Error: rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          viNxPzlH1FJq4fhezr7AMORDgkpzcvnfFL8eOi0wABQ=
Subject key identifier:   DD:69:27:09:EF:37:E6:F2:D1:72:78:1B:E0:BA:7C:59:46:D4:32:93
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       06E9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          06E1
Signing time:             Mon 28 Sep 2026 02:36:08 +0000
Manifest this update:     Mon 28 Sep 2026 02:36:08 +0000
Manifest next update:     Wed 30 Sep 2026 02:36:08 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: ancEJ4qSB2LvnT95rB2XdBlQVpig7WFbuA0hVhoELTA=)
                          2: FA488F2084E511F1ACE5B8D1CE1D38B0.roa (hash: Pd+84KPhPBsNkpBN1hVe9FHlx1CumYc3oDhGGRlaBgg=)
                          3: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          4: F05CDE6684E611F1886BCED9CE1D38B0.roa (hash: BKX3UcRCwM62AYLNiq8SzyAS2T5C7ScNOyMg7wplAWU=)
                          5: 2C82DE8284E611F19FB81CD2CE1D38B0.roa (hash: b3bTfsHITdYZ9ni2iIT1pWPRt5idzYLvZ2tzcXpea+8=)
                          6: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1769 (0x6e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Sep 28 02:36:08 2026 GMT
            Not After : Sep 30 02:36:08 2026 GMT
        Subject: CN=6ab9d298-b7f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:65:eb:5f:fb:44:6e:5e:42:52:b3:24:b0:8d:
                    62:7a:fc:26:3f:60:45:ac:75:93:6b:dc:1b:08:54:
                    1d:22:da:8c:66:e8:b3:61:77:a3:4c:19:58:33:95:
                    f6:a6:d7:91:b3:68:02:7c:b7:ce:05:b0:9c:1c:16:
                    62:62:b2:b0:05:5c:b8:ce:4d:4b:c6:91:0b:36:98:
                    4f:8c:52:24:6d:e3:d5:83:04:58:07:26:0b:75:f5:
                    ec:51:4e:52:78:2a:d8:14:6b:22:aa:cc:ec:02:93:
                    d9:3b:a3:8e:b3:26:ed:2e:35:97:e5:55:9b:5e:43:
                    58:8a:f5:5a:fe:48:7b:4c:fa:a9:d6:5e:ee:58:bc:
                    59:fa:4a:0b:20:b7:fb:52:84:c2:9d:f4:ca:c7:24:
                    07:3a:c6:b3:bd:35:d6:b7:69:0b:f0:b6:86:aa:ff:
                    8f:3e:d5:57:7d:a6:82:85:d3:4b:ef:0e:ef:b7:08:
                    70:87:3d:54:db:07:b9:26:ce:fa:98:76:86:3f:8a:
                    a9:94:a8:8e:79:10:72:2d:65:0c:4a:6f:1a:d0:9e:
                    75:a8:a0:ef:8a:85:3b:8b:a4:fc:06:aa:12:66:b5:
                    cb:94:45:1b:3b:1f:54:b9:e9:b5:45:9a:c4:fe:b3:
                    07:1f:e9:5b:b2:9b:b8:c1:d9:32:b5:98:cd:6e:78:
                    5e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:69:27:09:EF:37:E6:F2:D1:72:78:1B:E0:BA:7C:59:46:D4:32:93
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:01:e8:67:3d:a8:30:c5:fb:45:da:5e:f4:d9:62:d4:13:0e:
         16:b2:67:e9:52:4e:f1:58:a2:d6:48:7a:ad:9b:31:f2:0a:0a:
         16:6f:54:b8:30:79:4a:a9:c0:bf:7f:d0:3d:f8:f4:18:bf:21:
         98:66:d1:4c:8a:57:a4:3c:4d:c1:f4:a4:ec:88:33:89:77:eb:
         8a:5e:67:b2:5c:78:cf:11:26:07:79:de:0a:34:35:06:ea:ec:
         95:53:49:de:71:e3:91:f0:f5:93:87:70:4e:5f:42:51:cd:16:
         f6:ae:10:09:56:c0:b0:dc:91:54:32:98:0c:c4:0a:1d:06:f0:
         76:61:ae:bc:46:e9:54:41:0c:03:bc:f9:73:bf:04:f3:d4:20:
         48:c6:8e:a6:ce:87:15:fe:61:72:77:d8:f4:b1:69:6f:68:0c:
         67:90:a3:ca:c2:0d:05:d1:00:98:64:fb:f2:f7:9b:a3:2d:6b:
         11:03:22:fd:bf:3c:ce:dc:f3:11:8f:df:c8:46:f4:c4:65:76:
         2b:58:1e:d4:39:e7:a3:e0:f2:32:ea:a9:9e:42:b5:10:ee:0e:
         3d:d6:c0:48:5b:9d:a9:02:3e:00:37:f9:9e:5d:af:88:bc:96:
         ae:a6:fc:22:c7:c4:60:19:a1:25:a2:6d:d9:f7:01:dd:be:53:
         b1:00:62:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:53:10 2026 by rpki-client