Error: rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
File:                     HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft (raw, json)
Hash identifier:          5jaIXE2zGLtXDm9SUGeeMs3hdekz5Nr8Zg44zD09eDw=
Subject key identifier:   43:1F:04:5A:8B:56:4A:FB:A7:75:0E:64:9E:D5:F2:9A:10:D2:BF:C0
Authority key identifier: 1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09
Certificate issuer:       /CN=F362D462AR/serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
Certificate serial:       0164
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
Manifest number:          0162
Signing time:             Sun 25 Oct 2026 05:14:52 +0000
Manifest this update:     Sun 25 Oct 2026 05:14:52 +0000
Manifest next update:     Tue 27 Oct 2026 05:14:52 +0000
Files and hashes:         1: HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl (hash: ZIaC8h7rRbh7zNoIIiDnXEDZ/DjXyA6XTyoaz+4Kt3E=)
                          2: 4040C74AC52E11F0B05A368DDAE4EC9C.roa (hash: g29ZcN62OuQIybrymKKsA2XNqXJfFk2KbrGYZddauWU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
                          rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:14:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D462AR, serialNumber=1E53A9CDBFE5C25263582FBB026B04D0204B6009
        Validity
            Not Before: Oct 25 05:14:52 2026 GMT
            Not After : Oct 27 05:14:52 2026 GMT
        Subject: CN=6add904c-2015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ae:c2:22:c7:83:38:c1:ca:e3:f4:3b:d6:e1:
                    ad:e9:ec:c3:a2:29:36:2e:00:a4:a0:a7:75:75:cb:
                    45:dc:77:41:a7:ac:e1:30:2e:3e:39:1b:fc:8d:84:
                    02:5a:3e:33:5a:ca:2a:60:9d:3c:f1:d2:d9:ee:14:
                    aa:64:89:4b:d7:9b:8f:ba:8d:5b:c3:a3:f7:51:c5:
                    df:62:87:3d:0f:18:36:9a:a1:55:60:2b:96:73:e6:
                    43:19:76:2c:f5:24:88:00:50:02:b1:4a:8d:b9:b4:
                    18:56:21:da:3f:1b:8e:c6:38:2d:33:08:4e:7e:23:
                    5c:b6:7c:d0:52:47:7c:d3:bf:b4:1b:56:31:04:0c:
                    62:26:5b:1e:94:75:a6:e4:08:08:a6:27:b7:0b:24:
                    df:6b:80:79:ee:96:3f:08:ab:65:43:57:6f:a9:75:
                    e2:4a:0b:c9:d0:5c:ef:f7:9d:c7:79:22:b3:f4:22:
                    d3:7b:85:4c:5d:50:1b:5f:57:d4:a2:9a:78:11:68:
                    99:60:0f:d5:bf:ee:61:61:42:aa:05:87:24:bf:d2:
                    da:3e:eb:b8:70:de:a2:0c:21:06:bf:7a:5c:a5:d2:
                    e8:45:0a:6e:a2:66:24:e3:57:4b:81:38:e8:0c:8e:
                    72:d1:d7:a2:15:3c:0d:1c:d3:03:e2:f4:98:dd:7f:
                    bb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:04:5A:8B:56:4A:FB:A7:75:0E:64:9E:D5:F2:9A:10:D2:BF:C0
            X509v3 Authority Key Identifier:
                keyid:1E:53:A9:CD:BF:E5:C2:52:63:58:2F:BB:02:6B:04:D0:20:4B:60:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HlOpzb_lwlJjWC-7AmsE0CBLYAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/BD668408C06011F0A1497CB9DAE4EC9C/HlOpzb_lwlJjWC-7AmsE0CBLYAk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:71:e6:56:64:48:d9:f2:b6:3a:4b:cb:e0:84:23:df:f7:0b:
         7c:20:1f:04:cb:6a:15:47:a3:34:74:76:ca:fa:b9:30:a1:2b:
         bd:9d:df:ea:97:00:53:c6:ef:e6:7a:7f:6c:c1:93:3c:83:6b:
         da:59:c1:86:93:ef:7a:8d:79:69:4f:f1:92:f2:68:44:55:0d:
         95:6e:8c:9a:a9:a7:9f:61:17:18:69:4d:42:bc:02:d1:e3:d9:
         a9:61:08:bd:f1:4f:ce:15:89:9e:be:6b:07:1f:ce:8d:8b:61:
         18:52:3c:54:24:a6:a2:5f:a1:28:56:47:1d:f8:60:7e:b3:69:
         bd:95:8b:ac:ee:95:aa:1a:39:68:7f:33:9c:75:f6:32:27:5b:
         6f:eb:84:f8:d6:34:a0:bd:7e:17:43:ab:9d:14:02:8f:14:b4:
         07:09:1c:9b:c5:30:a9:90:a7:32:5e:3e:ce:bf:97:bc:00:d2:
         d6:bc:8c:6f:5e:e0:bb:f8:6a:5d:c9:28:a9:e3:c6:23:12:4f:
         e1:a5:69:d2:b7:29:1f:31:7a:83:ed:16:34:bd:5d:c0:f1:b1:
         61:cf:d1:39:0f:05:7d:87:46:dd:b0:a8:67:26:81:8a:80:ce:
         3d:20:39:b8:69:3b:c5:8f:69:33:e9:fb:01:36:d4:c9:f2:66:
         7d:c0:34:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:26:22 2026 by rpki-client