Error: rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.mft (raw, json)
Hash identifier:          Txp8+lvRZmOW3v5vupRlqRQQ7BIndR/Fr+3li0H/Y2E=
Subject key identifier:   41:52:62:5D:91:43:2F:31:2A:2A:7D:AB:4E:85:34:EA:AE:6D:A2:AB
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       0673
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
Manifest number:          0667
Signing time:             Sun 25 Oct 2026 02:48:47 +0000
Manifest this update:     Sun 25 Oct 2026 02:48:46 +0000
Manifest next update:     Tue 27 Oct 2026 02:48:46 +0000
Files and hashes:         1: LQAVTmAKZArDKjKF2c6fxQqUGrM.crl (hash: 9/mt9L1tR/05Cfats3bqMYvnUwJEg+c9WkgpAaidER8=)
                          2: EE9A15528A8211F1A37EA512CF1D38B0.roa (hash: AzLnBRzQnactp0cMa5zQwNt+VVg/VEWOqjXlWWNiXNg=)
                          3: 2B5FFC7E8A8111F181915D05CF1D38B0.roa (hash: 3X5q3nZcQZSHPjyCY6TkppWSebt/r5l7c9ae4Wi3LQQ=)
                          4: 128AAC508A8411F195DD3F18CF1D38B0.roa (hash: I5ngoMtUqqiA/2cRiHgoX7EXQ1nDwLrxP5YhvCneuj4=)
                          5: DC444B408A8011F19C054705CF1D38B0.roa (hash: k4FYTjH5NXMnSmrVz2ArtKhEE11Kq9H0SJzWwEr/K0c=)
                          6: 612001188A8311F1BFD89114CF1D38B0.roa (hash: y9qGRkRTdcSHb8nsU7Rvu5HPtGH7ET36tjw+cdG84s8=)
                          7: C59E93D48A8311F18832D816CF1D38B0.roa (hash: s26EymhvYdDZcz1MZYx8BW0dIXLK2t/H1SxA774dVNo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 02:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651 (0x673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Oct 25 02:48:46 2026 GMT
            Not After : Oct 27 02:48:46 2026 GMT
        Subject: CN=6add6e0f-55f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:06:e9:ab:f7:69:95:aa:99:f2:e3:01:fe:
                    e3:e9:4c:f1:5e:2a:0e:f1:7e:c0:ab:38:52:d4:9b:
                    1b:25:c1:f2:cc:0d:42:b0:e1:bf:2a:98:5f:12:5f:
                    6a:31:7b:55:02:10:2a:a3:08:35:a3:8d:5e:99:81:
                    cc:6b:62:47:e8:67:e2:6d:6e:12:68:9f:aa:1a:30:
                    8b:f2:04:ce:cd:1e:4e:55:32:d5:6d:c0:5a:f6:a4:
                    0a:7b:71:4d:df:23:d0:fe:5b:13:e6:ca:f1:13:d7:
                    be:6b:a1:b2:78:a0:fe:90:56:3c:3c:eb:06:07:b2:
                    94:23:63:95:8f:b1:be:ea:a8:b5:01:b3:ab:d3:64:
                    13:75:ec:18:13:81:83:01:5b:9f:85:7e:36:86:a6:
                    97:0d:da:cc:3b:6e:a7:d6:ea:be:8f:2e:df:ce:5b:
                    b8:34:0e:ea:22:09:28:58:81:7b:fc:89:42:74:ab:
                    da:7b:2f:3d:39:32:75:d9:87:13:24:ef:1e:f8:70:
                    be:e3:5b:db:32:b6:87:29:a4:71:b6:a2:be:54:20:
                    d2:8d:86:bf:bb:ee:41:22:f9:d5:81:e9:c4:a6:f3:
                    03:ab:8f:95:a5:62:3d:82:dd:52:10:4a:81:9f:72:
