Error: rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          VSg8K4WXrA0EvwJRdtAkGLXMaoU5BfzFDyFKPeeSfHw=
Subject key identifier:   1A:F9:CD:BD:4C:2A:75:DF:C0:9F:87:1D:29:AA:8B:14:B9:CD:15:35
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       0588
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          0584
Signing time:             Tue 27 Oct 2026 03:10:40 +0000
Manifest this update:     Tue 27 Oct 2026 03:10:40 +0000
Manifest next update:     Thu 29 Oct 2026 03:10:40 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: OUq7xUFJ/YPfdJi6BWfu/fUqVdrrge0cAeHsz9JR5Ho=)
                          2: EB9A40F6876D11F18C949AC0CE1D38B0.roa (hash: bJKsXLMQt8rdTX8UmsGxka3X6/PGAj+R1BOTCf8x4As=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1416 (0x588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Oct 27 03:10:40 2026 GMT
            Not After : Oct 29 03:10:40 2026 GMT
        Subject: CN=6ae01630-e1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:b0:4d:05:c1:f7:1f:1d:82:6b:b5:78:55:
                    a8:c5:3d:a1:f8:50:ba:7f:7c:61:c2:77:93:69:c6:
                    ac:0a:d8:58:03:7c:3b:b9:f7:af:4b:3a:ac:33:3d:
                    9a:05:1b:b3:9a:27:e1:9e:e8:a4:4f:86:ab:86:d6:
                    d6:f7:9d:9c:87:0c:db:df:80:5d:fa:d3:5b:45:84:
                    1a:dd:27:6d:26:ff:ce:33:41:74:48:1c:b6:b6:8a:
                    4c:c9:b3:e6:4a:d2:39:db:f8:fa:0a:96:97:00:88:
                    21:07:df:a0:09:70:1c:04:97:97:a8:de:81:c4:f5:
                    47:e5:5f:59:6e:96:b6:a0:05:d8:15:c9:f9:b6:df:
                    a2:8f:27:d3:81:ff:8e:cc:e7:7a:db:c5:44:4b:cc:
                    05:8e:95:86:a0:c4:5b:a6:46:70:c7:ec:16:55:4a:
                    45:18:4e:36:2d:e0:95:87:0a:0d:76:3c:e4:92:3e:
                    99:1e:80:f3:6a:82:14:46:e4:a0:80:5f:59:e7:1e:
                    92:84:c2:cb:40:a2:14:9a:85:d9:ba:fb:11:93:99:
                    93:f0:66:bc:18:d0:9d:49:cb:fa:e9:80:63:ee:f1:
                    73:31:f6:e6:7b:e9:46:d4:79:44:34:37:d2:cd:00:
                    b1:14:82:55:88:64:2a:39:e8:ac:bc:cd:ec:a9:81:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F9:CD:BD:4C:2A:75:DF:C0:9F:87:1D:29:AA:8B:14:B9:CD:15:35
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a5:0d:e1:3f:55:5b:ad:2a:ea:b5:ee:92:1a:49:99:20:63:
         05:60:ca:2d:18:31:cf:db:b0:9f:98:aa:1c:eb:c0:12:d7:2a:
         ee:04:e7:26:5e:a1:fd:b9:f6:4d:37:23:e2:5e:a5:0d:9a:be:
         c2:47:a2:a6:3e:a0:7e:7e:a7:e7:00:1d:0d:99:23:6f:77:48:
         b4:df:7e:98:ba:86:11:09:36:b3:dc:85:78:7f:c0:82:85:42:
         b2:52:d2:89:cf:74:75:f5:f3:f9:15:33:17:b0:84:9a:cc:56:
         e9:84:4b:79:fd:50:63:44:1e:32:3d:69:de:6a:0c:37:90:a8:
         14:3d:33:ea:fe:ce:29:50:37:5e:38:4a:84:8f:14:ec:d4:50:
         bf:39:2e:ac:f0:59:48:ce:46:91:2e:bf:2e:42:c3:02:c1:0c:
         1b:9f:6b:1f:d8:21:8f:02:e8:a8:da:6f:2a:6f:94:1b:f4:ff:
         5d:ed:84:4b:3d:8d:1b:30:76:38:70:e4:1e:00:d8:01:a8:fd:
         af:c8:a0:90:ee:52:aa:9f:86:1c:4c:a5:59:7e:a3:93:b6:7f:
         5e:ce:14:87:11:a0:8d:f5:1f:64:ab:f7:b2:62:83:11:c0:dc:
         f0:91:1a:7c:95:29:a4:9d:a4:08:d3:5f:38:86:06:67:1b:e9:
         30:4f:4d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:24 2026 by rpki-client