Error: rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier:          UHoB59zgds4nwIhlbkz/CKM4c4Trs9pte3KdIjQueo8=
Subject key identifier:   B9:4C:97:F5:0E:7D:6D:60:74:8D:88:6A:35:44:58:1D:22:C8:FE:27
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer:       /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial:       040B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number:          0409
Signing time:             Wed 14 Oct 2026 03:55:15 +0000
Manifest this update:     Wed 14 Oct 2026 03:55:15 +0000
Manifest next update:     Fri 16 Oct 2026 03:55:15 +0000
Files and hashes:         1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: WUiPIaVep9EeHFm9+fVI74PdS+Poo9UIZJfLBiw03X8=)
                          2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
                          3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 03:55:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1035 (0x40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Validity
            Not Before: Oct 14 03:55:15 2026 GMT
            Not After : Oct 16 03:55:15 2026 GMT
        Subject: CN=6acefd23-deab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:87:fc:73:50:8c:1b:9c:35:d9:83:2e:35:a0:
                    cc:ee:c3:ef:05:a7:20:f2:62:43:07:39:df:fb:31:
                    8a:02:f1:a4:8d:3b:3e:b3:2d:03:39:1c:56:2a:ac:
                    2e:c9:39:98:e8:b9:c2:0f:08:ee:ec:ce:4a:b2:19:
                    03:ed:2b:59:71:95:64:da:ce:59:9a:32:d6:ba:b8:
                    57:18:f2:6b:a6:f3:4c:d8:57:70:f2:a9:bb:f8:21:
                    8a:93:26:30:1b:d6:19:11:0a:8f:0f:8b:98:8b:4b:
                    1d:99:12:0f:f6:df:f7:de:02:61:b3:96:66:0c:6c:
                    51:41:56:f1:2c:c8:f9:c5:46:22:e8:03:97:09:e5:
                    d9:95:a8:37:ab:ef:8c:ee:3d:5f:57:49:1e:15:e1:
                    f9:a0:46:ad:01:7c:b8:f0:0c:49:9c:a9:66:13:d7:
                    7d:6a:d9:7f:c1:53:f4:f4:3a:72:22:86:4f:6f:92:
                    f1:0e:55:63:77:dd:22:8a:53:50:b7:f4:3c:d9:29:
                    5c:74:ba:8f:bb:13:50:42:9a:de:d5:e2:b5:c9:22:
                    b8:14:65:b8:d2:60:3b:de:97:10:b3:34:6b:0b:63:
                    76:8e:34:39:4c:2b:5f:2b:a2:94:68:fe:b3:c2:b7:
                    b8:8f:56:7c:6a:43:93:13:ae:f6:d1:69:1f:27:c0:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4C:97:F5:0E:7D:6D:60:74:8D:88:6A:35:44:58:1D:22:C8:FE:27
            X509v3 Authority Key Identifier:
                keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:05:2c:37:e8:09:c2:21:46:05:7e:53:e4:93:f8:e8:44:ed:
         1b:07:25:64:5f:50:8a:b6:07:18:7c:90:14:93:9d:5b:57:13:
         1c:ca:bb:d1:44:f7:db:0c:c9:32:49:78:be:6c:09:5d:9e:ea:
         f9:5a:bf:d5:fd:e2:91:80:a2:d5:69:c6:a4:88:69:15:fb:96:
         46:34:ab:b7:9c:40:04:15:1e:b5:34:6c:3f:a1:5c:78:4c:fe:
         d2:c3:8d:a2:99:cc:ae:76:62:46:7a:4c:9e:17:b7:01:87:03:
         eb:f0:a4:e9:d7:c7:e7:08:9c:a1:e7:d6:fc:4d:4a:68:82:74:
         dc:ad:46:26:a1:bf:fb:dc:97:ad:65:f6:07:61:27:3b:17:51:
         a0:bf:bf:d9:06:45:a9:07:93:5a:c8:0c:a9:d0:b8:8c:c5:e6:
         0d:85:5d:c0:2a:f0:5e:d4:9f:a9:a6:15:e7:42:c7:62:53:e0:
         7a:67:bc:23:c6:a8:ce:a5:4d:41:00:f4:e2:3f:e7:da:68:18:
         25:c4:c6:13:d5:3b:4f:e6:13:03:f3:32:40:bd:ec:05:11:6e:
         61:ca:e3:90:4b:5b:5f:6c:67:f4:47:d2:a6:e4:17:cf:8c:d4:
         ab:45:83:d0:ac:80:ab:71:62:a9:f4:b3:b6:bf:85:8a:83:18:
         f5:a5:7d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 09:53:51 2026 by rpki-client