83:b6:c7:41:80:8d:2f:e4:c4:62:a4:42:da:ce:24:ad:
         80:dc:88:91:66:44:3e:ba:ac:30:eb:01:3c:23:87:d5:40:74:
         c6:33:d9:5e:f2:0e:63:17:b4:09:d3:2a:a8:28:7c:5a:4b:6c:
         46:7b:82:44:35:4c:d0:b6:45:9e:c5:4f:9b:b7:f4:20:78:9f:
         d0:c7:78:dd:43:3b:26:c2:da:e1:62:77:a7:c7:05:db:e3:db:
         36:e3:c7:82:9c:82:be:be:26:b0:a9:22:c6:98:fa:5d:9d:a2:
         2a:09:28:fd:c4:87:99:b3:34:cb:8e:ac:5a:af:ac:29:38:8a:
         98:bf:45:19:92:81:04:32:62:b1:c6:9c:9b:7a:1a:85:f7:fc:
         83:46:64:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:17:55 2026 by rpki-client