Error: rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
File:                     RSGre8up5c6Zxxr-vyNySLagDAQ.mft (raw, json)
Hash identifier:          df9yT4nvcy6TI7erTlpT5/+fW7gzwQuPhz8oWI43QIU=
Subject key identifier:   70:B6:D8:CA:07:33:15:E9:3C:EB:6D:60:12:D3:7C:EE:D7:AA:A3:B1
Authority key identifier: 45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04
Certificate issuer:       /CN=F368CB9CAF/serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
Certificate serial:       A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
Manifest number:          A6
Signing time:             Tue 27 Oct 2026 05:36:55 +0000
Manifest this update:     Tue 27 Oct 2026 05:36:55 +0000
Manifest next update:     Thu 29 Oct 2026 05:36:55 +0000
Files and hashes:         1: RSGre8up5c6Zxxr-vyNySLagDAQ.crl (hash: DNHL0jEF4i0PTpqtry9wUuRWL0EwyQgdsB1uDknTRrY=)
                          2: BCD184B8BDA611F1933A93C8CE1D38B0.roa (hash: PMpgQUlvGywhYVxfHxmSeAuK4wapTHI1PVbZxrKjNFU=)
                          3: ECF7E816529011F19C538BF1CE1D38B0.roa (hash: KeoVSn8KB99E9DkmWp38WX9SJJQPBicrHWJ8t32m24w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 05:36:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CB9CAF, serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
        Validity
            Not Before: Oct 27 05:36:55 2026 GMT
            Not After : Oct 29 05:36:55 2026 GMT
        Subject: CN=6ae03877-1859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:51:c6:2a:82:ab:9f:28:39:c6:a5:86:1f:42:
                    ed:f3:0e:9f:d1:f1:17:2d:0b:10:83:b3:a6:fd:b8:
                    38:ab:d6:5d:c7:20:08:94:83:3f:2b:bf:49:94:8a:
                    33:43:21:64:d3:84:5f:7f:8a:cf:e0:c3:32:4f:bd:
                    c3:74:11:a2:3f:fb:2f:0b:72:7a:91:32:cb:27:aa:
                    78:16:21:4c:59:d0:1c:9d:ad:2f:32:25:45:b2:aa:
                    f8:11:f8:96:d4:6f:88:1a:b4:7c:5c:f2:00:97:16:
                    d4:79:4d:6d:7d:d4:f5:ce:d0:96:ae:07:94:10:0d:
                    ac:29:fb:41:f8:24:48:11:55:bc:05:85:b9:ac:bd:
                    b2:91:46:f1:95:f3:4e:54:3d:9f:5d:fa:8a:3e:d6:
                    3a:d9:a7:68:38:ec:3b:3c:46:5b:e8:53:0f:ee:c8:
                    34:ed:02:0a:99:4f:fa:ca:fa:d8:c0:45:9e:95:66:
                    a5:fd:b9:52:05:e4:33:ee:91:31:c7:b3:25:ed:32:
                    69:df:2d:f1:56:1a:12:fa:c2:69:61:27:ef:33:c8:
                    aa:71:bc:76:b4:70:b3:f1:99:b5:31:38:8f:57:f7:
                    8a:8e:94:49:11:02:8b:29:cd:f7:b3:19:88:f8:e0:
                    af:4f:e8:e5:38:79:18:85:4c:16:b2:da:bd:04:85:
                    d3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:B6:D8:CA:07:33:15:E9:3C:EB:6D:60:12:D3:7C:EE:D7:AA:A3:B1
            X509v3 Authority Key Identifier:
                keyid:45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:78:b2:72:b4:9d:2a:44:7a:9b:f5:58:c7:ca:31:32:30:61:
         2e:51:27:fd:08:98:20:f1:92:45:91:0c:15:81:7a:a6:da:6b:
         f5:39:52:d9:7c:63:a0:86:2c:04:23:37:6c:9c:e2:e2:73:bf:
         57:35:91:f6:39:ec:18:91:88:9a:ad:16:b6:75:df:4a:3e:42:
         92:17:ba:a3:51:e8:c3:43:cd:3f:2e:cc:62:df:24:4c:15:75:
         2c:28:89:b5:89:a8:2c:a3:d8:55:d8:6a:98:24:0d:33:35:65:
         a8:5f:35:49:6d:09:d8:4d:c6:42:40:70:80:a6:e7:57:3f:81:
         cb:b8:5d:ab:7c:11:1f:08:3d:c2:0f:0f:b8:02:bb:14:75:20:
         7e:19:eb:1f:d4:c6:9a:b0:ec:22:63:d2:02:af:5e:f7:78:4e:
         d4:93:f8:a4:ae:0b:93:d1:b9:f0:e7:d2:13:31:db:38:8c:d9:
         d6:e8:25:23:9a:21:e9:cb:5a:0c:38:7e:01:ba:47:80:0d:89:
         00:6a:9b:90:ff:ba:f5:7f:7d:45:56:20:fd:e8:59:64:81:b2:
         1e:f7:62:9b:5e:a9:bc:73:d3:6b:d4:43:57:99:3c:5c:d5:53:
         f2:44:68:57:3a:7d:25:e5:c4:89:4f:61:4e:b6:c6:df:4f:71:
         df:bd:84:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:50:12 2026 by rpki-client