Error: rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
File:                     R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft (raw, json)
Hash identifier:          LkgXNS9vgpAQpbxaPam4IZD6jthPMRMRegXyiB6oL5U=
Subject key identifier:   61:E9:8F:3A:60:70:3C:0D:47:75:ED:76:29:01:AB:8D:34:15:82:8F
Authority key identifier: 47:4B:B4:B3:D8:72:65:BE:E0:5B:2A:C8:39:E2:16:38:90:A4:48:2E
Certificate issuer:       /CN=F36592B4AR/serialNumber=474BB4B3D87265BEE05B2AC839E2163890A4482E
Certificate serial:       04C3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
Manifest number:          04C2
Signing time:             Thu 17 Sep 2026 03:31:03 +0000
Manifest this update:     Thu 17 Sep 2026 03:31:02 +0000
Manifest next update:     Sat 19 Sep 2026 03:31:02 +0000
Files and hashes:         1: R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl (hash: Cg8s+ImR74P4W1pxmVF/zWkDVdwAEkowPBewr3kd9DE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
                          rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1219 (0x4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36592B4AR, serialNumber=474BB4B3D87265BEE05B2AC839E2163890A4482E
        Validity
            Not Before: Sep 17 03:31:02 2026 GMT
            Not After : Sep 19 03:31:02 2026 GMT
        Subject: CN=6aab5ef7-0c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:0a:8b:90:e0:5b:d0:48:7e:80:e2:0a:99:29:
                    33:2d:d8:7e:4d:98:68:d8:cf:b1:e4:67:d1:32:f2:
                    db:19:72:64:6a:c7:e6:38:10:9d:a4:71:2f:42:c0:
                    50:8c:56:d9:ae:e9:ca:6a:1b:55:bb:dd:af:62:7f:
                    ce:9d:0e:42:7d:d0:45:14:f9:57:dc:c9:41:87:69:
                    9d:27:c4:95:9d:68:a7:19:ad:bd:d6:59:6a:15:c3:
                    9c:98:e4:64:f5:e4:80:ed:06:a2:df:90:3e:27:3c:
                    96:1e:f0:2b:ed:a6:a0:a1:df:0a:74:43:15:85:22:
                    0b:2b:04:fd:f6:39:97:70:83:0c:5c:00:22:0c:54:
                    13:bd:ff:c7:54:7d:76:1a:74:4d:33:97:9e:68:7e:
                    b2:7a:dd:a0:d1:30:94:86:cf:9d:a0:2f:96:fb:f3:
                    63:a1:b8:fb:26:6b:6e:ad:9d:c4:d0:fe:c4:9c:9e:
                    79:7d:41:fd:12:52:c6:7f:e6:06:72:54:ad:2a:ad:
                    0f:22:d3:8e:01:0b:f6:19:e6:7d:ad:ec:7a:b5:4e:
                    b3:08:3b:3c:e3:9a:d5:2c:d5:17:2d:ba:66:10:b3:
                    7c:ac:99:f2:3d:eb:e1:ff:88:18:7e:40:9c:07:7c:
                    55:09:fc:7d:57:2f:9e:8b:98:98:ed:8f:0a:5c:d5:
                    00:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E9:8F:3A:60:70:3C:0D:47:75:ED:76:29:01:AB:8D:34:15:82:8F
            X509v3 Authority Key Identifier:
                keyid:47:4B:B4:B3:D8:72:65:BE:E0:5B:2A:C8:39:E2:16:38:90:A4:48:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/R0u0s9hyZb7gWyrIOeIWOJCkSC4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/A98472240C2B11EE9916906B4AD9E6FC/R0u0s9hyZb7gWyrIOeIWOJCkSC4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:2d:18:e7:7d:76:5c:ee:56:95:cf:8d:9a:13:a3:68:9d:
         7e:70:85:a7:a3:fa:23:d3:63:9b:10:5d:35:d2:0e:1f:1b:7b:
         bc:14:dd:f2:af:0e:3a:93:3b:73:28:26:5f:53:c6:f6:ae:27:
         d1:cb:64:77:82:4e:34:46:27:99:24:09:5a:24:2d:c8:ff:05:
         b5:82:4f:85:6a:8e:d5:e3:d7:0a:12:0c:56:d0:3e:d7:f9:a4:
         0c:1b:7b:d4:1d:5c:56:01:f3:a1:0d:17:b0:e3:4f:b9:87:83:
         2c:93:e4:82:2c:5a:fb:b6:fc:12:b9:1b:9f:e8:10:71:3f:f2:
         ec:b0:f8:4b:9e:db:4e:44:63:82:83:9f:c3:b5:c4:48:a9:14:
         97:a3:84:6b:1b:b1:d9:08:34:a3:fa:be:af:64:e4:f7:0c:20:
         b9:8f:70:26:dd:37:f3:ba:8e:f1:60:61:cf:46:46:10:f8:4c:
         ab:c5:3e:7e:1b:49:ef:28:b4:8c:0a:18:a3:54:95:56:36:a6:
         46:b6:56:06:9f:43:80:e0:ed:83:2f:41:66:2a:f2:ce:30:c6:
         54:f9:40:d5:9b:20:f8:91:61:ce:dc:f9:66:10:81:9f:f0:e7:
         66:6d:3e:99:9d:14:08:30:8e:17:6e:46:5c:3e:8e:e0:f1:ed:
         54:54:b0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:13:23 2026 by rpki-client