Error: rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
File:                     kz9w25gXuEj4wIYagksQEX3FGSw.mft (raw, json)
Hash identifier:          Igmpd5IYM0P5KlXOPHwRLYC4Fw55pVVLZdLFtwj//r8=
Subject key identifier:   F0:92:37:54:B2:59:7D:10:1D:73:F9:69:FC:F6:18:B3:1C:DC:74:5D
Authority key identifier: 93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C
Certificate issuer:       /CN=F364321AAR/serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
Certificate serial:       0549
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
Manifest number:          0538
Signing time:             Sat 12 Sep 2026 03:18:26 +0000
Manifest this update:     Sat 12 Sep 2026 03:18:25 +0000
Manifest next update:     Mon 14 Sep 2026 03:18:25 +0000
Files and hashes:         1: kz9w25gXuEj4wIYagksQEX3FGSw.crl (hash: /mYNDgeyy+2oMydSrlbipw4gisVL7kY2npYydaKWlVw=)
                          2: B104EE44D53311EE8BE4F36C775412E6.roa (hash: RqxwUBj2Bc+OGaTDdk4x7to8RcdRWFqstSwOVMh1no8=)
                          3: 1E005EBCD53811EEA636DE73775412E6.roa (hash: NZukzj3sWyjYLO9ToCsVsgQAC/kq2Oo6mzyBtHQWmD8=)
                          4: 8ED6BADCD53311EEB2A2C36C775412E6.roa (hash: 4/E5JqKYHi82tnNDpVDrDiMaVaUcTpYsZcy/yA05uhA=)
                          5: 0DEEF6F0D53311EEB556F46B775412E6.roa (hash: P5ibcWLG9H1Kur9SCsMbIiX3jBWNN4xNF46xx72YQHI=)
                          6: A5A2959EDD3D11EEBAF174B7775412E6.roa (hash: ODN6UQwLRLuCmMW2LaPD2vWq9D+bquTGny4/1fInMQE=)
                          7: 64C2AA52D53411EEB69B076E775412E6.roa (hash: ApnKXgX4qtwCc4Ec2u4PHGuX3hUujQ6rhZ5C7rafC04=)
                          8: 6DD19D16D53311EE8136926C775412E6.roa (hash: v2hwM/LETMN1QLgipB8E8B+3kZLiPan/2yTGEjfAszc=)
                          9: 8C2651F4195511F1A35B4FC0DAE4EC9C.roa (hash: pGpRj6/PqXx9Td2hUx4ugVnycXhSWNsX+vCSVgOR8bM=)
                          10: 4FFFB85ED53311EE9E536E6C775412E6.roa (hash: D+tEjQwBXIivLTAaXT7TthK1xPvy3VJOqpaVsbM3hVk=)
                          11: 3F0DCC84D53811EE9F160874775412E6.roa (hash: ZQcO3DmU3Brb6BRvD6IVWLlf8rwN0CI8i4MNTEzPGK0=)
                          12: BCD1ADAAD53511EEA3B22470775412E6.roa (hash: d12Kr2qwAhbDBscwoutPKxlu3aElunyjg9Yu2LBeVsw=)
                          13: E4B0AF5CDD3B11EE8C72BDB4775412E6.roa (hash: 0arozNRt9JTjzBkDd/i9r9NcNES2kthw5/x77T8UhJo=)
                          14: DF52896AD53711EE84074A73775412E6.roa (hash: uIa+9vsGlaMu/Injc/vzOUtcnqp2BVTquSWUrb4Yn00=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
                          rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAR, serialNumber=933F70DB9817B848F8C0861A824B10117DC5192C
        Validity
            Not Before: Sep 12 03:18:25 2026 GMT
