Error: rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.mft
File:                     w65QOim-1QyTfBVKYYkTncTGHIM.mft (raw, json)
Hash identifier:          7xggbBV69TxNpATm541QvOmWzHzwDX5Qj4sqMRWvTAs=
Subject key identifier:   49:EF:EE:B3:08:CF:59:B4:19:D1:50:34:98:D5:BE:4D:9F:B0:53:0D
Authority key identifier: C3:AE:50:3A:29:BE:D5:0C:93:7C:15:4A:61:89:13:9D:C4:C6:1C:83
Certificate issuer:       /CN=F36C52E6AF/serialNumber=C3AE503A29BED50C937C154A6189139DC4C61C83
Certificate serial:       01B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/w65QOim-1QyTfBVKYYkTncTGHIM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.mft
Manifest number:          01B2
Signing time:             Sun 25 Oct 2026 05:07:17 +0000
Manifest this update:     Sun 25 Oct 2026 05:07:16 +0000
Manifest next update:     Tue 27 Oct 2026 05:07:16 +0000
Files and hashes:         1: w65QOim-1QyTfBVKYYkTncTGHIM.crl (hash: VE0GGWXknv8knQA3Vs1KPZW4C5qGCxUUkKbFxXUVol4=)
                          2: 1C69F6C081B811F095573EE9DAE4EC9C.roa (hash: KbI9ucB4f9JH39XALKEY3t2+qdSeCHt4BU89HAR/5iY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/w65QOim-1QyTfBVKYYkTncTGHIM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C52E6AF, serialNumber=C3AE503A29BED50C937C154A6189139DC4C61C83
        Validity
            Not Before: Oct 25 05:07:16 2026 GMT
            Not After : Oct 27 05:07:16 2026 GMT
        Subject: CN=6add8e85-f6b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:1a:e0:48:6c:54:d3:98:ec:40:f9:9e:1c:
                    d1:69:d0:1c:e6:4e:13:06:da:18:aa:9b:92:13:b7:
                    4b:46:7e:b1:a8:5d:aa:b6:9d:7b:4d:26:92:78:15:
                    19:82:30:d1:50:eb:93:8e:3f:c4:e7:3e:32:66:eb:
                    4a:b0:f9:ff:9b:05:42:65:4a:14:9e:e0:f7:d2:c9:
                    7d:ce:82:4e:58:1e:8f:43:39:5f:40:0d:9b:a6:1e:
                    b1:bc:cb:f9:13:ba:83:fd:cd:b1:57:11:78:b3:db:
                    8a:b9:c8:de:bb:75:cb:cd:7e:1a:3d:af:4a:33:54:
                    23:ff:17:14:6b:bf:f4:45:80:25:77:9f:13:67:a1:
                    d5:90:c5:14:b0:c3:fe:c4:be:9e:71:c5:42:00:f1:
                    ca:90:a7:3e:8d:35:9f:b6:74:f6:5e:49:22:85:b1:
                    2f:b7:3e:c9:20:85:df:a5:73:70:1e:cf:79:0a:41:
                    b6:22:54:47:63:51:87:c9:da:29:52:01:dd:38:85:
                    51:8e:23:3e:e0:f7:1c:0a:35:4c:98:07:22:dc:4b:
                    b9:67:ca:1a:f1:5b:15:ca:f1:9a:d7:19:2d:38:a7:
                    fc:3d:6d:f8:9a:3f:f0:41:f1:be:1c:88:68:b3:5b:
                    6f:2b:28:a2:2d:ea:ec:40:6c:a3:f9:8b:fe:17:2c:
                    9e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EF:EE:B3:08:CF:59:B4:19:D1:50:34:98:D5:BE:4D:9F:B0:53:0D
            X509v3 Authority Key Identifier:
                keyid:C3:AE:50:3A:29:BE:D5:0C:93:7C:15:4A:61:89:13:9D:C4:C6:1C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/w65QOim-1QyTfBVKYYkTncTGHIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C52E6/67B2BF4E81AF11F09A6355B1DAE4EC9C/w65QOim-1QyTfBVKYYkTncTGHIM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:bf:72:7d:f5:2c:cd:13:a0:17:33:27:97:c0:88:e6:b4:
         80:85:97:19:e7:a6:29:08:f7:96:ee:ba:b9:04:08:4e:64:88:
         e9:4a:0a:2d:a4:59:5c:91:6e:cb:e7:0c:d8:5f:36:f2:77:dc:
         41:e5:96:4f:bc:43:b0:49:a6:c4:55:c8:6a:78:7c:c1:34:00:
         df:38:b5:1a:30:62:6f:00:d7:20:cb:6e:cf:2a:b3:77:5b:92:
         2a:12:71:f3:90:83:84:82:67:2f:fe:9b:4a:c8:3e:1c:d4:b0:
         f7:c1:0f:3a:ed:75:f4:f7:84:f2:f5:a0:c0:b6:c2:8e:1e:fe:
         93:21:8e:5e:49:d5:b6:37:58:77:68:31:35:ab:73:ec:e6:c2:
         85:38:02:21:8a:a9:aa:2c:d4:0d:50:3c:b0:8e:3f:fd:c5:6a:
         f8:49:7b:28:89:0c:c4:a9:24:ff:fa:04:28:88:df:de:cf:09:
         85:13:b9:af:0d:88:8c:56:93:d0:54:a5:28:f2:09:c7:18:a0:
         92:6a:6b:59:3b:9a:d3:30:60:8f:94:e6:e6:58:89:45:e5:3f:
         90:46:73:fd:21:4e:4e:1d:b5:be:de:8d:b0:f7:0c:18:36:3a:
         1e:ce:3d:0c:60:95:2c:9e:9b:be:9b:cb:14:5b:0f:60:63:0d:
         d0:82:be:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:52:13 2026 by rpki-client