                    b8:dc:1d:5f:38:2e:8e:a8:39:91:81:04:e4:bf:f0:
                    4e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:52:62:5D:91:43:2F:31:2A:2A:7D:AB:4E:85:34:EA:AE:6D:A2:AB
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:88:18:60:a2:fb:44:94:c2:c0:c5:79:78:82:a9:98:03:49:
         52:d1:ee:d0:9b:e1:09:d3:36:7e:4a:82:6e:d6:4b:97:e9:fd:
         f8:34:fc:51:50:75:cc:9d:16:14:62:d9:64:90:4d:b2:75:f6:
         ac:85:52:24:4c:ee:9a:bc:7d:5e:fd:08:59:3a:a1:e2:20:38:
         d7:d8:d7:da:6f:da:76:4f:ce:cb:78:51:9f:99:65:46:82:e8:
         53:ad:eb:16:28:a7:e8:a8:10:19:c9:34:12:1e:4c:16:2f:6c:
         e4:c5:6d:f3:73:89:0b:16:de:68:4a:6a:d4:3e:ba:c9:39:c8:
         3c:ce:be:5e:87:bd:56:6e:2a:6c:01:38:d7:f2:3b:3a:c9:4e:
         0d:0c:cb:dd:d3:24:7a:67:9c:8d:89:11:8d:7d:02:17:a1:65:
         56:28:62:cd:b7:9c:60:35:fb:f6:8a:e5:c2:7c:68:93:d0:e9:
         c9:b1:ca:18:1c:dc:44:5b:26:61:0c:2c:4d:0f:57:bb:68:de:
         22:1d:70:72:08:3f:44:86:38:81:a3:83:cd:46:e8:c2:96:10:
         93:46:7c:fd:ba:20:fd:c5:2b:94:35:49:14:6f:d4:b3:1a:6e:
         97:14:4a:da:7a:9c:e7:11:0c:bf:2c:6b:d0:00:c9:29:fe:bb:
         ae:75:99:64
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBnMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJDNDRBRjExMC8GA1UEBRMoMkQwMDE1NEU2MDBBNjQwQUMzMkEzMjg1RDlDRTlG
QzUwQTk0MUFCMzAeFw0yNjEwMjUwMjQ4NDZaFw0yNjEwMjcwMjQ4NDZaMBgxFjAU
BgNVBAMTDTZhZGQ2ZTBmLTU1ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC52Abpq/dplaqZ8uMB/uPpTPFeKg7xfsCrOFLUmxslwfLMDUKw4b8qmF8S
X2oxe1UCECqjCDWjjV6ZgcxrYkfoZ+JtbhJon6oaMIvyBM7NHk5VMtVtwFr2pAp7
cU3fI9D+WxPmyvET175robJ4oP6QVjw86wYHspQjY5WPsb7qqLUBs6vTZBN17BgT
gYMBW5+FfjaGppcN2sw7bqfW6r6PLt/OW7g0DuoiCShYgXv8iUJ0q9p7Lz05MnXZ
hxMk7x74cL7jW9sytocppHG2or5UINKNhr+77kEi+dWB6cSm8wOrj5WlYj2C3VIQ
SoGfcrjcHV84Lo6oOZGBBOS/8E4VAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQVJi
XZFDLzEqKn2rToU06q5toqswHwYDVR0jBBgwFoAULQAVTmAKZArDKjKF2c6fxQqU
GrMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCQzQ0Lzg5MkQ0OUM2RjYxODExRUNCRTFCMzhBRkYxMjIyNDY4L0xRQVZU
bUFLWkFyREtqS0YyYzZmeFFxVUdyTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xRQVZUbUFLWkFyREtqS0YyYzZmeFFxVUdyTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJDNDQvODkyRDQ5QzZGNjE4MTFFQ0JFMUIzOEFGRjEy
MjI0NjgvTFFBVlRtQUtaQXJES2pLRjJjNmZ4UXFVR3JNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQiBhgovtElMLAxXl4gqmYA0lS0e7Q
m+EJ0zZ+SoJu1kuX6f34NPxRUHXMnRYUYtlkkE2ydfashVIkTO6avH1e/QhZOqHi
IDjX2Nfab9p2T87LeFGfmWVGguhTresWKKfoqBAZyTQSHkwWL2zkxW3zc4kLFt5o
SmrUPrrJOcg8zr5eh71WbipsATjX8js6yU4NDMvd0yR6Z5yNiRGNfQIXoWVWKGLN
t5xgNfv2iuXCfGiT0OnJscoYHNxEWyZhDCxND1e7aN4iHXByCD9EhjiBo4PNRujC
lhCTRnz9uiD9xSuUNUkUb9SzGm6XFEraepznEQy/LGvQAMkp/ruudZlk
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:21:50 2026 by rpki-client