Error: rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
File:                     1_pzTirYg6eruOt2mcdBlN3zfqM.mft (raw, json)
Hash identifier:          345vYmp6pVlbkepBhZLtcvhHQwB/TA/VhKmylLSVlU0=
Subject key identifier:   5E:C8:18:D2:BC:11:1E:31:2F:10:1F:9C:92:7E:62:E1:78:6D:8E:62
Authority key identifier: D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3
Certificate issuer:       /CN=F36E1EE5AF/serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
Certificate serial:       058E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
Manifest number:          058C
Signing time:             Sat 24 Oct 2026 03:10:47 +0000
Manifest this update:     Sat 24 Oct 2026 03:10:46 +0000
Manifest next update:     Mon 26 Oct 2026 03:10:46 +0000
Files and hashes:         1: 1_pzTirYg6eruOt2mcdBlN3zfqM.crl (hash: kBU9Karyhlokkr2Jg0CtTGIp2QzNmZrvv8A3ZBoANyY=)
                          2: 059A5A448A6711F1BCB718EACE1D38B0.roa (hash: iR8PiYLAZ22NgZ+Swn9JhRFz18TQJdmSkmUlOyXjahk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 03:10:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1EE5AF, serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
        Validity
            Not Before: Oct 24 03:10:46 2026 GMT
            Not After : Oct 26 03:10:46 2026 GMT
        Subject: CN=6adc21b7-8c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:61:86:c9:d4:31:79:7e:23:46:d7:3d:3b:
                    37:ed:f7:e6:dd:2d:0e:ee:20:b4:e9:87:bc:0c:b5:
                    27:ec:78:ed:1a:18:55:e1:35:7c:98:63:0a:43:60:
                    2f:f8:c4:a3:6d:ad:4b:ba:80:d2:8c:4a:3c:9d:e9:
                    33:8a:fa:cb:d8:f6:b6:a4:70:89:2c:1e:6c:37:c1:
                    1d:dd:02:50:c5:35:9a:a0:00:d6:fa:d2:a8:f4:d1:
                    08:1e:6a:01:72:e3:5b:bb:ac:4f:02:56:fe:56:cc:
                    65:2d:9e:9b:26:1c:52:d5:5e:cb:9a:bc:eb:a3:ba:
                    81:a2:f9:cd:bb:d1:a1:0b:a0:ad:29:b3:ff:51:5a:
                    cb:59:91:5d:97:28:16:6a:d1:9e:66:75:d8:04:7c:
                    5e:46:a4:a4:3b:8a:7d:dc:d2:f7:06:b2:86:86:26:
                    23:14:68:6a:be:e4:b8:42:89:03:8c:00:68:7e:d0:
                    51:51:a1:8a:25:38:b4:68:5b:24:cc:34:17:9d:fd:
                    a8:eb:5d:81:8e:1c:e4:46:4b:dc:45:88:87:ae:1b:
                    0f:54:78:b8:18:0b:6a:b0:f4:b4:57:35:b4:37:36:
                    7c:4f:70:74:aa:8d:ae:23:eb:47:13:31:fc:06:07:
                    93:7e:62:38:46:35:88:54:4b:11:dc:f2:ef:24:cc:
                    db:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C8:18:D2:BC:11:1E:31:2F:10:1F:9C:92:7E:62:E1:78:6D:8E:62
            X509v3 Authority Key Identifier:
                keyid:D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:5f:ae:3d:bd:c9:e9:3a:9d:74:22:1c:79:9f:6e:0b:07:d0:
         24:66:72:ec:1c:67:3e:14:9c:4d:6a:2e:e4:ee:60:15:5f:c3:
         f5:5c:4f:72:f7:bb:45:9b:53:a9:9a:60:3c:83:98:1c:dc:87:
         35:b0:93:3a:2a:77:0f:d2:90:5c:10:7e:28:e1:93:ed:6b:11:
         bd:b9:d2:28:fb:3c:c9:df:e4:4d:d5:01:aa:6a:e3:70:02:0c:
         5c:f0:86:74:65:20:3b:f8:1f:69:48:79:f5:17:72:b1:40:98:
         7f:10:93:30:9e:c6:f0:f3:0a:02:a1:1e:61:70:c8:74:fb:9b:
         c2:59:c3:43:13:bb:22:a9:2d:25:de:ce:e1:ea:32:d7:d3:f0:
         e5:29:76:c2:fe:3c:47:e0:87:7c:dd:5e:05:a5:c9:55:06:53:
         17:7e:1d:66:19:ff:00:0d:f5:7b:71:60:5f:cf:0d:9b:12:68:
         cf:cc:26:d7:ec:2d:aa:05:52:d8:8b:a5:16:2e:a4:da:75:ba:
         ff:58:61:12:a2:08:99:9a:d4:1f:85:8a:ef:80:e4:ab:c6:fd:
         37:11:3b:8b:af:33:46:77:07:51:4b:31:53:b1:d8:f7:ad:fc:
         e9:88:b6:af:88:e2:7c:89:a8:1f:f1:e8:07:9f:fe:e0:e7:9a:
         63:10:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:58:51 2026 by rpki-client