Error: rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          /0yQyKWRuJ0BtYoFr/kzzc694Jtiz3wZj9BCZknKSGU=
Subject key identifier:   FA:DB:6D:BE:DA:E4:27:AE:E0:62:21:6F:B0:32:AE:49:0C:D7:49:67
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       0448
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          0443
Signing time:             Fri 25 Sep 2026 03:47:41 +0000
Manifest this update:     Fri 25 Sep 2026 03:47:40 +0000
Manifest next update:     Sun 27 Sep 2026 03:47:40 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: iGTACx0FSYY4fldPP/95eJHoumuDp4KuY78OFtBt8wA=)
                          2: 7CFC778030A711F1B0BA49A6DAE4EC9C.roa (hash: fiJLFf12hDBUqyflOu4g0dOWaAU/DEhS6uOIRtIo2kc=)
                          3: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          4: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          5: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: Sep 25 03:47:40 2026 GMT
            Not After : Sep 27 03:47:40 2026 GMT
        Subject: CN=6ab5eedd-8b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:2f:55:7d:f5:4a:03:0e:76:4b:66:f3:a0:
                    23:a8:b7:80:0c:09:54:9b:09:be:99:b1:25:49:c9:
                    e6:2f:a6:c4:9f:a8:dc:87:97:b7:da:d7:8e:aa:7c:
                    7f:9c:5d:44:10:79:da:e6:84:a3:50:a5:57:bb:14:
                    db:88:04:fa:91:b5:01:9d:cb:e9:7d:ed:06:22:bd:
                    ee:27:31:d8:59:49:61:c2:b9:ef:65:f0:11:20:7b:
                    05:d8:ef:d0:42:d6:2b:a8:bf:bf:8e:ee:23:a3:6c:
                    eb:23:c3:00:05:6c:c1:35:7e:42:43:bd:2b:9b:55:
                    b5:2c:d4:36:ef:eb:c4:e2:f4:e7:b8:93:8a:72:34:
                    75:ab:1b:ce:20:5a:b5:37:ca:ec:44:8b:6d:cb:d1:
                    16:87:ed:e1:47:e0:bc:44:0c:a9:fb:42:36:c5:7c:
                    89:f6:a7:29:f5:7f:8a:80:ee:12:e8:81:ff:7a:3b:
                    dd:12:a2:48:29:50:47:e0:2b:07:07:13:cf:a7:7c:
                    dd:c2:96:c8:08:a1:a2:de:d9:ca:4b:3d:b1:33:dc:
                    62:cc:36:fc:f5:3c:22:a3:23:2e:1d:26:8c:05:a6:
                    b8:f7:e9:2b:d1:4f:6b:b4:2a:27:02:63:80:e9:cc:
                    a3:e8:d3:8c:4d:fe:a5:81:96:72:b9:5e:c3:8b:8d:
                    50:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:6D:BE:DA:E4:27:AE:E0:62:21:6F:B0:32:AE:49:0C:D7:49:67
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:38:13:9e:8a:6e:c9:e1:ab:cc:c2:4f:a6:e1:cd:d7:28:68:
         27:55:35:2e:b3:e0:7a:b9:76:02:5e:d5:e9:d0:33:e8:60:76:
         61:a3:f8:08:df:c6:4a:2a:fc:19:c5:67:0f:bd:c2:fa:c0:05:
         94:d3:ea:6a:ef:a2:0d:7a:7c:95:b2:28:3d:62:ad:f0:9a:08:
         da:1c:9b:8b:33:30:01:ee:0d:24:21:d6:56:38:c3:a4:b2:d3:
         18:73:1b:ce:42:dc:c4:b5:79:fd:11:de:cc:90:38:a3:f1:90:
         ca:f2:57:ea:36:a8:e1:37:35:ff:7a:bf:72:54:f4:13:ff:b2:
         19:d6:09:6f:e5:92:f2:52:4b:3a:5a:84:f2:a5:19:e7:c2:c6:
         ee:be:52:1a:bc:5b:68:1f:0a:e7:08:38:a4:65:28:23:af:18:
         ca:19:eb:2d:81:49:b1:cb:15:d1:fd:4b:e5:73:7f:45:4f:c6:
         8d:dd:22:25:a7:02:49:d6:de:22:80:ab:cb:a5:69:f0:1f:5b:
         94:44:cd:02:b3:cb:6c:f0:2f:c0:84:77:57:4f:34:64:51:7f:
         e2:9e:fd:d3:9c:87:8d:0e:f6:c3:6c:88:a6:97:d2:95:28:54:
         90:9e:e6:f6:a2:95:1a:cb:45:42:94:04:45:93:67:2c:aa:8c:
         6d:bb:4e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:05:10 2026 by rpki-client