Error: rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
File:                     68SoUZfDK0JWOKbH5YYLWWTmV_4.mft (raw, json)
Hash identifier:          2OE7TxMarlnoUqcL3e3jJ8uVZkUu5Up0yhJNBo+B39Y=
Subject key identifier:   02:D9:24:5B:7A:2B:97:79:F7:4B:09:0D:93:A7:F8:D6:51:DF:DD:8D
Authority key identifier: EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE
Certificate issuer:       /CN=F363212DAF/serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
Certificate serial:       0746
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
Manifest number:          073A
Signing time:             Sat 24 Oct 2026 02:31:31 +0000
Manifest this update:     Sat 24 Oct 2026 02:31:31 +0000
Manifest next update:     Mon 26 Oct 2026 02:31:31 +0000
Files and hashes:         1: 68SoUZfDK0JWOKbH5YYLWWTmV_4.crl (hash: F2wHajqH8bk2TY82SsRqog7iyo0qA6p3z1gNhcLFFa4=)
                          2: 6B8C1F5C1CFF11F1AEC2C7DBDAE4EC9C.roa (hash: vVsoBzOgmQJsVgZ4eiWG42vtCjrBwkXB68PKgcK7ZzA=)
                          3: EDDA3E501C6211F1AAA4E2C7DAE4EC9C.roa (hash: lUvvBVjsEjqfAsAmA0WnRzU1lqUEU7lO27ZrISQKKFs=)
                          4: 3A76263A1C6211F1ADDFF9C3DAE4EC9C.roa (hash: REuAOlE2BNzgo7YoEU2hdXZQivK8fOJn7CrtB/+yhKw=)
                          5: 22E9A04A1B8211F18A6803A7DAE4EC9C.roa (hash: o2oSmT5XMRceQB7vvUJ62zJZyK7qqtUp831xxa7NGwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1862 (0x746)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363212DAF, serialNumber=EBC4A85197C32B425638A6C7E5860B5964E657FE
        Validity
            Not Before: Oct 24 02:31:31 2026 GMT
            Not After : Oct 26 02:31:31 2026 GMT
        Subject: CN=6adc1883-673e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d7:15:82:a1:83:b6:18:c7:5f:a3:76:09:89:
                    57:db:cd:11:51:e2:85:92:41:04:88:24:c9:3d:c8:
                    c5:43:10:d8:ef:1d:85:b2:c3:da:41:bd:22:a4:5e:
                    d9:89:e5:25:69:fc:36:7a:db:d5:5f:34:e0:90:83:
                    31:90:09:f7:e6:72:75:6f:de:3f:60:5b:f6:a4:25:
                    5a:21:29:d2:67:77:11:17:53:ed:71:03:05:c3:60:
                    c5:8d:0a:12:98:10:b1:43:7b:33:c8:dd:a0:d3:30:
                    f6:b6:0f:97:93:68:46:0b:ae:13:b9:16:ae:b9:98:
                    3d:e1:b0:1b:75:36:e9:58:57:80:84:fb:8b:dd:79:
                    a4:4e:25:3d:95:b4:b7:95:1c:e1:f7:55:b7:7b:6d:
                    fd:88:28:af:17:d6:65:b0:db:69:ce:ef:97:d5:fd:
                    f2:27:67:ae:e7:75:35:db:77:b4:a2:e4:d4:90:37:
                    b3:9d:1d:e0:cd:ed:e2:8f:bc:04:3a:d5:29:32:ac:
                    1f:73:ac:35:16:f1:6e:2f:6a:ef:af:67:94:e9:e1:
                    87:e0:20:a2:e8:ba:1c:56:d5:ab:c7:95:33:b9:4f:
                    69:62:45:bd:ba:84:0a:d0:63:56:94:46:6c:17:b4:
                    d3:47:c0:f4:b3:64:49:a9:76:85:ba:05:fb:ad:cb:
                    f0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D9:24:5B:7A:2B:97:79:F7:4B:09:0D:93:A7:F8:D6:51:DF:DD:8D
            X509v3 Authority Key Identifier:
                keyid:EB:C4:A8:51:97:C3:2B:42:56:38:A6:C7:E5:86:0B:59:64:E6:57:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/68SoUZfDK0JWOKbH5YYLWWTmV_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363212D/1E968F6051B711ECBFC54543D8A014CE/68SoUZfDK0JWOKbH5YYLWWTmV_4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:c0:5a:ed:b4:f6:cf:4c:1e:d1:9e:da:87:20:e9:88:4a:5e:
         cd:8c:14:ab:7e:d6:df:3f:91:61:f6:a7:70:01:1d:e3:a0:21:
         23:d9:0b:b4:f6:b4:a5:60:25:ff:6e:c4:a3:b9:97:44:19:87:
         a9:a9:5c:ae:58:7c:6b:d2:68:4d:2c:c3:89:91:4b:6d:04:40:
         b0:6c:98:8d:3b:7d:7e:89:4d:43:04:44:67:e5:b9:68:b4:42:
         74:22:a1:ed:f7:9b:a3:63:53:f6:64:36:67:be:73:4f:d8:46:
         d6:dc:8a:fe:65:eb:63:31:45:b4:4d:21:ec:d6:27:c6:05:e4:
         5d:02:6a:31:4c:2c:10:50:75:ea:4d:31:ba:e4:2f:b6:30:d5:
         d4:16:e1:f0:0e:a4:d0:6d:be:35:58:9f:74:5d:e3:ba:45:d9:
         f9:93:0e:fa:af:61:0f:c1:fe:bc:62:1a:7a:90:25:91:fe:48:
         f7:ba:ee:2d:68:f9:6f:f9:74:f5:ad:10:2e:2a:38:ea:f6:74:
         a4:25:7b:d7:44:de:ce:b5:b8:00:69:69:95:2a:ab:55:7e:c1:
         65:ef:b9:be:0b:49:88:04:bb:b1:70:3e:ce:99:91:7c:01:d9:
         b0:60:4b:df:99:c5:c7:84:0b:96:14:0c:04:5c:1a:49:98:64:
         00:81:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:24:00 2026 by rpki-client