Error: rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
File:                     CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft (raw, json)
Hash identifier:          d9b/MGZMT6HrvCfmUbrBB8S//nzvFtLeSwsNw18EEC8=
Subject key identifier:   E3:F9:DB:00:F0:33:D0:F1:57:70:72:7F:C8:2A:08:6D:75:87:AD:FE
Authority key identifier: 09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8
Certificate issuer:       /CN=F363763AAF/serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
Certificate serial:       05FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
Manifest number:          05FA
Signing time:             Sun 15 Nov 2026 03:02:35 +0000
Manifest this update:     Sun 15 Nov 2026 03:02:34 +0000
Manifest next update:     Tue 17 Nov 2026 03:02:34 +0000
Files and hashes:         1: CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl (hash: DXdHkfJ+KYAUF/fbN0GnCTJOIirxtr6iUL9a8MjK3VI=)
                          2: 0C17C5923C6511F0BEB31A91DAE4EC9C.roa (hash: Dk3egDXLcZWiCKWFaQebnI7KBH7G+aSO1771Cj6q3cY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534 (0x5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363763AAF, serialNumber=099DBB9928A5C29FA5922CFDB95F190EC0FB4AC8
        Validity
            Not Before: Nov 15 03:02:34 2026 GMT
            Not After : Nov 17 03:02:34 2026 GMT
        Subject: CN=6af920cb-bfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:28:8b:c8:a5:04:19:b5:eb:16:59:81:ce:5b:
                    01:1b:a8:b9:fe:ea:bf:ab:ed:cc:40:fc:9c:bf:f3:
                    2c:2b:f9:0e:e8:94:9e:2b:7f:49:85:57:3b:2a:44:
                    82:bf:65:1c:f4:50:35:5c:25:51:a7:95:78:ff:e1:
                    4e:2a:ee:32:33:6b:30:50:90:90:bf:83:d3:2c:42:
                    0e:09:2e:1d:34:9c:87:65:df:51:61:e8:83:6f:a9:
                    3a:7f:6a:c6:84:f8:e3:0f:1e:52:f8:1a:79:ca:0a:
                    cb:e5:48:50:47:bb:49:aa:be:73:7f:3b:62:7d:e9:
                    37:7e:d5:c2:0b:30:2f:f3:44:a8:00:07:1a:04:ba:
                    bd:34:dc:01:ca:21:0c:9f:ec:53:e6:3d:15:96:96:
                    0f:dc:30:57:5b:5e:b6:96:84:a5:65:85:6b:66:fa:
                    57:9d:49:80:b8:3a:d5:78:1a:6a:71:8c:37:16:dc:
                    15:73:d9:57:97:35:5f:43:99:02:a3:58:bc:93:10:
                    a5:27:3b:a0:3c:4f:eb:af:d3:3c:f9:31:e3:22:9f:
                    b9:12:ef:a8:ff:3e:26:48:fd:2c:41:a9:55:7f:49:
                    33:35:ef:27:9c:6c:f2:bd:0b:86:fb:a6:01:7e:16:
                    e2:f7:be:cb:a1:e7:45:94:b2:5a:29:48:c9:11:fe:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F9:DB:00:F0:33:D0:F1:57:70:72:7F:C8:2A:08:6D:75:87:AD:FE
            X509v3 Authority Key Identifier:
                keyid:09:9D:BB:99:28:A5:C2:9F:A5:92:2C:FD:B9:5F:19:0E:C0:FB:4A:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363763A/B60ABD70536F11ED855D7AA2F1222468/CZ27mSilwp-lkiz9uV8ZDsD7Ssg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:26:83:cb:65:03:10:03:34:ee:53:8b:27:e0:02:c0:93:fe:
         d7:4e:6a:55:26:ba:f1:b4:2a:ec:f1:d7:69:7d:f5:1d:8a:e8:
         f1:5f:6c:83:ab:c1:40:ea:60:61:64:c2:f6:c3:a3:a4:71:c9:
         f8:78:0e:40:77:60:9f:58:12:d7:b3:44:71:71:a3:ac:fa:ce:
         ad:fd:97:58:b0:92:fc:fb:e6:20:5c:22:93:20:b6:07:a3:15:
         c7:41:fc:ee:09:ae:e3:8d:ca:a0:5f:da:4d:b7:c0:d2:8b:31:
         82:ea:2a:2a:1e:0f:0d:73:c6:45:4f:2d:5c:7d:5e:d5:c9:2d:
         84:2f:15:99:df:f6:93:70:64:ed:76:93:39:38:5d:a8:08:50:
         86:47:99:5f:ea:9a:1f:d0:fe:57:18:28:f0:56:36:23:81:30:
         12:fc:66:75:33:53:39:7c:a6:34:29:8d:4b:11:9a:b8:e3:1d:
         4c:21:d9:b5:96:12:d6:a3:1f:54:0f:40:04:a0:c6:2d:7c:64:
         ed:d0:e2:9c:18:31:5e:32:f2:ee:e4:df:66:e5:b8:e6:c2:1a:
         6b:bb:f4:d9:12:27:ba:d0:90:c3:ba:f5:ac:43:cb:f1:8e:4b:
         a4:60:83:8b:ee:0f:a0:ae:25:c1:7e:69:32:7b:f5:cc:52:11:
         5e:b6:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:06:16 2026 by rpki-client