Error: rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
File:                     IU5T_WAV277wRT3vRAdy_7AU3Yo.mft (raw, json)
Hash identifier:          vnZ6VmQtrlPDyb/YZqszEyeL5Uc2yI80jCl+O7DZXC8=
Subject key identifier:   31:55:DE:BD:02:B9:93:DA:CC:E5:B1:03:70:AA:E1:52:7D:C6:EB:A3
Authority key identifier: 21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A
Certificate issuer:       /CN=F3639B67AF/serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
Certificate serial:       04F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
Manifest number:          04EE
Signing time:             Sun 25 Oct 2026 03:28:48 +0000
Manifest this update:     Sun 25 Oct 2026 03:28:47 +0000
Manifest next update:     Tue 27 Oct 2026 03:28:47 +0000
Files and hashes:         1: IU5T_WAV277wRT3vRAdy_7AU3Yo.crl (hash: pTODbCXG+MMgkLaVkSNJSVFSvY+ysv6KCw//snijgT8=)
                          2: 20752E50271A11EFB295582D7DDC24C2.roa (hash: vJwAgE4GViNLt6DStSXnSiz5VQ5wiyhctReG5qMVaz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639B67AF, serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
        Validity
            Not Before: Oct 25 03:28:47 2026 GMT
            Not After : Oct 27 03:28:47 2026 GMT
        Subject: CN=6add7770-aded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:73:f7:fe:96:21:fd:76:fd:de:3e:19:4a:3b:
                    ec:13:7c:40:b6:a3:a0:d7:83:24:a3:fd:d2:cd:c7:
                    08:98:15:4e:b0:aa:3f:3d:93:2b:1e:55:a9:74:fa:
                    25:92:d8:25:81:ed:a8:1c:02:60:cb:9d:ee:de:98:
                    47:03:96:46:dd:c5:5e:0d:7a:9d:30:e8:88:c4:b1:
                    1e:0d:17:be:9b:40:a4:58:60:df:45:0f:55:ca:60:
                    9b:66:61:57:2a:5e:49:cd:c0:d3:fa:cb:e6:30:c5:
                    bd:9a:2c:95:4e:a7:54:85:09:19:f9:13:67:29:56:
                    33:8d:16:7f:c8:bc:ed:d0:90:99:6f:12:d4:d7:eb:
                    ef:aa:cf:ae:87:c5:73:f8:96:15:b1:bf:e0:c3:5b:
                    21:0a:17:93:81:63:bf:fa:2e:f1:7b:f9:13:26:1b:
                    4b:5d:1e:62:ba:58:04:55:dc:0a:f6:56:dc:cc:6e:
                    95:1a:56:3d:c2:cc:61:55:91:c8:bb:b9:d1:97:dc:
                    24:d3:22:e2:3a:99:07:ff:26:89:e9:56:84:f7:cd:
                    55:7c:65:7f:44:ed:d5:39:c5:5c:ce:99:a6:b3:56:
                    0d:df:fe:a8:d4:bf:a6:f7:c4:be:bf:d5:e4:f9:b8:
                    1c:af:29:d8:1f:e7:8f:e8:fe:88:b3:68:af:63:c2:
                    e5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:55:DE:BD:02:B9:93:DA:CC:E5:B1:03:70:AA:E1:52:7D:C6:EB:A3
            X509v3 Authority Key Identifier:
                keyid:21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:4d:53:87:82:61:f3:5d:42:4e:ff:f5:fc:ec:50:1b:17:a5:
         df:e7:6a:f8:2d:88:d0:37:19:25:a4:3a:35:2e:c3:62:07:ee:
         df:9a:b2:86:23:90:40:60:76:2c:9b:3b:41:00:18:00:57:bc:
         3d:fd:0e:fb:00:ef:13:02:a8:59:1d:a0:f4:ec:85:18:1d:81:
         e1:0b:6d:04:d7:44:ea:dd:10:4e:d9:8b:fe:c3:72:98:50:6a:
         43:ad:6a:37:e1:e9:da:6c:78:41:fa:84:af:c1:d2:20:15:d2:
         e8:47:b2:a2:96:fe:72:90:d6:56:47:48:e9:1f:21:18:10:6c:
         d9:fb:1b:7b:e3:1f:7e:f8:34:73:c6:a4:b0:6e:35:80:a9:b2:
         9a:d4:da:04:47:3c:52:40:d6:73:dd:f3:db:db:19:55:78:3b:
         75:b7:aa:32:0c:cf:9f:39:b8:70:85:2f:06:10:43:29:6a:e6:
         70:6d:4f:eb:b1:96:e3:e9:52:d9:ed:38:fa:ac:ef:21:e5:cc:
         34:e0:3d:40:5e:ab:1a:ab:ca:5b:25:ff:50:9f:1e:86:26:16:
         8a:84:cf:dc:da:14:4a:ba:69:c3:a6:ba:a5:61:8c:3d:51:68:
         b4:bd:65:de:ff:5c:c7:78:d8:52:c4:43:26:dd:de:3c:5b:11:
         11:23:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 12:39:20 2026 by rpki-client