Error: rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          GnAXyU8g+7sBKzDVqPo1VXAKNd5hjf/8F4VV7Ax/DXY=
Subject key identifier:   54:2B:5B:82:B6:B0:0F:16:11:0B:10:99:E2:C7:23:49:27:41:8E:4A
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       0559
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          0555
Signing time:             Thu 10 Sep 2026 03:11:35 +0000
Manifest this update:     Thu 10 Sep 2026 03:11:34 +0000
Manifest next update:     Sat 12 Sep 2026 03:11:34 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: RVvGnFcDNRUwksifrlTopNyU3KWWAzS7i6/N1nIy7qY=)
                          2: EB9A40F6876D11F18C949AC0CE1D38B0.roa (hash: bJKsXLMQt8rdTX8UmsGxka3X6/PGAj+R1BOTCf8x4As=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1369 (0x559)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Sep 10 03:11:34 2026 GMT
            Not After : Sep 12 03:11:34 2026 GMT
        Subject: CN=6aa21fe7-f233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:84:d0:4b:39:68:ea:d0:6a:54:c2:3e:98:
                    60:83:c1:77:a7:1e:a1:f0:f8:fb:b4:c3:ac:09:99:
                    7c:c3:95:b3:0b:48:9c:30:de:06:1c:05:d1:7b:d3:
                    88:04:c2:1f:ce:6e:41:26:62:c2:6f:9a:32:e7:d1:
                    92:a5:38:7e:58:22:0b:72:66:4d:57:a8:05:24:2b:
                    cb:e7:5f:38:2f:5e:a2:a7:8b:27:19:b8:a7:0f:c5:
                    34:b2:e9:54:0b:6b:7f:f9:81:13:03:bb:19:2d:b9:
                    95:57:21:f3:d2:fd:d6:e6:4f:2a:b0:79:bc:54:01:
                    a3:0a:b7:c6:f1:96:df:5f:86:ff:de:16:3e:73:b6:
                    7e:7e:31:1f:9b:b4:89:02:47:53:1c:7d:d8:a8:a7:
                    62:4d:38:db:e2:a3:65:32:34:bf:b7:e9:fa:31:6e:
                    95:08:4f:56:87:32:13:3a:a6:53:78:e2:7f:1b:75:
                    03:0f:12:b4:18:65:2d:71:89:4b:51:06:e0:43:1a:
                    2b:34:4c:59:51:48:ce:bf:9d:9d:d9:bb:ba:37:2b:
                    7c:ee:32:33:4d:87:47:3c:3f:4a:98:03:b6:29:c2:
                    8f:95:45:00:8d:6d:6a:e3:fa:3b:18:09:5b:49:b1:
                    50:ca:2b:a2:80:7d:ad:e8:63:86:af:79:e2:c8:f6:
                    a2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:2B:5B:82:B6:B0:0F:16:11:0B:10:99:E2:C7:23:49:27:41:8E:4A
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c2:64:1d:f3:c6:dc:ba:d9:ec:04:c3:81:fa:4e:00:f0:b5:
         63:26:2c:f7:47:18:07:ad:38:a0:c2:4d:b4:64:8e:64:cd:94:
         01:da:60:c4:10:a7:bc:35:0b:3c:06:78:f6:e2:4e:77:41:e0:
         07:93:ee:70:41:ea:5c:20:8a:94:81:02:92:f1:70:bd:88:9d:
         7b:d1:68:98:c0:ae:5b:cb:dd:4a:b4:00:73:3e:89:28:4e:83:
         94:d8:d3:15:3b:55:cb:99:5d:e7:4e:85:3e:78:e8:6c:1c:b7:
         b4:4f:34:b4:c1:bf:40:81:1f:24:81:f8:50:5d:8c:94:48:97:
         ad:3b:42:15:76:1c:08:2f:32:09:8a:5d:0e:53:d3:0d:5d:65:
         85:22:27:e1:42:55:b4:3c:80:e4:3f:b7:f4:62:ef:bc:41:93:
         a5:0f:02:16:42:6d:27:5b:00:8e:93:a7:78:e3:8c:88:0b:df:
         68:33:8f:34:39:d7:b9:07:2e:ee:5d:ae:9e:48:c0:fb:a6:23:
         bd:b3:6f:94:8f:57:6d:a1:cc:85:84:63:8e:0d:1a:fa:43:5c:
         19:77:f2:00:de:d7:24:ba:68:58:81:1c:2d:80:39:ae:f6:a1:
         4e:64:91:a8:31:43:83:7b:db:f6:5a:e7:27:9f:e8:09:28:62:
         fe:39:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 23:37:04 2026 by rpki-client