Error: rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier:          9kBZoToyr6YgmE+VuLVySMJ+lpCocKw8ZwRlewhPMHQ=
Subject key identifier:   5F:D9:5E:32:8D:90:AE:C1:6C:80:01:61:97:DB:31:90:78:33:FF:0D
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       0313
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number:          0311
Signing time:             Tue 06 Oct 2026 04:26:36 +0000
Manifest this update:     Tue 06 Oct 2026 04:26:36 +0000
Manifest next update:     Thu 08 Oct 2026 04:26:36 +0000
Files and hashes:         1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: ZgsktIbEJgzHiFsZbF1eDLvM2+2JvA8KQoJ2Ded5I80=)
                          2: 49D10B8AFB8411F085B74285DAE4EC9C.roa (hash: xN+oPTiqjHmtNSoRYq6a05dMRfGXblz8z65sbXo+yJw=)
                          3: 2E19ACFAFB7811F08E942FB9DAE4EC9C.roa (hash: BxJKHTfkRZri9Zx6qUjCr6DC+VJKH2KXb6afgCKVgm8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 04:26:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 787 (0x313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Oct  6 04:26:36 2026 GMT
            Not After : Oct  8 04:26:36 2026 GMT
        Subject: CN=6ac4787c-d19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:19:11:82:99:b6:ac:81:9c:b1:d3:c9:9a:
                    a2:5b:36:01:c2:fd:35:ef:1c:95:a3:30:4f:1b:d8:
                    a1:3d:b6:b5:b6:ba:a6:00:53:b0:93:ed:68:fd:c1:
                    5d:20:2f:73:2a:c0:56:49:9c:16:21:2b:bc:78:85:
                    3b:6e:da:bc:01:20:e1:fa:67:a2:98:de:da:b3:57:
                    55:73:bd:99:3a:e8:b9:b1:91:07:d0:1c:87:22:0e:
                    42:c0:6c:cc:6e:df:f9:51:0f:f1:d5:a3:6c:33:c0:
                    19:e4:f5:c9:d1:e8:b2:e1:20:21:a9:75:15:9c:b6:
                    79:94:f4:ad:27:6c:30:fe:3a:39:11:0c:e9:4c:32:
                    ea:06:86:b1:19:72:6a:7d:6b:15:1a:56:56:7a:27:
                    88:d9:00:31:b9:33:50:f2:19:34:81:e0:6f:8a:89:
                    d8:6b:9b:e9:05:d9:3b:28:31:15:b0:56:7a:a0:d2:
                    ad:42:f6:cc:40:3a:75:0b:b2:a1:7f:5f:f4:92:d3:
                    21:29:d5:46:f4:da:1c:1d:0d:6f:0c:ab:c7:a2:33:
                    9a:f8:65:49:0d:e9:6d:ab:47:b8:f5:31:31:78:07:
                    f7:b7:1c:c7:50:fe:0a:43:23:78:f6:ee:4f:4c:3d:
                    e4:fb:75:ba:37:67:7c:05:08:27:8d:49:b3:76:6f:
                    14:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:D9:5E:32:8D:90:AE:C1:6C:80:01:61:97:DB:31:90:78:33:FF:0D
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:93:00:87:59:b1:09:e0:ba:38:aa:0f:d1:82:f7:b6:64:ff:
         6c:28:b8:4e:3b:b4:8d:5c:41:f9:a3:08:62:7d:fc:65:71:50:
         f7:d9:24:2c:1e:6b:7b:5d:61:6a:9e:6c:75:79:60:e8:ef:89:
         59:2d:04:ad:39:1f:6f:74:94:a2:96:7f:12:a8:7d:fe:5a:d2:
         27:b0:75:1f:2c:ba:cf:8c:39:e8:ec:66:e6:42:31:22:a5:97:
         48:4b:a8:c3:72:d3:5b:05:a6:88:ee:33:4c:bb:b3:6a:db:34:
         bb:12:a4:63:52:68:51:15:7a:c5:02:50:0a:cf:c2:ac:db:de:
         d3:0c:f1:6f:cf:82:6e:a9:39:28:01:65:fb:18:53:27:5d:38:
         15:fb:37:d9:3c:96:54:14:e4:93:77:d3:1d:c9:ca:e5:9f:24:
         29:61:5b:aa:e5:f0:32:aa:28:1c:73:2f:ce:56:7f:8d:0e:8a:
         87:24:19:56:90:84:87:6e:98:e4:cf:b6:8d:f2:51:e1:7d:97:
         32:e5:f9:5b:47:da:96:17:ac:60:4b:11:f6:85:73:1f:70:cd:
         cd:ae:e9:9b:d1:e5:5c:0b:fd:88:89:b0:7f:78:0b:29:84:2e:
         16:be:04:66:9d:b5:01:36:ae:12:86:14:5f:53:2b:ac:e4:73:
         9f:49:92:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:28:57 2026 by rpki-client