Error: rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
File:                     xk60GwPUwTMps2P1p5PyzZy0LLc.mft (raw, json)
Hash identifier:          0ZqTTeikJPMKyZtBAipt7wpHbK8gNQ5lc+tYmHBqfNs=
Subject key identifier:   A0:51:08:3A:60:0F:B3:7F:D0:26:36:7E:CF:1B:C3:B8:28:C1:42:97
Authority key identifier: C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7
Certificate issuer:       /CN=F36B5804AF/serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
Certificate serial:       07FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
Manifest number:          07F9
Signing time:             Sun 11 Oct 2026 02:07:37 +0000
Manifest this update:     Sun 11 Oct 2026 02:07:37 +0000
Manifest next update:     Tue 13 Oct 2026 02:07:37 +0000
Files and hashes:         1: xk60GwPUwTMps2P1p5PyzZy0LLc.crl (hash: d59ycs3NpAVpEA3HPC3wWGHBqlCSSm9T+GfRPQ89O/k=)
                          2: 4FDC1DC2F14D11EFBAC0E3A0762E951A.roa (hash: dOKqRkTfN9jocpe+O0SITKXIanbXliNmUMx3esYzAi8=)
                          3: 87E50DA6AA2B11EE9A64EA6D775412E6.roa (hash: XpYMXNR2CG5z3pCw7sOpke9QbTyJBxDxE9SukOPOH8g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5804AF, serialNumber=C64EB41B03D4C13329B363F5A793F2CD9CB42CB7
        Validity
            Not Before: Oct 11 02:07:37 2026 GMT
            Not After : Oct 13 02:07:37 2026 GMT
        Subject: CN=6acaef69-b34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:8f:09:35:e8:47:c0:d5:b5:35:73:ad:e9:
                    57:b8:84:75:f4:d0:17:c3:c4:06:b5:47:78:45:77:
                    c4:e9:04:98:b0:27:a7:ed:fd:b9:d8:89:56:c4:90:
                    bd:a1:3e:79:09:a9:a6:c6:5c:d2:f2:a6:1e:7a:f5:
                    1e:0b:81:6e:61:1c:56:b6:7d:40:d8:4c:a7:8b:c8:
                    58:18:74:95:d1:7d:4f:4d:4a:18:b5:d5:ef:d4:29:
                    ec:08:72:b7:05:9f:9d:a9:1c:49:77:3a:da:c1:1b:
                    13:9b:23:c7:61:f8:5c:5c:e1:51:73:24:34:99:c4:
                    51:28:70:78:af:ab:b4:da:b3:7e:54:be:3f:4a:49:
                    47:65:3d:18:3f:60:33:3e:91:73:a9:c4:6c:8a:b1:
                    e3:f6:45:41:2d:49:0f:35:ab:d6:c2:7f:26:b4:a0:
                    4d:f6:5d:f8:36:2f:21:09:6b:ce:1d:67:35:d8:ca:
                    10:1a:a1:bb:cc:ca:de:35:6d:32:a4:6d:44:81:f5:
                    00:b9:d4:f8:cc:45:d7:ab:c8:33:1f:42:52:a1:d4:
                    44:8c:6f:98:0f:f9:7b:3f:fd:af:21:1a:34:23:11:
                    5c:c8:29:b3:eb:db:24:ee:86:02:8d:3f:f5:e7:e7:
                    c8:46:a2:50:e9:5c:5c:bb:b0:2e:4e:03:ef:18:cd:
                    b5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:51:08:3A:60:0F:B3:7F:D0:26:36:7E:CF:1B:C3:B8:28:C1:42:97
            X509v3 Authority Key Identifier:
                keyid:C6:4E:B4:1B:03:D4:C1:33:29:B3:63:F5:A7:93:F2:CD:9C:B4:2C:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xk60GwPUwTMps2P1p5PyzZy0LLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5804/D74E42FAAC2B11EBADF48B55F8AEA228/xk60GwPUwTMps2P1p5PyzZy0LLc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6a:16:e1:b7:4e:b4:7a:e5:64:6a:52:53:b4:5c:d3:ea:b3:
         6e:fb:4c:db:08:f3:1b:04:8b:6c:0e:0d:18:ef:d6:7f:d5:36:
         5e:e1:ba:b6:29:51:65:fb:b7:a8:19:61:0d:58:4c:cb:2b:b9:
         2c:78:f1:99:cf:f0:e4:d0:f5:ba:b6:d1:94:cc:85:ba:05:55:
         85:3b:97:ae:42:67:3c:6e:6f:ad:ca:88:9c:24:55:c5:c7:1d:
         ff:e2:2f:82:c8:d9:a7:f3:0c:12:2b:02:bb:85:15:9c:30:2c:
         1b:60:1b:ae:4e:fc:3f:ef:06:7a:21:22:e7:c6:ef:5c:fa:13:
         09:c3:25:87:6e:79:2d:b5:1f:bc:68:15:20:81:44:cc:84:88:
         d6:62:90:5d:50:1b:f2:4e:c5:49:25:bd:c4:12:3d:e9:26:bc:
         12:72:bb:83:65:75:36:4c:91:f0:8c:53:21:ad:20:83:c1:39:
         e6:9e:7e:78:31:d1:25:a8:db:c1:9d:b0:0a:93:d2:74:16:44:
         70:81:51:64:3a:a3:2c:c1:66:18:e9:89:d2:f7:7e:31:bf:2e:
         9d:92:90:66:58:a9:07:e7:20:f9:36:24:c5:80:6c:9b:ba:06:
         86:3b:1d:68:1e:b1:5a:e2:83:7b:af:a7:f8:00:76:0e:cb:88:
         10:91:e1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:29:43 2026 by rpki-client