Error: rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File:                     lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier:          3VxwoFKmKT6/GPGAxPNWtZiDXYcGQBDPyIbqAqVXXr0=
Subject key identifier:   AB:14:96:DB:F7:0D:C7:A3:99:DE:B7:7D:9F:7D:87:62:48:8B:4D:A3
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer:       /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial:       02AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number:          02AC
Signing time:             Sat 24 Oct 2026 04:43:24 +0000
Manifest this update:     Sat 24 Oct 2026 04:43:24 +0000
Manifest next update:     Mon 26 Oct 2026 04:43:24 +0000
Files and hashes:         1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: 7z8S+hK+W7n/k04468sb1k1A0fp36XfxmC5zqlLPlj0=)
                          2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 685 (0x2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
        Validity
            Not Before: Oct 24 04:43:24 2026 GMT
            Not After : Oct 26 04:43:24 2026 GMT
        Subject: CN=6adc376c-8a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:6b:3c:3c:57:6c:eb:cf:9c:49:c9:3e:e7:
                    95:15:8b:9b:49:08:ae:9f:2f:c5:ff:9b:5d:6a:87:
                    33:f0:7e:0d:51:f9:92:92:e8:4c:f6:4b:e2:94:5a:
                    b9:e8:fc:20:1c:e7:fc:90:4a:04:81:ff:9c:ad:1e:
                    c8:60:a2:9f:7a:5a:84:e5:d2:c9:3e:ce:b3:87:30:
                    0d:a5:70:92:ea:f6:f2:7d:2a:f6:15:2f:9d:dc:f4:
                    d4:5d:8a:40:fc:bd:4a:6f:69:82:eb:93:a5:9b:b2:
                    14:26:ef:47:c8:60:4c:c0:d1:de:7f:e7:d4:5f:4a:
                    93:1b:ad:65:8e:41:ab:56:31:be:cd:ec:06:5e:06:
                    d6:d8:7f:35:ff:c3:f2:0d:19:c8:76:75:c0:16:74:
                    fc:b7:c0:e0:b5:a7:3b:f8:55:0e:6b:02:a0:ef:51:
                    b8:5d:57:e3:90:14:ad:e5:49:5f:4b:09:7b:0a:c4:
                    33:9b:5e:ac:4a:fb:3b:da:14:a9:c5:dc:84:d0:77:
                    ce:91:21:ca:13:7f:16:e4:a2:24:d4:f5:43:3f:88:
                    de:74:ab:f5:e2:1d:b4:67:83:bd:36:45:a6:ec:2c:
                    4c:1c:b8:59:20:9f:3c:7c:44:4a:a4:32:e9:07:ca:
                    63:16:f3:19:a0:c1:30:ab:d7:b2:56:e1:ab:88:c5:
                    e7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:14:96:DB:F7:0D:C7:A3:99:DE:B7:7D:9F:7D:87:62:48:8B:4D:A3
            X509v3 Authority Key Identifier:
                keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:39:f9:c9:59:d9:6f:59:92:fe:4a:d0:d3:bf:e0:df:9f:1b:
         a5:5b:a4:1d:49:b1:28:8c:32:8f:8e:16:4f:f5:69:dd:1b:22:
         60:23:57:70:46:1b:d2:1b:ee:45:3d:5e:7f:3c:90:24:88:28:
         12:4b:67:62:bf:56:02:b5:69:a7:5b:10:a5:a8:e3:5f:c6:6b:
         47:f7:12:00:da:09:3e:20:17:fe:da:2a:84:b3:76:be:66:52:
         8f:d7:9e:a9:ea:64:11:7e:2f:45:28:a5:37:6c:e4:ad:87:0a:
         8b:b2:35:07:32:01:74:1d:dd:d9:99:17:81:82:02:3d:09:ca:
         70:db:41:9f:36:3d:a1:61:98:5f:a5:f0:17:ac:8c:c5:45:d1:
         ad:8a:b4:2e:b2:3f:21:61:85:36:be:9a:16:91:0f:3d:be:7b:
         c0:38:db:17:ca:26:40:7e:27:b0:9f:fd:f8:7a:ea:6c:84:6d:
         f2:33:13:b2:f4:7b:69:e1:69:dd:65:7a:ec:c5:fe:84:12:b2:
         bb:c8:08:ed:ee:2e:86:53:8d:ef:65:57:57:24:0b:37:58:6a:
         7a:3c:98:f6:e1:f9:ee:e9:f5:49:e2:4f:1c:ca:10:ab:ba:03:
         06:65:d4:a0:85:fd:da:bf:0d:04:88:a7:0c:5b:67:f7:64:25:
         00:e2:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:08:37 2026 by rpki-client