Error: rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
File:                     G0qwtyDYObeamJIyOw-r7ZZwWqI.mft (raw, json)
Hash identifier:          pt30TJnTqIXDpSXi2jZsMX3UG1dReyBrE38D/OZGtLM=
Subject key identifier:   DC:34:F1:7C:DB:55:B2:DC:C3:10:4D:EB:81:40:6B:6B:95:43:4A:A7
Authority key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Certificate issuer:       /CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Certificate serial:       0627
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
Manifest number:          0621
Signing time:             Wed 28 Oct 2026 02:54:46 +0000
Manifest this update:     Wed 28 Oct 2026 02:54:45 +0000
Manifest next update:     Fri 30 Oct 2026 02:54:45 +0000
Files and hashes:         1: G0qwtyDYObeamJIyOw-r7ZZwWqI.crl (hash: 0yhCJnVEmA+89PN4OC5qsc3OBDC7OKhFPVHcgOmqqps=)
                          2: D9ED8CAC6EB311EF96086184762E951A.roa (hash: 6w3a+eg92q7dxLHTR3vq9vXUwlds4W9m99UG/J3eEsM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 02:54:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1575 (0x627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367426AAF, serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
        Validity
            Not Before: Oct 28 02:54:45 2026 GMT
            Not After : Oct 30 02:54:45 2026 GMT
        Subject: CN=6ae163f5-b1e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:53:c8:c7:bb:d7:0d:d6:94:e2:90:13:75:
                    5b:23:ad:0c:f1:57:9c:2f:7e:5d:7a:73:7a:33:9f:
                    7e:87:f0:f4:88:b1:6c:78:68:a0:22:53:62:86:21:
                    14:68:91:db:4e:ae:bf:52:bc:bf:0e:e0:13:e2:c8:
                    80:44:87:3e:4e:50:86:e6:e4:4d:2f:91:11:2c:1d:
                    8d:8f:8b:98:c2:a7:5b:c7:26:79:51:68:c8:4f:5e:
                    34:d5:ea:44:45:e4:0b:ab:99:6f:cb:2a:60:0d:ec:
                    f9:36:84:e8:a6:80:fe:fc:2b:91:22:54:5a:5f:0e:
                    8e:30:ea:27:31:bb:ca:11:a1:bb:5d:77:f3:be:d0:
                    6f:a2:59:27:77:13:9c:64:ab:a9:e3:00:1a:5d:8b:
                    8e:22:84:6c:dc:64:84:ac:a5:39:3a:28:12:c7:52:
                    cd:d6:6f:5a:f8:22:f1:23:68:03:cf:c9:89:82:b1:
                    5d:51:52:30:03:8b:ed:32:0c:a5:0b:2c:8e:86:39:
                    58:c4:cd:67:cc:48:04:32:20:73:f0:30:0e:a1:29:
                    3c:36:64:c4:81:e8:d2:73:27:4f:89:4f:0b:9a:85:
                    67:51:ab:ad:28:97:af:3f:a0:f0:6c:f3:8f:13:89:
                    5f:13:4c:94:09:3e:d8:bd:c7:18:15:78:ed:51:71:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:34:F1:7C:DB:55:B2:DC:C3:10:4D:EB:81:40:6B:6B:95:43:4A:A7
            X509v3 Authority Key Identifier:
                keyid:1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4c:e5:50:f6:2a:37:3b:a0:01:2a:5c:47:56:19:85:64:f4:
         68:96:4e:d1:f6:a6:97:63:88:2e:81:3b:cc:41:fb:34:99:a5:
         17:9e:4b:f7:18:70:c3:6b:0c:34:3c:bb:ff:6a:b8:c2:98:ae:
         61:2e:1a:96:61:f3:a0:d4:f6:f2:79:3a:79:71:ac:28:e5:2c:
         64:7a:8e:ed:18:10:9e:50:45:6e:c0:e4:0a:d7:e3:cd:c8:b9:
         3f:db:40:2a:85:e7:01:fa:7b:6e:bf:ab:18:c5:72:0c:e3:c9:
         41:e0:27:ac:b5:bf:a0:5f:9b:6e:da:6f:f5:13:66:8d:a2:5d:
         d4:82:57:98:20:b2:ca:28:8d:c9:50:9b:09:85:7f:47:df:47:
         fb:6f:0d:73:ee:35:06:f8:6f:b8:bc:e3:42:ce:94:f8:a6:ce:
         1e:ab:1a:e9:dc:c7:92:3e:89:30:e9:b1:6c:b4:83:2e:5f:55:
         09:be:7b:a7:31:6e:f7:14:1d:58:3a:51:37:db:3b:bc:d2:dd:
         a6:7b:d0:88:4b:34:80:03:00:21:fc:cf:ee:ea:b8:1f:65:de:
         81:ad:2b:54:78:ce:9f:a2:9b:80:c0:29:a3:19:65:f5:ff:5d:
         c5:54:44:55:89:18:34:e4:00:dc:80:2e:83:4f:65:d4:03:84:
         e6:35:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 19:30:13 2026 by rpki-client