Error: rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
File:                     EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft (raw, json)
Hash identifier:          BH8ckmsY80h2oT+O5gFCpI6Dwno0QqcmwM1tcCeLZMA=
Subject key identifier:   DD:D1:61:FE:89:85:E5:2B:EA:4A:C7:18:D8:80:78:2F:26:65:52:C1
Authority key identifier: 11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
Certificate issuer:       /CN=F3692425AF/serialNumber=11E23E8B2C8BC39CFA27519820176ACB343DC846
Certificate serial:       039E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
Manifest number:          039D
Signing time:             Tue 27 Oct 2026 04:09:37 +0000
Manifest this update:     Tue 27 Oct 2026 04:09:37 +0000
Manifest next update:     Thu 29 Oct 2026 04:09:37 +0000
Files and hashes:         1: EeI-iyyLw5z6J1GYIBdqyzQ9yEY.crl (hash: bYDD+MpIX2mZjJNL1AQf8WI7ll1VPOCAEg88538aFJk=)
                          2: A2753E20085E11EFA72EA420017001B1.roa (hash: HdajjDnJFTsdeeb8I0ztD/XdQiYbnMj3dOgOhC5cpoo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 926 (0x39e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692425AF, serialNumber=11E23E8B2C8BC39CFA27519820176ACB343DC846
        Validity
            Not Before: Oct 27 04:09:37 2026 GMT
            Not After : Oct 29 04:09:37 2026 GMT
        Subject: CN=6ae02401-0350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:e4:37:c7:c3:cc:f1:8c:45:45:78:d1:84:
                    d3:6f:f7:d2:ca:da:a8:91:b0:d5:fe:10:cb:dd:58:
                    32:d5:25:0e:82:43:b1:18:d8:70:42:9b:ff:6f:9a:
                    84:ed:fc:ca:82:0c:a3:0c:f3:f6:a3:b1:d2:4a:e5:
                    32:8e:ec:a3:c0:d7:92:43:09:64:07:40:c7:35:be:
                    66:61:1d:fe:5e:6a:00:4b:30:94:0e:0a:e0:62:48:
                    3a:14:d9:ed:c0:0e:ee:04:61:51:20:47:c0:02:fe:
                    f0:fc:4e:d6:11:62:d9:26:bf:4a:ab:39:49:ce:82:
                    ef:cd:b7:ee:87:87:f7:aa:de:da:5e:44:a8:d0:be:
                    8b:21:88:2d:e7:02:e1:43:1c:c8:63:1e:69:5b:7e:
                    be:9d:8e:f8:e3:b3:7c:7d:3e:e9:8e:bb:18:5a:66:
                    67:74:f4:5e:0d:35:51:bf:45:a8:fc:87:ec:cb:b7:
                    eb:57:bc:20:de:25:0b:ea:81:e6:98:d8:68:97:46:
                    60:ed:fd:aa:1c:31:d5:7e:10:17:34:bc:58:1f:4e:
                    85:e4:5c:12:76:77:85:4e:11:77:fb:70:7a:ef:10:
                    15:10:db:64:1d:16:51:95:de:c3:d0:8e:10:9a:f2:
                    48:ee:27:e4:ec:01:74:ee:46:ca:24:72:ad:72:27:
                    9a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D1:61:FE:89:85:E5:2B:EA:4A:C7:18:D8:80:78:2F:26:65:52:C1
            X509v3 Authority Key Identifier:
                keyid:11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fa:61:cf:a2:7d:20:1d:e0:f2:50:e2:f3:41:c9:07:9f:2a:
         9b:58:15:b3:35:27:30:2f:78:39:77:58:3f:8f:76:0e:88:56:
         bf:40:88:c3:fb:36:73:a2:41:f7:69:12:2f:41:a0:1c:9c:3b:
         88:54:e8:61:2c:2b:9a:cc:41:3e:00:a6:00:8a:99:bf:01:5b:
         72:4e:f9:32:bc:25:f9:98:b0:3a:0f:50:81:10:f7:b2:94:a2:
         aa:9c:89:6d:10:3c:d6:0a:27:2f:10:87:f7:01:39:94:e4:7d:
         86:a3:30:fb:7a:61:76:e3:88:c9:37:ef:5a:26:35:44:9c:96:
         b0:7b:63:c1:e8:bf:77:f8:22:47:13:0e:95:63:95:6c:77:32:
         f0:46:c4:1d:73:69:58:47:49:49:99:af:9a:d7:93:92:b4:03:
         24:b8:60:58:b2:f6:81:99:97:cc:7f:b7:68:cf:42:7b:2b:33:
         09:56:24:58:3a:ec:97:b6:26:9b:e6:b0:40:51:ea:45:a2:6a:
         97:29:6c:78:17:45:39:4e:21:73:3a:42:75:40:bc:2e:91:8f:
         f6:30:50:8b:e3:21:7e:a6:a4:05:e6:01:fe:ae:a0:e5:6b:1c:
         1d:a1:ec:e8:59:a4:b0:6a:7e:40:01:2e:e2:d5:9d:5e:d0:a6:
         da:9d:42:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 07:42:28 2026 by rpki-client