Error: rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
File:                     i-GoLMm4kURYOcv-vplg8wM9pUI.mft (raw, json)
Hash identifier:          5eo6yh7R6OqiB/UijXp0HEyfm0vZe/OG2zFhcRcGWcA=
Subject key identifier:   57:72:70:63:B2:4E:A9:63:55:64:2F:B9:9F:A3:D0:BA:86:E5:AF:87
Authority key identifier: 8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42
Certificate issuer:       /CN=F365FABERI/serialNumber=8BE1A82CC9B891445839CBFEBE9960F3033DA542
Certificate serial:       01C3
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
Manifest number:          01C1
Signing time:             Thu 10 Sep 2026 04:55:46 +0000
Manifest this update:     Thu 10 Sep 2026 04:55:45 +0000
Manifest next update:     Sat 12 Sep 2026 04:55:45 +0000
Files and hashes:         1: i-GoLMm4kURYOcv-vplg8wM9pUI.crl (hash: gcmQFdAGSSBWpIQYwoZKKRVibrzeP1lAcs5RZZRa050=)
                          2: 71089910A43C11F0A4AF11ADDAE4EC9C.roa (hash: U5LDkkC16R2QjhJl9qo+wu8OGplriwnSfZRYIPerRao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
                          rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FABERI, serialNumber=8BE1A82CC9B891445839CBFEBE9960F3033DA542
        Validity
            Not Before: Sep 10 04:55:45 2026 GMT
            Not After : Sep 12 04:55:45 2026 GMT
        Subject: CN=6aa23852-293d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:36:a6:69:fe:8b:a5:66:a4:75:24:e0:c7:
                    f3:42:f8:7d:f9:15:55:b5:57:f8:8d:12:2c:0e:11:
                    d1:9a:e9:f6:16:cc:9f:04:ed:68:45:83:d0:dc:ee:
                    38:bf:ea:dc:e3:f1:1a:49:df:91:b9:cb:8d:db:0b:
                    10:74:1b:6a:39:d9:d1:2b:81:19:d4:da:50:64:c3:
                    42:ff:72:4f:b3:e7:c1:6c:6c:da:6a:d5:4e:f5:b9:
                    bb:15:b1:8d:8e:c7:dd:f0:1c:ff:2b:52:b0:37:61:
                    8e:09:e8:e0:0d:26:9b:26:d3:7f:91:e1:cb:71:7c:
                    df:e8:b6:0c:a2:fa:86:b2:c0:57:0a:08:7d:99:63:
                    df:06:11:d3:68:ce:b5:85:4d:27:08:85:9b:ff:a5:
                    d5:70:96:fd:48:c9:f0:56:58:72:ea:ac:b5:be:0e:
                    c9:b5:59:a0:39:e5:8a:a8:a7:fc:5d:b5:86:f0:96:
                    44:3e:89:b0:42:06:e6:3f:c9:61:83:9c:5b:c9:5e:
                    3a:1c:84:08:72:12:45:3d:b1:56:d1:6b:df:63:29:
                    8d:19:54:64:e5:b5:74:2b:33:0d:43:d1:5b:67:1b:
                    49:70:7a:b6:ef:59:f9:a9:eb:f5:f7:60:c2:f2:97:
                    51:80:0a:57:e4:c2:13:dd:34:e2:b0:b5:ce:a9:8c:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:72:70:63:B2:4E:A9:63:55:64:2F:B9:9F:A3:D0:BA:86:E5:AF:87
            X509v3 Authority Key Identifier:
                keyid:8B:E1:A8:2C:C9:B8:91:44:58:39:CB:FE:BE:99:60:F3:03:3D:A5:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/i-GoLMm4kURYOcv-vplg8wM9pUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/D9B8221A534111F0994039DADAE4EC9C/i-GoLMm4kURYOcv-vplg8wM9pUI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:11:4e:db:18:f7:5f:a0:ad:f1:97:53:b1:0c:44:ce:ae:ff:
         0c:70:40:f6:9b:ae:8f:88:fc:7f:35:2c:e5:d1:c5:50:a4:64:
         43:a6:9a:78:8c:b6:d4:e2:67:8f:60:01:84:68:3d:ee:be:b3:
         45:22:bc:4f:73:54:a8:90:12:40:27:31:e4:6b:ee:3a:f7:ec:
         b6:cc:61:af:1f:93:82:77:ce:23:fc:83:60:57:b2:a0:cd:69:
         0a:a4:6a:65:b0:74:66:6f:d0:d9:3b:07:be:0a:27:86:a8:c9:
         ce:c9:d4:c7:45:7d:a6:e5:57:38:5f:e8:9f:dc:ca:e3:b8:36:
         9b:12:a5:50:f5:10:7a:e1:58:4c:ba:41:49:96:02:81:ad:8c:
         0e:40:29:b1:b6:04:b4:3a:18:d2:d2:3a:04:36:4a:04:06:2d:
         c6:89:04:51:af:ac:42:c8:1b:3f:5f:98:e2:63:c9:22:19:df:
         87:07:03:bb:a0:f4:c3:57:37:69:68:aa:0f:62:29:ac:72:69:
         37:ad:f7:55:be:aa:7a:59:af:86:0e:cd:1c:43:ff:2e:eb:e1:
         4f:44:5e:35:51:11:89:30:24:ac:27:3f:1f:61:4d:d1:8a:73:
         75:4e:44:85:7e:38:e9:ee:3a:ec:b4:20:d3:57:fa:f9:9d:c5:
         ab:0c:56:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:17:18 2026 by rpki-client