Error: rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File:                     OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier:          ARVxKJip/TG0hHyEpKQ/lwSZxoDk4uBcydF/RB5/1Xc=
Subject key identifier:   0E:AC:2B:64:02:BB:67:FB:22:89:60:13:D2:58:6B:E4:82:0A:97:16
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer:       /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial:       01B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number:          01B6
Signing time:             Thu 24 Sep 2026 05:01:36 +0000
Manifest this update:     Thu 24 Sep 2026 05:01:36 +0000
Manifest next update:     Sat 26 Sep 2026 05:01:36 +0000
Files and hashes:         1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: iOt/BIWedyFFNY+A7GtQjBP2nthKg51XVBsPGyi6FiI=)
                          2: F8600BDE84B911F085AD04A3DAE4EC9C.roa (hash: DP8mnGerifLfSRadwXVvA2WZ6PCmE2usVrRlV28umhs=)
                          3: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
        Validity
            Not Before: Sep 24 05:01:36 2026 GMT
            Not After : Sep 26 05:01:36 2026 GMT
        Subject: CN=6ab4aeb0-4d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fd:a3:6f:48:56:25:3e:55:9a:fd:36:0f:f0:
                    f6:54:79:8e:27:73:ef:40:19:56:a4:73:3d:f4:57:
                    b0:87:02:2a:63:96:02:38:d7:06:a7:ea:1c:c2:9c:
                    3f:e4:8b:df:ca:7c:13:14:23:cb:93:01:53:54:6b:
                    e5:ef:ea:50:9f:13:61:d5:0c:49:66:03:fc:1e:9d:
                    0c:1b:0a:c4:af:a9:d4:eb:4a:a4:34:31:0d:18:70:
                    e6:43:ac:81:14:8a:0e:0e:b5:d1:94:f0:37:a6:23:
                    71:c7:84:e1:ce:57:25:ab:74:eb:39:cb:09:f5:47:
                    6e:0f:e3:6b:b7:3e:2d:d8:48:9a:57:07:49:59:3a:
                    78:cb:05:2f:00:c8:96:97:72:c7:d3:3d:8c:5a:15:
                    43:69:ea:27:1f:30:d3:2c:ad:cc:28:ee:45:5a:a5:
                    69:b8:dd:66:01:5c:6d:e8:75:d5:2c:cd:0f:33:b0:
                    b4:30:76:29:e7:6c:f4:f0:3c:64:b3:88:75:72:f2:
                    89:92:43:a9:e3:26:7b:e1:c0:a2:c3:2a:f7:ac:62:
                    37:de:e2:c5:85:43:1d:29:f7:2a:46:fe:94:14:09:
                    d0:cf:6c:b3:80:00:3a:d2:5a:a1:99:eb:6f:62:2f:
                    69:15:c5:f9:77:e4:b4:79:25:45:d5:5e:09:82:e1:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:AC:2B:64:02:BB:67:FB:22:89:60:13:D2:58:6B:E4:82:0A:97:16
            X509v3 Authority Key Identifier:
                keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:60:5b:1d:7e:9c:dd:83:27:ef:d0:c0:6f:36:60:11:ee:6e:
         14:74:65:90:78:7d:5b:09:4d:34:71:2f:b9:53:bd:d2:82:2d:
         5e:9f:cc:ef:07:19:0d:63:48:93:81:8e:4d:a1:66:53:fb:c6:
         bd:8e:69:22:39:95:45:51:d6:18:73:c2:77:65:a1:93:b4:e5:
         0f:57:94:99:f8:36:5e:7d:61:78:4d:66:01:2a:86:4e:a3:68:
         ad:dc:5e:57:71:e3:ca:e1:73:50:f9:14:fe:18:a1:f9:a2:6c:
         ab:a9:37:2b:88:c8:02:b6:8f:1c:eb:a3:ab:79:3e:bf:c0:ae:
         48:ff:1b:e8:a5:27:79:27:cf:3c:70:24:ae:0c:ae:b7:94:13:
         ba:62:90:a0:a8:11:4a:b0:65:17:af:03:a2:72:6e:2d:3f:e7:
         8e:67:05:00:01:ec:ce:39:20:f4:a7:00:43:a8:d1:ea:87:8c:
         e6:0b:da:47:65:05:2e:26:b7:b0:3b:05:2d:f9:8a:2e:6b:37:
         0c:52:b3:d4:0f:b7:ac:b1:9c:e8:f8:bb:07:54:c5:ab:91:a5:
         5c:3b:11:b8:08:ef:59:32:86:93:b0:ef:10:7b:6c:70:75:f6:
         81:1a:76:77:bb:66:1e:89:5d:b2:bb:ae:a3:5e:63:d5:23:54:
         3d:a0:4f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:37:53 2026 by rpki-client