Error: rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
File:                     FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft (raw, json)
Hash identifier:          qjPo7VkpArStMMZahNAb9KsBxaQW6Tm2hHvVuXae0vA=
Subject key identifier:   D8:86:B5:5C:E2:49:36:1F:26:09:FF:BD:AB:3F:3A:84:FE:8D:E0:64
Authority key identifier: 15:D3:16:4B:E2:79:90:B0:85:2B:48:B6:6A:15:43:3B:77:19:00:8C
Certificate issuer:       /CN=F3620C16AF/serialNumber=15D3164BE27990B0852B48B66A15433B7719008C
Certificate serial:       04D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
Manifest number:          04D1
Signing time:             Thu 24 Sep 2026 03:28:45 +0000
Manifest this update:     Thu 24 Sep 2026 03:28:45 +0000
Manifest next update:     Sat 26 Sep 2026 03:28:45 +0000
Files and hashes:         1: FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl (hash: ltciWQov5saDSJVW1+4Ntazf8W2+nJpkKQLwSoFxVcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620C16AF, serialNumber=15D3164BE27990B0852B48B66A15433B7719008C
        Validity
            Not Before: Sep 24 03:28:45 2026 GMT
            Not After : Sep 26 03:28:45 2026 GMT
        Subject: CN=6ab498ed-921c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:69:d6:f4:ff:f7:3b:0c:c1:f7:b2:dc:94:4b:
                    ce:f2:1f:7e:b0:2e:4b:68:4c:2f:69:93:0c:53:99:
                    74:ad:4b:66:e4:08:5c:b1:0b:08:6a:1b:b0:a2:22:
                    39:33:08:7b:32:2c:43:5b:f8:5a:7a:fe:2f:42:35:
                    fc:f3:39:7e:72:97:f1:0b:e2:2d:f7:65:f2:09:a8:
                    d9:39:a8:b4:7f:3d:7a:21:38:e6:2d:ef:64:e1:fc:
                    e5:88:4e:5a:09:c0:03:6c:ad:a7:58:06:a6:5b:7e:
                    a0:ee:f5:7e:58:c2:0d:2c:a2:b6:cb:bc:5f:98:4d:
                    af:38:b3:f0:48:a5:ac:a4:7d:a1:cf:b5:5d:45:5e:
                    ea:e7:e0:5f:0b:1c:f4:84:7c:61:11:d5:ef:2e:e3:
                    c7:1a:8a:a6:30:51:90:a6:90:39:43:be:c5:c5:53:
                    13:54:37:4b:4e:32:70:a1:11:1e:f5:b0:c1:1f:61:
                    b8:0c:b3:0b:f8:26:82:a4:50:60:5d:64:35:af:26:
                    09:c3:ca:28:94:cf:4d:b4:40:b7:c8:08:42:ff:64:
                    27:37:4d:aa:7f:0a:ac:b2:16:76:ff:f0:f2:8c:44:
                    3f:4a:07:75:50:22:91:4f:f6:8d:44:7f:8d:35:74:
                    8f:60:7a:4d:08:39:cd:ed:bf:cf:5d:03:74:cb:1d:
                    19:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:86:B5:5C:E2:49:36:1F:26:09:FF:BD:AB:3F:3A:84:FE:8D:E0:64
            X509v3 Authority Key Identifier:
                keyid:15:D3:16:4B:E2:79:90:B0:85:2B:48:B6:6A:15:43:3B:77:19:00:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FdMWS-J5kLCFK0i2ahVDO3cZAIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620C16/B52E9370052311EE873C2D364AD9E6FC/FdMWS-J5kLCFK0i2ahVDO3cZAIw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:52:57:87:36:7b:00:45:a2:6f:cf:54:33:d0:85:94:d5:87:
         9c:e6:62:dc:42:9c:78:bb:20:e9:2d:72:68:70:06:5d:63:4e:
         9e:7f:02:eb:92:8f:61:74:5c:24:5b:47:3e:4d:44:67:06:74:
         02:dd:1b:bd:74:1d:f8:5c:34:86:3e:d5:f0:92:ad:c1:ea:b5:
         07:e2:64:78:8e:c4:13:30:ba:1e:33:5a:69:21:c6:82:05:21:
         c5:ef:6c:e4:b1:02:fb:62:ca:f8:37:5e:df:3a:08:7d:49:0a:
         f2:d9:9b:a7:fc:57:61:8e:3d:fc:82:bd:a7:f8:f6:97:fe:ce:
         5f:5d:19:f7:9c:43:4d:9f:5b:3c:83:a2:4d:6d:dd:89:9f:ae:
         4b:22:c2:31:f0:ba:7b:c0:9e:01:0c:2b:9b:f4:8e:8b:a5:19:
         ac:c4:a9:76:9c:28:80:45:b0:67:74:18:4f:24:ab:3b:f6:74:
         51:0c:83:3a:05:ea:d8:28:11:73:d0:b1:da:d3:c3:3b:d9:2a:
         31:68:f2:2f:e1:38:2e:8f:d9:99:ac:a2:d5:21:f5:ac:d7:f8:
         64:e0:e2:c2:a0:1d:44:7c:46:1c:00:72:4d:11:bc:d5:fb:06:
         61:56:84:ed:1a:57:15:a2:b6:78:cb:ad:ba:5f:98:c9:b0:1b:
         66:4c:01:d5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjBDMTZBRjExMC8GA1UEBRMoMTVEMzE2NEJFMjc5OTBCMDg1MkI0OEI2NkExNTQz
M0I3NzE5MDA4QzAeFw0yNjA5MjQwMzI4NDVaFw0yNjA5MjYwMzI4NDVaMBgxFjAU
BgNVBAMTDTZhYjQ5OGVkLTkyMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFadb0//c7DMH3styUS87yH36wLktoTC9pkwxTmXStS2bkCFyxCwhqG7Ci
IjkzCHsyLENb+Fp6/i9CNfzzOX5yl/EL4i33ZfIJqNk5qLR/PXohOOYt72Th/OWI
TloJwANsradYBqZbfqDu9X5Ywg0sorbLvF+YTa84s/BIpaykfaHPtV1FXurn4F8L
HPSEfGER1e8u48caiqYwUZCmkDlDvsXFUxNUN0tOMnChER71sMEfYbgMswv4JoKk
UGBdZDWvJgnDyiiUz020QLfICEL/ZCc3Tap/CqyyFnb/8PKMRD9KB3VQIpFP9o1E
f401dI9gek0IOc3tv89dA3TLHRm1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2Ia1
XOJJNh8mCf+9qz86hP6N4GQwHwYDVR0jBBgwFoAUFdMWS+J5kLCFK0i2ahVDO3cZ
AIwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIwQzE2L0I1MkU5MzcwMDUyMzExRUU4NzNDMkQzNjRBRDlFNkZDL0ZkTVdT
LUo1a0xDRkswaTJhaFZETzNjWkFJdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZkTVdTLUo1a0xDRkswaTJhaFZETzNjWkFJdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjBDMTYvQjUyRTkzNzAwNTIzMTFFRTg3M0MyRDM2NEFE
OUU2RkMvRmRNV1MtSjVrTENGSzBpMmFoVkRPM2NaQUl3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+UleHNnsARaJvz1Qz0IWU1Yec5mLc
Qpx4uyDpLXJocAZdY06efwLrko9hdFwkW0c+TURnBnQC3Ru9dB34XDSGPtXwkq3B
6rUH4mR4jsQTMLoeM1ppIcaCBSHF72zksQL7Ysr4N17fOgh9SQry2Zun/Fdhjj38
gr2n+PaX/s5fXRn3nENNn1s8g6JNbd2Jn65LIsIx8Lp7wJ4BDCub9I6LpRmsxKl2
nCiARbBndBhPJKs79nRRDIM6BerYKBFz0LHa08M72SoxaPIv4Tguj9mZrKLVIfWs
1/hk4OLCoB1EfEYcAHJNEbzV+wZhVoTtGlcVorZ4y626X5jJsBtmTAHV
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:17:47 2026 by rpki-client