Error: rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
File:                     _fBwBNUH4xafjwTMLtjgu_Sq38Y.mft (raw, json)
Hash identifier:          t6CTkuopQRCFlv8HlRe4hwZLKo+eL4W8ny/B3QIY0Rc=
Subject key identifier:   81:46:44:5B:3B:AE:1F:F4:1F:A6:76:78:8F:06:8B:FE:86:60:79:1B
Authority key identifier: FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6
Certificate issuer:       /CN=F36B1BD7AF/serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
Certificate serial:       0280
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
Manifest number:          027D
Signing time:             Sun 25 Oct 2026 04:47:28 +0000
Manifest this update:     Sun 25 Oct 2026 04:47:27 +0000
Manifest next update:     Tue 27 Oct 2026 04:47:27 +0000
Files and hashes:         1: _fBwBNUH4xafjwTMLtjgu_Sq38Y.crl (hash: jpsEyXSMG70Xa4SOhUXgpO/s1cjNI0JPl++7zxyrpME=)
                          2: 58A4F560E54E11EF908E0F81762E951A.roa (hash: RGKTeSXUz+Sp60GwrTqbGbFazRAHGX0bbtXYfxY2Mws=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:47:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 640 (0x280)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1BD7AF, serialNumber=FDF07004D507E3169F8F04CC2ED8E0BBF4AADFC6
        Validity
            Not Before: Oct 25 04:47:27 2026 GMT
            Not After : Oct 27 04:47:27 2026 GMT
        Subject: CN=6add89e0-671b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bf:b3:b0:4e:5a:36:c3:6b:c5:71:aa:73:80:
                    c6:69:4f:e5:26:32:61:8f:c3:80:1f:b5:29:c7:0d:
                    70:e8:85:10:24:ba:1d:43:7c:34:8a:63:74:f0:65:
                    5a:e4:00:d3:88:0a:a5:7d:f0:45:74:be:d3:74:1b:
                    43:42:cf:77:06:b8:ce:47:c5:66:42:8b:53:38:39:
                    f0:26:29:47:dd:f1:7d:0b:a4:1b:e1:5a:8f:a6:af:
                    94:72:88:15:9f:51:72:3a:57:e7:77:ba:e6:23:9a:
                    82:b9:35:4a:0c:fb:fe:69:b9:0a:6b:e4:98:fa:1c:
                    15:e2:e7:2e:08:c0:10:09:68:83:2f:65:dd:c6:68:
                    5f:ca:8b:cd:45:e0:8a:9b:eb:a8:32:ba:8d:e0:55:
                    5e:07:fe:b7:46:e2:ac:ca:b8:71:38:39:1e:b7:33:
                    11:30:64:34:97:03:bb:06:02:3a:c7:d6:47:13:cf:
                    ff:da:77:c0:a8:7b:99:93:3c:25:eb:78:33:ab:28:
                    82:40:27:8c:7c:63:f8:f7:ac:bb:0b:ff:7d:2d:28:
                    36:42:18:6f:03:37:76:c4:3e:ff:41:56:9d:13:3e:
                    6a:cc:f0:5a:af:6f:9a:c1:9f:19:c6:b5:ee:a6:b0:
                    75:43:4f:bb:8e:98:7d:6e:bc:78:e5:7d:9e:4a:f9:
                    ee:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:46:44:5B:3B:AE:1F:F4:1F:A6:76:78:8F:06:8B:FE:86:60:79:1B
            X509v3 Authority Key Identifier:
                keyid:FD:F0:70:04:D5:07:E3:16:9F:8F:04:CC:2E:D8:E0:BB:F4:AA:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fBwBNUH4xafjwTMLtjgu_Sq38Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1BD7/6E7BF640E54911EF87332F61762E951A/_fBwBNUH4xafjwTMLtjgu_Sq38Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f4:d0:97:a5:59:eb:e6:fc:df:dd:70:bd:cf:6f:70:66:aa:
         2d:d7:39:5f:29:16:7f:16:b7:3c:4f:a6:18:74:e5:a1:00:96:
         96:34:49:f0:a6:38:29:62:f3:2a:e2:09:6a:a5:6d:b4:f4:e0:
         58:28:e7:2c:1d:de:d5:67:cd:be:ee:34:e9:af:a9:ec:29:c9:
         88:b7:10:48:2c:01:d0:7b:c5:ef:07:bf:bd:12:4d:b0:93:df:
         31:fb:0a:da:d0:1d:32:f1:96:c6:8a:d3:db:c2:ad:1a:d1:fb:
         eb:14:aa:7d:8e:c5:8c:cb:63:81:38:66:7b:88:81:e7:4d:2d:
         03:d6:18:19:58:be:fc:ec:3f:d9:90:c9:97:13:b3:35:f0:fd:
         61:a8:76:0f:ef:37:15:4c:47:91:52:1e:b6:7a:db:7d:2a:39:
         a6:01:01:b8:04:c5:16:a2:c7:8a:63:0b:36:69:f6:01:49:3e:
         64:93:e2:a8:a9:d2:58:07:5a:b4:27:26:43:98:5a:7e:56:19:
         46:90:26:d8:c9:ae:b0:bd:c7:3c:bb:55:1f:66:8f:fc:b1:1c:
         bb:c3:c0:a2:00:1c:ff:fc:b6:f7:d2:a8:b3:f1:3b:9e:3c:8e:
         8c:b3:fd:10:46:ec:37:20:82:c3:7a:3a:b5:71:7a:88:a6:59:
         74:6f:4a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 07:28:39 2026 by rpki-client