            Not After : Sep 14 03:18:25 2026 GMT
        Subject: CN=6aa4c482-32ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:ff:1d:7b:ff:71:22:dc:3c:8a:2e:c0:52:
                    7b:0d:52:04:63:04:1f:0b:aa:97:e8:c5:14:46:d0:
                    c1:90:e8:f4:32:94:49:6b:b0:31:21:09:98:d4:fc:
                    da:c5:ad:70:8c:ed:72:ff:f5:c4:59:ca:e1:f6:11:
                    63:d5:a9:1e:d0:32:f9:ca:7a:9e:0f:37:1f:c6:49:
                    72:ef:66:5e:a5:f2:54:b8:39:79:3e:d8:18:df:4f:
                    6e:99:9a:41:de:42:84:4e:2e:91:0f:f0:e9:3c:d2:
                    54:62:14:53:24:73:93:2c:52:01:00:6e:20:99:9d:
                    e0:21:a6:5b:a6:98:09:1d:7a:80:61:72:7d:6b:d7:
                    00:5c:7c:b6:cc:fe:51:41:9d:25:16:90:5b:19:50:
                    b1:b4:81:54:80:98:db:c7:ea:8b:8d:9e:f8:de:9e:
                    96:d3:9c:20:47:68:38:58:90:e7:39:3b:20:bc:76:
                    77:14:6e:65:13:18:2f:52:64:29:fb:a9:73:90:17:
                    1d:7a:fe:10:c5:c3:ad:d6:c6:a7:32:fb:55:f1:3b:
                    43:6e:43:e8:65:65:1e:0b:f6:e2:17:3a:87:73:e9:
                    21:d4:8d:2b:b6:f9:04:e0:17:9d:8c:c9:c2:8c:fe:
                    d4:2b:9e:a8:09:4c:f9:e1:f9:f5:33:69:90:6c:65:
                    38:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:92:37:54:B2:59:7D:10:1D:73:F9:69:FC:F6:18:B3:1C:DC:74:5D
            X509v3 Authority Key Identifier:
                keyid:93:3F:70:DB:98:17:B8:48:F8:C0:86:1A:82:4B:10:11:7D:C5:19:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz9w25gXuEj4wIYagksQEX3FGSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/493E462EBCDA11EDA1FB0FB0F1222468/kz9w25gXuEj4wIYagksQEX3FGSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e6:58:5e:41:9d:d2:d3:d3:9f:1f:50:1d:3a:71:1c:81:f8:
         fa:8a:eb:87:e1:c8:24:80:95:14:82:19:b0:89:d3:1c:ce:dc:
         a3:4e:7b:8a:a5:b0:ed:b7:16:14:03:5a:e1:a3:dc:88:01:a8:
         e1:50:0c:3f:83:1b:72:42:60:ce:19:5c:4a:62:f9:75:18:01:
         db:f1:11:99:1f:46:35:33:78:67:4d:67:48:9f:30:fe:5b:03:
         29:d1:20:14:12:88:60:2c:34:fa:20:64:bb:c9:aa:5c:84:76:
         fc:22:d2:da:ad:1b:63:24:ed:5a:f2:0d:63:42:1a:30:5e:c5:
         93:c9:10:03:ad:d7:6c:e0:0d:a8:bf:d4:68:8e:b4:8d:c5:ad:
         ef:b7:22:81:4a:00:f2:2f:2d:e6:a7:f7:a0:86:e3:94:81:9a:
         b6:4a:4f:f7:3c:09:00:26:aa:30:9d:d5:4e:41:f7:7c:19:8b:
         de:44:50:96:a7:f6:74:c6:6a:c2:0a:f2:22:d1:70:c8:d7:ed:
         00:aa:68:c1:11:7f:90:e5:54:aa:f5:42:e5:f7:e6:e9:69:8a:
         d3:fb:c8:cf:6f:af:a0:94:c2:42:24:70:73:51:a0:7b:26:fe:
         47:e0:bb:23:4c:21:65:f1:3b:ae:6d:17:11:85:7d:d7:58:80:
         26:6c:30:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:41:02 2026 by rpki-client