Error: rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
File:                     eW3qOGfLk4c-eX8UKo65xUiMl4A.mft (raw, json)
Hash identifier:          5E0bn1aFfPUshxggmyVYjU1HyzekVGqCleGCxP/d6bg=
Subject key identifier:   BC:C4:18:4A:E5:13:24:CC:D0:C5:10:61:23:56:B8:9B:8A:AE:8F:D0
Authority key identifier: 79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80
Certificate issuer:       /CN=F36724C2RI/serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
Certificate serial:       4B
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
Manifest number:          48
Signing time:             Sun 15 Nov 2026 05:51:09 +0000
Manifest this update:     Sun 15 Nov 2026 05:51:09 +0000
Manifest next update:     Tue 17 Nov 2026 05:51:09 +0000
Files and hashes:         1: eW3qOGfLk4c-eX8UKo65xUiMl4A.crl (hash: 7ubeSCoPHuRNv7pSiRKmB99J/O4K/qy+ZzcUTf6LdTA=)
                          2: 6FCAEB4EAB8D11F187F041B2CE1D38B0.roa (hash: TEjUWhtpTqtSUfGe0lxa155l20YdE5rAUao9hrYFvbQ=)
                          3: 3D1A9894AB8C11F1800375AACE1D38B0.roa (hash: GBs5ED+xGJq6GzmK2fLQrnQSM1dciJmOEyU5PpNU6Io=)
                          4: 42F64AF6ACEF11F18C8CB818CF1D38B0.roa (hash: zzQJK5ajfcyXqzqBUyOWm3W0mJWdmrxeq5n6MrvB/Dc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
                          rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36724C2RI, serialNumber=796DEA3867CB93873E797F142A8EB9C5488C9780
        Validity
            Not Before: Nov 15 05:51:09 2026 GMT
            Not After : Nov 17 05:51:09 2026 GMT
        Subject: CN=6af9484d-1d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:0c:e0:11:fe:5a:fc:41:0f:31:09:83:38:
                    cf:af:1b:bb:91:f1:40:f7:8d:55:47:55:4c:d4:9f:
                    24:48:8b:ff:55:13:bd:4e:ea:63:88:f6:c1:77:63:
                    40:ca:24:83:d5:c8:c6:33:8b:8a:7b:68:db:1c:e2:
                    bf:a8:13:8c:12:a4:61:43:0f:f0:7e:a6:01:b8:5d:
                    51:6e:37:e3:f7:bf:6c:68:68:f6:27:7d:6b:d6:4c:
                    e0:e5:43:4d:45:ba:30:03:66:23:80:c3:f7:83:95:
                    61:b3:a5:b4:f3:d3:d8:4c:57:fa:76:e4:20:fa:74:
                    ce:7f:48:91:be:2f:df:6d:95:00:ec:6a:35:c2:19:
                    2a:d5:0c:df:3d:99:f8:ee:b5:41:3c:9a:e5:47:f1:
                    82:b8:0f:c5:39:f8:2b:79:dc:9a:d5:4d:79:2a:a1:
                    2a:80:50:15:a5:94:e1:51:ec:7a:68:9f:06:d6:68:
                    86:60:8f:68:f4:b9:8b:f5:d2:72:ce:f9:ad:9a:03:
                    52:58:5a:8b:79:75:7e:74:c4:d7:a5:12:56:ae:58:
                    bf:27:27:77:89:56:1a:62:7e:83:53:3f:92:14:32:
                    cc:fd:e3:64:a3:09:19:65:8f:c6:1c:4c:1b:69:88:
                    85:cb:35:18:1d:7a:04:35:93:22:0a:82:6a:b5:8c:
                    ba:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C4:18:4A:E5:13:24:CC:D0:C5:10:61:23:56:B8:9B:8A:AE:8F:D0
            X509v3 Authority Key Identifier:
                keyid:79:6D:EA:38:67:CB:93:87:3E:79:7F:14:2A:8E:B9:C5:48:8C:97:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/eW3qOGfLk4c-eX8UKo65xUiMl4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36724C2/A9AE6FF2AB8811F1A44B0014CF1D38B0/eW3qOGfLk4c-eX8UKo65xUiMl4A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:29:f3:d7:2b:01:53:a1:7a:13:db:4c:8b:c3:f8:46:af:
         5a:03:45:28:4e:57:b1:03:52:ae:2c:59:23:0d:f7:a0:e0:bb:
         8d:cb:eb:55:be:6f:8e:95:f7:f0:bf:7e:9e:17:49:09:31:80:
         49:ea:c6:d1:61:e2:a7:49:9a:e5:b4:52:3f:b8:7c:27:0e:e2:
         28:87:8d:61:29:ee:fe:66:6e:89:6e:68:c4:55:1a:b2:d3:c2:
         05:0b:b8:73:e6:38:6c:55:9d:9d:e3:34:74:a6:c3:34:44:10:
         e7:d2:e0:4e:9c:3b:0d:ee:dc:a1:27:d4:7a:40:16:27:f9:30:
         7d:fc:83:88:88:f8:01:f5:91:aa:8c:1e:35:d4:d7:a3:ff:8d:
         96:a1:5a:d9:cd:a8:16:93:4d:0a:a6:11:a8:fe:47:0a:d7:5b:
         c3:56:6e:57:87:2b:64:7a:27:7c:19:7d:8e:70:03:2b:c7:40:
         0a:c8:ef:1b:f7:77:c3:ce:c4:cb:7e:6a:72:fb:9b:d9:56:fc:
         f2:19:dd:73:6f:c4:ec:59:31:61:d1:6a:b9:92:1b:e7:3f:05:
         36:03:50:34:da:d1:c5:d8:d7:1c:8d:16:de:78:68:9b:09:72:
         f9:8a:f7:e6:33:3e:91:ea:40:63:c8:09:96:1c:29:0b:da:05:
         e0:a8:d7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:41:22 2026 by rpki-client