Error: rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
File:                     8F9eT4U_K8znmCtaZOAuRn1NY3k.mft (raw, json)
Hash identifier:          wsT3OY0WQ2951TfdkKqfpz0BRVyztlhgRES705Sd7PU=
Subject key identifier:   3F:59:6C:25:DC:8C:E1:15:45:40:2B:31:D6:F9:9E:63:A5:40:38:D3
Authority key identifier: F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
Certificate issuer:       /CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Certificate serial:       02F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
Manifest number:          02F3
Signing time:             Sat 24 Oct 2026 04:36:21 +0000
Manifest this update:     Sat 24 Oct 2026 04:36:20 +0000
Manifest next update:     Mon 26 Oct 2026 04:36:20 +0000
Files and hashes:         1: 8F9eT4U_K8znmCtaZOAuRn1NY3k.crl (hash: Zpn+c5ZRlVUDZsgf/QQj7Ey6I2vMGStn7hUy+4OQo4E=)
                          2: 0587256289A811EF93AD2A50762E951A.roa (hash: 6JhA3S1UqVY6eY/SMX4lyeIJmn8FI+S8y3sFftIT63s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 04:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 756 (0x2f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CD07AF, serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
        Validity
            Not Before: Oct 24 04:36:20 2026 GMT
            Not After : Oct 26 04:36:20 2026 GMT
        Subject: CN=6adc35c5-bc43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ae:a0:c1:40:28:47:66:13:6d:b3:1d:92:48:
                    b0:47:d5:bf:79:a6:f2:2a:01:9a:26:d5:11:c5:e4:
                    e8:9a:d0:39:f0:08:10:a0:c4:f2:83:30:23:f2:5e:
                    c3:a1:c4:0f:cc:f3:e2:a8:95:84:cd:54:35:91:fb:
                    d6:12:12:46:e3:8f:98:9f:69:28:0f:01:dc:9d:6d:
                    bf:6b:ee:a5:28:de:e7:4e:03:c8:ef:0f:06:46:56:
                    b7:32:0e:db:96:1c:f2:ff:47:50:9b:0a:52:a6:68:
                    15:4a:26:8b:c5:62:43:7d:84:b4:f8:1f:80:68:f7:
                    e9:46:d3:a2:3f:61:1a:5a:80:c2:58:88:ec:13:54:
                    86:88:3f:48:f5:6e:dc:bf:c6:4a:41:c6:32:c1:61:
                    99:df:e7:27:78:30:93:92:01:7d:37:7a:44:1a:ff:
                    89:3b:19:9e:e3:33:51:04:78:15:84:08:7f:41:4b:
                    5a:90:9b:99:5f:49:46:ee:f1:93:96:3e:bc:fb:4c:
                    1d:8f:86:0a:89:d8:68:ec:10:0c:55:8c:35:7b:45:
                    c0:c8:05:08:f7:4f:85:40:76:dd:d7:10:50:24:58:
                    e1:89:a8:85:57:ac:5a:c9:d9:a5:1e:cc:c4:7e:4c:
                    bc:e2:5b:9c:57:55:09:d1:fd:b3:67:3f:e6:6a:b3:
                    a3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:59:6C:25:DC:8C:E1:15:45:40:2B:31:D6:F9:9E:63:A5:40:38:D3
            X509v3 Authority Key Identifier:
                keyid:F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d0:dc:c9:04:75:1b:21:66:99:67:32:55:09:f2:ed:9d:6b:
         e6:96:3e:19:2e:ee:fc:6e:e5:e1:0a:3b:a5:bf:83:55:06:16:
         3b:cf:b8:3a:8b:29:ab:e6:af:5f:11:78:89:03:cc:62:f2:7f:
         78:7a:99:87:cb:ce:10:cf:a2:fb:d1:3b:91:c1:43:31:a0:34:
         3f:56:be:7c:8e:af:f6:96:f5:85:ad:52:a5:ba:d1:f2:58:fe:
         b8:2f:f5:bc:ba:58:54:aa:e0:a6:7c:01:44:01:15:87:fb:f8:
         62:4c:7a:9f:4f:95:fb:98:0b:dd:19:fe:0a:25:1e:39:c0:0f:
         05:f4:34:bb:fa:1d:ca:74:e1:16:53:fd:ac:48:76:52:1f:c1:
         f4:2f:a4:47:21:32:8a:4c:0e:a7:04:b6:5e:f4:32:bb:d0:25:
         57:7f:ad:fc:32:7f:b6:ca:e6:06:71:43:6b:40:30:f9:ac:11:
         24:3c:a6:bc:72:03:a8:68:8c:cd:fd:77:23:8d:54:6c:09:d0:
         23:9c:db:db:59:29:2d:69:a7:b7:93:4e:4c:de:79:d9:14:c1:
         2d:fc:32:14:85:36:3a:e6:db:a7:63:c4:c1:21:0d:b3:97:97:
         8d:65:9a:4d:56:4c:81:b7:91:b3:50:ad:da:28:ca:15:8f:49:
         59:93:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 05:57:57 2026 by rpki-client