Error: rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File:                     ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier:          NYsjSsXQ8JSMhvsK0sj/6PjTeCf5cjUSjlGztVx26ac=
Subject key identifier:   30:4E:52:F4:B3:5F:90:13:E5:F2:19:30:1C:9E:06:10:B5:B4:58:26
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer:       /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial:       067D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number:          067C
Signing time:             Fri 25 Sep 2026 02:41:42 +0000
Manifest this update:     Fri 25 Sep 2026 02:41:41 +0000
Manifest next update:     Sun 27 Sep 2026 02:41:41 +0000
Files and hashes:         1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: Aqohleja3hoJ5ICcnoULh2/1z3drELZ2taxHjMev/kU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1661 (0x67d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAR, serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
        Validity
            Not Before: Sep 25 02:41:41 2026 GMT
            Not After : Sep 27 02:41:41 2026 GMT
        Subject: CN=6ab5df65-fc55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:08:25:55:87:e0:e0:39:7b:1a:82:5e:5f:
                    6e:5a:97:4f:63:82:62:0f:64:36:51:8c:62:f1:2b:
                    ed:94:fa:3b:e2:6f:b7:ab:68:e6:67:35:3e:4c:ce:
                    ad:76:95:f6:82:a6:ae:1d:29:6d:02:1c:5c:96:2d:
                    d1:02:d0:23:93:d6:34:4c:88:18:16:e5:c2:88:cc:
                    ff:dc:62:c7:26:6b:08:a5:5d:37:7f:96:72:c8:d9:
                    e1:e8:a7:36:a8:2f:76:e5:ae:b3:77:8f:eb:37:03:
                    c4:ca:ee:d1:58:4b:62:7c:fb:c8:68:99:6b:98:55:
                    d6:a6:01:39:3c:52:a6:a0:5e:76:a7:3a:e3:3d:43:
                    76:3d:33:5f:2c:c0:9c:f5:82:3d:af:49:36:37:92:
                    c7:60:d6:16:34:2a:1e:b1:9a:4e:ca:53:78:22:5a:
                    87:ec:d8:8b:77:87:45:b1:05:45:e0:46:07:95:9a:
                    65:11:ca:5b:3c:6d:29:33:b5:c0:65:59:95:d6:a0:
                    26:81:4c:42:79:73:34:a3:ff:e9:e9:f2:2a:65:1e:
                    ee:5a:68:d7:ce:e2:7f:eb:35:0c:af:05:51:bb:44:
                    bb:95:56:18:69:d1:ac:f1:37:14:3e:98:d1:8a:2e:
                    39:29:2e:2c:13:0c:d7:b7:4c:53:2d:fa:70:fd:6f:
                    02:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4E:52:F4:B3:5F:90:13:E5:F2:19:30:1C:9E:06:10:B5:B4:58:26
            X509v3 Authority Key Identifier:
                keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a3:4a:47:ff:20:38:f7:32:5d:e6:f8:7e:58:5e:2a:15:39:
         18:6a:8d:bb:19:7a:ca:87:03:3b:2c:76:57:fd:5c:48:c5:60:
         6a:5c:2c:a0:06:a8:b4:de:3f:9f:e1:8c:17:1f:4b:9a:71:4f:
         b2:08:12:c1:31:97:09:db:66:39:bb:87:1a:69:08:4c:a8:c6:
         28:2f:a0:72:7c:05:ae:95:e8:7e:7b:55:f6:23:3d:2e:82:c0:
         b5:50:f4:5d:69:0a:81:84:36:a5:00:8e:3e:09:0a:36:e7:3c:
         54:71:6a:90:a7:08:f3:09:06:e6:23:e6:b2:06:b9:9d:d9:f6:
         6b:7e:54:7b:38:de:9d:05:9c:c3:8a:77:02:8d:ff:e4:42:16:
         fa:26:ad:16:24:1f:11:a9:e5:a4:6c:7c:35:22:88:2f:e3:e0:
         7d:c9:b8:e3:d4:be:50:c5:86:d0:37:0c:bf:c3:0c:67:bb:75:
         4b:28:b1:e4:e0:05:f2:e2:8e:98:3c:96:d4:3a:40:6d:2e:c3:
         75:5a:e0:b0:bf:a3:e2:30:24:fc:2b:8e:db:d7:3f:68:81:30:
         74:07:18:da:d1:05:24:a5:48:9c:37:2f:ff:be:64:05:08:59:
         7e:57:51:df:ea:9c:6f:74:7e:23:83:d0:18:78:12:d3:63:0d:
         20:d8:90:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:45:07 2026 by rpki-client