Error: rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
File:                     FINhai-2NCU1g2xD_pc41PF-nxI.mft (raw, json)
Hash identifier:          QWzIwaV+m3bkLQzq6HLg32pxavze1FcZePPF/QR33KY=
Subject key identifier:   AB:AA:49:81:94:F9:4C:CB:53:4F:B4:9C:6F:4C:6F:54:EA:D7:2C:5B
Authority key identifier: 14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12
Certificate issuer:       /CN=F36E0F10AF/serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
Certificate serial:       0A89
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
Manifest number:          0A83
Signing time:             Tue 27 Oct 2026 01:32:11 +0000
Manifest this update:     Tue 27 Oct 2026 01:32:11 +0000
Manifest next update:     Thu 29 Oct 2026 01:32:11 +0000
Files and hashes:         1: FINhai-2NCU1g2xD_pc41PF-nxI.crl (hash: vzY3YdP0U115+RQ5Zi6j8UyUR9+XWxrzXWa37vohF/s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:32:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2697 (0xa89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0F10AF, serialNumber=1483616A2FB6342535836C43FE9738D4F17E9F12
        Validity
            Not Before: Oct 27 01:32:11 2026 GMT
            Not After : Oct 29 01:32:11 2026 GMT
        Subject: CN=6adfff1b-496d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:87:c2:de:18:55:f7:77:d2:66:fd:be:92:
                    81:7a:92:25:b8:c7:3d:b1:31:ab:93:10:5f:80:14:
                    71:9b:f4:0d:28:dc:64:c3:66:21:c6:0b:74:c5:cc:
                    2c:03:d7:b8:ff:55:37:33:6a:54:78:18:17:4a:a3:
                    14:69:63:66:de:2e:65:34:42:f5:87:aa:9f:fc:99:
                    63:87:2f:4c:32:b4:4a:08:74:49:99:d8:0e:10:a9:
                    c0:72:15:cf:d2:51:55:b5:1b:ca:d5:ff:d7:49:5a:
                    57:42:22:8a:a2:62:d3:bb:c9:4d:9f:55:7d:42:3d:
                    99:d5:de:cc:f3:a5:62:ed:ba:84:63:ab:49:0a:89:
                    63:6d:48:e4:35:3b:1d:33:15:99:d1:be:69:95:8a:
                    d6:fa:42:2c:de:57:d0:23:5c:e9:17:28:29:8e:35:
                    18:a5:f8:92:08:2b:7d:b6:0d:3b:82:82:e4:c1:14:
                    25:4d:e7:b9:4d:cb:40:c0:fc:12:c1:33:56:51:f7:
                    43:37:4d:a7:6d:d4:67:50:a3:cc:31:04:36:94:50:
                    f8:99:fa:c9:65:2d:2d:7c:ab:e7:db:43:3f:53:8a:
                    45:2e:a8:78:00:58:69:e8:4d:5b:14:ec:4f:43:cd:
                    24:08:be:7b:e4:42:e4:81:33:7c:4e:a7:cc:a2:b2:
                    dd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AA:49:81:94:F9:4C:CB:53:4F:B4:9C:6F:4C:6F:54:EA:D7:2C:5B
            X509v3 Authority Key Identifier:
                keyid:14:83:61:6A:2F:B6:34:25:35:83:6C:43:FE:97:38:D4:F1:7E:9F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FINhai-2NCU1g2xD_pc41PF-nxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0F10/7701A0FCC4BC11E996368B11F8AEA228/FINhai-2NCU1g2xD_pc41PF-nxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:6b:3a:51:83:53:74:b1:84:b6:68:d2:3e:01:3a:3f:92:f7:
         c1:9c:13:49:50:81:01:dd:7c:d9:08:a8:10:cf:e9:d3:d0:5e:
         eb:4b:c9:e2:15:31:e2:f1:7e:85:f9:ec:db:46:38:67:c3:1a:
         38:95:9a:ee:b9:9f:ef:df:d1:b5:ce:af:d6:d7:64:e0:50:e3:
         cb:f6:de:71:18:bd:62:24:7b:7a:42:22:82:26:e0:8e:5b:fc:
         10:14:73:49:fb:22:aa:28:db:f4:dd:4a:b2:c8:51:d2:68:84:
         33:34:ec:56:8c:d9:f7:40:c1:b5:bd:cb:38:c9:99:ef:53:0a:
         b6:c3:e8:f7:0f:67:42:32:7b:23:df:48:12:2f:b7:57:b6:26:
         be:6f:f2:b1:84:49:14:4d:c5:ce:c5:d6:0a:7a:6e:e7:81:a2:
         29:e4:4a:86:4f:f7:9b:18:ae:98:af:8d:0a:27:f4:1f:86:0b:
         a2:93:37:84:e3:9e:fa:21:58:9f:8e:c4:99:07:c0:c7:07:e8:
         bb:95:0e:e0:d7:ba:e3:d0:75:0b:bd:9d:18:8d:60:ae:b1:17:
         64:f4:79:18:fa:25:bb:d8:5c:24:6a:65:90:49:6c:15:b6:87:
         4d:65:74:05:7e:06:b1:31:91:c5:43:e6:25:93:e9:82:14:90:
         fa:fa:ce:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:33:56 2026 by rpki-client