Error: rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
File:                     llyMNbDxD46l29pUTykbbKkoO10.mft (raw, json)
Hash identifier:          qU8wSzwRCh473s39aBXcpNFAknWExMCmtdHwepBiwdg=
Subject key identifier:   4B:37:C7:E7:24:2F:C3:F9:B2:F6:A4:69:B1:87:E6:6C:EB:AB:36:FD
Authority key identifier: 96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D
Certificate issuer:       /CN=F36E3D7FAF/serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
Certificate serial:       0A08
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
Manifest number:          09E5
Signing time:             Fri 11 Sep 2026 01:42:18 +0000
Manifest this update:     Fri 11 Sep 2026 01:42:17 +0000
Manifest next update:     Sun 13 Sep 2026 01:42:17 +0000
Files and hashes:         1: llyMNbDxD46l29pUTykbbKkoO10.crl (hash: DiGDZ0U+UgeMvj8psfJ/ihgSAb9crNB0pwNn6GBQgVE=)
                          2: CD539CA4195F11F1A93F757FDAE4EC9C.roa (hash: 72eww79c1LhxX88JJHRLGmkQ6SgWbuwwLn91Yhwl3OM=)
                          3: 71049C4A4FFE11EFB49E615C762E951A.roa (hash: jbW+6AKtEoSOyZoaKGmM/zW6o3okDriAIOGo+daJIco=)
                          4: EE939480196111F1B93A308CDAE4EC9C.roa (hash: bk0vsHax/qp4UlIJSg2DL8tth/n6/mOBtDc39qKX8fs=)
                          5: 579583E2195F11F1B991657DDAE4EC9C.roa (hash: SF0hDp8Zk9dynSHbdMmIgYSWC7ijmylDn1pyd15RvQY=)
                          6: 47B929708A6A11F19AE386FCCE1D38B0.roa (hash: +PURW9h8fC6QCQjo5DYWqsOQMj1WuGyTtah+FIejrAc=)
                          7: 28C356B4196111F184DBF487DAE4EC9C.roa (hash: aSzuJgc4hXP1yI45B2SkSx8ZkUWaYTT+OBaaHmbOFSc=)
                          8: 21C1E2568A6B11F1AA1ECD02CF1D38B0.roa (hash: 3IW2hG4U1ExpcZubWiJJn8Gv7hZRkdjDAkFy5BeMkGs=)
                          9: 923C5AF2195F11F1A3BEA27DDAE4EC9C.roa (hash: XHVjQ0BnSbhqTQoC6M8bTABJ3YO/Bp0yh7KCDo0mYuo=)
                          10: CF1CD3564FFE11EFBC6B5560762E951A.roa (hash: rKE0aTq1xK/d7TP0Mi/oZzn9/eW8mKHviKpsNrNh4jQ=)
                          11: 363906AE8A6D11F1A73E2E0FCF1D38B0.roa (hash: HuoTVuH2wLkOrx2U374b3Tje/aCCSu66XS48cTDH4ro=)
                          12: 086691B6196011F1AA8AAF81DAE4EC9C.roa (hash: IM9+GWZbmnwdn08EHStSdHEHqEJhliwSrh+UsfiVB7M=)
                          13: F3312BC0196011F1BD761A86DAE4EC9C.roa (hash: ibkIYsf/GzzdmpJ0e4OsQNVAHYchdgJBYBy4m/psamQ=)
                          14: 670BE738196111F1A493168ADAE4EC9C.roa (hash: 89il+swCnx0o5ne+xSUMBKX+ebYKwDzvuxUzUv1wXZ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
                          rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 01:42:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2568 (0xa08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3D7FAF, serialNumber=965C8C35B0F10F8EA5DBDA544F291B6CA9283B5D
        Validity
