Error: rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
File:                     XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft (raw, json)
Hash identifier:          hirqdnX8w7NETvk/ypu3EqsqHaLFKa9aGO9lzHcpiao=
Subject key identifier:   5A:FF:1E:B0:8B:DC:6D:45:B3:8B:F4:B6:BF:6D:00:EA:02:ED:6E:3C
Authority key identifier: 5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4
Certificate issuer:       /CN=F362BDD7AR/serialNumber=5D56256A249D56475F0FE34A4284A64C522C0FB4
Certificate serial:       02BE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
Manifest number:          02BC
Signing time:             Mon 24 Aug 2026 04:43:40 +0000
Manifest this update:     Mon 24 Aug 2026 04:43:39 +0000
Manifest next update:     Wed 26 Aug 2026 04:43:39 +0000
Files and hashes:         1: XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl (hash: 8212NBirV2gzC0Y2uqdYqxZFTaRLzS5CpXO8QK7Z0U0=)
                          2: D60958CC856B11EFBE85FB5B762E951A.roa (hash: Pw5u5L+ZQ+31t8q31EOek7HdK9TGe6sXHf0Pw/O4YD4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
                          rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 26 Aug 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362BDD7AR, serialNumber=5D56256A249D56475F0FE34A4284A64C522C0FB4
        Validity
            Not Before: Aug 24 04:43:39 2026 GMT
            Not After : Aug 26 04:43:39 2026 GMT
        Subject: CN=6a8bcbfc-4169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bf:28:28:65:7b:2f:5d:90:05:cc:36:19:70:
                    d4:c8:ec:c2:d8:c0:b1:9f:bb:ab:ed:25:ac:61:d6:
                    f4:68:53:ad:31:04:fd:6f:e7:8b:e0:9e:60:c0:9f:
                    7c:f9:ff:a0:cd:6b:44:58:26:64:4f:08:75:6b:b1:
                    37:ff:32:c3:58:5c:53:99:78:8f:55:7c:45:9d:0e:
                    b1:cc:56:9c:ee:d3:1d:55:f0:ba:e8:44:7e:bf:e0:
                    d7:61:b5:38:7f:e7:97:10:b4:58:ff:ff:9c:1d:45:
                    95:55:8a:fe:7c:d8:34:a0:f2:62:25:bc:97:c5:9a:
                    d8:76:c4:1c:41:4d:64:24:25:ec:18:cd:99:8a:cc:
                    2f:da:8c:bd:5c:75:ad:01:79:fc:a3:cf:42:27:39:
                    24:d0:db:98:3c:3a:14:13:f9:7e:e3:f4:07:36:af:
                    f2:93:b3:5f:dc:9b:d1:45:56:a8:a6:2a:e0:c7:20:
                    c0:e7:f2:09:25:01:3f:e7:4e:52:d3:a4:bf:fc:d0:
                    a4:b4:12:27:0a:1f:80:45:3c:e0:b5:69:19:e5:a7:
                    c2:53:e8:16:f8:ee:5f:4e:2f:8b:ad:91:06:28:8f:
                    00:04:fd:65:8a:28:c5:f7:95:16:63:cd:7a:85:d7:
                    94:39:8e:a4:8a:06:12:e1:97:fc:00:a8:90:8e:33:
                    da:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:FF:1E:B0:8B:DC:6D:45:B3:8B:F4:B6:BF:6D:00:EA:02:ED:6E:3C
            X509v3 Authority Key Identifier:
                keyid:5D:56:25:6A:24:9D:56:47:5F:0F:E3:4A:42:84:A6:4C:52:2C:0F:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/0906697C856211EFA57A1F9D762E951A/XVYlaiSdVkdfD-NKQoSmTFIsD7Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:9b:ab:fa:a5:c1:df:e1:c0:ae:05:5a:2d:1c:d4:6b:95:30:
         67:99:3c:e6:31:b2:18:88:5b:cd:6a:b2:ee:69:c4:31:07:26:
         0f:37:f1:3f:f3:42:e1:e7:cd:2c:3c:cd:95:06:3f:f4:64:5e:
         bd:04:d3:be:6b:89:b4:d8:35:dd:2b:9d:bd:25:3b:fc:23:77:
         35:e7:d8:6a:1e:80:f0:14:aa:70:47:3d:7c:58:cc:bf:90:17:
         83:b5:e4:0c:af:c2:47:d1:37:5e:2d:aa:a3:21:5b:56:14:a9:
         af:8d:bf:d3:88:2a:c6:b8:17:1f:f0:ce:da:84:f3:29:37:75:
         cb:37:41:82:1f:f7:72:28:6c:02:01:44:58:e3:32:46:b9:2a:
         2b:8c:44:7a:e5:de:48:e3:25:bc:d9:2f:8c:5d:80:51:7f:60:
         25:9b:5a:90:1b:dd:ac:1d:9e:16:e7:c6:96:6d:c0:ee:d9:98:
         e7:03:2f:34:28:9e:8e:bb:b5:3a:e3:d9:31:4e:54:6d:b9:8a:
         5c:a9:ce:a0:8d:9f:95:e6:af:fa:e7:ac:43:ec:e4:20:d1:09:
         48:f6:be:70:56:11:ea:ab:e1:65:2c:ac:f4:0a:cd:0d:5a:9d:
         a6:08:9c:38:c4:fe:af:1d:4f:37:0b:be:38:86:a6:d8:b1:a1:
         2c:19:63:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 08:24:15 2026 by rpki-client