Error: rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
File:                     kiiCgOPYgt7EFfWIHAFch2WdaEo.mft (raw, json)
Hash identifier:          G8AjcMeWS8NCiuIUyMpuVveicN8ySBrfBNaKURFACu8=
Subject key identifier:   25:35:D9:5A:56:EC:D2:6F:25:F1:08:E7:64:01:73:63:2E:64:EC:AA
Authority key identifier: 92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A
Certificate issuer:       /CN=F365F7E8AR/serialNumber=92288280E3D882DEC415F5881C015C87659D684A
Certificate serial:       044E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
Manifest number:          044B
Signing time:             Sun 15 Nov 2026 03:52:06 +0000
Manifest this update:     Sun 15 Nov 2026 03:52:05 +0000
Manifest next update:     Tue 17 Nov 2026 03:52:05 +0000
Files and hashes:         1: kiiCgOPYgt7EFfWIHAFch2WdaEo.crl (hash: jxyLZp6vlrdUlz/sHtsC8UrY35Ege+ncgo+VZtNu1U0=)
                          2: 7F8D883847B111F1979852D1CE1D38B0.roa (hash: oYDoVUfu6u2a8Loo+1YedtcCrnvJ2azWlePBsIXROG4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                          rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AR, serialNumber=92288280E3D882DEC415F5881C015C87659D684A
        Validity
            Not Before: Nov 15 03:52:05 2026 GMT
            Not After : Nov 17 03:52:05 2026 GMT
        Subject: CN=6af92c66-1665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6b:4f:35:8e:60:2a:79:a3:a2:26:a7:ca:5a:
                    3e:98:ec:19:08:e9:fa:a6:2d:93:ae:e9:3b:47:3c:
                    1f:24:0d:f1:e5:d7:8a:68:3b:06:99:55:79:3b:cf:
                    5f:a3:f5:19:d4:55:62:35:7b:45:45:42:37:9e:d8:
                    4d:4d:ca:25:67:54:e2:f4:8f:34:a8:c3:76:0a:71:
                    77:12:fb:71:6b:c4:1a:cd:b0:59:cc:f7:e8:7f:07:
                    8c:de:1c:a0:2f:40:e4:8b:9e:cf:89:74:67:01:91:
                    3a:da:51:c4:93:3f:9f:02:ed:f4:68:99:65:ae:71:
                    b4:94:3e:0b:a4:02:bd:7f:84:e4:e4:de:9c:1e:fd:
                    75:e7:c8:39:8a:6f:56:2a:19:1f:17:92:89:ad:3a:
                    2a:b3:58:28:4f:f0:9f:92:17:90:a9:03:02:2f:93:
                    a9:9d:19:cf:0a:5f:3f:13:77:44:bd:8a:13:1b:f3:
                    dd:ba:36:71:6b:bf:08:de:75:e9:dd:1d:4a:0a:72:
                    b1:51:de:04:59:46:bc:0b:84:f5:4a:cd:76:c3:9d:
                    b6:06:b1:c8:77:68:b4:5f:ad:a8:c7:6d:54:be:9e:
                    39:71:65:9e:83:62:69:b6:cd:16:f8:5b:58:0f:49:
                    35:08:f2:e6:7c:82:e9:40:8a:96:17:5a:1b:83:35:
                    0a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:35:D9:5A:56:EC:D2:6F:25:F1:08:E7:64:01:73:63:2E:64:EC:AA
            X509v3 Authority Key Identifier:
                keyid:92:28:82:80:E3:D8:82:DE:C4:15:F5:88:1C:01:5C:87:65:9D:68:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kiiCgOPYgt7EFfWIHAFch2WdaEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/B87BC27696CA11EEBFD5AC73D25BE465/kiiCgOPYgt7EFfWIHAFch2WdaEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a4:3c:b5:f6:90:11:94:a9:d5:8d:bd:01:aa:df:6e:d1:a9:
         05:48:e3:d8:9d:b1:58:32:da:19:08:d4:23:af:ad:53:97:2d:
         94:11:dd:36:10:63:78:71:96:91:c4:d6:5d:f0:bf:fb:3d:dc:
         79:48:55:80:a6:d5:40:07:97:44:52:b5:9a:49:d0:74:7a:1f:
         c3:03:34:fc:f7:94:8f:65:59:06:57:a6:08:21:10:bf:c0:f0:
         cc:82:46:41:1d:b4:cc:7a:3f:32:b9:41:b1:0a:15:99:d3:d5:
         4e:e1:1e:2c:76:2e:f7:17:bc:2f:8b:cb:6c:8f:ef:f4:2f:81:
         fb:30:c3:c5:6a:2f:87:16:df:c7:83:9c:58:66:b2:19:c5:9c:
         51:88:04:c8:e1:4b:ac:1e:9a:89:98:de:31:f4:26:72:a1:ea:
         a0:63:66:62:d5:3b:63:3e:03:1a:86:aa:25:a7:57:21:9c:1b:
         ca:73:0b:59:71:8d:ac:ef:39:af:1d:85:0b:05:4a:64:a8:79:
         bb:56:1e:43:db:7d:85:96:ef:41:3c:6c:cb:e1:25:58:43:73:
         53:3e:0f:be:45:66:6f:b6:ef:d1:0a:be:50:03:4b:9f:05:97:
         2f:84:2e:c3:44:58:6e:5f:01:71:09:1d:7a:d3:8c:5c:32:21:
         ec:7a:39:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:53:42 2026 by rpki-client