Error: rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
File:                     3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft (raw, json)
Hash identifier:          c7JCgkoD2mTbuXe4H/XyYsAoRgMtsNbRKJQhLSy1Q/I=
Subject key identifier:   59:D0:9F:85:74:4E:4F:77:1F:8C:CE:D3:65:F6:98:23:DE:29:75:82
Authority key identifier: DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31
Certificate issuer:       /CN=F369591CRI/serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
Certificate serial:       054B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
Manifest number:          0538
Signing time:             Thu 10 Sep 2026 03:18:40 +0000
Manifest this update:     Thu 10 Sep 2026 03:18:40 +0000
Manifest next update:     Sat 12 Sep 2026 03:18:40 +0000
Files and hashes:         1: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl (hash: UAr/Sz4ZgESxT0omRB06/uiGvHAiY61baa7Dr6y5huQ=)
                          2: 82219ECEA8E511F097F863D3DAE4EC9C.roa (hash: bcPInogd3xIR0s3sTN2It6IQWCB3KAgCeLuGiSvLwas=)
                          3: FEDC02C25C0711F0B890E9F0DAE4EC9C.roa (hash: qe7/Ho3hjXx1p+1X+gIsJxiQFYRX/3+okpR+BwibaKg=)
                          4: E3C267F25E4F11F0940EFC9BDAE4EC9C.roa (hash: /diZHt8dfDU8ymyLaJDOGusaWBebTUtvPjH5WbW4syU=)
                          5: 55E86B6260DD11F0A69775B5DAE4EC9C.roa (hash: 3qhuPqbCfVwBZHK72q/87zYpkIKPP1VmeTNuhLAijbk=)
                          6: 99141D08576111F080D583A2DAE4EC9C.roa (hash: cQTA6aPVu1R9IwPCQ/9eGLXpsOsSHn6GFJCWQdw5Yp0=)
                          7: C45FFB84A36611F0A3DDA0C5DAE4EC9C.roa (hash: f7+/OwcLs2vETrfnT8wudo6+umbH7FS0gnrek0hKon0=)
                          8: A8DB4ACE60DD11F0914539B9DAE4EC9C.roa (hash: Si/TX7Gk5wKi7Q8cmheHqqKR3iXrshzEj+Q8MY2UZ+M=)
                          9: 072D1082576311F088413DABDAE4EC9C.roa (hash: kdbBEJRsB56bxxE6rksSixZh/DLbv8XJMoYIBLPc8/g=)
                          10: A3FEFCB0577A11F0A98CD3C1DAE4EC9C.roa (hash: qgOiHPxC/Z9pgaIJ8OipsoRNTQGJykYjhiWofc3it3c=)
                          11: EA8394FEA84011F0A123C6ADDAE4EC9C.roa (hash: BlN6ZCd0jXJwuiZMNu47rtCr+FOtsw3oe++3RgGL1q4=)
                          12: 93BA4D0E577611F08300D0A7DAE4EC9C.roa (hash: xDzT9tDUOjaY4x+EeMf/Vz+dMgirOycbZAxHbc8lYgU=)
                          13: FE51ED62582911F0BD53CEBBDAE4EC9C.roa (hash: KhWFDo0vWu06AyFmvRpE1g14Vu+Rmq4RukcLEVcErN4=)
                          14: D69EE072B2FB11F0B7B245B7DAE4EC9C.roa (hash: qpCOGOVOdGPaWFwLUvwVE5eduGEP3cZDJGPFiGA53VI=)
                          15: BC741E48575B11F09D18457FDAE4EC9C.roa (hash: V7GQwUcMxp4LbXIcZRBBtPhEVIwEfdLYw7zTv+foDSo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
                          rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1355 (0x54b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CRI, serialNumber=DCFEA3847722D2FEC7A039E99038F7538259D031