            Not Before: Sep 11 01:42:17 2026 GMT
            Not After : Sep 13 01:42:17 2026 GMT
        Subject: CN=6aa35c7a-bcd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bf:84:d8:d2:81:68:dc:84:3a:d2:a7:f3:30:
                    27:3c:42:68:ab:d1:44:4b:5f:e5:da:9b:ed:13:df:
                    7d:a2:a3:7d:3f:35:28:ec:2f:19:97:5b:47:1f:ce:
                    84:44:5e:f4:56:c8:b8:af:0f:8f:96:82:8d:f3:12:
                    b4:ed:49:81:49:47:dc:7b:14:c5:34:a3:f3:dd:57:
                    ea:21:f0:a6:80:7e:0e:5f:26:02:8a:6f:53:24:60:
                    3b:65:28:6f:c9:71:4a:37:21:ac:73:ee:38:f4:4e:
                    c8:fa:2e:f8:32:7f:b4:78:99:7b:06:52:ee:1c:00:
                    c3:a8:48:f7:b1:2e:4c:6f:10:f8:33:9c:24:bc:da:
                    b0:5e:91:c3:73:c8:66:20:00:f7:3c:09:89:cc:24:
                    1d:bf:a4:2c:d5:ec:bc:5a:d9:70:96:9a:a0:05:e4:
                    18:8c:e7:ac:f2:e3:7a:87:2b:34:02:c8:40:67:26:
                    6b:06:e0:f4:77:d7:0d:f3:5f:91:d2:1b:aa:c1:0d:
                    8b:37:31:c3:33:38:d0:9a:4a:c9:a5:eb:01:7d:00:
                    f2:20:e9:fd:29:07:79:77:2b:ec:ed:01:2c:5e:d5:
                    8a:6f:57:8b:ca:9a:28:59:16:0c:e1:f8:38:10:6c:
                    20:cd:f9:95:a0:ed:64:58:92:c3:ff:82:af:3f:63:
                    11:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:37:C7:E7:24:2F:C3:F9:B2:F6:A4:69:B1:87:E6:6C:EB:AB:36:FD
            X509v3 Authority Key Identifier:
                keyid:96:5C:8C:35:B0:F1:0F:8E:A5:DB:DA:54:4F:29:1B:6C:A9:28:3B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/llyMNbDxD46l29pUTykbbKkoO10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D7F/B705EAF241A611EA881A6728F8AEA228/llyMNbDxD46l29pUTykbbKkoO10.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:13:26:98:02:8b:db:8d:8b:2f:9f:18:28:f5:13:7f:d2:
         b4:65:fd:29:fc:0c:53:05:44:08:4e:d0:76:95:e7:ea:ee:6a:
         75:86:8e:69:66:c6:a0:8f:7c:c2:a0:f2:33:2e:b5:42:4c:5d:
         a5:b0:e9:59:d7:9e:04:72:90:21:72:06:37:0b:6e:5b:32:85:
         3b:d2:c2:2e:d1:8c:6a:fb:c8:02:4f:0e:92:57:25:31:ff:70:
         66:16:d2:ba:78:8a:63:b4:0f:87:c5:af:85:ee:51:88:47:78:
         4d:90:69:dc:cf:f0:5f:ef:0e:5c:25:7e:f1:61:46:81:44:e4:
         98:72:53:cb:be:da:f3:2a:3f:2a:94:07:c7:cb:1b:4c:ae:6b:
         fc:f0:9a:ee:b4:69:48:27:25:ef:53:a9:04:6a:2a:b1:31:a3:
         e6:2b:82:e0:71:57:37:fe:7b:50:89:9f:33:63:c9:53:11:ac:
         b7:2c:44:4a:67:96:03:a7:1c:a3:ae:52:8c:d0:36:ab:88:cc:
         57:f0:c4:8c:ae:83:08:c8:d1:91:b7:a1:78:ed:4c:c3:eb:23:
         c6:e6:ba:74:81:20:a4:d1:05:f2:99:d6:a4:7b:67:2f:fd:97:
         7e:17:b6:d7:20:5d:b4:e6:92:55:57:34:da:2b:6a:b9:14:fb:
         ba:94:57:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:55:53 2026 by rpki-client