Error: rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
File:                     z29NYNDVwubTeacR0bavARMMKmw.mft (raw, json)
Hash identifier:          AmjNGYI+Ekk+/wqHKjCQOYys5Vb2xF7W9qi2DxbRcTM=
Subject key identifier:   37:12:BA:0E:75:E6:AD:FC:CD:9D:41:EC:FE:5F:E8:CD:5B:0D:59:AE
Authority key identifier: CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C
Certificate issuer:       /CN=F367C385AF/serialNumber=CF6F4D60D0D5C2E6D379A711D1B6AF01130C2A6C
Certificate serial:       093C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
Manifest number:          0936
Signing time:             Mon 26 Oct 2026 01:52:12 +0000
Manifest this update:     Mon 26 Oct 2026 01:52:11 +0000
Manifest next update:     Wed 28 Oct 2026 01:52:11 +0000
Files and hashes:         1: z29NYNDVwubTeacR0bavARMMKmw.crl (hash: yWidU7ZXkp1OQUxvVx8WnPO7kup9SSDCuwtLb0sLkew=)
                          2: 7B87C448C60111EA86B4873EF8AEA228.roa (hash: 8s32B8dMmFio0RMWbrESmIIs0504hiJMh4Fs90vcTTY=)
                          3: 0AAEE3AABF8811F1AB7F94FFCE1D38B0.roa (hash: gQqa9AlV9Z2Byv7CjmG9fG0CuzPYtjUUiLHcDFXkR7o=)
                          4: AE4BC78AC60111EA82B1BE3EF8AEA228.roa (hash: pyY/EVidRCr9GBFzwtVx7kYqYWYP30k2C6JFA5pk9G4=)
                          5: 3EAACEF8C60111EAA251483EF8AEA228.roa (hash: Nv6f6c3Twv+vS/nsoIGBs8lzaY3R98pljU3B+YdTgI4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 01:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2364 (0x93c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C385AF, serialNumber=CF6F4D60D0D5C2E6D379A711D1B6AF01130C2A6C
        Validity
            Not Before: Oct 26 01:52:11 2026 GMT
            Not After : Oct 28 01:52:11 2026 GMT
        Subject: CN=6adeb24c-77b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:37:36:59:3a:a8:ce:71:03:66:c6:d3:a5:d0:
                    45:15:67:d5:6c:f1:ee:f6:98:17:39:1e:3c:4a:74:
                    37:a9:83:f3:ea:f0:ef:94:46:c4:3a:a9:c2:f0:eb:
                    fa:2f:3e:af:49:25:39:09:8c:21:f3:d5:99:41:61:
                    a9:db:95:a0:a1:2a:0d:2a:6c:25:0c:39:97:d5:82:
                    7a:47:0d:b1:30:80:77:02:07:f3:6b:49:4a:a3:d1:
                    bf:7c:05:2b:cb:ea:1a:92:65:5e:6e:0c:fc:22:8b:
                    8b:ae:6b:fa:23:dd:de:ff:fb:2e:2b:e1:c4:bf:78:
                    e2:85:d2:77:5f:15:b9:20:06:b6:03:f9:42:79:e3:
                    cc:af:76:21:94:d0:72:89:13:43:cd:cf:4c:7c:f7:
                    93:19:58:2f:ed:68:01:a6:27:ec:d8:c5:af:51:ba:
                    96:c5:d4:96:2b:99:bd:6a:cb:95:f1:34:14:b7:3d:
                    f8:17:34:91:50:06:21:87:3f:b3:57:b9:8f:cc:a5:
                    23:c6:fc:ba:16:f2:6e:3b:16:10:33:3f:20:a3:c6:
                    8c:bf:7b:fb:78:e8:7a:8b:80:69:91:0f:68:46:76:
                    b1:ba:2a:2e:bd:51:7d:73:37:63:42:9a:e5:10:19:
                    b6:5a:a1:43:f1:93:5e:de:93:95:b6:6c:52:1f:c9:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:12:BA:0E:75:E6:AD:FC:CD:9D:41:EC:FE:5F:E8:CD:5B:0D:59:AE
            X509v3 Authority Key Identifier:
                keyid:CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:97:52:56:45:65:f4:50:5b:fa:8a:5a:ef:69:1c:82:2f:4a:
         93:4e:6e:36:e5:ec:77:8b:c1:cd:af:8c:30:8f:98:21:ac:d0:
         e1:6c:5c:13:6e:26:f3:3b:ac:90:29:8f:8b:68:30:85:3e:65:
         e4:05:16:ad:31:c5:bc:e7:87:98:7a:05:f3:58:fe:68:67:29:
         36:c5:60:ed:e2:c9:05:25:b8:81:4b:1c:1a:d0:e4:06:63:f4:
         f1:1b:3f:85:33:cc:ba:bf:a4:f8:d0:7b:55:5e:b6:5a:04:f5:
         6d:b4:a2:fe:55:73:94:b5:03:e7:1e:fc:5b:41:63:c8:6d:68:
         d1:db:3f:0c:c7:5d:43:3d:23:99:b9:f8:cb:3e:e5:0a:90:f3:
         a3:f9:4f:42:c7:f6:5a:3c:2e:ca:0d:7a:9e:52:2a:40:10:d8:
         05:47:85:7a:7d:6f:42:65:b8:eb:39:f1:62:0f:75:db:6c:e2:
         e0:83:23:b1:41:72:14:54:a5:d1:92:cd:16:ab:e5:c0:3f:af:
         a8:24:5a:80:8d:61:87:e5:9f:6e:94:22:4a:54:dd:1c:35:c5:
         f8:c7:38:cd:de:54:00:ec:d1:39:b0:67:94:ce:e5:ac:e1:85:
         51:0e:96:99:9a:2b:33:d7:a4:f9:f1:49:a7:8e:dd:91:d7:88:
         91:f8:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:59:28 2026 by rpki-client