Error: rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
File:                     hv7S7RnCBnpIIiG2RdYMRaTVap0.mft (raw, json)
Hash identifier:          T8aAVjyvyuDAZAIjBvp8YKHRFj3VbyhuS5Bwq8Jm3wA=
Subject key identifier:   AB:BD:23:71:D7:24:BD:DD:87:14:88:D5:B8:80:5E:3A:18:34:6B:05
Authority key identifier: 86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D
Certificate issuer:       /CN=F36472E5AF/serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
Certificate serial:       1051
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
Manifest number:          103F
Signing time:             Tue 27 Oct 2026 00:55:59 +0000
Manifest this update:     Tue 27 Oct 2026 00:55:58 +0000
Manifest next update:     Thu 29 Oct 2026 00:55:58 +0000
Files and hashes:         1: hv7S7RnCBnpIIiG2RdYMRaTVap0.crl (hash: wswYN32wxmGZPjQlcnfzAe/HWTe5jOMYVfwwdFi2T5E=)
                          2: 655F290413AE11F09DCA6CAC762E951A.roa (hash: MtTA05if95p/mNtRLM4nlSrYgGLQ7Pky8WnDGWJT8Mc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:55:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4177 (0x1051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36472E5AF, serialNumber=86FED2ED19C2067A482221B645D60C45A4D56A9D
        Validity
            Not Before: Oct 27 00:55:58 2026 GMT
            Not After : Oct 29 00:55:58 2026 GMT
        Subject: CN=6adff69f-98f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:85:a9:87:e6:78:98:7f:0a:e8:4f:dc:44:
                    e8:c5:dc:fb:6e:3d:33:fd:3f:e0:b9:ec:8c:e0:98:
                    33:4c:37:7a:0b:46:d1:55:b5:f7:87:e5:ef:64:ca:
                    38:c8:ed:03:6e:d6:39:e1:c5:cd:4f:be:b7:8c:34:
                    e9:8c:e9:3a:f2:96:e8:ed:9b:3c:78:02:43:d6:7a:
                    4b:0e:86:8c:ef:0f:8c:db:e4:85:9f:c0:86:1c:54:
                    94:4b:5c:56:8b:cd:91:65:c3:d5:2d:d8:48:0e:d5:
                    dd:6e:fb:2e:4f:84:4c:c2:9d:ad:44:a1:52:b3:db:
                    97:10:6a:b3:51:fb:3c:4d:00:d2:e2:4e:a2:d1:2c:
                    83:e7:12:36:cb:05:21:d5:ca:70:b2:a6:93:dd:1b:
                    b9:f3:97:36:69:97:73:8e:ee:e2:dd:c8:c5:02:37:
                    97:af:8c:9a:4d:90:20:d0:db:63:41:2f:6d:5f:71:
                    9a:17:52:3b:21:01:37:5f:52:5e:2f:93:01:2f:58:
                    5b:e1:74:cd:9f:a3:b6:53:f4:1d:ba:72:be:f9:55:
                    8a:75:e8:cc:b8:f9:1b:0a:a9:f6:59:5f:5a:0a:ba:
                    a8:ed:b0:53:86:43:08:11:9e:af:7d:4d:f6:0e:73:
                    65:67:c0:ef:ae:f6:f1:a4:53:4f:bb:eb:3b:4d:37:
                    9b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BD:23:71:D7:24:BD:DD:87:14:88:D5:B8:80:5E:3A:18:34:6B:05
            X509v3 Authority Key Identifier:
                keyid:86:FE:D2:ED:19:C2:06:7A:48:22:21:B6:45:D6:0C:45:A4:D5:6A:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv7S7RnCBnpIIiG2RdYMRaTVap0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36472E5/8DB6547A56D711E585356D60F8AEA228/hv7S7RnCBnpIIiG2RdYMRaTVap0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:2a:67:78:92:3f:a7:28:58:74:68:83:7a:6f:b8:25:ea:40:
         de:1b:dc:58:bb:99:24:4a:f5:29:45:6f:8d:95:44:06:32:39:
         93:2f:32:50:e4:85:5c:c4:60:8b:82:a9:26:d8:9c:84:a8:09:
         9b:47:34:44:30:49:1a:46:ea:3e:47:99:ec:26:e2:5c:18:d2:
         47:4e:33:ef:f3:30:f9:bb:48:70:4c:8b:65:3c:90:64:0d:f9:
         0e:42:54:aa:38:55:1f:e8:16:0d:a4:ba:35:44:c7:a0:5c:21:
         60:c0:a7:20:3e:22:02:c0:d2:7f:a2:e1:59:d3:d2:63:de:99:
         55:d6:bc:cd:10:07:ec:d3:ed:4e:fd:b6:cf:ba:db:bf:a6:ef:
         9f:45:33:d1:14:70:4e:35:62:a9:70:05:df:e0:bf:09:52:f6:
         75:f7:fb:0a:d6:38:b4:5b:ea:60:3b:10:8a:ae:96:95:d3:d9:
         fc:40:ce:dd:bd:20:f2:1e:b9:b5:51:1a:9b:35:0d:3a:ef:76:
         a6:46:e4:8c:6c:67:2c:15:06:eb:3a:9d:8c:3d:81:5a:02:a5:
         48:98:e4:b1:68:17:98:2f:c3:64:bb:d4:28:56:2d:ae:81:ff:
         cd:20:1f:28:d7:84:d0:55:ff:26:13:a2:66:b9:0a:e9:8a:26:
         60:e7:5a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:36:41 2026 by rpki-client