Error: rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
File:                     HZidq5_JTcsumLGO3tmPX49Zyuo.mft (raw, json)
Hash identifier:          oaNy0zrD9ue/DHNPkhzQo/3dLk1BD1ttWiOcGhuHfrk=
Subject key identifier:   6C:90:32:B4:ED:6B:62:3D:A2:97:22:F4:DF:58:59:B9:38:9B:65:48
Authority key identifier: 1D:98:9D:AB:9F:C9:4D:CB:2E:98:B1:8E:DE:D9:8F:5F:8F:59:CA:EA
Certificate issuer:       /CN=F3693F0FAR/serialNumber=1D989DAB9FC94DCB2E98B18EDED98F5F8F59CAEA
Certificate serial:       75
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HZidq5_JTcsumLGO3tmPX49Zyuo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
Manifest number:          73
Signing time:             Sat 19 Sep 2026 09:55:20 +0000
Manifest this update:     Sat 19 Sep 2026 09:55:19 +0000
Manifest next update:     Mon 21 Sep 2026 09:55:19 +0000
Files and hashes:         1: HZidq5_JTcsumLGO3tmPX49Zyuo.crl (hash: /1qwUHjM8iT4QIGqSRncX2vJggQkDEnDrR1Gfk/ngeM=)
                          2: BD108C8C5FFD11F181D1EC1ECF1D38B0.roa (hash: 0RAAHj2DRHeGQw2/3zb6fZlhOfTZehAueYQXWNTpjEk=)
                          3: 1B7ED73A5FF211F1A5FB5EDACE1D38B0.roa (hash: tBsb3KoqmQYJZoFJrHv9Cghp2s7SewPhq2+i08NAc3U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
                          rsync://rpki.afrinic.net/repository/arin/HZidq5_JTcsumLGO3tmPX49Zyuo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693F0FAR, serialNumber=1D989DAB9FC94DCB2E98B18EDED98F5F8F59CAEA
        Validity
            Not Before: Sep 19 09:55:19 2026 GMT
            Not After : Sep 21 09:55:19 2026 GMT
        Subject: CN=6aae5c08-b9ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:3b:d8:03:df:3a:af:c5:81:34:95:2b:0d:68:
                    81:b9:7c:ce:7e:72:0a:1d:64:c3:59:59:4d:5f:69:
                    5e:fd:63:e8:6f:17:c7:8b:fa:3d:9b:7e:fe:85:01:
                    05:2e:19:85:10:0a:47:21:e0:6b:7a:9c:e6:5c:50:
                    83:07:3e:10:ee:54:0a:9a:29:7e:2b:ae:27:96:cf:
                    71:d9:bf:be:87:15:30:14:50:ce:cf:49:86:fe:66:
                    ee:3d:96:f2:f3:68:0c:a0:dc:0b:d4:67:cf:f3:09:
                    44:58:88:81:26:c9:eb:7c:ba:0b:d2:23:e5:a5:72:
                    1e:23:fd:f3:38:6f:0e:de:15:85:75:ec:e2:6d:fb:
                    64:df:06:3c:7c:c7:df:31:12:c5:44:76:32:1d:b1:
                    c6:f0:fe:dd:51:a3:49:7b:f2:a8:f1:09:78:b7:8d:
                    fc:bb:ab:71:ad:49:4a:12:7b:a3:8e:ec:1b:85:53:
                    83:43:20:1f:81:05:92:d3:59:c5:d1:e5:be:c7:2b:
                    26:81:94:49:54:85:23:1c:a8:c4:2a:67:b4:93:15:
                    fd:2e:2f:62:99:6c:ac:04:61:a0:0b:33:04:f2:4b:
                    73:13:14:16:c5:8f:6d:4f:85:b0:6e:25:4a:83:0d:
                    c3:ad:42:89:e7:07:ac:e3:78:d0:25:d2:f4:b1:52:
                    3f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:90:32:B4:ED:6B:62:3D:A2:97:22:F4:DF:58:59:B9:38:9B:65:48
            X509v3 Authority Key Identifier:
                keyid:1D:98:9D:AB:9F:C9:4D:CB:2E:98:B1:8E:DE:D9:8F:5F:8F:59:CA:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HZidq5_JTcsumLGO3tmPX49Zyuo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/70AED9785FF011F1BEB358D0CE1D38B0/HZidq5_JTcsumLGO3tmPX49Zyuo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:ea:03:b1:93:42:39:13:92:7a:c7:58:a4:20:60:0a:b5:96:
         0c:fc:e5:70:b6:33:39:ae:d6:d0:a1:79:b8:5a:2b:34:34:4e:
         65:17:9c:c4:3e:0f:4e:3f:99:a7:64:77:3c:fc:f6:25:13:fd:
         8d:37:3b:15:04:6b:c0:0c:a7:27:16:b7:91:d0:8d:04:0e:0b:
         c4:b9:d7:57:42:34:a0:9b:ee:7c:8d:96:6c:17:0e:e1:4b:0e:
         57:11:85:f3:45:e5:3b:d6:dd:40:1c:23:1c:f9:62:11:d8:fe:
         a2:ac:1c:fb:9b:53:e8:fb:8a:39:21:c7:08:77:65:b4:37:51:
         5c:13:b0:ea:f6:ce:c2:c6:9e:18:83:3b:a6:c3:5b:2e:6a:d8:
         94:c0:88:57:ae:fc:13:6e:3d:2b:1b:d1:8f:56:0b:2c:6a:fd:
         55:11:47:39:37:a8:c3:e4:4a:9b:9c:a5:e0:2a:09:6f:8b:4f:
         d1:4a:18:68:9a:f6:aa:3e:3b:ce:2a:49:7d:1f:44:d5:ee:4f:
         43:bc:3a:07:f8:04:ad:5a:ac:0d:f1:f7:94:10:78:36:07:11:
         e9:b0:30:21:65:e7:3d:2f:73:be:15:7d:a8:b2:ca:91:54:fd:
         57:42:64:50:8e:e1:66:e1:6b:84:dd:65:5b:4d:4d:28:88:6a:
         3b:9b:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:59:06 2026 by rpki-client