Error: rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          M2mu82eU5FIfxSG8xwDvc9KzDNGVKaibOx1fxNGW+WQ=
Subject key identifier:   0A:EE:AE:EB:A7:9C:FA:20:61:16:FE:A2:0C:D1:B3:37:F4:40:B1:D3
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       02B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          02B3
Signing time:             Sun 11 Oct 2026 04:42:03 +0000
Manifest this update:     Sun 11 Oct 2026 04:42:02 +0000
Manifest next update:     Tue 13 Oct 2026 04:42:02 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: PesasZESSIbQmRE31m9vyJxMSpNLaTTK8mFPfiRbYX4=)
                          2: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 693 (0x2b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Validity
            Not Before: Oct 11 04:42:02 2026 GMT
            Not After : Oct 13 04:42:02 2026 GMT
        Subject: CN=6acb139a-26cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:44:ed:2a:b2:52:f0:9a:96:a4:8e:8d:5f:f6:
                    24:85:a8:8a:de:31:25:e5:93:f8:96:fa:ef:dd:27:
                    16:fe:8e:e5:ab:cf:a1:0b:31:8f:94:8f:1c:b3:9a:
                    af:0d:b3:1a:cf:86:02:6a:1a:bc:3f:d0:c4:b9:4e:
                    de:75:48:b2:2e:3b:80:b4:21:04:b1:1e:eb:3b:31:
                    a0:b3:f8:45:3e:56:99:30:df:77:5a:c6:b3:2f:0c:
                    9d:e7:a7:f6:12:87:05:f1:07:90:8d:a6:86:41:55:
                    1e:ce:67:86:61:b5:b5:15:38:b3:92:a5:ec:b6:74:
                    3f:8e:c5:84:33:52:d6:36:9f:70:50:94:2d:34:1d:
                    c9:c6:8f:f8:34:55:c3:79:8e:f1:d4:cb:70:91:59:
                    23:35:ef:ef:e2:1c:ad:05:17:9d:98:72:d7:4e:57:
                    94:c8:19:44:5b:50:53:f2:d4:c0:a8:63:4e:f0:00:
                    3e:96:59:8a:89:c8:a0:8b:93:1e:8c:93:bf:69:8a:
                    af:51:ef:0a:a6:56:a7:d3:23:f6:68:79:86:14:c0:
                    74:d8:05:a7:aa:4c:75:51:8b:84:29:d7:a3:fb:1c:
                    da:d2:aa:29:30:8a:78:0a:3f:96:15:c2:fe:23:ef:
                    ab:25:56:d4:ab:7a:a0:2c:41:eb:5e:00:09:c6:5c:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EE:AE:EB:A7:9C:FA:20:61:16:FE:A2:0C:D1:B3:37:F4:40:B1:D3
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:8b:fa:50:5b:e7:8c:70:1d:99:8a:74:af:55:76:7f:ef:fe:
         98:3d:7c:f3:c5:45:58:07:b4:61:11:65:f3:f9:46:8a:d1:1d:
         8f:33:6b:28:d8:f4:33:88:12:bb:fb:79:a1:7c:2b:00:ad:fc:
         51:9f:ae:5d:d3:76:b5:f4:d4:8a:af:29:9c:a6:ad:27:0e:ca:
         9b:2f:5a:ca:60:6a:0d:b4:ad:80:8b:96:97:65:86:5b:a1:7e:
         80:57:a0:28:a5:86:36:7a:55:43:d5:c0:f5:7d:e4:6e:6a:fc:
         d0:b6:36:10:6f:76:17:4b:94:96:ac:43:ff:60:e3:3e:7f:73:
         d9:b4:99:25:26:9e:ca:36:73:4d:00:95:a4:36:4f:66:ab:ad:
         bc:f5:a7:a0:52:69:43:5b:90:cc:49:31:7b:04:17:db:27:a9:
         2a:44:66:b8:33:8b:72:9a:6d:ac:9a:b2:1d:64:94:b9:af:d8:
         42:71:68:4d:2d:6a:93:9b:80:81:96:e5:2c:f9:45:0f:99:0e:
         50:79:06:30:3c:3c:c3:e2:57:7a:1c:59:0a:22:3d:34:6a:11:
         85:14:72:f2:ed:23:30:11:b9:a8:34:56:66:8a:7d:d5:27:3f:
         dd:68:7f:46:a9:94:df:db:68:40:15:4e:93:d3:f4:53:47:f8:
         80:57:a1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:02:43 2026 by rpki-client