Error: rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.mft
File:                     C8LuZhNiKANtM2Apm0qDGV6th8U.mft (raw, json)
Hash identifier:          ZmqWJRDqRoFuVaUY3kCRGLdSjby6J/0fft+eugRzUIg=
Subject key identifier:   7D:0C:5F:03:77:DF:E1:BC:D2:39:34:D3:54:BF:6C:54:2F:22:35:78
Authority key identifier: 0B:C2:EE:66:13:62:28:03:6D:33:60:29:9B:4A:83:19:5E:AD:87:C5
Certificate issuer:       /CN=F367C1FCAF/serialNumber=0BC2EE66136228036D3360299B4A83195EAD87C5
Certificate serial:       094A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C8LuZhNiKANtM2Apm0qDGV6th8U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.mft
Manifest number:          0946
Signing time:             Mon 26 Oct 2026 01:50:48 +0000
Manifest this update:     Mon 26 Oct 2026 01:50:47 +0000
Manifest next update:     Wed 28 Oct 2026 01:50:47 +0000
Files and hashes:         1: C8LuZhNiKANtM2Apm0qDGV6th8U.crl (hash: 2+5r5HVWfBeFdx3HPCjeg8hmGiryI5QnvYaYGxGFXTo=)
                          2: DFF59CB6015811EFA0548F5D017001B1.roa (hash: ad0ZLY1g7kmBztnFK6luNNN+TT29RE29LZBJIZEritM=)
                          3: 0FF9F416015911EFAA054A5E017001B1.roa (hash: A/KE/DRbcAD3WaHdpO7dzDRZtCH71MkqhhsLcFOUCvA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C8LuZhNiKANtM2Apm0qDGV6th8U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 01:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2378 (0x94a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C1FCAF, serialNumber=0BC2EE66136228036D3360299B4A83195EAD87C5
        Validity
            Not Before: Oct 26 01:50:47 2026 GMT
            Not After : Oct 28 01:50:47 2026 GMT
        Subject: CN=6adeb1f8-b654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0a:d9:0f:5d:ea:3b:61:dc:e4:cc:b1:4b:c1:
                    e2:9e:f4:01:46:66:ae:d0:25:4a:a8:ae:da:56:a1:
                    94:0f:13:37:48:5b:16:fc:ea:f0:41:7e:a0:ae:5d:
                    74:0f:cf:78:82:63:be:e3:69:e0:f7:ed:18:a4:70:
                    9b:d7:34:18:c1:2e:0c:0d:a0:a1:f3:95:54:00:d7:
                    ee:f0:ee:9c:94:db:50:38:5c:df:e9:22:8a:37:07:
                    c4:13:1a:39:30:0f:d9:73:48:b5:fe:b3:99:21:f8:
                    d4:5e:5e:01:54:a1:66:31:79:57:ad:be:80:d5:fc:
                    d0:92:f9:fa:56:5b:ce:6c:b2:8a:08:06:95:a4:93:
                    1b:5a:02:3d:be:ec:b2:c9:fd:ae:a3:c1:28:4d:d8:
                    4b:42:af:74:5a:2c:87:38:c9:10:d1:95:fe:09:1b:
                    08:b8:c1:d2:7c:b2:0a:f9:de:30:3e:3e:64:91:a9:
                    64:ff:3e:da:70:cf:0c:1f:af:fc:20:4f:1f:aa:52:
                    b9:a9:c9:54:2b:ac:3c:5b:48:a6:b9:6a:a0:8e:3d:
                    65:62:1e:74:bf:78:bd:df:e7:80:a7:41:a6:05:52:
                    b8:c9:90:f3:d6:20:e6:99:19:dc:18:5e:2d:16:45:
                    25:1a:67:b9:a1:f5:11:1f:c4:d3:8c:ae:14:37:5b:
                    f9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0C:5F:03:77:DF:E1:BC:D2:39:34:D3:54:BF:6C:54:2F:22:35:78
            X509v3 Authority Key Identifier:
                keyid:0B:C2:EE:66:13:62:28:03:6D:33:60:29:9B:4A:83:19:5E:AD:87:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C8LuZhNiKANtM2Apm0qDGV6th8U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C1FC/802083BCB56411EAAC13465EF8AEA228/C8LuZhNiKANtM2Apm0qDGV6th8U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:06:a1:a0:c3:6a:86:39:e0:f2:4e:a8:33:77:61:1f:27:3c:
         5b:67:e9:b3:b7:0c:bd:12:86:c0:f1:38:8c:03:b3:5e:08:8b:
         10:55:83:22:dd:03:62:24:8f:24:cd:b1:7c:b8:e3:9a:64:6e:
         e5:ff:9f:59:1c:b0:4f:d9:a5:c6:27:77:b4:e1:57:24:cb:74:
         38:91:ed:b6:e4:f4:9c:02:08:d5:50:30:be:4d:c6:a0:bf:a0:
         27:0d:c8:f0:cc:08:00:3b:0f:88:b1:82:6a:8c:f9:e9:9a:69:
         c1:2c:66:1f:67:47:c6:15:a8:9c:97:62:9a:cd:86:ba:ae:0a:
         28:a5:7c:36:2b:53:0f:92:d0:00:ad:32:a1:44:43:43:a1:db:
         7f:15:b8:e1:ac:36:2e:7d:2c:f1:d2:b4:13:67:b9:f9:d8:14:
         28:0c:50:01:4d:b7:cd:bd:7e:cb:b0:cc:e6:f5:b1:11:d4:a1:
         b5:e2:79:f9:c5:6d:e0:c0:d3:de:62:eb:c7:69:1d:63:c7:e9:
         8d:8b:2c:6e:2a:86:ea:6f:6e:95:9b:8d:80:1a:10:bd:34:c8:
         4e:96:28:0d:1f:b9:4d:09:ea:a3:35:a6:95:e4:8e:ad:5b:f9:
         b9:d6:ec:96:3e:e7:9b:1c:df:b2:e5:b5:94:12:9f:17:0c:44:
         de:34:3d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:32:07 2026 by rpki-client