Error: rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.mft
File:                     e2w_rdEpusV-k9AUh9QxyV1oTeE.mft (raw, json)
Hash identifier:          nvNN7w/+ZvzgRsxCzpRT3f2fK4cwojHseLDJSj1ODQE=
Subject key identifier:   27:64:4D:7E:51:69:92:1A:01:80:68:66:F9:01:0C:24:11:61:9B:CF
Authority key identifier: 7B:6C:3F:AD:D1:29:BA:C5:7E:93:D0:14:87:D4:31:C9:5D:68:4D:E1
Certificate issuer:       /CN=F361A501AF/serialNumber=7B6C3FADD129BAC57E93D01487D431C95D684DE1
Certificate serial:       04C0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e2w_rdEpusV-k9AUh9QxyV1oTeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.mft
Manifest number:          04C0
Signing time:             Fri 25 Sep 2026 03:33:13 +0000
Manifest this update:     Fri 25 Sep 2026 03:33:13 +0000
Manifest next update:     Sun 27 Sep 2026 03:33:13 +0000
Files and hashes:         1: e2w_rdEpusV-k9AUh9QxyV1oTeE.crl (hash: V+Nft1VGC8fXTanZV0zatq1Z9S6ecRVr6jW5OCl6DbM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e2w_rdEpusV-k9AUh9QxyV1oTeE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:33:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1216 (0x4c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361A501AF, serialNumber=7B6C3FADD129BAC57E93D01487D431C95D684DE1
        Validity
            Not Before: Sep 25 03:33:13 2026 GMT
            Not After : Sep 27 03:33:13 2026 GMT
        Subject: CN=6ab5eb79-b039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:00:58:fb:95:8b:52:54:6d:84:c2:e3:a6:b2:
                    14:39:cd:8e:11:9b:cf:4c:68:85:da:5a:c7:6f:5b:
                    5a:db:60:14:dc:ce:44:85:aa:9e:94:fb:99:c6:44:
                    8f:5c:a2:a1:e1:19:87:7e:c9:81:12:08:a5:a8:42:
                    8b:b2:50:7e:a4:ac:7e:7e:13:68:3d:74:f1:5e:38:
                    cf:6f:a4:fa:b6:d6:c1:46:ad:7a:71:3a:7c:ac:3f:
                    2d:88:9e:f8:c2:ea:27:16:55:b3:81:1e:4a:24:75:
                    22:d1:40:fc:d0:5b:4b:8c:a6:9b:ef:87:a4:18:46:
                    04:db:4e:49:bb:17:65:c8:6d:02:71:96:7e:1d:30:
                    e6:1d:98:36:b3:99:7b:e4:bd:94:d8:20:87:bf:51:
                    80:38:e3:f7:db:5a:85:95:a7:d7:47:b6:66:64:b9:
                    9e:e2:a3:59:13:d2:39:ca:0c:28:c6:a1:16:0a:e4:
                    b6:e6:df:93:7a:7f:c0:43:4b:b8:3a:4a:6f:ff:46:
                    8e:47:aa:80:47:1f:fa:c4:0a:9c:4b:3e:1c:f7:82:
                    67:ee:74:db:9f:1e:40:4f:5b:f5:4f:ea:0a:df:50:
                    b5:2e:b9:92:13:93:28:f8:41:e7:17:fa:d1:39:83:
                    19:be:fa:6f:d1:96:ce:41:ba:da:d4:64:93:3f:c6:
                    83:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:64:4D:7E:51:69:92:1A:01:80:68:66:F9:01:0C:24:11:61:9B:CF
            X509v3 Authority Key Identifier:
                keyid:7B:6C:3F:AD:D1:29:BA:C5:7E:93:D0:14:87:D4:31:C9:5D:68:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e2w_rdEpusV-k9AUh9QxyV1oTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/6D9023EC13FD11EEAB8189244AD9E6FC/e2w_rdEpusV-k9AUh9QxyV1oTeE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:33:e3:a0:c4:02:aa:02:5f:1e:f1:e2:92:cf:61:ee:40:b4:
         a7:0f:bd:d6:87:53:16:cc:6a:d1:51:ee:c5:94:48:be:a0:d1:
         5b:69:49:db:0d:9f:ee:d6:22:03:cd:56:8c:c4:27:f7:08:2a:
         78:43:48:92:c6:73:3b:24:aa:c9:df:05:ec:46:ec:de:0f:0f:
         8d:f4:98:66:a0:29:ae:f0:75:4e:64:df:60:8a:54:69:9d:72:
         d7:ad:4e:2a:ed:63:e3:00:2b:63:7c:f6:ab:22:38:db:28:c9:
         f4:52:f9:12:38:b2:d0:a5:1c:ef:ed:15:ad:da:ff:ec:76:67:
         3b:c3:06:e9:25:7d:99:53:ae:ac:73:2f:f5:2d:d9:5f:b7:e9:
         06:62:84:05:8d:69:82:d1:e5:77:fb:8d:e2:a9:1d:d2:8e:23:
         0e:e0:4c:e4:6b:e6:24:56:35:0b:df:4d:87:58:78:14:ba:01:
         a8:77:60:e4:6c:1c:6d:80:cb:10:e0:00:39:84:49:67:df:b4:
         6c:aa:76:b1:49:be:d2:db:91:f9:d6:24:ce:99:b9:44:a5:5a:
         66:c8:5d:78:91:e8:cf:0c:f2:c3:06:46:b4:7f:3f:eb:12:2c:
         b8:d6:61:21:ed:81:63:8a:9f:f0:ca:bf:16:c3:9f:90:f6:7b:
         b8:f3:dd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:20:40 2026 by rpki-client