Error: rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.mft
File:                     boKROqUWafc7081vZoj2c3uOXTA.mft (raw, json)
Hash identifier:          Xdc0xQOCAuwzOUcAq7POACwdxAdivwpgYlYLPIfrIiM=
Subject key identifier:   64:0E:A4:10:A2:33:B5:C2:7C:C6:BE:73:43:A9:8D:D8:90:63:5B:2F
Authority key identifier: 6E:82:91:3A:A5:16:69:F7:3B:D3:CD:6F:66:88:F6:73:7B:8E:5D:30
Certificate issuer:       /CN=F366A4F1AF/serialNumber=6E82913AA51669F73BD3CD6F6688F6737B8E5D30
Certificate serial:       0484
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/boKROqUWafc7081vZoj2c3uOXTA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.mft
Manifest number:          0483
Signing time:             Thu 24 Sep 2026 03:40:01 +0000
Manifest this update:     Thu 24 Sep 2026 03:40:00 +0000
Manifest next update:     Sat 26 Sep 2026 03:40:00 +0000
Files and hashes:         1: boKROqUWafc7081vZoj2c3uOXTA.crl (hash: dFT7dCd50qqE3fRE2yJEcc99eKqL+kOu6U5dcRWAeKQ=)
                          2: B95E0AD440AB11EEA20CFB7A4AD9E6FC.roa (hash: Dc7Blsh1nTbhDdB+xxqAt7dASD2CCoKvRCA4opVblYM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/boKROqUWafc7081vZoj2c3uOXTA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156 (0x484)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A4F1AF, serialNumber=6E82913AA51669F73BD3CD6F6688F6737B8E5D30
        Validity
            Not Before: Sep 24 03:40:00 2026 GMT
            Not After : Sep 26 03:40:00 2026 GMT
        Subject: CN=6ab49b91-1efc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:49:98:b2:b5:30:1b:4a:57:3f:21:48:6e:
                    ff:60:fb:aa:32:62:91:f3:61:2f:68:82:94:9a:79:
                    ce:43:fe:34:82:b9:d8:c3:71:14:f9:12:db:34:01:
                    d3:8b:90:7e:90:d0:5e:fb:e0:90:c9:71:1d:ee:de:
                    fe:52:e6:ec:fa:c5:65:e6:c1:43:28:65:57:b0:19:
                    1a:54:bf:58:3a:2a:37:48:e8:52:16:61:f4:88:57:
                    7d:84:5f:f7:3f:6c:79:0d:56:27:37:72:f8:3a:42:
                    79:7a:45:c2:23:17:ed:19:bf:e4:a8:97:f3:ee:f1:
                    a8:21:1d:75:78:95:37:c1:2a:0c:89:ad:24:40:bf:
                    ae:6f:08:60:34:aa:54:41:05:a8:57:f5:d3:43:9e:
                    0f:ee:51:a5:47:27:e0:39:a1:78:37:03:95:79:11:
                    e8:ec:49:93:55:72:0e:29:2b:fd:d4:26:9c:75:06:
                    7a:5d:cf:5e:2b:ca:6c:a2:1e:46:ae:70:68:0d:67:
                    0f:18:b7:bf:54:8f:d4:21:57:45:12:53:ad:ff:44:
                    13:6e:21:40:68:4c:eb:7a:7b:bd:15:d2:2a:65:57:
                    68:e5:ef:5f:ae:69:a1:73:6c:8f:30:50:cb:fd:26:
                    1f:eb:ac:be:7b:26:62:4e:85:64:f6:cb:53:43:80:
                    47:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:0E:A4:10:A2:33:B5:C2:7C:C6:BE:73:43:A9:8D:D8:90:63:5B:2F
            X509v3 Authority Key Identifier:
                keyid:6E:82:91:3A:A5:16:69:F7:3B:D3:CD:6F:66:88:F6:73:7B:8E:5D:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/boKROqUWafc7081vZoj2c3uOXTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A4F1/D2426D5440A811EE8AB736724AD9E6FC/boKROqUWafc7081vZoj2c3uOXTA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:62:e3:5c:a0:38:30:ae:33:48:ba:96:62:1d:a3:ef:15:
         de:f4:46:dd:41:86:fa:e2:26:69:31:1e:ea:46:af:99:09:97:
         53:f1:f4:bf:d7:3a:47:0e:a5:fc:b3:83:58:6b:44:bf:e9:65:
         64:f9:2d:8d:16:97:56:7d:2b:21:9e:59:ae:2f:54:c5:ce:a0:
         66:f7:82:a8:b2:f6:9d:80:c9:28:82:d7:f3:b4:b0:74:10:5c:
         9d:52:28:e2:b7:e2:80:c6:47:b9:f9:1f:57:fd:71:78:d5:f5:
         c5:5f:eb:fd:e7:9d:d8:ce:f1:8c:89:54:5a:13:77:ce:f0:d1:
         db:71:ce:ce:76:d2:90:96:fd:71:9b:db:96:68:31:5d:a8:95:
         51:58:21:ac:51:a5:ba:cf:c4:04:dc:d1:db:f2:a1:2a:12:98:
         61:e9:dc:d4:51:c6:af:4e:1b:e4:99:15:f4:8a:9a:34:79:14:
         c5:94:b4:d3:a6:d4:29:d1:23:94:e0:2a:5a:ce:66:37:7a:fa:
         a4:89:fa:71:ea:25:dc:d1:a8:eb:43:03:6d:5a:4e:10:7f:bb:
         d9:a4:0b:49:e7:ef:79:b9:90:92:1d:1f:82:f3:63:06:47:b8:
         18:6d:fc:fb:47:cc:6b:79:81:7b:af:3c:bc:e4:80:4f:48:e6:
         ef:bc:42:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:50:27 2026 by rpki-client