Error: rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
File:                     GAGTeoaGkejdxAoaQ6Y47cyb134.mft (raw, json)
Hash identifier:          ux8b1O8OG7yW31qBDBblx9lnKcMw3o2q/ZyTA/VLiAY=
Subject key identifier:   A5:6B:DC:5E:B6:89:B2:81:9A:12:EA:08:A5:87:A5:64:F2:56:F0:B0
Authority key identifier: 18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
Certificate issuer:       /CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Certificate serial:       04E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
Manifest number:          04E2
Signing time:             Tue 27 Oct 2026 03:31:54 +0000
Manifest this update:     Tue 27 Oct 2026 03:31:53 +0000
Manifest next update:     Thu 29 Oct 2026 03:31:53 +0000
Files and hashes:         1: GAGTeoaGkejdxAoaQ6Y47cyb134.crl (hash: w2z5GgnM8IHgQ7k5WrkUF2ua8NWVYggDil7+nKAXDpE=)
                          2: D9BB7DAA119111EE9EC8824F4AD9E6FC.roa (hash: z8n6q+oUQGHtnZrxmlHyDPpdETGxOMXPu63Xt71Wevg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 03:31:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251 (0x4e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645A60AF, serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
        Validity
            Not Before: Oct 27 03:31:53 2026 GMT
            Not After : Oct 29 03:31:53 2026 GMT
        Subject: CN=6ae01b2a-e5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:07:53:6d:4e:0c:52:1b:14:70:a7:4e:27:
                    87:ad:5d:17:dc:e0:c8:e0:88:d4:f4:e8:90:98:fc:
                    ca:ff:92:70:ee:87:6b:73:24:fa:6c:84:0a:af:78:
                    29:a6:0b:80:6e:c8:ae:4e:e9:4b:6f:80:f0:ea:a9:
                    6b:35:86:a9:31:90:c3:a7:60:fe:af:fd:98:02:44:
                    e1:fe:0e:46:03:ab:f0:4a:1b:90:0f:9f:dc:36:45:
                    a2:ca:31:de:a6:63:0d:43:d3:27:3f:3f:48:11:cc:
                    be:e0:cf:e8:76:94:10:08:a9:85:4b:a4:10:92:6d:
                    d8:d2:48:af:3f:9c:92:95:85:c1:d3:9d:85:a7:df:
                    ea:b9:fa:77:c9:72:ad:38:a7:48:87:8e:40:6c:97:
                    26:e6:3c:b3:ac:03:e0:ca:78:42:96:09:b6:e6:36:
                    38:18:66:c8:ec:03:bf:81:36:5b:c7:06:8c:67:82:
                    fc:5d:57:cb:12:fc:dc:b1:01:26:b3:84:b2:ab:b0:
                    fb:49:45:da:d4:5d:bf:04:05:fd:5c:3e:11:9e:6b:
                    d7:c2:9b:86:73:29:e0:cf:8e:40:f3:1b:7c:a9:86:
                    05:37:d2:53:c3:b2:2e:75:b9:9a:01:32:55:3f:fc:
                    52:99:84:23:58:d4:49:82:3b:34:f8:16:d3:e3:b9:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:6B:DC:5E:B6:89:B2:81:9A:12:EA:08:A5:87:A5:64:F2:56:F0:B0
            X509v3 Authority Key Identifier:
                keyid:18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:68:a6:37:ce:81:79:65:9c:51:d0:7c:2b:5a:1c:52:be:4f:
         45:63:95:73:87:06:75:ba:a6:fd:9d:21:c4:cc:1b:a7:a5:b0:
         96:f8:79:e7:8a:92:25:9d:7c:ec:23:89:57:66:20:c8:98:1f:
         9e:ee:16:34:90:d8:00:36:f1:8d:79:cf:4a:c4:11:4b:0c:23:
         54:52:bb:f7:82:33:86:3b:4f:1f:4d:c8:38:9d:6d:cc:c1:45:
         45:c6:13:b9:47:3c:d1:9f:af:86:f5:26:a0:1c:98:20:81:da:
         bd:1c:75:a8:56:60:bf:21:37:cd:eb:37:ec:9e:21:f1:7c:48:
         6c:3b:71:00:c2:5f:5b:72:c1:87:d4:15:0a:77:f2:a8:1c:b8:
         8c:96:2f:7e:f5:92:43:2f:ab:4a:ca:e7:31:1b:ff:83:c9:5b:
         73:52:56:05:39:60:b9:3b:0d:9c:56:d8:88:4a:6d:85:2a:d1:
         83:12:f1:91:da:89:79:d7:a9:4d:10:5e:22:67:51:1e:7b:c9:
         e4:d9:04:a8:bf:15:88:81:75:21:c2:89:85:5f:20:af:66:76:
         9b:1d:01:4c:b5:9e:9b:ed:e8:eb:34:37:76:0c:89:7e:93:03:
         78:32:fc:06:69:7e:66:e3:e3:d0:44:2d:2c:0c:fc:56:3a:13:
         4a:08:ea:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:18:03 2026 by rpki-client