Error: rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
File:                     EAy9RkqQWltWj3rc7x-dILx1IzE.mft (raw, json)
Hash identifier:          8KPRkiWn3zfhZPIEzt4N9TEsLnOsn6xVQUQSAvr3t4M=
Subject key identifier:   0A:D4:4A:75:68:C2:EA:5A:89:BD:17:9B:72:73:74:18:34:AB:5C:1F
Authority key identifier: 10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31
Certificate issuer:       /CN=F364379DAF/serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
Certificate serial:       0562
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
Manifest number:          0559
Signing time:             Sat 24 Oct 2026 03:19:43 +0000
Manifest this update:     Sat 24 Oct 2026 03:19:42 +0000
Manifest next update:     Mon 26 Oct 2026 03:19:42 +0000
Files and hashes:         1: EAy9RkqQWltWj3rc7x-dILx1IzE.crl (hash: Mf2ASvTB1adHtaOHSM1Eq2r17DPZ0Ki2LMHVxns6arE=)
                          2: C719F080031811F0BCF8A45B762E951A.roa (hash: 79NJnHtzqcMQMYnoSD6NuoCr6AjHcaiwFE26hsB9lSo=)
                          3: E7C40FA68A6711F08E76079BDAE4EC9C.roa (hash: VT6zH98Frb6UtC81E1Tg7fyG8o/UWEDY/xqxWLn85AE=)
                          4: BE98A03E46CD11F08B83E8B4DAE4EC9C.roa (hash: GvbT42KDVOWTxS2JfgWWuD/aGjv1HwP9FkaDOKQ86zw=)
                          5: F6AE29B646C911F0A3352A9CDAE4EC9C.roa (hash: xJc4bxraTn4VMWGp4tujLjr4NYvnFKt/PaHncXl4bO8=)
                          6: 78AAD6F686B811F1AD0338E6CE1D38B0.roa (hash: kggO1PHAaeMi9Iq20hDB0z/CvbOz9LysF/AicQaTOXs=)
                          7: 5110E694031F11F0BEF24185762E951A.roa (hash: WjTHo5/2GMgpz/biHo/PTtID/ZgNKHDsBiz50asiS8I=)
                          8: 8187B4F485CA11F1910971BFCE1D38B0.roa (hash: MUhyY35RIQ7mJxQxOOJkiFFWoyA7V3uNiEOaAsw+ZGQ=)
                          9: 71F0925246CB11F0906DF5A4DAE4EC9C.roa (hash: 4GpwoUFSemgnNHOneEphyunOOkVz96lSUfPWz4U/DVI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 03:19:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAF, serialNumber=100CBD464A905A5B568F7ADCEF1F9D20BC752331
        Validity
            Not Before: Oct 24 03:19:42 2026 GMT
            Not After : Oct 26 03:19:42 2026 GMT
        Subject: CN=6adc23cf-f864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c6:fa:d8:c4:18:08:97:89:00:7d:2a:5c:a3:
                    f4:14:ff:b6:cb:c0:0b:06:05:ad:9d:50:17:0f:15:
                    71:8d:95:d3:30:b1:bb:a2:09:4d:49:d2:fe:5f:c5:
                    c8:56:bf:bd:50:71:e2:23:ff:93:29:59:cc:e2:e1:
                    9a:08:bf:58:51:4c:08:9f:9e:fe:d7:c5:75:aa:7b:
                    9d:21:19:e6:28:5e:a0:4b:a4:1c:86:5e:3f:7a:0f:
                    63:87:ad:44:83:df:3d:db:bb:5a:a0:61:f6:11:20:
                    d0:99:70:33:af:4e:6e:8e:13:69:f9:48:58:ac:4c:
                    91:8d:1c:1b:5b:56:65:ba:5d:5d:59:0e:82:a3:01:
                    fe:43:ef:0d:8d:76:e2:f3:62:ae:f8:14:cc:cd:01:
                    2a:87:14:14:7a:34:52:2f:6c:10:f9:bc:7e:ee:4e:
                    5e:ea:b0:2d:3c:b8:d8:74:a8:f4:11:2b:9c:83:5a:
                    bb:c7:a0:0a:6c:68:9e:e7:69:8b:c6:b1:9f:d1:07:
                    bd:1a:b7:79:0c:36:19:71:6d:6f:c0:fa:cc:7b:f5:
                    d3:00:82:d7:0c:2f:a5:5b:cd:74:72:03:03:7c:2a:
                    14:bb:ba:44:0d:67:f1:30:42:cd:95:0a:c3:0c:65:
                    49:08:af:8d:45:6e:54:37:2d:d3:e8:97:e9:04:13:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D4:4A:75:68:C2:EA:5A:89:BD:17:9B:72:73:74:18:34:AB:5C:1F
            X509v3 Authority Key Identifier:
                keyid:10:0C:BD:46:4A:90:5A:5B:56:8F:7A:DC:EF:1F:9D:20:BC:75:23:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EAy9RkqQWltWj3rc7x-dILx1IzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/67C6AD4CBF3D11EDA6BF88F1F1222468/EAy9RkqQWltWj3rc7x-dILx1IzE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:07:84:2b:81:ef:03:99:47:b3:11:4e:5a:d9:e6:e9:84:
         c1:9c:0a:7a:4c:cc:93:93:6f:00:4f:cd:f5:15:5b:20:d8:eb:
         2a:0f:ef:64:eb:b9:c8:5c:16:61:88:a8:16:9b:55:40:99:75:
         39:6f:54:3e:73:28:fa:1f:f1:ba:88:12:25:b0:99:33:77:c9:
         d4:ce:03:2e:53:2f:bf:49:ad:5c:a3:3c:d6:f7:3c:6b:b9:70:
         62:d4:e3:56:6a:9d:fe:9a:6e:19:bc:60:bd:14:ff:1c:ae:db:
         8d:68:cc:e5:9d:a6:b9:63:fe:41:8a:d5:ba:60:80:05:e7:ba:
         9d:65:db:cf:ef:f2:84:49:6f:97:91:63:4a:39:54:ed:6a:2e:
         aa:e2:62:f7:ac:b8:b4:fb:2b:71:2a:ec:eb:fb:c7:57:99:41:
         34:ec:07:95:d8:37:5a:4f:2c:86:5c:e8:c9:ec:dd:c5:fb:51:
         1f:56:94:56:8c:b8:40:46:61:5a:8e:40:31:5a:e6:e1:89:82:
         9d:da:27:e2:36:1f:53:29:6a:30:dd:ba:5f:12:d1:28:63:18:
         fb:6f:c6:ae:10:de:3c:f7:46:02:66:59:fb:be:b9:79:00:7b:
         93:23:11:0c:ba:cb:51:66:aa:4f:d8:03:eb:33:0a:46:54:91:
         fd:2c:42:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 05:22:41 2026 by rpki-client