Error: rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.mft
File:                     RgC4E8dplKvYHOm4Yey83dHJdAE.mft (raw, json)
Hash identifier:          hatTFJQjM8wNptGj8nQrXG+uU6gjtbr9QvVOy4Ga9XM=
Subject key identifier:   A5:48:35:18:DE:88:FB:F2:84:D4:E6:86:C3:94:4C:42:57:8B:D0:A2
Authority key identifier: 46:00:B8:13:C7:69:94:AB:D8:1C:E9:B8:61:EC:BC:DD:D1:C9:74:01
Certificate issuer:       /CN=F366F191AR/serialNumber=4600B813C76994ABD81CE9B861ECBCDDD1C97401
Certificate serial:       0DDD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RgC4E8dplKvYHOm4Yey83dHJdAE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.mft
Manifest number:          0DDC
Signing time:             Sat 19 Sep 2026 05:25:16 +0000
Manifest this update:     Sat 19 Sep 2026 05:25:15 +0000
Manifest next update:     Mon 21 Sep 2026 05:25:15 +0000
Files and hashes:         1: RgC4E8dplKvYHOm4Yey83dHJdAE.crl (hash: A7SQGuSIdvqKIDS24Z36sYhD6Uo2tJ8+Nf7aE3MGMKY=)
                          2: B6C8C0D60E4C11E7B18E4B41F8AEA228.roa (hash: qjNnrxMoS+9GEr8u3PIhxy4X8c00vX65csUdJey7cFI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.mft
                          rsync://rpki.afrinic.net/repository/arin/RgC4E8dplKvYHOm4Yey83dHJdAE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3549 (0xddd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AR, serialNumber=4600B813C76994ABD81CE9B861ECBCDDD1C97401
        Validity
            Not Before: Sep 19 05:25:15 2026 GMT
            Not After : Sep 21 05:25:15 2026 GMT
        Subject: CN=6aae1cbc-2fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:3d:d6:d2:7e:9c:38:dd:39:c9:7e:ba:fa:
                    7e:9d:53:4e:c3:d1:b1:c0:cd:9b:c1:dd:e5:cb:b3:
                    2f:d6:d9:ae:3c:34:ab:d1:fb:96:fb:cf:c6:b8:d6:
                    d9:ff:c2:f8:c6:3d:8a:cc:93:fa:06:88:ee:4d:e5:
                    62:41:77:58:be:15:f1:f9:af:d2:c7:f6:b3:0e:bd:
                    ab:09:c2:0e:01:0a:a7:0c:68:6f:01:72:fc:3b:c4:
                    15:28:83:06:0e:ec:dd:08:28:c7:ff:e9:01:8f:15:
                    e8:3d:ac:45:64:73:ed:a5:8b:1e:95:16:ac:58:4a:
                    2a:90:6d:6d:63:2d:d6:84:d8:0c:2a:e0:2a:c9:84:
                    e2:f8:2b:0f:ce:82:6a:a3:30:45:11:58:0e:16:8c:
                    05:3e:49:b4:1c:c9:fc:fe:60:a6:66:0c:1b:91:ee:
                    cd:c1:9f:92:c0:5a:d7:ee:bf:b9:4c:28:5e:45:6e:
                    0d:9d:80:e5:5a:ed:01:35:8a:d8:96:ca:c4:59:fc:
                    bc:3a:ed:62:d1:04:78:60:f3:2d:45:86:30:0d:3d:
                    cb:3d:5c:df:ce:3a:c1:f4:64:1a:09:ce:13:50:83:
                    8d:a4:31:ff:50:0a:d4:dd:7b:9c:d5:9a:13:fa:e2:
                    25:c9:d3:f5:42:e4:4c:99:b3:0b:19:ba:bd:ab:34:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:48:35:18:DE:88:FB:F2:84:D4:E6:86:C3:94:4C:42:57:8B:D0:A2
            X509v3 Authority Key Identifier:
                keyid:46:00:B8:13:C7:69:94:AB:D8:1C:E9:B8:61:EC:BC:DD:D1:C9:74:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RgC4E8dplKvYHOm4Yey83dHJdAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:37:fb:e0:75:47:d9:00:98:d1:22:c7:8f:3b:37:ee:59:7f:
         57:7c:35:41:7d:13:51:4f:1d:fd:15:5a:87:02:8f:b4:48:bf:
         62:d5:df:f5:fd:c1:e5:1a:df:45:ef:7b:21:64:54:be:9b:3c:
         b6:3c:cb:c0:0b:93:7c:c3:a1:59:52:84:91:f0:31:57:8a:7d:
         fb:de:54:75:69:2a:69:d6:2a:3a:f1:54:7a:b1:a4:f3:ca:1d:
         88:f1:49:92:23:53:f9:61:8c:2f:97:b9:cb:1e:05:39:6d:f8:
         b3:fb:83:ae:ef:d5:0a:7c:39:a3:41:f7:b5:c0:a4:83:f7:8b:
         19:8b:d1:87:dc:d2:46:aa:3a:6a:58:67:ef:57:1d:f0:89:38:
         a8:15:59:d8:82:8c:dd:2c:2b:b4:84:0d:3e:7f:6f:51:64:69:
         23:a7:4c:f5:cf:b9:f4:35:cb:5b:22:fd:fc:a4:65:d0:35:89:
         fe:01:b0:af:0a:40:58:12:0b:99:70:ce:6a:83:7f:75:3e:25:
         0f:2a:40:3e:ae:3e:94:ef:29:b0:89:b2:2e:63:8b:3c:d3:ad:
         a3:08:5d:68:25:51:eb:39:2a:b8:9d:9c:5b:4f:e7:e5:e2:8e:
         0e:34:a9:28:b3:39:61:ca:b7:59:53:5f:65:aa:fd:66:26:cb:
         ce:2c:b2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 17:51:23 2026 by rpki-client