        Validity
            Not Before: Sep 10 03:18:40 2026 GMT
            Not After : Sep 12 03:18:40 2026 GMT
        Subject: CN=6aa22190-abab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f9:f7:f3:d9:d1:ba:13:0b:19:a9:18:b6:c0:
                    90:33:a6:32:81:20:84:58:ac:ad:28:59:19:7d:74:
                    d6:ef:e4:8d:21:ff:5a:e3:ea:b3:91:58:05:1a:3c:
                    3a:86:06:31:fd:91:79:37:96:e7:81:d5:82:e2:ed:
                    ec:58:3b:32:cc:0a:c1:8b:8a:1e:d6:f8:28:5d:2f:
                    c7:89:58:3b:bd:e5:c9:fa:a5:36:64:4f:e5:26:a1:
                    ab:d4:6d:dc:a7:22:f7:72:68:fa:d7:8f:02:11:ce:
                    48:09:24:a2:84:7e:b5:a8:fb:d0:3b:81:6a:ae:0d:
                    57:74:b7:e8:63:55:64:1c:8b:10:9d:32:01:02:5c:
                    a3:c7:9a:bd:a6:17:ae:30:8b:08:14:b1:8f:5d:7e:
                    1f:b8:11:0c:08:56:89:ab:c9:03:03:9a:b0:54:b2:
                    32:77:78:df:6c:50:df:df:14:58:26:1c:63:70:7d:
                    a6:fd:cb:14:57:25:29:85:8b:48:f3:2b:b0:d8:83:
                    eb:81:ff:a7:5c:f6:a2:b3:3e:1c:30:6c:04:4c:92:
                    12:68:df:c1:b6:93:ec:3b:ee:e0:70:c2:5e:c8:01:
                    3c:a7:37:eb:3b:07:2d:d3:f9:f3:21:53:23:a5:b8:
                    fb:9a:d3:db:96:bd:90:b2:80:72:e8:32:e4:a6:bb:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D0:9F:85:74:4E:4F:77:1F:8C:CE:D3:65:F6:98:23:DE:29:75:82
            X509v3 Authority Key Identifier:
                keyid:DC:FE:A3:84:77:22:D2:FE:C7:A0:39:E9:90:38:F7:53:82:59:D0:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/672357D4C24711ED959790A0F1222468/3P6jhHci0v7HoDnpkDj3U4JZ0DE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:14:b6:d3:bd:5c:08:bc:d4:f1:64:e3:9f:51:7e:cf:ef:bd:
         8e:81:f5:8f:ce:29:57:04:50:cd:87:98:e5:c7:da:da:48:a5:
         4e:6b:2c:fd:97:11:ce:4b:35:a5:94:ad:f2:d9:11:cd:72:8e:
         a5:d8:9b:92:81:9d:ee:6a:07:a1:7d:ae:bd:08:47:e5:13:a1:
         4a:a1:67:d9:e6:f7:8c:75:22:2f:cc:fd:db:6d:06:69:40:d2:
         e5:95:cc:1c:ac:60:f1:5c:8f:c9:67:c7:c8:0d:c3:1f:85:50:
         57:b3:a3:8b:3b:62:c2:14:4d:30:be:b2:65:9f:8f:1b:18:05:
         4e:ea:d1:cb:8d:b5:3e:d2:7f:4a:07:06:e1:1d:b3:e3:97:b0:
         f6:80:3c:1b:2b:3f:70:76:de:1b:de:18:22:ec:d4:c4:62:27:
         af:4e:6d:61:f7:61:69:1e:7d:37:d2:df:f6:57:10:2b:af:8f:
         d9:b9:0b:51:4c:25:a0:4c:fb:ff:b6:9b:98:8d:84:e4:1f:89:
         f9:f8:a9:fd:2e:d4:07:55:fb:fc:48:ba:35:60:ad:49:5e:eb:
         c5:1b:ce:0a:bc:36:9b:cc:45:af:14:7a:3a:0f:63:45:39:7e:
         8f:f2:09:f1:63:98:24:00:22:d3:16:82:ba:b3:a0:94:fb:fe:
         03:61:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:53:39 2026 by rpki-client