Error: rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
File:                     eW3qOGfLk4c-eX8UKo65xUiMl4A.mft (raw, json)
Hash identifier:          IeOCwSqu81H1GJswzKhL96hPJ2dsYy9x+Y4+PiuMdzQ=
Subject key identifier:   20:98:B3:E2:93:FA:5E:5E:CE:92:B8:EC:AE:F8:47:65:20:72:79:AF
Authority key identifier: 79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80
Certificate issuer:       /CN=F36724C2RI/serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
Certificate serial:       38
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
Manifest number:          35
Signing time:             Tue 27 Oct 2026 05:51:53 +0000
Manifest this update:     Tue 27 Oct 2026 05:51:52 +0000
Manifest next update:     Thu 29 Oct 2026 05:51:52 +0000
Files and hashes:         1: eW3qOGfLk4c-eX8UKo65xUiMl4A.crl (hash: EBv6DISeGpcowHvhAnyGQo4+8cW6zc0DhJ9s4v0srLw=)
                          2: 6FCAEB4EAB8D11F187F041B2CE1D38B0.roa (hash: TEjUWhtpTqtSUfGe0lxa155l20YdE5rAUao9hrYFvbQ=)
                          3: 3D1A9894AB8C11F1800375AACE1D38B0.roa (hash: GBs5ED+xGJq6GzmK2fLQrnQSM1dciJmOEyU5PpNU6Io=)
                          4: 42F64AF6ACEF11F18C8CB818CF1D38B0.roa (hash: zzQJK5ajfcyXqzqBUyOWm3W0mJWdmrxeq5n6MrvB/Dc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
                          rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2RI, serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
        Validity
            Not Before: Oct 27 05:51:52 2026 GMT
            Not After : Oct 29 05:51:52 2026 GMT
        Subject: CN=6ae03bf9-f56f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:b5:89:10:8b:a3:fc:ec:b5:96:b6:50:32:
                    96:59:5c:40:89:c7:df:81:64:b9:16:88:a2:eb:59:
                    43:5a:93:90:b7:98:d8:54:85:b0:2b:c5:63:66:86:
                    b0:3e:c6:3c:56:76:60:0c:bf:c3:e4:4a:cc:36:e9:
                    60:93:ac:27:f3:6a:9b:95:59:ce:f1:48:9f:83:32:
                    6e:57:84:ac:6e:c0:f4:95:c4:3a:d2:c2:4f:66:98:
                    ec:3e:b8:d2:97:63:6e:cf:1e:62:c2:26:38:21:ba:
                    9c:71:28:16:88:e5:7c:83:f3:a3:d1:ac:73:fd:b4:
                    1f:3c:a9:70:47:5a:8d:9e:1d:b7:a8:f2:cb:d0:26:
                    4b:6a:58:86:37:06:f1:f4:04:ce:b3:c4:24:05:1e:
                    9a:ff:73:9a:1a:f3:01:e8:6d:65:9d:48:0a:1c:4b:
                    79:38:12:6e:33:b1:76:95:9b:8b:e7:63:23:90:e2:
                    c3:c6:be:d8:3b:77:b8:7c:5e:7f:55:fb:49:80:95:
                    88:d3:59:a0:78:e1:ce:c2:54:0e:a9:50:d2:33:29:
                    99:a3:0c:94:1b:6e:c2:43:e2:83:9f:7d:15:cd:ba:
                    10:d6:b4:b4:b1:35:8e:02:89:4e:aa:0a:65:67:ea:
                    90:55:1e:12:38:70:20:e8:75:47:d9:f0:17:23:60:
                    64:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:98:B3:E2:93:FA:5E:5E:CE:92:B8:EC:AE:F8:47:65:20:72:79:AF
            X509v3 Authority Key Identifier:
                keyid:79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:22:52:b9:d3:02:40:b6:46:2e:50:6e:c5:ba:83:0e:65:
         56:bc:ab:36:c9:e1:8f:32:da:6e:e3:2a:52:e6:f2:b6:42:08:
         0c:73:46:d2:c3:85:2d:bc:cd:9f:49:36:bf:f9:39:17:c6:b5:
         e6:7d:22:7e:37:dc:ac:86:7d:4b:a9:bc:9a:aa:2b:92:6a:f0:
         52:ff:3e:c5:3c:9a:84:9a:e5:1f:df:14:3b:84:62:e3:2b:f6:
         4a:07:d1:c9:8c:6d:bc:fd:cd:c1:2c:2a:14:4b:d1:da:97:3d:
         04:70:20:83:89:17:56:20:6d:4e:9a:0e:df:0e:32:84:8e:80:
         90:ea:ac:c6:4b:f6:ff:c0:1e:82:2c:64:55:5e:0e:64:8b:44:
         2e:fc:04:06:02:33:8d:d1:22:3e:90:38:97:bb:76:60:29:e8:
         cf:a5:f1:ae:b7:8a:47:4b:62:44:b6:22:b9:16:f4:df:e7:90:
         fe:58:49:c4:5c:60:d1:c7:a5:75:96:e4:14:4e:13:59:f4:a5:
         84:e3:8c:46:40:4a:56:af:e8:d1:89:7f:05:79:9f:97:3a:42:
         0a:9e:22:d2:63:6a:b3:41:ac:1c:2b:d8:93:dd:33:6e:29:45:
         d4:f6:a0:8a:8a:6e:72:d0:6c:d0:c2:cc:f2:e8:38:ba:c5:ae:
         0f:81:38:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:51:38 2026 by rpki-client