Error: rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
File:                     Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft (raw, json)
Hash identifier:          tnEmjYz9dd6Euq0BiDx8e3khVSJVYndVs5ZVQjB7uC8=
Subject key identifier:   14:DB:E6:CD:F1:9D:DF:1F:3A:93:90:07:EE:F9:83:77:A6:E5:0A:36
Authority key identifier: 22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4
Certificate issuer:       /CN=F365AA12AF/serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
Certificate serial:       07EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
Manifest number:          07EB
Signing time:             Sun 25 Oct 2026 02:09:49 +0000
Manifest this update:     Sun 25 Oct 2026 02:09:48 +0000
Manifest next update:     Tue 27 Oct 2026 02:09:48 +0000
Files and hashes:         1: Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl (hash: Banb7fmZVYP0stZrkaIqgH5e5TwSGaCFw49c3hUJQLY=)
                          2: B663D9A8C37B11EB8DB89456F8AEA228.roa (hash: BanY5OoiK/H0UyDozciFZEgNwlpeFk96ik1kdsHY5gM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2028 (0x7ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365AA12AF, serialNumber=22CD6F187775C23E27515B2FE38082E4BFEA8FF4
        Validity
            Not Before: Oct 25 02:09:48 2026 GMT
            Not After : Oct 27 02:09:48 2026 GMT
        Subject: CN=6add64ed-b3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:e7:6d:25:d4:ec:13:8d:15:bc:04:f8:97:
                    3c:d2:15:56:16:06:58:de:82:c7:c2:f4:d2:ef:59:
                    26:f0:97:37:8d:53:d0:84:e2:74:e0:c1:92:be:0f:
                    82:da:97:1d:1c:8e:d8:43:fc:18:a5:fe:b3:11:28:
                    b4:db:dd:59:73:29:e6:00:b1:c8:78:2b:2c:b0:06:
                    8e:46:94:61:d1:d6:e5:dd:f6:86:ad:91:c2:03:00:
                    5e:9f:f4:11:65:44:ad:7f:38:8a:06:d8:dc:ee:b2:
                    8a:f9:2e:1e:d4:94:52:c2:3c:31:cb:51:32:7b:86:
                    cb:91:b1:67:9b:15:a7:d9:2c:0d:2b:b7:d8:51:38:
                    0a:67:f1:03:57:0b:50:54:26:9a:80:51:f7:df:d2:
                    05:03:2b:91:12:0d:06:22:d2:b0:d7:58:4f:98:47:
                    a9:89:21:75:f4:12:1c:a8:ae:32:38:81:99:39:ef:
                    3f:8f:81:ea:7b:cf:41:f8:fa:d8:87:55:0d:3e:2d:
                    98:9d:3c:00:46:fc:aa:ec:e9:7d:49:0e:05:90:d7:
                    85:be:57:20:71:2f:33:09:03:27:c2:21:fc:ca:1c:
                    18:c3:a0:5a:81:56:1f:2e:b2:01:47:6d:58:d3:3e:
                    88:df:84:b6:52:e3:1d:aa:e5:9c:42:f9:a3:6f:fd:
                    14:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DB:E6:CD:F1:9D:DF:1F:3A:93:90:07:EE:F9:83:77:A6:E5:0A:36
            X509v3 Authority Key Identifier:
                keyid:22:CD:6F:18:77:75:C2:3E:27:51:5B:2F:E3:80:82:E4:BF:EA:8F:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Is1vGHd1wj4nUVsv44CC5L_qj_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365AA12/76D92404BF8511EBACD38C2DF8AEA228/Is1vGHd1wj4nUVsv44CC5L_qj_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:91:cf:2a:9b:27:43:dc:e8:67:2c:ab:3e:06:06:cd:75:a9:
         a6:0c:52:ac:56:e6:bf:df:fa:cc:92:cb:33:74:e7:cb:58:a1:
         43:0a:f2:22:cb:c6:58:e1:8d:01:2f:83:e2:83:cd:51:a4:54:
         35:47:41:04:db:3b:26:6c:27:a6:82:fc:91:21:92:78:56:eb:
         06:c0:39:86:e5:f6:f2:fc:8a:d9:da:af:61:96:98:f5:19:f4:
         07:25:ae:3f:37:6d:69:a8:bc:4d:98:40:00:83:cd:5a:f5:c4:
         e0:87:43:f2:b0:f4:71:c9:ae:c0:af:51:6b:0c:b0:37:40:61:
         15:7a:f8:70:78:85:1a:d0:ae:ae:a7:f2:7b:a4:f9:17:ac:0a:
         e3:31:75:bd:8b:78:d4:ca:70:0a:21:71:ca:ee:2e:e6:c8:84:
         5d:ec:47:69:15:02:29:8a:8a:8b:2a:ea:50:0e:f0:ac:16:16:
         5a:a1:0b:6d:b3:ff:3f:29:45:0f:4e:28:bd:cd:8d:00:c0:45:
         ad:d9:3f:2a:53:cc:58:5b:d3:20:33:df:1f:1a:e4:1a:17:09:
         82:26:74:29:03:31:dd:b8:e3:27:d8:ae:dd:87:65:c2:6f:7d:
         68:93:5e:c7:87:9c:b6:02:17:dd:8f:6f:36:f1:78:f2:52:74:
         d9:9e:1d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:51:55 2026 by rpki-client