Error: rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
File:                     B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft (raw, json)
Hash identifier:          g/nGLcr7Srr5keUqzI05ZeQdyyv5+BFtG9O3ZnxHsJU=
Subject key identifier:   D6:3A:85:18:F0:7D:DB:1D:76:63:CE:8C:6F:B8:D4:EE:85:AA:20:E1
Authority key identifier: 07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64
Certificate issuer:       /CN=F3659389AF/serialNumber=0761257DC989C67CBFE16374834CE8592168C964
Certificate serial:       024A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
Manifest number:          0249
Signing time:             Sat 24 Oct 2026 04:51:37 +0000
Manifest this update:     Sat 24 Oct 2026 04:51:36 +0000
Manifest next update:     Mon 26 Oct 2026 04:51:36 +0000
Files and hashes:         1: B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl (hash: 5oPuKn94Ox4g6tZp0NVDHuYOt8CLwoZg+NGOxOiehbw=)
                          2: 10EAF1B40B4311F08B33AB71762E951A.roa (hash: 8dKtBcctBuIDLiDUfnBFwlKL6LP+a2nsnLbiPCcB/UI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 04:51:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 586 (0x24a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659389AF, serialNumber=0761257DC989C67CBFE16374834CE8592168C964
        Validity
            Not Before: Oct 24 04:51:36 2026 GMT
            Not After : Oct 26 04:51:36 2026 GMT
        Subject: CN=6adc3959-74c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:76:22:b9:a3:16:dd:09:0f:ce:aa:6c:f2:b2:
                    2d:2a:39:2e:da:7b:11:a5:5a:0e:06:1a:f5:3f:32:
                    43:f5:a0:d1:96:6f:01:cb:ca:b6:48:8f:25:de:d6:
                    5a:38:3a:9a:d2:29:63:60:23:80:2c:bf:36:25:8c:
                    b8:92:ac:bb:a4:64:30:f5:c5:a7:f1:42:9d:84:0c:
                    6b:cc:8b:28:72:2c:a4:3f:82:e3:4e:6b:96:29:3c:
                    b0:01:ee:ab:55:1e:76:43:df:27:21:a9:9e:53:96:
                    89:f4:2b:3d:f3:9e:99:f5:90:94:2e:f5:d2:1d:8d:
                    1b:e7:55:e7:d1:8a:d9:69:f0:87:07:27:e9:35:62:
                    9b:ce:3e:a2:a5:47:3f:c0:ea:e1:a5:e2:3e:08:b9:
                    53:f3:fe:37:a5:d7:af:57:c8:51:69:29:ee:e6:c6:
                    6e:c5:f9:30:e8:68:2b:4d:5e:f1:83:72:dc:19:37:
                    99:7c:07:c7:90:24:8d:c6:d6:b8:dc:aa:f7:33:de:
                    7f:dd:5f:64:cb:7a:2f:79:42:2b:d5:b3:bf:81:62:
                    64:1c:97:c2:0b:75:3a:c1:0b:07:c5:bd:07:f2:4b:
                    f6:55:54:c2:60:e5:fd:87:65:20:df:41:78:87:e7:
                    f5:be:38:b4:4a:8f:0e:3a:9c:e7:d7:94:20:0d:88:
                    31:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3A:85:18:F0:7D:DB:1D:76:63:CE:8C:6F:B8:D4:EE:85:AA:20:E1
            X509v3 Authority Key Identifier:
                keyid:07:61:25:7D:C9:89:C6:7C:BF:E1:63:74:83:4C:E8:59:21:68:C9:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B2ElfcmJxny_4WN0g0zoWSFoyWQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659389/86E3F6920B4111F092F87169762E951A/B2ElfcmJxny_4WN0g0zoWSFoyWQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8c:57:a7:fb:e7:e5:f4:22:68:47:1d:23:6c:2e:0b:b5:a7:
         2a:bd:f0:09:23:23:65:5f:e8:98:15:9d:00:3f:a6:61:5a:e1:
         04:83:31:3a:0b:d1:4a:37:35:83:0e:ee:84:03:3f:5c:29:79:
         20:db:e5:26:2c:82:f6:f4:1f:46:bc:f3:9d:ab:ba:80:76:4d:
         4e:da:ac:2b:d4:3d:f5:36:a4:74:bb:ac:9b:6c:45:c8:cc:c4:
         e1:ee:64:b3:20:47:a1:41:cc:6f:42:3f:e0:41:0c:1f:69:8e:
         e5:05:b1:c4:1f:fa:d8:02:05:bd:54:86:f2:40:83:be:d4:8b:
         5b:0d:2b:34:91:12:24:1f:ca:80:b2:2d:90:b2:25:8b:bf:08:
         cb:c6:f1:d4:2b:a1:6e:59:46:58:cb:96:00:ec:62:6a:86:73:
         94:ab:9e:ea:41:3f:2a:bf:0e:6e:2d:48:b1:ce:f4:21:7a:f4:
         89:8f:a8:61:ae:28:ae:05:c5:0f:69:06:39:2a:cb:ee:41:12:
         7f:ad:65:68:0a:aa:9e:fe:a5:9b:b2:53:bd:aa:a7:0a:36:55:
         e1:3d:c4:f8:ea:fe:85:f3:92:66:31:fc:41:d7:7c:41:af:e3:
         b2:13:84:0a:0f:6e:88:80:08:b1:65:81:df:77:48:6d:91:ea:
         a2:be:d2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:47 2026 by rpki-client