Error: rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File:                     OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier:          dgee1wNZ1AUDfgIwUB++EY5tZi6uItjk8OUZne3SPfE=
Subject key identifier:   B5:C2:6B:90:50:1E:B0:8B:63:B8:3C:B3:2D:CC:78:92:F4:E0:0F:42
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer:       /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial:       01D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number:          01D5
Signing time:             Sun 25 Oct 2026 05:01:40 +0000
Manifest this update:     Sun 25 Oct 2026 05:01:39 +0000
Manifest next update:     Tue 27 Oct 2026 05:01:39 +0000
Files and hashes:         1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: X0t+D828t2MNIoFqFpHfh5dTaemE/tT2WuckhErLwaw=)
                          2: F8600BDE84B911F085AD04A3DAE4EC9C.roa (hash: DP8mnGerifLfSRadwXVvA2WZ6PCmE2usVrRlV28umhs=)
                          3: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
        Validity
            Not Before: Oct 25 05:01:39 2026 GMT
            Not After : Oct 27 05:01:39 2026 GMT
        Subject: CN=6add8d34-1ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c8:5d:d6:0f:3f:3f:b8:7c:32:22:b0:0c:1e:
                    09:c9:8b:82:9c:6d:36:5f:9f:f6:cd:e9:e0:d2:ae:
                    25:f0:d4:5c:72:34:3b:c7:05:3e:3c:4f:41:94:a8:
                    1e:bf:9a:cb:ef:ad:17:07:a9:bf:01:58:fb:7a:1e:
                    64:95:4c:db:c8:25:a2:ea:5a:31:f3:85:c3:b9:be:
                    1f:9a:2b:d3:42:86:0d:37:61:40:de:d8:00:ec:db:
                    3b:9d:2f:7c:8f:ed:2f:15:8b:5b:bb:e5:a3:71:18:
                    5e:2d:42:7b:7a:c5:7c:9e:34:28:11:35:cf:47:73:
                    64:68:4f:8d:a1:16:d2:0d:52:1e:45:e4:19:ef:33:
                    1b:50:dc:08:d2:d1:eb:05:fc:9e:e4:50:ff:1c:00:
                    03:8e:ec:91:f7:e5:df:0c:ff:86:87:76:b0:79:09:
                    cf:df:be:7e:17:2b:43:f7:5a:e8:89:8a:58:4d:41:
                    b0:28:b0:50:11:68:2f:e3:a6:73:a3:9f:f7:37:d0:
                    2f:ae:de:6e:66:d2:26:5b:b4:18:d8:6f:f4:99:2a:
                    4b:8c:7d:59:79:46:6f:3c:00:d0:c4:17:10:ca:7c:
                    cf:7e:76:fc:7a:96:bf:b1:6d:66:b7:37:d7:8e:52:
                    2a:70:bd:72:4c:f6:9c:ab:45:d5:39:a3:59:a8:25:
                    7f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C2:6B:90:50:1E:B0:8B:63:B8:3C:B3:2D:CC:78:92:F4:E0:0F:42
            X509v3 Authority Key Identifier:
                keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:90:16:15:b7:7b:24:29:ac:e4:a4:cc:60:1b:a3:48:80:32:
         51:df:ec:2d:d6:3b:9d:ab:f3:e4:1b:e6:53:01:fb:75:b7:5e:
         73:25:82:9d:d4:1f:a4:2f:db:59:71:9f:a4:5d:75:ac:3e:6c:
         14:3f:9f:76:95:94:fa:e7:56:d3:e0:f6:71:a2:a7:87:e6:42:
         1a:2b:6d:b2:80:37:7e:0d:71:bb:74:f1:d0:ff:5a:19:ce:f1:
         ba:5a:68:45:4d:1c:ec:8a:cb:18:79:c1:89:93:31:5d:94:61:
         67:ef:2f:da:7a:11:98:d2:b7:92:1d:81:71:6c:fa:d5:2f:a2:
         78:99:c0:f1:89:d8:cc:be:8a:57:dc:fb:4d:df:93:4f:34:0d:
         af:a9:46:ef:24:c4:ab:a4:da:d2:07:b5:4a:ad:c0:1d:6a:8f:
         72:3a:bc:8e:73:30:d6:f2:dc:83:be:9f:c8:be:fb:ae:0c:03:
         30:27:a3:16:92:1b:d0:6e:9b:13:e1:eb:7a:bd:fe:8c:3f:92:
         3a:05:0a:22:2f:6f:3d:bd:ba:bb:76:a9:8a:e8:2c:3a:fc:13:
         43:d8:b7:77:c5:87:25:bb:84:0a:3e:6d:b3:0f:82:2e:ca:49:
         91:5f:a4:fc:14:90:83:47:05:8d:dc:b4:63:6c:01:70:38:52:
         86:ba:e5:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:01:17 2026 by rpki-client