Error: rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
File:                     X-MxcqYILFSryRHxn1edSf2AmBQ.mft (raw, json)
Hash identifier:          xZKzjdtAeu832xEEe/9Rz0FJzzwVhxqdMaDDjmIbpts=
Subject key identifier:   99:3E:DB:5D:F8:56:56:4A:26:82:48:4A:32:CD:6D:73:FF:03:67:31
Authority key identifier: 5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14
Certificate issuer:       /CN=F3690793AF/serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
Certificate serial:       07F5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
Manifest number:          07F1
Signing time:             Tue 22 Sep 2026 02:06:44 +0000
Manifest this update:     Tue 22 Sep 2026 02:06:43 +0000
Manifest next update:     Thu 24 Sep 2026 02:06:43 +0000
Files and hashes:         1: X-MxcqYILFSryRHxn1edSf2AmBQ.crl (hash: b26hW5q0gWR3YcrchUozxzRuBiLbXRkF0Wm9gRsFZCw=)
                          2: AEEE236EC67911EEAD12F8AE775412E6.roa (hash: T0oca2AEcgFcrK1PsYZJPTBdlzaX1LQylDi6J2hgcIM=)
                          3: 74F314B2C67911EEB6CAC8AE775412E6.roa (hash: yQ5Y5mos3jGJ876UZawgqxeARaqaofzDLCBHBUrxZE4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2037 (0x7f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690793AF, serialNumber=5FE33172A6082C54ABC911F19F579D49FD809814
        Validity
            Not Before: Sep 22 02:06:43 2026 GMT
            Not After : Sep 24 02:06:43 2026 GMT
        Subject: CN=6ab1e2b4-9f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:27:5c:d2:bf:bb:e3:17:77:28:2d:64:c4:87:
                    1e:b1:ab:d7:fb:1b:09:ec:5b:0f:60:68:e4:d5:04:
                    59:3f:0c:7f:e2:e6:90:03:7b:10:b2:4f:69:d6:40:
                    3e:47:26:17:89:e7:a2:d9:be:a6:59:69:5e:9c:67:
                    ab:0a:3d:b6:21:10:cd:7c:44:fa:f4:42:45:51:b4:
                    95:a5:35:a7:78:79:56:83:8c:63:ba:57:d5:21:f0:
                    f1:10:1b:ba:d6:9a:31:49:7d:71:7a:41:17:5f:f3:
                    a6:16:e4:cf:aa:9a:85:88:2e:b1:22:3c:57:70:e3:
                    35:1a:57:53:07:91:41:29:81:2f:99:8e:c8:67:1e:
                    39:2f:4e:a8:11:3c:8f:4b:9d:78:4e:c7:cc:be:a3:
                    20:4b:7f:ab:bc:77:e6:99:74:a0:d4:45:dd:39:54:
                    00:e3:fc:86:c2:e5:6f:47:4b:dd:6f:df:f1:94:e6:
                    ba:ff:93:a2:ce:cd:75:b9:08:b1:6a:8e:84:f3:87:
                    2e:e5:31:e2:ac:9a:d5:26:f8:3a:64:01:f9:d3:42:
                    e9:ad:fc:30:98:af:51:4a:c9:4c:7e:bc:e7:03:ea:
                    52:04:68:d4:1d:fc:3e:09:86:06:2d:26:4f:a4:4d:
                    84:7d:b9:dd:f9:0e:68:9e:c1:77:2b:45:c1:be:05:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3E:DB:5D:F8:56:56:4A:26:82:48:4A:32:CD:6D:73:FF:03:67:31
            X509v3 Authority Key Identifier:
                keyid:5F:E3:31:72:A6:08:2C:54:AB:C9:11:F1:9F:57:9D:49:FD:80:98:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X-MxcqYILFSryRHxn1edSf2AmBQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690793/A252AAC8A42411EBA135D26EF8AEA228/X-MxcqYILFSryRHxn1edSf2AmBQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b6:10:cc:c3:85:5e:20:ef:dd:69:05:94:ec:54:4c:31:c3:
         68:cf:ee:be:aa:83:f9:e5:fa:1d:61:ca:73:e3:bf:8a:ad:f4:
         59:11:33:d0:d3:0d:be:30:59:5c:d9:58:39:ac:ac:f7:8e:ab:
         df:60:66:e9:d3:72:a4:5b:aa:ed:8c:60:1b:ae:cc:b6:18:4f:
         18:e2:8a:8d:41:2a:74:6e:05:85:1a:27:6f:d7:a6:4b:d2:ef:
         a0:98:fe:1d:ad:4f:af:f8:ca:81:78:e9:cc:48:2e:8f:ba:fc:
         87:40:fc:9b:6d:b8:bf:a7:13:82:e0:1b:07:1a:29:33:a6:e6:
         7e:79:58:15:3f:1f:a0:cd:c0:33:04:ad:18:b3:9c:b0:fc:00:
         d6:69:01:3f:27:f1:27:82:20:db:a8:5d:b8:d8:27:2e:9f:11:
         15:6a:04:54:4b:3f:fe:2e:eb:62:fc:ed:8c:52:06:ce:99:f3:
         c8:c0:9e:cd:d9:93:db:b9:8e:7a:dc:1b:b4:24:13:87:91:b6:
         55:de:c6:3b:ae:ce:49:a8:4f:4c:a4:73:79:0b:1e:14:95:21:
         2b:68:99:06:3d:26:ad:ee:5c:5e:93:b8:b5:86:14:0f:72:e7:
         c9:3d:78:b9:58:9f:03:8d:d4:fc:55:aa:17:24:c3:20:39:5a:
         a1:0f:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:12:08 2026 by rpki-client