Error: rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
File:                     T0jn6jDJibFdNjk3djVToH4WzY4.mft (raw, json)
Hash identifier:          QB+GbKSzE8FeXIrBLC+9sq4od0Qi2uRuvPZmCicO1mA=
Subject key identifier:   42:1F:95:71:03:8D:AF:24:51:B1:60:FE:D0:17:E3:A0:CC:34:BF:1B
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Certificate issuer:       /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial:       03F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
Manifest number:          03E0
Signing time:             Sun 25 Oct 2026 04:06:06 +0000
Manifest this update:     Sun 25 Oct 2026 04:06:06 +0000
Manifest next update:     Tue 27 Oct 2026 04:06:06 +0000
Files and hashes:         1: T0jn6jDJibFdNjk3djVToH4WzY4.crl (hash: Awn4HddzOOrvPd0pN4soLdoPVSt+hQ50B8qosAsuD5M=)
                          2: 01FFB238325511EFBB9C746F762E951A.roa (hash: HwB4zPJU9kPQhOWUZlM6j0iw2tO8p/LDrcqvDUSUml8=)
                          3: E3677BF4325311EF8E43A166762E951A.roa (hash: /yOVgWKNONmcMcmqu8GnU0BKllh0LGM51U9XQ2bz01g=)
                          4: A66EC216ECDA11EE9EC08472775412E6.roa (hash: f71Fay/DESTXOMYTj0DRv2PY2902rnleTuR/D0d4cTA=)
                          5: 5A1BE094EB6511EF853965AB762E951A.roa (hash: m2DS77Vz7boH9o3knUuqENRMtVGaoDlo5YdpHFrrc4w=)
                          6: B302C860325311EF8EF04166762E951A.roa (hash: PaTtuEHFKauPFcvBG7F1Vb+HR7eUcOBrKqbBlq0OM3o=)
                          7: C4815F54D81E11EFB891499E762E951A.roa (hash: wuzVVrhPQApx6Smw2Hs9Pgr/IoLeBCq0Aedko2SwUlE=)
                          8: 880847F2325311EFAA2C1666762E951A.roa (hash: Wluds4MwrpwwEfBvwaxH1Q9uLDWNvfUcuMAqtTfYhng=)
                          9: B163A47EEA6411EFB0192A8F762E951A.roa (hash: gd0V9wGbms8dangRjTs1B1syY6Co0GN21dzbunIC3Oo=)
                          10: 8FBDDA88024311EF8F71D755017001B1.roa (hash: U5+3ihpDeTDN/QaTSJ0S4ji0OUYXEbqAt0B5DT/fsvo=)
                          11: 156898525F5911F1BE0CD5B2CE1D38B0.roa (hash: fUAjVdVLuz/P7h4EhzSUpz1BimD4ahaM3FOhSa5PEpg=)
                          12: ABC9643AED2B11EFB63252B0762E951A.roa (hash: rYe+cPZkMHhDG2GzW8uh3+g2G04Hmp44xW61bCXWx/Y=)
                          13: 0139A80E1C2511EFB46BB8E77CDC24C2.roa (hash: QmuJlGJat+l8+ngZcwk1G2cycsf7YIyKE+PvKaaYwKw=)
                          14: FBD09FE6387411EF80E58557762E951A.roa (hash: gpW090sQ3gSntI8ZuxHiEJc42Mhxrl4srlTmd4Q5n+I=)
                          15: 7ECDEEE6387311EF9CCF594A762E951A.roa (hash: 2ZeihCUzI0W9JMOxurwJNNO7X97D4kJnt3ZQCqSXzLk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:06:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367BA6AAF, serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
        Validity
            Not Before: Oct 25 04:06:06 2026 GMT
            Not After : Oct 27 04:06:06 2026 GMT
        Subject: CN=6add802e-8e54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:10:74:79:d0:d9:ca:3d:1c:d9:db:db:11:89:
                    84:7f:dc:3f:a4:ab:4b:90:df:d2:a9:13:5b:25:8e:
                    7c:d2:bb:4a:d1:f3:d2:42:b2:e6:b7:b3:22:83:3d:
                    ee:72:28:6b:a6:6c:31:51:e6:bc:55:96:1d:d4:97:
                    46:27:48:33:9d:52:0c:c8:dd:75:94:0b:94:e5:9c:
                    14:dd:69:2c:4e:73:6b:22:86:9b:db:13:d0:05:19:
                    31:4c:f2:ca:dc:a7:b3:9e:7c:48:7e:95:b4:0b:e0:
                    a0:33:84:4b:d1:9e:49:15:7e:72:82:1a:5e:78:18:
                    7c:73:f3:ab:4f:c6:29:e1:44:f3:16:fb:ff:bc:dc:
                    a5:2e:c7:f3:5f:33:4c:54:b9:87:fe:fd:05:aa:2b:
                    a4:58:9b:8d:53:90:65:2a:83:24:7e:6c:43:59:48:
                    d4:24:14:26:28:48:98:64:46:20:5f:6e:61:4d:6e:
                    45:dd:9c:c3:61:e5:c5:bf:24:8a:18:e0:b1:9d:df:
                    90:15:01:cc:78:14:85:08:31:49:e1:f4:76:65:05:
                    13:fc:1a:9d:e5:9d:59:43:c3:51:1d:cc:0e:17:18:
                    85:dd:58:14:48:bd:fc:a5:23:3b:7a:90:1b:9f:07:
                    cc:4d:20:6c:89:29:bd:00:0c:fd:23:e0:53:f3:f3:
                    34:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1F:95:71:03:8D:AF:24:51:B1:60:FE:D0:17:E3:A0:CC:34:BF:1B
            X509v3 Authority Key Identifier:
                keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:54:ee:01:46:e0:d6:1f:45:f0:db:7d:c2:d6:a6:7f:2f:85:
         ce:ec:48:32:84:63:67:8d:c6:5a:d9:56:30:15:bd:e9:7a:74:
         31:a8:0a:4c:d2:71:9b:ee:52:f5:4c:ec:52:29:65:36:90:f9:
         3b:57:73:0f:05:bb:a5:36:4f:ea:67:c7:12:6e:ce:ff:e6:d8:
         25:c2:7a:07:18:e3:d8:03:45:ed:ff:e2:28:a7:60:4b:7a:15:
         25:e7:2a:34:dc:31:3b:60:ca:3a:93:ae:1d:bb:01:81:62:c5:
         db:a9:bf:85:f6:8d:37:d4:4d:4f:25:29:08:e0:15:f1:fc:ed:
         59:e7:09:b1:a1:44:20:2f:29:8e:74:19:5e:5b:34:e6:9a:2b:
         9f:10:15:eb:65:6d:44:ab:53:87:06:e1:83:a4:7b:f4:1b:31:
         02:af:ff:33:68:b6:20:ec:9d:4f:c7:e9:87:5a:dc:f9:2d:e6:
         c2:db:18:23:42:91:41:75:af:b8:e8:11:6a:c1:49:09:29:6e:
         2a:c3:c3:24:11:1c:a4:8c:85:43:97:8b:a3:c4:15:b9:45:8f:
         6e:a1:4b:8e:5a:5e:a2:c8:8c:6c:ba:9b:6a:1b:25:9f:12:85:
         45:87:fb:18:fe:74:bf:f6:0b:35:2f:8a:46:93:48:03:e0:3d:
         57:e0:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:06:52 2026 by rpki-client