Error: rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
File:                     J6gbBcpK9RHHhjK7VblPrvRxyOU.mft (raw, json)
Hash identifier:          eErRn5nS40HVEHOMn6d/1MNwcDqTxDsrF2l54JOBEfY=
Subject key identifier:   D7:14:1C:65:A0:CE:0E:8A:A8:FF:55:01:F2:38:54:EF:3F:B6:C9:DE
Authority key identifier: 27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5
Certificate issuer:       /CN=F369A67FAF/serialNumber=27A81B05CA4AF511C78632BB55B94FAEF471C8E5
Certificate serial:       0251
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
Manifest number:          024D
Signing time:             Tue 27 Oct 2026 04:49:25 +0000
Manifest this update:     Tue 27 Oct 2026 04:49:24 +0000
Manifest next update:     Thu 29 Oct 2026 04:49:24 +0000
Files and hashes:         1: J6gbBcpK9RHHhjK7VblPrvRxyOU.crl (hash: wHxrE/oXefQG/+R0o2XayFCLKbNuUNacfNIoDbnWl94=)
                          2: 34C8DFBC105011F093296B58762E951A.roa (hash: QuatNFiiwr6rSEcJFhngJgion3t9GXDa/1Qg7UY1HPY=)
                          3: 501F896C492C11F1A00643D3CE1D38B0.roa (hash: j0MYlgw2awLohs40axRmwJt8DOvmdaBZYSEu4Q3eP4I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 593 (0x251)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A67FAF, serialNumber=27A81B05CA4AF511C78632BB55B94FAEF471C8E5
        Validity
            Not Before: Oct 27 04:49:24 2026 GMT
            Not After : Oct 29 04:49:24 2026 GMT
        Subject: CN=6ae02d55-3d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:60:14:5d:0d:9f:27:f4:d3:ca:f4:95:eb:c6:
                    55:c5:98:e9:a7:f2:80:c1:ed:ca:ee:2b:90:7a:f1:
                    3f:cd:92:25:cb:b5:bc:50:b4:ec:df:28:15:cf:ef:
                    45:e8:a4:99:3a:8b:de:24:bb:fe:ef:c1:da:4a:a8:
                    0c:bb:8e:69:96:2e:50:11:ff:38:48:52:e5:58:97:
                    d5:92:a8:2c:58:5b:31:22:6d:06:3e:88:8a:77:fc:
                    c2:11:2a:fc:66:c9:7a:ba:e0:76:d4:4b:d1:13:ba:
                    24:3d:ca:18:dc:ff:c2:79:4c:89:79:18:4c:20:5f:
                    76:b1:09:8e:72:b5:0a:d1:1c:cb:a0:ce:ac:63:2a:
                    5e:19:cb:7b:88:85:31:1d:9e:3c:f3:d4:fd:1d:31:
                    58:22:f5:92:ce:91:33:ca:c3:a8:8b:70:99:52:21:
                    3d:b1:33:87:33:cc:df:74:26:64:a3:bb:55:68:48:
                    0d:d4:9f:ea:2e:a4:ef:a1:cb:6d:d1:fd:bb:57:76:
                    c9:d4:0e:6c:bc:76:63:9f:51:3b:f5:c7:3e:e5:e5:
                    6c:14:2b:47:96:2f:43:b9:cb:c5:7f:67:32:95:e6:
                    3a:90:05:ea:65:b4:8a:c9:0f:90:72:a1:90:d9:b3:
                    b3:54:bc:7a:7c:f8:06:0f:87:c1:3f:71:38:30:b9:
                    a6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:14:1C:65:A0:CE:0E:8A:A8:FF:55:01:F2:38:54:EF:3F:B6:C9:DE
            X509v3 Authority Key Identifier:
                keyid:27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:32:e0:58:06:13:81:6f:dc:73:cc:d6:56:95:88:29:68:cb:
         dd:5a:f7:00:f9:bf:2d:48:3c:b9:34:22:7b:aa:cf:3d:ed:92:
         99:6b:cd:d4:30:78:d8:d9:4b:f3:80:8f:3c:69:11:83:61:b9:
         91:5f:56:1a:9d:4b:11:ee:f6:e0:9f:22:ac:59:32:35:3d:22:
         ac:ed:29:9d:71:8e:c3:ee:40:55:e5:3b:9a:f3:7e:c5:a0:21:
         5a:c9:0e:ee:8e:44:fd:19:75:82:9e:7b:7e:49:83:6c:36:6c:
         7b:f9:9e:c2:a9:1e:51:b7:5b:46:d5:45:f5:88:21:cf:5a:54:
         6e:f4:84:8a:ba:ed:1c:00:d3:a0:67:70:9e:8a:e9:ab:ec:7c:
         90:b3:91:a7:0d:f6:fc:bc:e4:83:4e:ab:80:84:2c:a0:14:85:
         43:29:c5:e2:60:5e:b5:82:df:d8:d8:54:86:4b:3d:0c:c3:bf:
         6b:66:c3:09:00:5f:ea:01:e5:c6:6a:b2:21:9c:5a:76:bb:a5:
         c9:c7:f6:fc:00:9e:89:e8:66:8f:83:5c:9a:69:fe:a4:d4:f6:
         59:da:c7:7d:e7:6c:33:1d:a1:4d:8b:9d:07:95:ae:f4:ea:be:
         df:41:d1:41:ef:a8:2c:ff:bf:e8:97:f1:d8:0f:8c:31:81:77:
         28:a5:ab:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:23:14 2026 by rpki-client