Error: rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
File:                     J3k9IV8IgF240LqJLTNvKat7sFs.mft (raw, json)
Hash identifier:          bga+aUl4rCfnfmvAFdcu54GBt0m3LKgAUBdTLWH9+Cw=
Subject key identifier:   D8:41:92:FB:4A:75:75:4B:95:E6:06:8F:73:CB:C8:3B:A5:2A:95:64
Authority key identifier: 27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B
Certificate issuer:       /CN=F3614D1DAF/serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
Certificate serial:       062C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
Manifest number:          0618
Signing time:             Fri 25 Sep 2026 02:56:22 +0000
Manifest this update:     Fri 25 Sep 2026 02:56:22 +0000
Manifest next update:     Sun 27 Sep 2026 02:56:22 +0000
Files and hashes:         1: J3k9IV8IgF240LqJLTNvKat7sFs.crl (hash: VfKZCvdTP+yrAJtIzP4AaNc+lumqmzToAFt7LLeoe4s=)
                          2: DD851EDE8AC711F1ADF3F9AECE1D38B0.roa (hash: iCDYgU2+SKpeQzQaU+mrTaji/0hiNcDZ+TL2MuxqLEU=)
                          3: C64E95D28AC811F184603AB5CE1D38B0.roa (hash: 7YEuA2VOavsPvBxjsk4vEJsovfUYi9Dd9ZYLz3aRjrQ=)
                          4: E87CF5D88AC111F18BD6DA09CF1D38B0.roa (hash: wAfY8kLqZnXXJoKn8K0yeemJEp7SpmtL2+EGPJfF7W4=)
                          5: 1642FE7A8AC911F1A47447B5CE1D38B0.roa (hash: FNM19ZjkMFO84jFscTN4Bb3t+zjkVvUyMhpR+gcZsmg=)
                          6: CC15C4C08AC011F19E9BC601CF1D38B0.roa (hash: CLEdi3dH6VLoAeQY7RC1HiDFnjkuwPHPEYCtOB/eMtU=)
                          7: 7E01BE968AC111F18CFBDD05CF1D38B0.roa (hash: wKdAINsDPIWS1ZmU8I02GrZCpDAtG4wE8mc2xedhZKs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580 (0x62c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614D1DAF, serialNumber=27793D215F08805DB8D0BA892D336F29AB7BB05B
        Validity
            Not Before: Sep 25 02:56:22 2026 GMT
            Not After : Sep 27 02:56:22 2026 GMT
        Subject: CN=6ab5e2d6-a976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:87:3b:d7:20:cb:5c:75:17:4f:7e:08:3d:6d:
                    fb:1d:54:66:a6:f7:7d:20:67:fd:34:67:1d:90:6f:
                    4e:b9:cf:ee:cf:1b:f4:88:8d:9a:83:85:96:c1:76:
                    32:81:90:e0:d6:1e:f9:28:03:65:fe:a0:98:32:d9:
                    41:a7:63:2c:df:cd:c9:55:32:41:99:89:d4:41:94:
                    10:16:61:2b:63:53:f5:ed:49:94:b6:0d:d4:0a:f7:
                    e4:23:ae:8f:8a:6d:e0:8b:a0:59:23:f7:04:de:5b:
                    b3:91:c6:84:cf:60:be:bc:1a:e0:19:af:23:10:b5:
                    eb:02:66:ca:28:aa:0a:6c:cd:48:57:f0:cd:84:15:
                    7f:53:8a:58:8c:3f:03:12:5b:fb:ba:5b:7e:93:7d:
                    ba:95:dc:ff:3c:b4:43:8c:14:d6:65:cd:b6:3a:1c:
                    3d:90:76:d8:90:c5:05:28:e6:66:a5:e2:6c:c0:63:
                    f0:5f:63:c8:ab:2d:30:9c:48:b8:ab:7b:90:28:6c:
                    da:ef:69:38:d5:5b:20:36:4f:b7:fa:9b:70:64:e6:
                    fc:f3:46:80:f0:6c:6e:db:5b:ea:63:6b:59:76:32:
                    96:91:84:7d:e7:0f:22:0e:e2:cc:5e:d3:ec:20:f8:
                    0e:48:0a:3e:b7:0d:31:d4:b6:3f:4a:3b:81:c4:86:
                    2b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:41:92:FB:4A:75:75:4B:95:E6:06:8F:73:CB:C8:3B:A5:2A:95:64
            X509v3 Authority Key Identifier:
                keyid:27:79:3D:21:5F:08:80:5D:B8:D0:BA:89:2D:33:6F:29:AB:7B:B0:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J3k9IV8IgF240LqJLTNvKat7sFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614D1D/58CF30E4292811ED8E68E8F8F1222468/J3k9IV8IgF240LqJLTNvKat7sFs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:89:b4:e6:96:20:d0:c3:e4:da:16:9d:ae:fa:67:be:45:37:
         8f:91:2e:c4:32:53:22:5e:a0:12:c1:cf:1f:20:1d:40:68:4a:
         62:0a:fa:02:f4:75:1f:d6:d8:e4:e7:4a:88:ca:54:28:8a:41:
         80:d4:17:71:07:a4:2c:ac:98:13:c7:95:14:ca:37:d4:6e:82:
         1a:d4:fc:6f:81:3f:81:39:7f:64:43:9b:db:fc:7a:90:ea:4e:
         df:ba:6c:ec:2a:99:2e:db:59:02:6c:61:9c:9c:80:08:c3:38:
         4e:d8:7a:7e:2a:fb:a6:a9:45:6c:d6:03:0e:f1:9b:77:4f:19:
         4f:5c:f1:90:2c:4a:db:27:4d:e5:18:f8:96:d3:10:f0:5d:49:
         33:b8:59:1c:6a:dd:33:ac:4f:1b:32:cb:d5:8a:e4:80:19:f8:
         ab:ca:42:d2:ae:fe:29:48:5b:00:2b:4e:a9:d1:78:a8:3f:3e:
         d6:3c:07:86:29:79:da:05:1f:0b:70:90:53:c6:4b:5c:b8:a2:
         85:81:9a:77:6a:40:8c:2d:fa:20:ef:19:1f:ae:ca:28:06:d6:
         22:d7:37:98:6d:ad:62:90:3a:e0:ad:ae:e0:a6:7c:df:18:c3:
         a5:77:53:74:a3:f0:ba:a4:39:2d:4f:46:67:c1:3b:67:27:13:
         88:f8:04:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:02:41 2026 by rpki-client