Error: rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          DaTkukfA9C6QQGkxleRNHCJfWHF/XfGjsQRY7/f66j4=
Subject key identifier:   69:31:A6:42:ED:3F:9C:5B:82:EA:A7:BF:89:20:C5:3D:FB:92:E6:92
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       0756
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          0752
Signing time:             Sat 24 Oct 2026 02:29:55 +0000
Manifest this update:     Sat 24 Oct 2026 02:29:54 +0000
Manifest next update:     Mon 26 Oct 2026 02:29:54 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: 1LLkZeEucfQcD45LnNnesD6sf9xXUPSR16XtncNuipU=)
                          2: A727C4428B6F11F1BB2BB2B7CE1D38B0.roa (hash: XawFZJaxnzvq5b0Rtz7wsotNQ+4PwTnD6TvOuVmsVCg=)
                          3: 6AE6E2A0899511F1836059E9CE1D38B0.roa (hash: Ke0DyeeNvPUu3/HySu88mHg8fSTxD3OWYshhFWO+3pE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1878 (0x756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Oct 24 02:29:54 2026 GMT
            Not After : Oct 26 02:29:54 2026 GMT
        Subject: CN=6adc1823-3a5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:42:1f:bd:23:eb:bb:5a:44:81:75:9c:cd:77:
                    1c:79:5d:3b:19:d8:36:21:69:06:25:bf:7d:db:70:
                    c2:7b:90:81:fc:7b:4e:05:44:86:c1:a3:9b:fb:0b:
                    3e:2b:65:61:97:db:d8:27:96:f8:55:b0:c9:0c:7f:
                    13:fc:77:f1:76:49:c9:ee:45:b7:5e:83:db:7c:3a:
                    c3:63:9a:00:6f:1a:ce:65:96:be:a7:6d:e2:87:d5:
                    f0:90:14:e7:00:31:39:53:76:35:7e:ef:29:3f:17:
                    af:82:f0:fe:e2:ff:94:44:aa:b8:c6:7a:48:fb:eb:
                    71:cf:05:5f:83:e8:11:a5:7d:3b:4c:a0:41:93:b1:
                    0c:19:b9:02:40:d0:3b:44:51:b4:2f:86:7a:03:45:
                    c2:15:45:61:64:70:de:16:34:a3:70:2e:57:9f:97:
                    44:ff:6e:17:ae:92:16:00:f3:a6:0b:ee:fe:ff:92:
                    03:4a:24:5d:b2:05:8e:fc:21:be:82:fb:27:f8:c4:
                    6d:58:78:7e:db:91:c6:0f:3a:82:a6:92:19:d5:5e:
                    af:4f:87:c1:25:3b:61:9c:1d:72:6c:91:aa:d0:df:
                    ad:3e:22:95:6d:63:78:93:51:eb:1a:a7:e6:97:25:
                    37:09:51:b7:29:ed:a7:f5:4d:b9:9f:45:ac:05:3c:
                    cb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:31:A6:42:ED:3F:9C:5B:82:EA:A7:BF:89:20:C5:3D:FB:92:E6:92
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:22:cf:6c:94:a7:ad:ca:70:8f:a3:59:0d:1a:de:4b:74:5b:
