Error: rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
File:                     MYEzIsm5orr9fHr1zg9P-HTZzaE.mft (raw, json)
Hash identifier:          GR5mwICUSaprPBuCR9gom2oKdBeRdBoZwl6u0ulQpbk=
Subject key identifier:   45:40:D1:33:83:07:DE:C7:5F:BF:00:3F:00:1E:75:C9:87:FF:A7:6C
Authority key identifier: 31:81:33:22:C9:B9:A2:BA:FD:7C:7A:F5:CE:0F:4F:F8:74:D9:CD:A1
Certificate issuer:       /CN=F366A61AAF/serialNumber=31813322C9B9A2BAFD7C7AF5CE0F4FF874D9CDA1
Certificate serial:       0370
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
Manifest number:          0368
Signing time:             Sat 24 Oct 2026 04:17:39 +0000
Manifest this update:     Sat 24 Oct 2026 04:17:38 +0000
Manifest next update:     Mon 26 Oct 2026 04:17:38 +0000
Files and hashes:         1: MYEzIsm5orr9fHr1zg9P-HTZzaE.crl (hash: xZZ8MkwbxOUYJA15DMi2G+NlnFdcySZSSJo2cBdfCR8=)
                          2: 3ADD93B2386911EF95D6CA87762E951A.roa (hash: zRXSoH3XHGWqI6NKqTDZkrU/VQVf3YmKR5+vS2GpN6c=)
                          3: 973BB7C6631711F1BCDFE1FFCE1D38B0.roa (hash: sImt8cmgbaJqZXXZzRlb5Ms2n0/AxBr/6lNtnsye+fI=)
                          4: 9517B0BA386911EF88E32688762E951A.roa (hash: bU/9jdaHRtJBgT7zNwNcq7vJZiofL3dCX6DcGkRxfbA=)
                          5: C99A4D3E386911EF9E90368C762E951A.roa (hash: MRITER58vyRjZxA4dzBSYv/21oUPkh19LEnmeikJNXM=)
                          6: ECB283EE631511F1968E11F4CE1D38B0.roa (hash: M66cvljk7MqT6rvHLu5/GRhR+vMMPadhLBH1blrJ+r8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A61AAF, serialNumber=31813322C9B9A2BAFD7C7AF5CE0F4FF874D9CDA1
        Validity
            Not Before: Oct 24 04:17:38 2026 GMT
            Not After : Oct 26 04:17:38 2026 GMT
        Subject: CN=6adc3163-9650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:9d:e5:b9:a1:34:43:24:0f:be:4b:12:06:
                    e6:e5:62:19:29:e4:ee:22:f4:a4:92:e1:7b:43:d2:
                    f5:bc:a1:dd:a1:18:6d:b8:ed:54:dc:45:25:48:d2:
                    5a:b9:e0:a3:84:40:52:cd:0c:36:ee:9c:8f:db:3c:
                    32:0f:23:ba:0b:e4:eb:2e:6b:04:8a:13:a5:dd:7b:
                    ae:fd:98:31:48:d9:25:7b:c7:77:1a:32:8f:57:6a:
                    05:23:ba:4f:6c:44:05:18:6b:44:f6:6a:46:9b:83:
                    d5:95:7a:f5:a0:80:b9:37:40:48:57:d7:e8:77:41:
                    c3:95:be:b3:d9:4f:78:4f:59:40:98:9d:ea:40:af:
                    77:e2:90:12:c6:e5:1f:03:ac:c6:d4:b8:f5:48:c2:
                    26:5f:6e:2a:71:77:ae:b7:9f:3e:39:e8:56:25:fa:
                    e5:4c:65:5c:2e:6e:cd:f4:65:45:68:1d:69:f7:3a:
                    3a:1f:08:60:41:00:8c:62:c1:8d:04:01:5f:53:4c:
                    e5:e4:fa:80:b1:ee:57:8a:27:2c:85:bd:74:9a:0c:
                    2a:7e:91:12:e5:7b:99:6f:c0:ed:cd:a8:f0:64:13:
                    3d:33:b0:c3:f2:be:54:e6:9d:b8:b0:6d:6b:84:70:
                    5f:aa:e4:79:5d:b2:4a:0a:77:23:93:d7:2e:a3:ca:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:40:D1:33:83:07:DE:C7:5F:BF:00:3F:00:1E:75:C9:87:FF:A7:6C
            X509v3 Authority Key Identifier:
                keyid:31:81:33:22:C9:B9:A2:BA:FD:7C:7A:F5:CE:0F:4F:F8:74:D9:CD:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MYEzIsm5orr9fHr1zg9P-HTZzaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A61A/7578EB6A386511EFA61FC86B762E951A/MYEzIsm5orr9fHr1zg9P-HTZzaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:cf:43:76:1c:81:9c:87:2f:f2:8f:42:87:e4:2f:20:79:
         f6:28:ee:fa:8a:49:84:20:e9:fe:fa:51:c9:24:40:86:54:3c:
         4b:b1:68:6b:9e:ac:6f:eb:33:3b:88:30:1a:11:f9:d4:2d:58:
         3b:62:57:8e:8b:54:9d:90:bf:5b:b3:10:eb:4f:24:5f:98:fd:
         01:5b:73:01:13:04:84:66:c8:c8:e8:03:70:00:70:a7:d1:da:
         51:01:36:80:21:17:ee:b5:c2:e2:25:19:87:fd:53:ef:0c:e5:
         99:c0:0b:ca:a9:ac:a2:a2:03:d1:6f:b0:d8:5d:6a:4d:51:e6:
         77:45:79:be:05:11:7c:a7:1d:10:b1:d6:ab:e6:8b:8b:55:08:
         be:ce:ff:5e:0b:fc:1f:7a:1a:96:e3:53:ae:35:2a:d6:e2:fd:
         42:5c:ba:e7:c8:7b:3c:dc:c5:e6:c2:42:d3:12:9f:79:bd:5f:
         9f:cf:42:f4:d3:e3:d3:c3:f0:c5:65:fd:e3:73:79:cc:d5:73:
         16:0d:28:36:f8:60:75:7d:c3:39:17:44:c8:99:96:c9:1d:7d:
         eb:96:d2:c5:72:31:8a:ed:d4:c7:fa:2f:a3:f0:7e:c5:d2:46:
         99:50:d9:ca:fa:ea:7b:21:4b:26:a0:4a:9b:90:e9:8f:01:75:
         0e:ad:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:27:22 2026 by rpki-client