Error: rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
File:                     YiXGU2dIRI8cYBvpr6uCfJptjJg.mft (raw, json)
Hash identifier:          +wuI1EC7mMU1Ca3/DXQc0Ego1G/zvkSIZ40OxJHntsg=
Subject key identifier:   01:4A:1A:77:7A:63:3F:4F:EC:C7:38:3E:9C:DA:A5:92:0A:29:83:3B
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Certificate issuer:       /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial:       067D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
Manifest number:          0674
Signing time:             Thu 10 Sep 2026 02:41:51 +0000
Manifest this update:     Thu 10 Sep 2026 02:41:50 +0000
Manifest next update:     Sat 12 Sep 2026 02:41:50 +0000
Files and hashes:         1: YiXGU2dIRI8cYBvpr6uCfJptjJg.crl (hash: eP8S+7+lA+dQlkNxpngR6vSljlRZOzBdaskMenWgKbs=)
                          2: 8E8DDE1C6FD111F1A724E610CF1D38B0.roa (hash: 1KMlFaEajdNRT3rBNkJK3leEidm1bkbbNhMaz2bl61o=)
                          3: B715016C631511F18D69FFF3CE1D38B0.roa (hash: Q90vO03OvbzVlr6xHMXNeN+1cU9pbCWlbrp/3F+J26k=)
                          4: 0201DC14657711F1B151DFE6CE1D38B0.roa (hash: XgErl+4Yq3zK0QkzIWHcw2rfdjCVU6UhA/XKlXzAm6M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                          rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
        Validity
            Not Before: Sep 10 02:41:50 2026 GMT
            Not After : Sep 12 02:41:50 2026 GMT
        Subject: CN=6aa218ef-6b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ea:8b:46:bb:b7:57:ab:56:a9:0e:64:2f:96:
                    0b:cb:d8:24:8f:ce:14:bc:c1:b7:4b:90:d6:53:9e:
                    d8:7f:79:19:a6:95:11:e3:c4:ce:35:bd:74:6b:94:
                    84:25:85:d8:a6:55:dd:4b:4f:83:4c:5f:62:33:84:
                    cb:10:03:69:44:a0:cd:29:7d:0f:b0:1e:13:52:81:
                    cd:ae:10:69:71:e6:91:5b:9b:f2:96:70:da:db:50:
                    14:75:c4:02:82:ae:e3:28:58:10:1c:fd:18:23:7c:
                    f6:3e:bc:c6:cd:5c:d4:c9:7e:ef:29:90:a5:57:d1:
                    d9:ac:e5:34:43:42:0f:97:54:77:08:73:87:10:3f:
                    29:53:c1:c9:99:cb:55:e8:f1:f0:b0:6b:2e:29:77:
                    8e:b0:c3:d8:60:15:ff:3a:a1:ab:42:95:8a:31:3e:
                    1c:27:ea:b3:9f:89:a3:b2:80:4c:a5:05:b0:c8:51:
                    b5:ea:c6:9c:fb:70:2a:1a:64:5a:b2:f0:9e:bb:7a:
                    d2:76:9c:2b:9b:ea:cc:76:57:69:6c:dc:ea:7d:07:
                    74:c2:60:2d:f7:4c:e7:18:5c:bb:10:e2:ab:55:10:
                    5e:ce:38:f8:5c:69:03:49:4d:17:e2:be:b9:6c:c7:
                    1e:96:be:f9:7b:a7:1f:94:9d:62:f7:e0:e6:7c:d9:
                    2e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4A:1A:77:7A:63:3F:4F:EC:C7:38:3E:9C:DA:A5:92:0A:29:83:3B
            X509v3 Authority Key Identifier:
                keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:32:06:6f:3e:b7:e2:09:65:e3:05:5d:a7:d6:4d:9b:7f:8a:
         cf:c0:f2:0d:80:dd:b2:c9:05:2f:e2:b5:90:4c:0a:75:bb:95:
         50:c7:ce:b9:64:48:9a:0c:36:65:98:0d:63:ee:d7:73:06:c9:
         8d:65:ca:5b:b5:23:e8:1b:e7:09:2d:33:a8:a6:e0:bf:b4:3e:
         7c:38:7a:d6:9d:37:77:db:4f:fd:4e:1f:f7:17:d5:01:a2:70:
         fa:d7:83:fa:ef:86:24:1b:4d:6f:5c:6f:0b:d6:26:a0:92:4c:
         07:33:59:5f:cf:23:06:ec:e3:88:16:b4:63:9f:96:a2:1a:f1:
         50:4b:63:75:69:8e:4b:9d:dd:85:c9:d9:4f:59:57:6b:32:51:
         95:01:ce:1e:cf:b1:d0:1f:c6:42:01:a7:44:6e:ec:19:8b:46:
         56:15:33:fa:aa:1c:ce:32:bb:4b:5e:8c:f6:84:76:5d:32:2e:
         83:94:3d:b0:2a:05:8f:15:c4:d1:87:3c:75:c7:84:a7:64:7d:
         0d:a0:19:56:b7:53:06:4c:6a:9c:d5:83:19:00:5c:ff:e3:fe:
         a7:0a:6b:48:8f:76:78:d4:db:46:f2:d6:e6:e3:3e:71:c8:fa:
         82:e8:00:78:a9:18:9e:41:52:84:11:dd:16:5e:ac:19:3e:d0:
         b2:c0:72:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:37:06 2026 by rpki-client