         82:ca:4d:ed:94:d9:51:69:71:c1:c5:fb:04:c5:7d:f2:bd:57:
         3b:38:24:24:e1:2f:6d:e9:e9:b1:b5:62:e9:5a:53:cf:95:39:
         1f:5f:e9:45:32:06:50:3d:41:02:d3:24:a0:23:85:21:78:2b:
         84:79:fa:55:22:eb:dc:b1:b9:7c:c4:e1:46:14:b6:a5:d9:9f:
         3c:bf:ee:32:30:97:9e:13:12:38:0e:5e:f7:34:9f:b4:a4:e8:
         d4:98:9d:e2:67:3d:d2:23:6d:94:43:4e:09:de:77:35:5c:f4:
         43:8f:1b:d6:fb:e8:fd:35:25:fb:5a:7d:b2:87:ae:d1:c4:9e:
         75:2f:b3:6d:40:7c:c7:8c:13:ef:68:a8:3d:a9:a1:68:e1:90:
         e4:81:ca:4e:9d:56:c0:54:3d:23:1b:28:ee:40:c0:e5:e4:ed:
         2a:a0:3e:b6:91:b6:90:be:aa:02:d7:9f:77:b1:33:9d:d4:78:
         37:a8:34:22:81:f7:ac:e0:d0:e7:66:9d:23:24:07:38:f6:72:
         e7:d8:7e:95:d1:0f:2b:bd:ca:2c:31:4e:16:73:e1:e6:cb:a4:
         f1:8f:7d:1f:6a:52:3e:40:dd:6a:34:ff:97:43:4e:17:b4:f2:
         93:56:e4:d8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB1YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUQ0OEFBRjExMC8GA1UEBRMoQkJGRjI1MjQwQjIwN0Y5QkFDQzVDQjk1NEE2MjMw
OUFCQkE1MzY1RDAeFw0yNjEwMjQwMjI5NTRaFw0yNjEwMjYwMjI5NTRaMBgxFjAU
BgNVBAMTDTZhZGMxODIzLTNhNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD2Qh+9I+u7WkSBdZzNdxx5XTsZ2DYhaQYlv33bcMJ7kIH8e04FRIbBo5v7
Cz4rZWGX29gnlvhVsMkMfxP8d/F2ScnuRbdeg9t8OsNjmgBvGs5llr6nbeKH1fCQ
FOcAMTlTdjV+7yk/F6+C8P7i/5REqrjGekj763HPBV+D6BGlfTtMoEGTsQwZuQJA
0DtEUbQvhnoDRcIVRWFkcN4WNKNwLlefl0T/bheukhYA86YL7v7/kgNKJF2yBY78
Ib6C+yf4xG1YeH7bkcYPOoKmkhnVXq9Ph8ElO2GcHXJskarQ360+IpVtY3iTUesa
p+aXJTcJUbcp7af1TbmfRawFPMvbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaTGm
Qu0/nFuC6qe/iSDFPfuS5pIwHwYDVR0jBBgwFoAUu/8lJAsgf5usxcuVSmIwmrul
Nl0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlENDhBL0M0MDk3REQwMzhENjExRUNBNTAxMjQ3REQ4QTAxNENFL3VfOGxK
QXNnZjV1c3hjdVZTbUl3bXJ1bE5sMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3VfOGxKQXNnZjV1c3hjdVZTbUl3bXJ1bE5sMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUQ0OEEvQzQwOTdERDAzOEQ2MTFFQ0E1MDEyNDdERDhB
MDE0Q0UvdV84bEpBc2dmNXVzeGN1VlNtSXdtcnVsTmwwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC4Is9slKetynCPo1kNGt5LdFuCyk3t
lNlRaXHBxfsExX3yvVc7OCQk4S9t6emxtWLpWlPPlTkfX+lFMgZQPUEC0ySgI4Uh
eCuEefpVIuvcsbl8xOFGFLal2Z88v+4yMJeeExI4Dl73NJ+0pOjUmJ3iZz3SI22U
Q04J3nc1XPRDjxvW++j9NSX7Wn2yh67RxJ51L7NtQHzHjBPvaKg9qaFo4ZDkgcpO
nVbAVD0jGyjuQMDl5O0qoD62kbaQvqoC1593sTOd1Hg3qDQigfes4NDnZp0jJAc4
9nLn2H6V0Q8rvcosMU4Wc+Hmy6Txj30falI+QN1qNP+XQ04XtPKTVuTY
-----END CERTIFICATE-----
Generated at Sat Oct 24 16:40:10 2026 by rpki-client