Error: rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
File:                     fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft (raw, json)
Hash identifier:          Zx+2JjQvlVU3cMhwyKwJq0160d664/bKoxhwoDjiO2M=
Subject key identifier:   30:C8:42:15:01:A3:6A:EE:3C:28:40:8F:7B:B1:B3:22:FB:67:67:AA
Authority key identifier: 7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57
Certificate issuer:       /CN=F367F176AF/serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
Certificate serial:       0790
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
Manifest number:          078E
Signing time:             Sat 24 Oct 2026 02:21:26 +0000
Manifest this update:     Sat 24 Oct 2026 02:21:25 +0000
Manifest next update:     Mon 26 Oct 2026 02:21:25 +0000
Files and hashes:         1: fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl (hash: g6LUDC+xP6LhkfVm727iYHpAMeaLh7Zmz0hXtgq91AY=)
                          2: EAD3728A22BB11F1804B79D3DAE4EC9C.roa (hash: L/u9CHVxjHqFq2RkIEdwQz5uVOsNvPvTRN90oLFbdBw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F176AF, serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
        Validity
            Not Before: Oct 24 02:21:25 2026 GMT
            Not After : Oct 26 02:21:25 2026 GMT
        Subject: CN=6adc1626-c136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:9b:de:1b:b6:17:20:7d:86:f3:e0:95:7c:
                    24:41:90:9e:6c:6c:fe:14:ef:78:43:e8:db:30:44:
                    dc:15:69:7e:54:9a:fe:d9:69:c0:7e:3b:a9:42:f6:
                    80:5a:6a:7f:04:64:95:73:17:c6:15:fb:27:c9:ea:
                    d6:e9:0c:cf:88:99:67:8f:e0:1d:06:33:c1:08:68:
                    ed:7e:77:2d:bd:bb:dd:d3:25:04:a1:ec:29:8a:f2:
                    03:f6:e9:bd:b8:16:97:76:6e:d5:5c:b1:44:de:28:
                    e7:9b:41:d9:76:8b:70:7d:4f:05:d4:ce:fd:fb:2b:
                    68:11:f9:bf:60:42:67:af:cf:3c:3c:31:f9:d2:0a:
                    e4:ab:c5:a3:fd:46:a9:f5:12:83:15:a9:5b:95:84:
                    ac:c0:0a:52:97:09:8f:46:40:9f:d0:39:7e:13:06:
                    ee:ee:2b:bc:91:07:3c:d2:c0:af:6a:d6:e2:8f:a1:
                    9b:84:5d:99:87:c4:6c:44:d1:ad:cc:c3:4e:53:e8:
                    eb:e2:77:f4:12:fd:8f:ae:bc:7a:ee:17:0b:19:e2:
                    27:79:b6:21:63:b2:53:e1:bd:a4:5b:cd:d0:98:c2:
                    2f:f7:bf:5c:ca:20:78:94:e0:eb:e1:2a:b7:05:77:
                    65:4c:e8:55:94:72:65:79:c0:11:f4:32:43:cc:91:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C8:42:15:01:A3:6A:EE:3C:28:40:8F:7B:B1:B3:22:FB:67:67:AA
            X509v3 Authority Key Identifier:
                keyid:7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:de:a4:bc:fc:08:c4:2b:04:6d:f4:3b:b9:e5:d7:c1:d4:
         dc:52:22:65:1b:67:96:88:2e:f0:80:66:8f:58:a8:f3:86:7f:
         60:aa:46:15:0b:e9:98:c8:6e:34:87:f4:00:03:d3:97:13:d1:
         ee:a9:53:37:7d:6e:f0:cb:6f:e3:fe:9b:a9:10:5c:ef:3e:b2:
         e9:e5:f1:31:1b:a9:85:d1:2a:85:b9:a8:73:1f:74:a2:52:aa:
         bf:d3:83:a8:b8:4a:3c:9f:d0:11:85:10:40:23:a3:66:71:82:
         3f:a3:1c:db:c4:a1:13:46:32:04:cb:25:88:7c:a5:0f:4d:14:
         93:91:d0:0b:19:94:fb:a6:5a:11:27:23:6a:10:ee:3e:75:60:
         b4:8d:36:12:34:4b:ee:3a:9e:8f:ad:4e:3a:d4:ae:59:01:a6:
         6f:aa:18:3e:90:45:a0:43:72:20:a9:64:fa:d6:14:ad:28:d7:
         8a:ec:3d:8b:0d:a0:ea:ac:40:a9:49:1a:e6:41:81:4a:21:6b:
         dc:7b:fd:ae:bd:86:54:2d:cf:18:93:71:1c:40:16:22:09:94:
         1b:6d:b9:7b:49:1c:d7:6d:d0:ba:c3:35:9a:72:3e:58:41:6b:
         42:2b:27:ef:cf:a1:6e:b3:c3:e8:00:56:30:7c:ed:b5:39:10:
         4a:5a:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:13 2026 by rpki-client