Error: rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
File:                     kp-MtyJC3APxF2jH_xZcaDK3U7U.mft (raw, json)
Hash identifier:          m+5GlZlIZ+OASI2HlCx7fLgWYhrKdx9JQFI6TYrMZNM=
Subject key identifier:   F4:15:D6:97:11:CD:2C:74:20:94:80:F9:0A:93:50:2C:AE:D6:BC:73
Authority key identifier: 92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
Certificate issuer:       /CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Certificate serial:       0411
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
Manifest number:          0410
Signing time:             Sat 14 Nov 2026 03:57:29 +0000
Manifest this update:     Sat 14 Nov 2026 03:57:28 +0000
Manifest next update:     Mon 16 Nov 2026 03:57:28 +0000
Files and hashes:         1: kp-MtyJC3APxF2jH_xZcaDK3U7U.crl (hash: S8vvNR7h14Z7wgLcDppu7ypF8zu4l/Jrc7K8AkkAgNI=)
                          2: A864F076BE9611EE998D299D775412E6.roa (hash: 1SOFM20prFpQpyBQ79yS3b8vfUM/+4DhWbKvJj39ado=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1041 (0x411)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E62BAF, serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
        Validity
            Not Before: Nov 14 03:57:28 2026 GMT
            Not After : Nov 16 03:57:28 2026 GMT
        Subject: CN=6af7dc29-6b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c2:d8:69:ec:61:0b:e5:49:f8:cb:a8:60:bc:
                    08:60:b1:ed:b2:d1:42:32:1e:d4:d9:ad:2d:d8:a5:
                    19:39:8c:f5:60:a0:14:8a:91:00:30:62:20:55:47:
                    64:88:5b:54:46:ba:90:6d:1b:da:7a:1e:5e:80:92:
                    16:6f:7f:de:41:57:d1:00:08:ea:8e:7b:31:ba:d6:
                    34:93:93:49:5f:25:02:66:40:71:82:9a:ee:c4:6f:
                    c3:d1:51:31:ce:de:02:45:e0:73:53:2b:2d:70:93:
                    f5:b1:b3:e5:5d:1d:58:fe:f4:7d:03:b3:6d:a5:ad:
                    2c:ed:18:d4:87:1d:75:8c:19:c6:fa:c3:7e:7a:a8:
                    d5:b6:46:fd:69:01:fd:a6:fd:06:7a:f1:bb:aa:ff:
                    1b:fd:e9:08:73:3d:26:33:94:3b:5b:b2:fb:d3:8d:
                    6f:57:b6:a6:13:69:53:8d:ef:1a:e3:c4:ec:a8:73:
                    7f:f4:dd:65:e7:0c:82:17:27:18:8d:06:1a:b4:91:
                    bb:c3:e7:46:d7:16:c2:ec:4f:0d:5f:62:98:32:1d:
                    56:5b:bf:dd:8e:b6:f8:b8:c1:aa:2f:40:03:c8:76:
                    0d:4d:0f:31:f5:e5:ce:01:41:6f:f2:96:49:c6:0f:
                    38:bc:bf:b2:b7:dc:6d:21:93:7a:2e:33:d1:1f:12:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:15:D6:97:11:CD:2C:74:20:94:80:F9:0A:93:50:2C:AE:D6:BC:73
            X509v3 Authority Key Identifier:
                keyid:92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:8d:61:be:ff:9f:54:79:32:16:a7:2e:fb:33:96:a7:8c:a9:
         cc:d3:6f:31:fd:42:50:23:cd:9c:9a:3e:4d:9e:50:a3:46:41:
         a1:ca:06:c9:d4:cd:d9:0a:56:b9:d9:01:5d:a2:55:44:f8:91:
         8c:51:fe:b7:60:85:39:b5:89:e6:5e:36:28:75:8b:79:63:d3:
         9e:e4:41:20:56:0e:e2:c1:f3:2b:57:1e:68:d1:36:0c:80:c3:
         89:24:64:dd:77:99:6d:2f:3a:1c:c1:0f:c9:35:38:e1:aa:77:
         c2:3c:20:da:05:4c:4f:da:cf:bb:1c:e2:14:15:75:47:54:4e:
         47:dc:3e:f3:5f:48:93:ee:ef:fd:1e:3a:55:8d:10:cb:53:47:
         b0:29:7c:31:5c:94:bb:33:f8:83:be:32:bf:c5:a4:19:e9:e2:
         07:b6:15:ae:b7:7c:89:0c:2e:cf:02:76:31:cc:03:4c:bf:0f:
         a3:8c:93:83:d0:36:73:95:b1:1e:04:e6:02:c0:f7:44:56:a2:
         ff:f8:20:8f:cd:05:ec:e2:5d:3e:e4:ff:b7:f4:1c:6d:fa:1e:
         cf:c4:3a:8d:09:16:b9:76:b1:94:d4:61:75:99:27:86:8c:9a:
         61:6c:57:df:cd:e5:23:b0:30:a4:a3:27:bd:e6:ac:ba:32:88:
         41:f1:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:47:15 2026 by rpki-client