Error: rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
File:                     ki0mxmsPTvhSNY472eGm8bVde4c.mft (raw, json)
Hash identifier:          S22z2nv1MPu26Ur49RPxGlk6wvA90zh7FeXc7WggBzI=
Subject key identifier:   10:D2:C8:59:C8:F1:4F:B4:35:AE:A3:D0:48:EC:5E:CE:35:E0:02:F4
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Certificate issuer:       /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial:       058E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
Manifest number:          0584
Signing time:             Thu 24 Sep 2026 03:09:03 +0000
Manifest this update:     Thu 24 Sep 2026 03:09:02 +0000
Manifest next update:     Sat 26 Sep 2026 03:09:02 +0000
Files and hashes:         1: ki0mxmsPTvhSNY472eGm8bVde4c.crl (hash: ++d2NpeSrbN5gGtbG4Cvv4HHKu03Yia0kyQ9H9gjBbM=)
                          2: FF2158528AA711F1B550CFF0CE1D38B0.roa (hash: cZ1trg8d+F5o+UUdS9EJoldliC9ZeXJBsBQSd753BjQ=)
                          3: 992D4D268AA711F195A7CFECCE1D38B0.roa (hash: sZQhcPLiBX/Tc/KviHIxHQCpBR2q2wGBC3IndjYyl3M=)
                          4: 42CD7A328AA711F1BDD8B5ECCE1D38B0.roa (hash: DuDVtP8ufRkIHxwSxkSH7iTRXAL2+9UFTBMr8aoAQDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1422 (0x58e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
        Validity
            Not Before: Sep 24 03:09:02 2026 GMT
            Not After : Sep 26 03:09:02 2026 GMT
        Subject: CN=6ab4944f-a9ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:63:b4:c0:01:67:f9:df:f4:b8:d9:e4:58:ab:
                    f5:2d:be:22:6a:61:3d:44:4a:2c:3f:7b:c1:b4:d4:
                    04:63:d1:e4:b2:5f:53:38:2d:ec:b1:0a:0f:d4:ff:
                    8a:c1:9e:8b:87:fd:98:f2:4a:ab:5b:b4:be:8a:02:
                    c4:29:d7:6b:2d:92:a3:99:c6:6f:48:79:a7:53:5b:
                    19:f3:f7:69:9f:23:5f:fe:4f:61:98:82:90:2d:98:
                    bb:8b:58:ce:00:c1:14:16:98:92:63:a1:a9:6e:e0:
                    83:12:6e:e4:8e:cc:2d:29:fb:62:73:a4:c3:ba:b0:
                    6e:77:31:63:88:6f:41:e8:75:0b:bd:38:42:f4:80:
                    75:8e:9b:d0:39:90:9c:68:12:28:62:58:22:d1:9e:
                    9e:2f:20:3a:09:30:20:3f:a9:23:76:01:44:1e:6e:
                    f2:62:fd:61:cb:0f:e6:a3:34:7d:94:1a:e1:1d:4b:
                    1e:9a:46:b0:5a:60:8b:c9:25:5f:6a:67:2a:bb:23:
                    e5:7d:7c:9b:ae:34:16:b5:11:55:0d:d2:3e:36:bb:
                    d5:db:e3:f2:60:2d:c5:35:31:53:50:91:29:d6:4a:
                    2e:87:17:d9:16:9f:c8:8c:11:ad:13:34:d4:33:94:
                    1c:6c:2c:91:5b:b8:5a:f9:d8:9e:a8:c4:8c:f2:79:
                    b8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D2:C8:59:C8:F1:4F:B4:35:AE:A3:D0:48:EC:5E:CE:35:E0:02:F4
            X509v3 Authority Key Identifier:
                keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:11:f4:0d:92:5a:4f:55:4b:68:7f:c5:0e:8a:3f:42:37:50:
         28:ee:86:e1:93:5d:17:8f:06:4d:fe:63:ff:85:2a:9a:b3:3a:
         b3:4f:08:93:31:f6:d2:09:2b:bc:16:87:0d:bf:ed:6c:94:82:
         ce:74:58:ba:16:7d:84:a7:1b:6a:98:e7:64:58:33:b1:08:a6:
         88:12:35:57:a3:1c:8a:1e:4d:86:6a:4f:27:25:77:fa:bc:27:
         00:97:42:c7:0a:eb:01:06:b3:6e:8f:a4:7a:f3:10:97:c5:e3:
         9a:6f:33:ed:86:ba:42:f3:7b:95:99:07:e8:1b:2e:09:23:07:
         c1:99:e7:60:d7:30:9e:f5:b2:59:06:26:f9:ce:7f:0e:c2:e4:
         02:c9:33:0b:4b:d2:9d:ca:88:6c:31:68:c3:27:69:06:92:f1:
         27:e6:de:d0:1a:94:4a:45:17:14:7f:a1:c4:99:57:e6:b4:91:
         9c:41:50:02:9f:3d:7c:2b:38:aa:fe:50:39:1c:3e:2f:47:78:
         2c:e7:3c:40:65:47:94:d7:e6:c4:67:b3:94:5f:5a:ce:05:0a:
         24:03:0c:a2:21:8f:9d:4c:81:ed:b7:de:28:c3:1c:f7:8f:56:
         e2:de:1a:23:65:55:f7:3a:53:59:59:f1:58:a9:72:fb:8b:98:
         dc:28:5d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:45:16 2026 by rpki-client