Error: rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
File:                     j1A71XPOETUXzWtM-jdKYvFeEsE.mft (raw, json)
Hash identifier:          30bc8ifPtI5uRSdlhhGkaq5HD0IB3CqBaLvzwxkeXWw=
Subject key identifier:   0D:38:97:FC:BE:89:D9:D6:DF:C2:A3:EF:65:BB:98:BF:68:31:18:60
Authority key identifier: 8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1
Certificate issuer:       /CN=F364AE44AF/serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
Certificate serial:       0800
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
Manifest number:          07F8
Signing time:             Tue 06 Oct 2026 02:07:25 +0000
Manifest this update:     Tue 06 Oct 2026 02:07:25 +0000
Manifest next update:     Thu 08 Oct 2026 02:07:25 +0000
Files and hashes:         1: j1A71XPOETUXzWtM-jdKYvFeEsE.crl (hash: Anroym6sNsTYbeFp+KpIWqP89OTqEN6A0kKZ4/nnWrg=)
                          2: E98217BCA6B711F1BCB809F1CE1D38B0.roa (hash: H05c3iJckwPKplJSHMZZ/f0htlgOBZ8SGY638Y0/+qM=)
                          3: A5F3DC22803011F18518BADFCE1D38B0.roa (hash: DF+u9s44Ut3/J+viKm+ou2FWZp3u6LhKP6V1fR+xehU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 02:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048 (0x800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE44AF, serialNumber=8F503BD573CE113517CD6B4CFA374A62F15E12C1
        Validity
            Not Before: Oct  6 02:07:25 2026 GMT
            Not After : Oct  8 02:07:25 2026 GMT
        Subject: CN=6ac457dd-afea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8d:e5:2e:f8:67:b3:58:73:a0:ca:8b:19:f6:
                    29:a5:d3:ae:0b:5e:c1:5a:7b:a5:bc:a4:b5:16:8e:
                    9f:31:c0:65:40:c3:a4:e3:e3:b4:48:9b:84:ea:88:
                    10:bb:94:c3:72:35:e9:fb:81:11:39:3a:c7:8b:4e:
                    0d:26:3e:77:7f:44:52:ae:7b:ec:0c:1b:1f:29:3b:
                    7e:3e:f4:92:20:e1:ab:de:eb:94:16:5a:a5:37:c0:
                    cb:57:6c:e2:70:7b:c4:06:5c:e7:9f:de:ab:9b:a6:
                    9d:53:42:e4:80:79:98:68:af:07:95:fe:4e:6a:82:
                    c8:b5:81:01:29:cd:93:9e:0b:64:cb:4e:57:5b:b1:
                    3e:23:20:39:ec:42:23:94:a3:37:84:b0:7a:f3:6c:
                    6d:91:c5:b0:af:23:4b:38:3b:4c:4a:3d:92:35:3b:
                    5b:d9:82:4d:19:07:b9:e2:b8:a8:ae:e0:22:4a:5b:
                    40:19:6b:5b:46:21:52:74:4f:88:49:67:ad:f9:62:
                    42:6a:07:77:aa:77:b1:a7:90:55:1b:29:90:cd:71:
                    7a:5b:c1:fa:eb:c3:58:25:23:4d:e6:8c:de:34:27:
                    07:5d:44:15:98:e3:60:37:bc:07:79:83:b3:b1:b5:
                    c4:5b:69:3c:fd:82:bb:3e:9f:00:cb:2a:92:9d:5a:
                    2b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:38:97:FC:BE:89:D9:D6:DF:C2:A3:EF:65:BB:98:BF:68:31:18:60
            X509v3 Authority Key Identifier:
                keyid:8F:50:3B:D5:73:CE:11:35:17:CD:6B:4C:FA:37:4A:62:F1:5E:12:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j1A71XPOETUXzWtM-jdKYvFeEsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE44/22270EFEAF4411EB8C257686F8AEA228/j1A71XPOETUXzWtM-jdKYvFeEsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b2:62:4f:15:aa:35:93:f7:45:05:4a:00:59:74:d8:c3:7e:
         e0:91:52:d1:61:d9:f9:71:29:5c:c7:a9:57:ce:4b:70:b7:5f:
         6e:23:10:64:02:10:38:6e:b8:8d:ea:15:31:b3:4e:ef:a2:90:
         34:c3:2b:05:63:5a:b0:2e:04:61:f8:01:79:13:76:be:07:3e:
         99:17:c5:08:4b:47:fe:95:41:65:c1:b9:d5:d8:64:a4:85:29:
         92:f5:f9:d6:0c:03:3f:fa:01:13:68:dc:f9:07:0e:38:5a:29:
         33:11:6f:84:87:c6:ff:b6:82:16:d3:a1:d7:ad:33:c2:4c:60:
         51:0d:cb:50:9e:ef:ba:c0:42:85:36:49:fc:0c:0c:51:0b:cc:
         ca:7b:e3:61:8d:25:52:6e:dc:41:ba:4e:e0:a1:bd:41:e7:30:
         f4:67:e7:a8:25:66:18:ce:75:93:9d:bb:a0:59:19:19:61:1c:
         99:fa:e3:cb:7f:a6:69:83:dd:ae:0b:3a:da:27:e9:f8:01:cd:
         98:1b:3c:81:35:03:ad:ce:c9:ec:37:ec:2d:f9:94:f1:b4:e3:
         0b:1d:ad:4f:a4:fd:60:c3:2e:9b:f9:ef:48:63:7d:16:7c:39:
         3d:a1:e2:3b:49:c5:f4:07:9b:6e:fd:b6:fa:b3:ed:80:c6:e2:
         bb:ef:f2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:22:21 2026 by rpki-client