Error: rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
File:                     9rZiLcWmAFKfv9HBwPfJi_yJClA.mft (raw, json)
Hash identifier:          A/q6aLkWnfePGISKEkdf1AXjcQHihX+P29NJT1R6pYM=
Subject key identifier:   84:02:08:6A:C7:4F:B3:2A:3B:3E:0D:3E:29:B1:82:33:D9:97:B9:AA
Authority key identifier: F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50
Certificate issuer:       /CN=F366BE85AF/serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
Certificate serial:       0296
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
Manifest number:          0294
Signing time:             Sun 25 Oct 2026 04:43:39 +0000
Manifest this update:     Sun 25 Oct 2026 04:43:38 +0000
Manifest next update:     Tue 27 Oct 2026 04:43:38 +0000
Files and hashes:         1: 9rZiLcWmAFKfv9HBwPfJi_yJClA.crl (hash: 5Ty18KuetkwE/c/WdCANXjbz6zRXB817nEM6yeMNV/M=)
                          2: 0138B876D29211EF9CA02783762E951A.roa (hash: 9Qo2BZpMY9XAgQ8sDtXz6FwY6T65u4EtYgo8ZKdICJA=)
                          3: 48197A8CD29211EF9C4B9D83762E951A.roa (hash: mZ9kRI2tetEX+zkrcuQdcEIANnKP7GMoF4oNcGCNj88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 662 (0x296)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AF, serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
        Validity
            Not Before: Oct 25 04:43:38 2026 GMT
            Not After : Oct 27 04:43:38 2026 GMT
        Subject: CN=6add88fb-7755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:92:09:b9:4e:f2:cc:a6:c7:6b:1d:b1:41:
                    53:a8:00:6d:33:fe:72:5f:b6:9c:d9:a3:52:f9:0d:
                    2d:2e:d6:aa:13:5b:e6:ff:66:47:e6:c5:90:b1:53:
                    3b:96:38:29:a0:f8:10:00:a5:f1:c0:47:39:71:0e:
                    ae:f4:70:e3:23:ae:49:47:eb:9b:53:45:1b:f1:b9:
                    73:16:0e:af:f5:26:31:89:51:c6:c8:fc:33:5e:6f:
                    56:89:e0:3a:48:96:a5:ed:91:9a:23:0f:9b:f5:f8:
                    99:84:a7:51:a3:51:6d:97:fb:bb:06:66:40:e3:d2:
                    55:f1:ed:2f:fc:d8:56:4b:b7:1e:86:a2:c8:58:4d:
                    5b:a7:94:4a:ee:d8:67:b1:7e:7d:db:40:70:95:1e:
                    8f:af:15:a5:cf:85:71:56:9f:b1:8d:27:db:4f:c4:
                    f4:ff:64:01:52:d7:4f:48:3f:b6:e6:66:d7:d9:09:
                    b7:e0:33:34:e7:e7:5f:a0:08:9d:b9:f5:ac:c0:9d:
                    7e:b0:c2:bc:33:d3:35:1d:a7:80:83:92:c2:6d:f3:
                    30:ac:ae:a4:8b:a8:84:31:ac:f3:5f:63:5e:84:45:
                    34:fb:74:3b:47:62:e7:90:f7:94:03:dd:82:6f:dd:
                    50:6a:8e:b4:69:e9:c9:07:ec:e8:fb:6c:4f:9d:54:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:02:08:6A:C7:4F:B3:2A:3B:3E:0D:3E:29:B1:82:33:D9:97:B9:AA
            X509v3 Authority Key Identifier:
                keyid:F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:c0:4b:80:08:c0:33:85:a4:ca:c0:f1:8c:db:ad:4e:43:96:
         28:d7:a8:d7:b0:e8:72:cf:b0:ac:b7:96:a2:78:7b:d5:34:af:
         fa:05:33:9d:29:06:80:b8:96:2b:72:5f:76:36:4d:51:ca:42:
         53:c1:68:7d:ab:52:72:01:52:69:43:6d:ab:13:3b:f5:bd:db:
         54:6e:9b:1c:15:55:ad:bb:b1:ab:54:53:2a:21:4c:e4:3b:39:
         4f:24:0c:5e:ff:08:9c:ba:05:a0:47:29:1d:55:fd:b3:57:0f:
         23:04:e9:7f:66:d8:f5:4e:c1:fb:cf:25:f9:e7:85:73:48:43:
         2f:19:fd:fc:11:bd:25:4f:23:11:d0:5d:b6:48:8e:13:46:f4:
         66:5f:46:c4:c4:5e:e8:dc:da:4b:5a:0f:40:f7:f5:b4:c9:03:
         d6:24:24:b7:76:b8:a0:29:4e:4c:4c:43:8d:fd:55:ec:ee:b0:
         64:c0:10:4f:7a:e8:2b:39:a3:38:27:ae:10:c8:b3:b2:c5:03:
         57:35:5c:95:69:96:8a:6a:d3:95:5d:be:25:05:a7:fd:83:f8:
         f9:0b:c1:30:46:b8:27:e0:5a:41:63:34:7a:06:e8:5e:57:51:
         1b:f7:20:81:e3:39:42:ee:b5:4c:72:32:77:b9:5c:6e:dc:a5:
         05:3c:7e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:36:30 2026 by rpki-client