Error: rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File:                     ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier:          qF2paVaknRtnfX8UZuuOi6MQJ8l/BynjjepNZRbeYJk=
Subject key identifier:   06:A2:CA:78:7A:AC:CF:7D:CF:EA:DE:C1:16:F3:AB:16:C9:63:AA:A9
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer:       /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial:       05F1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number:          05EF
Signing time:             Thu 29 Oct 2026 03:01:26 +0000
Manifest this update:     Thu 29 Oct 2026 03:01:25 +0000
Manifest next update:     Sat 31 Oct 2026 03:01:25 +0000
Files and hashes:         1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: dgUCIug3CSZKQI1eHMgUpZopJaioBwwWyF//jH7u8HQ=)
                          2: 14676520195C11F1882310E6DAE4EC9C.roa (hash: MEXom9qqtVBHi9cTLvqwaxyNpMlwORLkLiKzmbGhhwI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                          rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521 (0x5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
        Validity
            Not Before: Oct 29 03:01:25 2026 GMT
            Not After : Oct 31 03:01:25 2026 GMT
        Subject: CN=6ae2b706-e15a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:05:33:7b:cb:9e:b6:92:60:2b:9b:76:b9:
                    ce:5e:a5:fb:dc:05:e7:61:3b:c5:b5:bf:d4:15:e6:
                    82:61:3c:c2:24:8c:62:9e:79:c4:21:44:9e:b1:a2:
                    5b:f4:1c:b0:d8:39:9f:c6:28:7b:43:59:28:40:df:
                    08:6f:ea:c2:f4:53:49:1c:5b:76:1c:f8:f9:55:ac:
                    0e:ba:1a:6d:df:b9:a9:b6:c7:df:dc:c7:c3:ed:54:
                    8b:88:88:0b:2b:9c:91:e9:a5:31:27:f2:31:8e:75:
                    f1:52:da:7e:3b:af:2b:91:9e:6d:65:8a:28:32:23:
                    60:18:a1:ee:d4:b1:35:5b:7c:36:2b:f8:a5:f9:30:
                    64:d7:cc:81:69:2d:a9:30:1e:a6:66:80:87:e9:08:
                    66:ca:fb:a0:e5:25:22:74:20:43:0c:d4:dd:07:4d:
                    21:f3:4c:18:f5:cd:2f:bb:99:bc:5c:85:bb:ff:dc:
                    c6:1a:d4:b7:d0:a3:db:d1:11:f7:d6:f8:c5:7e:d0:
                    1c:ce:85:da:fb:9f:ee:92:15:ce:17:61:b1:ea:43:
                    5a:a5:60:21:e2:4b:89:b0:ac:29:ca:46:e4:fb:76:
                    fc:84:d0:ce:50:72:ce:d8:c0:3d:5d:d1:4b:97:b4:
                    20:11:1e:19:8d:73:cc:6a:95:2e:04:28:b9:cc:36:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A2:CA:78:7A:AC:CF:7D:CF:EA:DE:C1:16:F3:AB:16:C9:63:AA:A9
            X509v3 Authority Key Identifier:
                keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:eb:bd:24:05:60:13:a7:82:4f:1e:0e:7c:86:22:be:52:c9:
         af:a8:ec:b0:9e:62:66:d3:a9:1a:78:c2:6d:65:a9:dc:36:50:
         64:44:1d:27:64:cc:51:59:cf:10:60:05:8f:ff:d5:20:4a:f8:
         98:57:2b:41:a3:40:74:a2:75:9f:15:2f:e2:b5:46:57:e6:7b:
         52:3c:ca:f8:f2:fe:72:d0:b1:a9:36:3b:01:79:12:4e:a1:a6:
         5e:2d:1b:a6:65:15:36:23:23:23:b2:84:60:6e:b0:ea:0d:73:
         ed:82:b3:19:49:cf:c2:9c:7a:d0:bc:a7:48:f5:cc:10:87:3b:
         d4:dd:9b:03:4d:6a:b4:1a:c1:e3:e9:df:53:a9:6c:ec:b7:91:
         2d:bd:0a:86:cc:01:d5:52:50:a7:1c:c8:9d:7f:22:95:ad:b1:
         99:7f:4a:5c:b0:bb:50:ee:03:9e:fa:00:1b:3e:fa:14:d3:33:
         65:80:86:f6:2f:f5:d7:36:af:db:43:3e:49:ee:da:e8:f8:07:
         7f:6a:d4:f6:14:fd:8f:ab:8f:21:ec:68:aa:b5:b8:29:9d:3c:
         7b:74:07:36:04:c2:4c:0b:11:60:54:fe:e5:68:77:76:ba:03:
         cf:ce:d5:a9:5e:02:9f:87:b7:83:fe:f3:15:b5:d1:77:a2:86:
         05:d5:db:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:29 2026 by rpki-client