Error: rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
File:                     jq1LkUtvfJKOEv440cRAvFMJwTM.mft (raw, json)
Hash identifier:          Syq9XklORpyQbSmjbg3N0V+Qa9wau56lWblNuIP84D0=
Subject key identifier:   83:D2:9D:27:D8:AE:54:35:D2:B9:5F:BE:C8:CA:7D:A2:53:69:52:94
Authority key identifier: 8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33
Certificate issuer:       /CN=F3642818AF/serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
Certificate serial:       05F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
Manifest number:          05EF
Signing time:             Sun 25 Oct 2026 03:01:20 +0000
Manifest this update:     Sun 25 Oct 2026 03:01:20 +0000
Manifest next update:     Tue 27 Oct 2026 03:01:20 +0000
Files and hashes:         1: jq1LkUtvfJKOEv440cRAvFMJwTM.crl (hash: jF5I0isBualfeudx1fdYVLOV2KFo6aDzyzPohYOvGww=)
                          2: 45D1D714068B11F1B2B0DFC5DAE4EC9C.roa (hash: k+Zzix2q4ja3ETayVUtqKJofOjoyeVoddBz/cw7MwUo=)
                          3: 7318CAFC068B11F1B3ADE4C5DAE4EC9C.roa (hash: n40nUjLwRlCqHskgafPlAGCOiGivJPI1YmSXzTyPafc=)
                          4: 01C2346A068B11F1BC83A6C5DAE4EC9C.roa (hash: 4GrU3dea3pBBteCk+wcUG3w5UC1FXBPW1sooz5OsDs0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1524 (0x5f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642818AF, serialNumber=8EAD4B914B6F7C928E12FE38D1C440BC5309C133
        Validity
            Not Before: Oct 25 03:01:20 2026 GMT
            Not After : Oct 27 03:01:20 2026 GMT
        Subject: CN=6add7100-dd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:e9:9f:c8:a6:a4:75:fe:e1:7a:dd:fa:ed:
                    57:07:a3:03:d6:01:5f:03:38:7a:ef:04:9f:1c:cb:
                    3c:40:f4:44:06:97:8b:3c:65:9c:30:3d:d9:7f:7a:
                    88:47:1e:26:09:7e:11:42:4e:64:cb:2f:7a:f6:50:
                    3d:af:2d:4d:dc:c1:f6:fc:04:6e:e1:2e:f5:ee:10:
                    e2:64:1e:68:e5:e1:b4:aa:5b:2e:d0:bf:73:2d:e8:
                    6a:ed:d1:b5:0e:19:c8:65:69:88:53:00:70:e6:e9:
                    39:74:fb:51:db:84:56:84:69:4a:4c:b4:bb:0c:cd:
                    c5:b0:28:86:7b:d8:09:9a:38:3e:cb:f4:04:eb:3b:
                    f5:86:ea:37:62:a9:ae:78:bf:9a:4c:c3:78:77:b4:
                    90:f6:1c:53:28:d6:f3:13:21:6b:71:18:4b:9d:71:
                    43:55:ab:95:9e:77:91:b5:6b:26:53:2f:31:41:fc:
                    12:59:d8:77:78:92:e1:75:a7:75:54:91:e1:51:dc:
                    98:32:8f:41:94:bb:36:fa:f4:11:73:92:69:01:d2:
                    c1:83:04:08:d0:79:bf:cc:05:11:be:26:a8:24:51:
                    81:4d:ac:17:5c:f4:08:e1:4c:01:f0:97:bd:90:1e:
                    97:59:a3:bd:50:33:07:da:04:84:92:ed:84:60:ec:
                    c8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:D2:9D:27:D8:AE:54:35:D2:B9:5F:BE:C8:CA:7D:A2:53:69:52:94
            X509v3 Authority Key Identifier:
                keyid:8E:AD:4B:91:4B:6F:7C:92:8E:12:FE:38:D1:C4:40:BC:53:09:C1:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jq1LkUtvfJKOEv440cRAvFMJwTM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642818/9224B30A49FD11ED86901991F1222468/jq1LkUtvfJKOEv440cRAvFMJwTM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:63:ce:cc:cc:ba:d2:f8:60:84:12:bd:c8:ee:20:40:85:1e:
         19:36:5b:ed:b5:b0:f0:7c:49:51:09:5c:da:9e:a2:d1:e5:e9:
         ff:fd:8d:a9:b1:df:da:77:a1:37:3a:5c:bc:e5:a4:d3:2b:26:
         95:8b:3c:7e:2b:67:e6:ad:98:8a:e3:69:c5:1f:05:9c:ca:f8:
         74:48:45:17:77:0e:eb:f0:e6:73:39:8e:85:28:1e:d7:81:c4:
         88:97:7f:fa:4a:b4:02:b0:61:e0:48:9b:4c:1d:a1:e9:0d:16:
         a4:59:88:94:10:e9:3d:52:c3:33:33:a4:cf:a6:85:7b:48:c0:
         e1:ca:96:f2:7f:02:97:71:e2:d3:d5:8f:b0:0b:81:a1:d4:2a:
         51:78:25:a9:8e:c6:85:d7:84:af:a9:c9:d2:3c:54:61:b5:21:
         ad:86:12:1c:63:68:b4:87:b8:b7:69:59:7a:3f:83:37:45:9f:
         c7:28:5b:d2:69:1a:c8:46:9e:80:cb:6d:7f:5a:c2:14:5c:cf:
         30:e4:d5:5d:60:6d:0f:aa:2b:f5:53:23:22:d4:e2:94:59:c4:
         90:6a:b1:5f:e3:23:ba:0f:db:dc:44:e7:03:d7:6f:05:b1:06:
         a5:41:44:0a:7a:98:71:0d:7e:e8:51:2d:c5:15:ce:a5:09:5c:
         aa:81:74:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:41:54 2026 by rpki-client