Error: rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
File:                     M1pTwRMuVAw6td9C8UiHszJN60Q.mft (raw, json)
Hash identifier:          SdLxB8MOnI6LvQ3QIqv8JA3Jvysp6irARF5+Fl64Jsk=
Subject key identifier:   C5:78:59:B9:A8:CC:9D:1A:70:EF:84:63:93:A8:1A:1B:57:BC:86:2D
Authority key identifier: 33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44
Certificate issuer:       /CN=F36A2CD2AF/serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
Certificate serial:       0C47
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
Manifest number:          0C44
Signing time:             Mon 26 Oct 2026 01:11:33 +0000
Manifest this update:     Mon 26 Oct 2026 01:11:33 +0000
Manifest next update:     Wed 28 Oct 2026 01:11:33 +0000
Files and hashes:         1: M1pTwRMuVAw6td9C8UiHszJN60Q.crl (hash: 34iOuU3Ny3xeUt716qNgJwqo47mqC/E/Hx3neWz0QnI=)
                          2: BE11892264E511E88A76232FF8AEA228.roa (hash: dOR90EcGn41sg/4MsNNizB3oHEFvm4Z1e3qb8Nhf7Q0=)
                          3: D8C2BDE0D02211EA8498CC41F8AEA228.roa (hash: I2gZAkM/7aE0lRi9sq+Qnq3RN4IGql/esMqczFTNr+A=)
                          4: FF05885C64E511E899B3422FF8AEA228.roa (hash: SEgUfNXNKuWS5w5moDpD2nIXtoeuFn9n8YpzM5ve1qs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 01:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3143 (0xc47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2CD2AF, serialNumber=335A53C1132E540C3AB5DF42F14887B3324DEB44
        Validity
            Not Before: Oct 26 01:11:33 2026 GMT
            Not After : Oct 28 01:11:33 2026 GMT
        Subject: CN=6adea8c5-e999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:44:1b:6a:c1:5e:83:99:6e:6d:a2:86:a3:
                    90:81:d9:a0:83:0f:6f:c8:49:db:4a:b5:c2:bf:2d:
                    eb:be:06:60:f1:28:9e:14:45:7a:32:c0:e6:da:27:
                    30:52:b6:b7:7b:37:ab:a2:8d:0b:11:ec:3c:c7:ac:
                    0c:f4:f9:c3:ad:2a:dd:fd:89:2c:f8:cb:3e:fd:6b:
                    03:c1:cf:3b:35:a4:f7:1b:8e:4f:7e:0f:b3:60:dd:
                    4e:cc:8e:23:e2:a7:b5:a1:2d:a6:4a:b6:4c:e5:c9:
                    36:45:e8:3f:26:5d:15:dd:36:54:8d:09:57:53:34:
                    34:dc:ca:5e:88:1b:5d:6a:73:fa:d3:3b:b9:10:d4:
                    8e:b4:56:ca:02:1c:21:a1:25:c7:41:70:01:83:91:
                    b6:48:ca:d1:92:72:9c:1c:b4:90:f3:9a:a4:d6:7f:
                    63:13:17:68:82:d1:08:a9:3a:b9:56:7d:53:cb:17:
                    07:81:59:29:36:a1:f9:fc:e6:56:48:ac:ac:2f:8c:
                    5e:a4:11:03:e5:47:20:f6:6b:34:b1:3d:39:62:e5:
                    c6:72:fd:37:5b:c0:9a:f5:9b:5b:48:dd:d0:f0:6a:
                    9c:1a:14:b3:ff:58:87:4d:11:1a:b1:8c:14:56:d5:
                    6c:d9:cd:93:d3:1d:30:f2:c7:15:a9:48:c0:c7:b5:
                    2f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:78:59:B9:A8:CC:9D:1A:70:EF:84:63:93:A8:1A:1B:57:BC:86:2D
            X509v3 Authority Key Identifier:
                keyid:33:5A:53:C1:13:2E:54:0C:3A:B5:DF:42:F1:48:87:B3:32:4D:EB:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M1pTwRMuVAw6td9C8UiHszJN60Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2CD2/553F50F064E511E8968FEF2EF8AEA228/M1pTwRMuVAw6td9C8UiHszJN60Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:d7:34:80:5f:b8:7e:b8:95:75:40:af:3f:be:36:fe:62:
         89:09:fb:d9:a1:45:be:53:c1:e8:db:f9:32:6f:b4:0a:a0:14:
         65:98:0a:da:9a:70:12:c3:e5:90:cb:4d:eb:fc:2a:67:0e:03:
         5d:64:71:f6:b3:07:b4:f4:d0:f3:95:de:f3:75:ca:0e:70:a1:
         12:e4:a1:cd:59:8c:07:a6:dd:46:b5:ae:0c:99:d4:14:e4:98:
         bf:31:09:ee:a1:f7:be:f1:27:e8:92:86:7f:a9:9e:31:b4:b4:
         5d:8a:30:01:6e:17:5c:ab:95:22:91:80:5f:24:1c:f7:be:71:
         3c:0a:ab:3c:d3:ca:87:80:e0:65:85:5b:24:3c:cb:4b:d4:38:
         2d:0b:0d:a7:63:2c:13:0c:78:ab:b5:c5:0e:3e:11:14:3b:3b:
         69:4a:4e:6b:d3:85:62:4d:04:a1:2b:af:8d:58:2a:bb:4b:d4:
         b4:31:50:5a:f9:e0:ae:22:31:23:31:fa:7c:4d:94:c1:58:73:
         44:81:02:0f:e0:4e:d7:59:05:cc:10:30:77:b6:37:d4:ec:ca:
         5e:32:a3:3a:8a:49:6c:21:c8:3a:67:87:10:a3:fa:cb:e5:20:
         60:97:13:bc:72:49:d8:35:36:0d:15:e7:63:77:f6:5a:af:a1:
         50:db:39:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:54:33 2026 by rpki-client