Error: rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
File:                     6vTkF_QNHJDUbdlViOspDev7ius.mft (raw, json)
Hash identifier:          xTkNo3YgAUZHX/A7EQaU9T23t+92Q23OOfwVFii0Rx4=
Subject key identifier:   C9:2A:F2:2B:D9:2A:D7:C5:BF:D8:C2:9B:80:D6:8E:83:BE:74:20:24
Authority key identifier: EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
Certificate issuer:       /CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Certificate serial:       04BB
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
Manifest number:          04B9
Signing time:             Thu 10 Sep 2026 03:31:04 +0000
Manifest this update:     Thu 10 Sep 2026 03:31:04 +0000
Manifest next update:     Sat 12 Sep 2026 03:31:04 +0000
Files and hashes:         1: 6vTkF_QNHJDUbdlViOspDev7ius.crl (hash: xyMX1O8snGLzDJnnuWzveexZj1fkl9MCaPQ50JQoeiA=)
                          2: D505C1903E8F11EFAE9EEE8B762E951A.roa (hash: NwidDV20CYZEDHZ6t+ZNN3IKmoqOlGtHrBQtSGaeJsg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                          rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1211 (0x4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC8BRI, serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
        Validity
            Not Before: Sep 10 03:31:04 2026 GMT
            Not After : Sep 12 03:31:04 2026 GMT
        Subject: CN=6aa22478-aa4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:c8:e0:f3:b3:87:85:5e:ee:d3:67:0c:27:
                    9b:af:fd:46:1a:1e:52:a0:49:13:92:e7:23:6c:29:
                    1a:e4:a1:c6:11:4f:0c:21:ac:75:9f:b5:5f:45:ec:
                    fe:9e:15:b8:b6:b8:01:40:7c:5d:5d:23:e6:5e:55:
                    60:d1:e1:f2:ef:81:2d:17:1a:46:33:57:0d:8d:eb:
                    e0:7d:bf:5d:8e:e0:93:7e:36:73:c0:a5:86:2b:8e:
                    cd:2c:21:5b:03:59:f2:44:46:08:08:11:17:47:c8:
                    62:4e:2f:85:78:26:25:3e:d8:69:46:50:14:87:cb:
                    ac:09:38:7f:52:d9:df:4f:f7:2c:3f:de:45:2e:d3:
                    de:8d:fa:ce:40:69:4f:88:93:af:a1:82:a0:95:69:
                    5f:b7:ff:84:a4:5e:fc:70:a2:c0:9f:62:f6:dc:16:
                    3b:96:a5:54:11:67:63:24:04:f1:a8:aa:93:d1:d7:
                    71:c9:81:68:7e:8d:4e:e2:14:19:f5:1a:18:77:be:
                    67:22:aa:d4:cf:42:8d:92:4a:5a:bc:ba:d0:ae:42:
                    80:41:af:eb:86:b5:8e:0f:20:17:1f:6d:b6:1e:eb:
                    ae:fd:9b:73:14:53:a6:61:3e:2d:40:3f:d4:57:8e:
                    a1:67:ea:b7:33:73:b2:4d:4e:d3:e7:6e:47:65:ef:
                    71:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2A:F2:2B:D9:2A:D7:C5:BF:D8:C2:9B:80:D6:8E:83:BE:74:20:24
            X509v3 Authority Key Identifier:
                keyid:EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:d8:8e:dc:13:40:da:1b:bf:90:f8:8d:c3:16:77:0c:be:ed:
         67:c6:ae:59:d8:37:9d:93:78:ce:14:6e:4c:16:ea:51:da:71:
         76:7c:22:f8:b9:f3:69:cd:d2:15:23:51:cc:44:03:e7:93:c2:
         0d:15:a7:d2:fd:cd:32:c1:af:36:44:4e:e3:5f:3b:9e:f2:b5:
         ad:04:bd:1f:e6:e2:89:8a:f9:a2:7a:c4:74:f5:7d:74:39:63:
         1a:05:18:89:cd:18:f9:74:d0:99:6d:f5:f2:04:01:b8:ad:cb:
         08:49:a3:cd:ba:ae:01:83:5a:60:38:f0:87:fe:04:7e:97:cb:
         ac:64:db:f9:db:9c:b5:33:80:cf:43:8e:52:31:34:74:32:3b:
         70:3c:b8:6c:83:17:48:b1:8d:26:dc:c1:e1:c0:06:a5:76:7f:
         e0:ac:d2:81:f6:c7:55:cf:4e:46:8d:7c:0e:89:b8:51:22:14:
         aa:c8:f3:b3:93:f9:d9:48:f9:65:b9:0a:fe:08:b2:fc:4e:fa:
         5e:b3:f4:4e:1b:d8:a7:47:02:b7:ae:bc:ec:88:ea:d9:d5:13:
         e2:cc:e9:28:1c:8d:fc:e4:60:d0:9c:df:7c:31:dc:a6:d3:b4:
         e7:84:4a:0a:9e:a2:6b:fc:7f:29:60:4e:98:19:ab:dd:82:bd:
         fb:86:71:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:58:34 2026 by rpki-client