Error: rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
File:                     CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft (raw, json)
Hash identifier:          efpj8VcdUf4i/Lqd1xaU/t6zweGI4d7VocutPQ9Dqz8=
Subject key identifier:   76:7D:A1:AC:42:B0:A8:26:86:9A:D3:EA:B9:4A:13:85:B8:BC:2C:CA
Authority key identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
Certificate issuer:       /CN=F363763AAF/serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
Certificate serial:       05E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
Manifest number:          05E5
Signing time:             Sun 25 Oct 2026 03:03:32 +0000
Manifest this update:     Sun 25 Oct 2026 03:03:31 +0000
Manifest next update:     Tue 27 Oct 2026 03:03:31 +0000
Files and hashes:         1: CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl (hash: 5pzACKT0dVX8RWaAxqIQL8HoG0yavE0oGRcsEOXFcwY=)
                          2: 0C17C5923C6511F0BEB31A91DAE4EC9C.roa (hash: Dk3egDXLcZWiCKWFaQebnI7KBH7G+aSO1771Cj6q3cY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363763AAF, serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
        Validity
            Not Before: Oct 25 03:03:31 2026 GMT
            Not After : Oct 27 03:03:31 2026 GMT
        Subject: CN=6add7184-0536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a3:37:02:49:da:a9:1e:72:2e:8d:23:37:f4:
                    1c:46:71:f2:73:75:b1:8c:1d:f2:e1:5a:85:d7:1e:
                    27:24:26:b2:3f:ff:64:20:bc:0b:fb:0b:a3:35:92:
                    07:c8:35:74:d9:e0:5c:03:fc:f6:3a:ab:61:a6:81:
                    4e:f6:ba:9f:d0:30:ba:3b:6c:45:fb:86:29:44:41:
                    a1:be:d4:4a:16:11:de:f9:2d:a9:4d:75:0c:73:7a:
                    c0:51:c9:80:71:39:f6:55:64:e6:ef:30:5c:65:8f:
                    d4:2f:c1:2c:15:b3:9f:b8:cc:a6:bf:ed:6d:e5:ca:
                    fa:73:69:56:11:40:83:1d:b0:03:54:1b:8a:c9:92:
                    cc:55:93:cb:d5:11:84:7e:83:b8:08:88:13:4e:95:
                    bb:06:e0:55:9d:89:76:5c:66:c1:43:9d:0a:ed:4e:
                    d3:44:52:2f:96:e6:54:e8:b6:6a:9a:85:f0:5e:11:
                    eb:ac:d1:04:31:f6:77:f3:5b:aa:88:53:7e:37:76:
                    eb:37:c4:e2:f5:88:e5:11:c2:a8:33:83:96:ec:22:
                    21:f0:47:83:6f:d5:3e:9f:0c:b1:ee:e6:07:21:b1:
                    1e:de:8d:e7:9d:87:de:d9:ee:4c:77:b1:90:ff:6f:
                    83:d4:71:34:b3:1b:30:01:e7:f6:37:b7:b3:8a:b0:
                    e7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7D:A1:AC:42:B0:A8:26:86:9A:D3:EA:B9:4A:13:85:B8:BC:2C:CA
            X509v3 Authority Key Identifier:
                keyid:09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:4d:c2:9e:a1:ba:b6:20:d3:c3:7f:71:f2:5e:87:3b:6a:56:
         6f:b3:fe:c5:ad:13:38:72:29:4f:72:6e:de:b9:df:ba:12:b6:
         ed:d9:0b:68:d3:80:b3:33:93:24:b6:81:23:29:7f:30:cc:41:
         cd:b6:29:e2:80:bc:d3:00:66:81:0f:81:b4:fe:5b:a3:62:4b:
         ad:ed:d2:00:f8:65:df:55:ac:c4:87:ca:ee:e9:7e:67:4b:07:
         c0:01:54:07:03:38:c7:d4:97:a7:a1:f2:5b:f6:ef:1a:48:29:
         26:54:7d:53:87:0d:fa:54:b2:94:8f:7d:54:f1:f8:42:c2:7c:
         4c:9a:2a:07:87:0b:95:ed:b6:8f:68:23:9c:ed:86:7c:14:8c:
         a3:0f:b0:bc:3f:e6:2f:21:38:14:0b:7c:46:db:6a:be:32:b1:
         a9:fd:56:ac:56:52:bf:50:59:68:a2:99:82:d5:37:f4:10:dc:
         6b:dd:25:46:bd:c4:90:03:37:f9:89:c6:02:72:78:42:a6:20:
         41:8b:be:82:8b:36:44:bf:3f:a6:81:f8:20:74:d8:47:47:9b:
         b2:7b:c6:39:7f:7b:d9:8d:07:1d:eb:08:d6:95:b7:7a:99:60:
         8c:d9:57:d7:3c:b4:47:76:80:f5:ab:a4:ff:55:06:4c:97:59:
         ff:3b:fa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:30:39 2026 by rpki-client