Error: rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File:                     ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier:          ycy2GFUZUWCSLMjc7kdUakfZD2X13pvyyGWV0xPbhjo=
Subject key identifier:   DB:9C:53:4D:97:AA:FC:23:D5:98:8C:64:E8:06:DB:82:3E:98:BD:0C
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer:       /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial:       05D0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number:          05CE
Signing time:             Sat 26 Sep 2026 03:02:57 +0000
Manifest this update:     Sat 26 Sep 2026 03:02:56 +0000
Manifest next update:     Mon 28 Sep 2026 03:02:56 +0000
Files and hashes:         1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: A5rcB57RxzqYplXYeFFO9FwdNwB3ooSkRMt0rCnDrF4=)
                          2: 14676520195C11F1882310E6DAE4EC9C.roa (hash: MEXom9qqtVBHi9cTLvqwaxyNpMlwORLkLiKzmbGhhwI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                          rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1488 (0x5d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
        Validity
            Not Before: Sep 26 03:02:56 2026 GMT
            Not After : Sep 28 03:02:56 2026 GMT
        Subject: CN=6ab735e1-00ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a1:bf:d8:3a:89:a9:33:d7:fd:65:a3:b1:c8:
                    2d:92:53:94:4d:a7:25:ea:d7:92:4b:0e:29:76:e3:
                    f1:6d:44:1b:39:a8:a8:05:a7:56:df:a7:74:53:7d:
                    7f:8a:94:0b:50:8c:5a:61:66:17:ff:4e:ac:2d:52:
                    21:73:0a:06:82:1f:bc:00:ce:0a:ba:aa:ec:5f:93:
                    18:9d:6e:d7:cd:9f:c9:63:9f:06:54:cb:3b:9c:f4:
                    fa:36:d0:0f:fc:62:ff:e8:d5:2c:9e:fa:68:ab:4a:
                    5a:9c:ab:1d:44:f0:da:5c:92:b8:49:65:dd:3d:87:
                    cd:ae:d9:9d:89:73:a1:61:00:97:24:4b:aa:fd:ee:
                    ad:fa:5a:42:2b:3a:d0:0a:a3:99:fe:11:c0:48:f6:
                    cd:a7:87:97:d4:6b:39:70:67:cd:05:2c:07:61:8d:
                    c1:d4:ae:bf:d4:83:ba:52:e1:a5:ae:8d:ba:23:d3:
                    4e:b6:d4:93:ca:cd:90:a9:71:58:f5:2f:73:43:60:
                    fd:ef:45:c6:23:66:f6:d3:ab:6e:f0:8a:ca:b0:a8:
                    20:1e:86:64:bc:78:ed:d3:35:ed:c3:22:0e:5d:91:
                    82:5e:f8:32:8e:e9:54:7c:7b:c3:54:88:4e:73:75:
                    df:f7:f5:cd:16:23:af:d3:7c:b4:a8:3a:8c:55:93:
                    0a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:9C:53:4D:97:AA:FC:23:D5:98:8C:64:E8:06:DB:82:3E:98:BD:0C
            X509v3 Authority Key Identifier:
                keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:38:0a:b3:26:01:dc:fc:76:a9:f5:fa:c0:60:50:fc:8a:88:
         fa:91:06:26:b8:33:cf:6f:5c:0b:c4:d3:83:d5:86:87:24:25:
         9a:e8:4e:70:cd:ac:6e:31:30:ee:38:56:70:b8:2d:03:1f:84:
         5d:8e:35:e3:64:03:75:83:25:d3:05:8c:60:72:ac:5c:f2:30:
         f8:48:32:65:e6:f4:b1:33:51:2a:c5:87:cc:0b:35:82:d5:08:
         49:78:bc:04:59:bf:0e:44:dc:33:de:32:43:42:72:89:02:b2:
         3a:77:f8:05:2c:bb:af:c3:6c:49:06:e4:03:c8:cb:89:ad:ab:
         73:2b:85:05:32:da:f1:fc:07:ff:f3:1a:33:a0:23:2c:3a:12:
         9d:6d:6d:ec:19:8b:c1:3b:ec:8a:34:d9:27:89:9c:bb:f6:2d:
         a3:ca:9e:ac:57:0e:04:f0:cd:b0:22:57:38:7e:9b:0f:f0:b3:
         2d:71:d9:f1:77:b1:59:64:67:b6:48:8b:e0:e6:8a:0d:23:0b:
         4c:21:e8:51:04:c0:f4:e7:1e:e2:da:4b:63:c7:bd:4f:c8:c8:
         2b:1e:9c:f8:55:91:84:67:db:4f:d1:31:b7:2d:7c:d3:e4:23:
         9b:d7:2f:b1:c9:f6:c8:bf:c3:b1:59:89:8a:54:45:e7:9d:7c:
         96:f4:88:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:24:55 2026 by rpki-client