Error: rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
File:                     qjkCIoK-Ps773Fjln5ljk4Jku0I.mft (raw, json)
Hash identifier:          mk7O/Jlk/oW0frEmjlib5xkYfYJKnwPFMoTlwfOZyYE=
Subject key identifier:   09:F0:9C:6D:62:F8:D9:22:F0:5B:9E:26:78:66:7C:38:9C:F5:8C:68
Authority key identifier: AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42
Certificate issuer:       /CN=F369F058AR/serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
Certificate serial:       0B12
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
Manifest number:          0B0F
Signing time:             Wed 28 Oct 2026 01:17:48 +0000
Manifest this update:     Wed 28 Oct 2026 01:17:47 +0000
Manifest next update:     Fri 30 Oct 2026 01:17:47 +0000
Files and hashes:         1: qjkCIoK-Ps773Fjln5ljk4Jku0I.crl (hash: cwap+FybxPEfo3N6pV8DhsYiMJ4wdz8Sh4taYi+/vms=)
                          2: 48619D24149E11EF81414965017001B1.roa (hash: 3GarqsJ4VJ1/CLoT1EAlZXSx5zt3151P9uVE5+wGgZ8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
                          rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2834 (0xb12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AR, serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
        Validity
            Not Before: Oct 28 01:17:47 2026 GMT
            Not After : Oct 30 01:17:47 2026 GMT
        Subject: CN=6ae14d3b-0d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:07:d3:b8:8e:19:56:d5:32:05:d1:c4:a1:44:
                    77:1c:d2:73:9a:6b:1f:fc:de:c8:2b:d4:6b:c6:89:
                    02:f4:46:3c:75:f5:a6:5b:ae:05:4a:55:0e:10:d4:
                    f9:8e:b3:7f:ab:ac:45:16:20:b0:a2:1d:5c:2b:d7:
                    c7:16:0b:8a:cd:2b:1e:f0:99:f1:c3:35:cb:15:7c:
                    ac:2f:08:47:1e:2d:d1:db:32:c9:cd:68:cb:47:eb:
                    be:b0:f3:f0:4e:e5:f5:1f:14:32:46:5d:49:0e:94:
                    fe:8c:9a:10:8d:cd:d3:f0:eb:89:a5:03:70:47:5d:
                    88:59:ea:70:2a:92:9e:a3:7c:64:a3:07:9a:af:47:
                    42:aa:4a:1b:76:fe:3b:60:7b:71:1d:4d:10:e3:3f:
                    34:7e:fb:53:89:66:2f:e5:4e:eb:5e:ff:7b:57:80:
                    0f:3a:b3:6e:2e:cc:1c:f6:6b:54:1e:f9:b8:9a:9f:
                    c4:62:eb:e8:d6:47:43:8d:50:27:b3:93:35:6d:52:
                    eb:0d:8c:ec:91:a8:fd:14:4b:5c:1c:dc:bb:9e:8a:
                    dd:a1:32:f6:09:4f:2d:f1:e9:93:78:f8:e3:5a:95:
                    0b:d2:34:be:2f:e1:49:3f:63:4e:fe:5b:c1:73:25:
                    88:8c:d4:fc:64:07:9d:7a:e0:df:80:bb:71:9b:1f:
                    67:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F0:9C:6D:62:F8:D9:22:F0:5B:9E:26:78:66:7C:38:9C:F5:8C:68
            X509v3 Authority Key Identifier:
                keyid:AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:09:cb:ce:f7:d3:4a:ed:56:dc:25:06:0e:6c:b4:eb:5d:b4:
         a4:3d:6b:77:b6:b9:7c:4c:9d:27:8c:88:b4:b0:98:fc:3b:02:
         23:2a:50:91:d9:4a:81:14:2a:37:dd:eb:81:f8:1c:cc:f1:0c:
         1d:62:0d:bc:da:1f:de:05:f0:d3:95:77:4b:f6:d2:78:54:9a:
         2f:29:f0:7e:f9:6b:d7:66:90:45:5d:cd:d5:bb:62:7d:83:c7:
         45:41:45:29:b7:50:a2:23:6a:d3:e7:bc:87:75:da:36:06:94:
         e0:f6:e0:1f:76:3e:d0:57:dd:b7:a9:04:c8:2e:76:34:55:e0:
         e0:07:63:0a:f0:f9:ce:4c:40:90:5e:39:dc:5d:08:2e:ff:33:
         94:2e:2e:f7:7a:46:64:bb:4f:fd:2d:aa:da:cb:f5:09:a5:e9:
         31:c9:ef:94:bb:35:ef:74:f5:ae:b8:98:71:89:57:f9:12:2d:
         8a:9a:45:f9:27:b5:ce:b6:b3:4a:08:1b:1a:42:92:a6:d3:94:
         8f:11:a3:43:07:24:39:9c:87:92:01:29:3b:39:ba:c8:19:57:
         fc:f7:0c:9b:36:68:b7:ef:1e:5e:9d:68:79:4a:0f:91:18:af:
         b7:c3:63:e5:ee:0b:57:fd:c7:34:21:bc:c6:c8:b5:2e:c4:04:
         e1:5c:4e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:44:37 2026 by rpki-client