Error: rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
File:                     W0T4JDSqcXoF9kUnlIPWmG92utQ.mft (raw, json)
Hash identifier:          hrK0D88Lgr9j+ZjhktUJx/p4i+j+5JhwvXg/eCx9dVk=
Subject key identifier:   1D:FD:39:8A:32:A3:A7:27:40:56:4F:F7:7B:44:F5:F9:03:0E:5E:F5
Authority key identifier: 5B:44:F8:24:34:AA:71:7A:05:F6:45:27:94:83:D6:98:6F:76:BA:D4
Certificate issuer:       /CN=F3633DE5AF/serialNumber=5B44F82434AA717A05F645279483D6986F76BAD4
Certificate serial:       FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
Manifest number:          FA
Signing time:             Sun 25 Oct 2026 05:28:22 +0000
Manifest this update:     Sun 25 Oct 2026 05:28:21 +0000
Manifest next update:     Tue 27 Oct 2026 05:28:21 +0000
Files and hashes:         1: W0T4JDSqcXoF9kUnlIPWmG92utQ.crl (hash: Rs6Bp4E5d63NW/SF7VFtXJB7gI4iwfQkAypxOHPM+to=)
                          2: E212FF1A118811F1BB5DD4D1DAE4EC9C.roa (hash: LyN13ZxZWbnnocbTKmNDNHfltdE66o4GJwgUNjqQnHY=)
                          3: 07F034A0118911F189A69ED3DAE4EC9C.roa (hash: 7d03e258Z45lOJ6Bi0wf1CYWNnr0zvsz3BVx70CiUAU=)
                          4: B61D2CFA108411F1ADE2BA9FDAE4EC9C.roa (hash: 2qZXAQI56bgc2DXv4vRTW6vQ2QZ8YolH3jT9pqajF1U=)
                          5: 4185E648108411F1867ED09BDAE4EC9C.roa (hash: 8tCHwzjQzCwuuRhirUfAdz84/IN9nQDGqOxj48hw9Qk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254 (0xfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633DE5AF, serialNumber=5B44F82434AA717A05F645279483D6986F76BAD4
        Validity
            Not Before: Oct 25 05:28:21 2026 GMT
            Not After : Oct 27 05:28:21 2026 GMT
        Subject: CN=6add9376-90f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:85:5e:57:6a:5e:db:27:8d:4a:90:1b:74:80:
                    d8:26:2d:9e:44:31:fd:c8:c1:21:00:d4:a3:bb:0a:
                    aa:b8:7c:05:c3:43:0e:c3:fd:58:78:c0:cb:81:7d:
                    9b:60:2f:4a:43:02:e9:d8:24:30:6f:3c:0e:ee:b0:
                    1d:7b:18:af:85:36:26:39:20:a1:68:cf:e7:5b:6e:
                    73:f5:f2:a8:60:a2:80:b6:1a:bb:0b:16:ea:7c:9b:
                    7b:41:62:94:30:0f:a3:bb:c5:74:66:02:72:06:09:
                    26:02:1b:6b:7d:a2:e8:cf:74:2c:30:b1:4b:40:8c:
                    1c:72:72:8c:d7:8e:c1:b4:ce:aa:b5:37:98:30:a2:
                    d7:0f:e8:28:13:2f:a4:d1:d0:1e:2a:06:d5:f0:e5:
                    a2:52:4c:c5:62:64:b2:45:06:cb:42:b5:ff:6a:db:
                    db:39:b4:54:21:55:95:6b:74:13:c8:71:b9:52:b2:
                    1a:a5:97:bd:bb:72:f2:71:09:de:e1:2b:c7:c8:89:
                    05:36:ef:5a:df:d2:0b:ac:f2:9c:1c:20:cb:1c:a3:
                    e8:12:b6:c8:a2:69:0a:48:91:e9:5b:5c:f6:5a:51:
                    72:7b:2f:8e:3d:c5:c6:fe:49:62:5d:07:41:99:d8:
                    99:4e:cb:bd:8d:f8:6a:ae:3d:95:b1:6a:37:0d:d4:
                    b6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:FD:39:8A:32:A3:A7:27:40:56:4F:F7:7B:44:F5:F9:03:0E:5E:F5
            X509v3 Authority Key Identifier:
                keyid:5B:44:F8:24:34:AA:71:7A:05:F6:45:27:94:83:D6:98:6F:76:BA:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W0T4JDSqcXoF9kUnlIPWmG92utQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633DE5/FCF32D62108111F1BB49558FDAE4EC9C/W0T4JDSqcXoF9kUnlIPWmG92utQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:5e:f9:72:12:2a:70:53:6d:1a:ba:98:1a:c0:54:87:59:
         d1:30:0d:bd:f5:c0:fa:03:f4:a8:c9:91:55:e9:76:9d:ae:f2:
         47:50:8e:dd:2b:ef:12:ff:b4:85:a5:8f:27:b8:20:11:a0:84:
         b2:41:aa:13:ca:a1:cb:be:02:d2:a3:9e:48:dd:c8:c2:5d:46:
         13:e4:9a:43:65:02:d1:76:2d:90:4e:56:42:9a:ff:fd:b3:02:
         f2:a7:15:0e:7c:94:02:9c:e0:e7:c2:fe:cd:92:0c:bf:b9:55:
         10:aa:52:c9:48:b8:4f:c0:5e:17:0d:d5:28:1a:28:46:ad:ec:
         0f:78:4e:4d:b1:6c:ea:06:b3:ba:ea:03:60:18:8c:d1:26:30:
         19:46:7e:14:40:11:6e:04:cd:02:87:8d:59:80:fb:2d:03:cd:
         11:47:62:26:67:97:1f:b2:40:c4:c3:d5:c2:ca:be:4e:d7:36:
         69:19:21:17:73:ce:f5:83:db:e9:b6:60:98:34:e1:8e:ae:a2:
         0a:b1:a5:b6:31:fb:e3:b8:c8:52:c5:1f:04:7e:e9:94:ee:88:
         23:16:7d:26:81:83:58:5e:84:42:37:2b:f4:a6:fb:e1:85:5f:
         29:88:19:d2:47:a0:5f:f6:2c:c8:f0:59:8e:28:40:69:e6:ae:
         e7:d1:ff:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:04:34 2026 by rpki-client