Error: rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.mft
File:                     SixALO4q4DQRY4mUFuo_8E9Rwyk.mft (raw, json)
Hash identifier:          pJXoRH8bU5hKgrl36M10QTz8NyImB8JdSLsqsRGGMxM=
Subject key identifier:   37:69:D5:85:7D:46:14:B8:5D:03:B6:E3:3B:CD:1E:25:73:5A:F2:9F
Authority key identifier: 4A:2C:40:2C:EE:2A:E0:34:11:63:89:94:16:EA:3F:F0:4F:51:C3:29
Certificate issuer:       /CN=F36E6A93AF/serialNumber=4A2C402CEE2AE0341163899416EA3FF04F51C329
Certificate serial:       05FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SixALO4q4DQRY4mUFuo_8E9Rwyk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.mft
Manifest number:          05FA
Signing time:             Sun 25 Oct 2026 02:59:57 +0000
Manifest this update:     Sun 25 Oct 2026 02:59:56 +0000
Manifest next update:     Tue 27 Oct 2026 02:59:56 +0000
Files and hashes:         1: SixALO4q4DQRY4mUFuo_8E9Rwyk.crl (hash: luHbsc23ZRSCajqDyOYFcVRe3m8/ZzDpf3gVKR+wFxY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SixALO4q4DQRY4mUFuo_8E9Rwyk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 02:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1531 (0x5fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6A93AF, serialNumber=4A2C402CEE2AE0341163899416EA3FF04F51C329
        Validity
            Not Before: Oct 25 02:59:56 2026 GMT
            Not After : Oct 27 02:59:56 2026 GMT
        Subject: CN=6add70ac-1d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:90:4f:01:60:0e:bf:63:8f:d7:48:2a:f1:57:
                    7e:22:4f:2b:1a:30:40:80:df:c3:67:cd:70:9d:78:
                    3c:89:56:01:84:ed:3b:5c:22:42:d4:c4:a0:da:dd:
                    5c:b7:9b:29:72:8d:f6:26:da:d0:9c:fe:42:9e:97:
                    bd:68:24:b3:de:7b:59:ef:0f:0f:ba:ed:7a:12:1f:
                    40:d8:86:6d:df:72:b2:34:2d:0c:28:de:21:bd:08:
                    0c:54:8b:f2:d4:2d:b9:56:df:ed:75:14:44:92:72:
                    fd:f8:ae:69:00:55:fd:5a:a5:29:5f:53:0f:f2:40:
                    8f:a3:76:60:f2:f2:9e:21:8a:b3:20:c3:3b:3c:50:
                    9d:7b:12:6a:30:ff:51:41:23:4b:c0:fb:9a:ff:b0:
                    e1:a1:cb:d7:f0:7e:c4:60:d1:e6:02:3e:5c:af:9b:
                    ef:96:b7:63:97:3e:b4:c8:ec:77:20:99:f3:9c:0f:
                    ef:e1:69:9e:75:db:58:56:a8:11:88:ef:af:62:30:
                    8e:ea:b6:4b:d0:46:89:c4:00:bd:d6:4a:8f:6b:43:
                    a8:ed:bf:f7:68:ee:39:8b:23:f1:8f:d5:d5:7b:d4:
                    32:97:b9:41:28:ba:40:62:10:86:45:7b:d5:16:42:
                    3f:1c:da:a9:af:23:5f:b0:3a:4d:d5:44:f8:73:f9:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:69:D5:85:7D:46:14:B8:5D:03:B6:E3:3B:CD:1E:25:73:5A:F2:9F
            X509v3 Authority Key Identifier:
                keyid:4A:2C:40:2C:EE:2A:E0:34:11:63:89:94:16:EA:3F:F0:4F:51:C3:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SixALO4q4DQRY4mUFuo_8E9Rwyk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6A93/2CD337B23E5211ED8A8D1DD9F1222468/SixALO4q4DQRY4mUFuo_8E9Rwyk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:e4:cb:22:82:2c:1a:4f:ca:48:f4:b5:5c:36:3b:3a:e4:
         a7:55:a3:a6:16:03:f7:86:f8:d5:75:9a:ad:62:67:cd:af:00:
         62:2a:56:79:2d:b1:61:61:d3:68:a7:db:3c:6b:8c:d0:db:dc:
         30:e8:8b:5d:9e:48:4d:97:e1:fd:1e:b3:e2:5e:05:96:cc:6f:
         19:44:ba:a7:66:68:4d:f5:2b:66:ac:75:25:62:12:a1:77:12:
         52:b6:7f:2e:e2:82:48:40:04:c6:0b:04:9e:8f:82:88:8e:4a:
         b0:e5:3a:f6:16:91:ab:e8:e4:40:0d:86:9b:fb:16:34:48:0c:
         d3:2e:e7:95:d9:c2:f6:b3:fa:1f:aa:29:87:1a:55:18:85:1d:
         57:8a:dd:f5:d1:bb:a6:99:91:7b:56:95:96:d4:78:d6:ea:e5:
         0e:bf:68:d8:b2:87:23:00:25:ca:d4:a3:40:d7:27:85:6b:25:
         6e:eb:89:2b:c0:41:05:f7:ca:6c:ee:48:c2:07:8f:d4:ca:a8:
         75:56:82:60:a2:be:71:ff:bc:3e:bd:a9:3e:73:64:98:d6:08:
         98:a4:27:70:0f:83:92:0c:39:22:0e:5d:d7:aa:cc:da:b6:c6:
         b4:ab:f8:03:e3:36:0b:a5:b6:c3:47:34:e5:17:5c:51:50:9c:
         ff:8c:fa:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 22:39:39 2026 by rpki-client