Error: rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
File:                     T0jn6jDJibFdNjk3djVToH4WzY4.mft (raw, json)
Hash identifier:          xp4Fiu4ar3kc2J1NH6WNEejbzO4qY4TdF52QZJ5wMjM=
Subject key identifier:   E7:8D:0C:F7:29:B1:61:98:E0:66:1E:82:EE:2D:3A:33:A8:9D:F7:3E
Authority key identifier: 4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E
Certificate issuer:       /CN=F367BA6AAF/serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
Certificate serial:       03D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
Manifest number:          03C1
Signing time:             Thu 24 Sep 2026 04:06:14 +0000
Manifest this update:     Thu 24 Sep 2026 04:06:14 +0000
Manifest next update:     Sat 26 Sep 2026 04:06:14 +0000
Files and hashes:         1: T0jn6jDJibFdNjk3djVToH4WzY4.crl (hash: f1Da5Pw0/qxTbydUguD/D+rG0otkeOb1ZQtukYeEL9E=)
                          2: 01FFB238325511EFBB9C746F762E951A.roa (hash: HwB4zPJU9kPQhOWUZlM6j0iw2tO8p/LDrcqvDUSUml8=)
                          3: E3677BF4325311EF8E43A166762E951A.roa (hash: /yOVgWKNONmcMcmqu8GnU0BKllh0LGM51U9XQ2bz01g=)
                          4: A66EC216ECDA11EE9EC08472775412E6.roa (hash: f71Fay/DESTXOMYTj0DRv2PY2902rnleTuR/D0d4cTA=)
                          5: 5A1BE094EB6511EF853965AB762E951A.roa (hash: m2DS77Vz7boH9o3knUuqENRMtVGaoDlo5YdpHFrrc4w=)
                          6: B302C860325311EF8EF04166762E951A.roa (hash: PaTtuEHFKauPFcvBG7F1Vb+HR7eUcOBrKqbBlq0OM3o=)
                          7: C4815F54D81E11EFB891499E762E951A.roa (hash: wuzVVrhPQApx6Smw2Hs9Pgr/IoLeBCq0Aedko2SwUlE=)
                          8: 880847F2325311EFAA2C1666762E951A.roa (hash: Wluds4MwrpwwEfBvwaxH1Q9uLDWNvfUcuMAqtTfYhng=)
                          9: B163A47EEA6411EFB0192A8F762E951A.roa (hash: gd0V9wGbms8dangRjTs1B1syY6Co0GN21dzbunIC3Oo=)
                          10: 8FBDDA88024311EF8F71D755017001B1.roa (hash: U5+3ihpDeTDN/QaTSJ0S4ji0OUYXEbqAt0B5DT/fsvo=)
                          11: 156898525F5911F1BE0CD5B2CE1D38B0.roa (hash: fUAjVdVLuz/P7h4EhzSUpz1BimD4ahaM3FOhSa5PEpg=)
                          12: ABC9643AED2B11EFB63252B0762E951A.roa (hash: rYe+cPZkMHhDG2GzW8uh3+g2G04Hmp44xW61bCXWx/Y=)
                          13: 0139A80E1C2511EFB46BB8E77CDC24C2.roa (hash: QmuJlGJat+l8+ngZcwk1G2cycsf7YIyKE+PvKaaYwKw=)
                          14: FBD09FE6387411EF80E58557762E951A.roa (hash: gpW090sQ3gSntI8ZuxHiEJc42Mhxrl4srlTmd4Q5n+I=)
                          15: 7ECDEEE6387311EF9CCF594A762E951A.roa (hash: 2ZeihCUzI0W9JMOxurwJNNO7X97D4kJnt3ZQCqSXzLk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 984 (0x3d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367BA6AAF, serialNumber=4F48E7EA30C989B15D363937763553A07E16CD8E
        Validity
            Not Before: Sep 24 04:06:14 2026 GMT
            Not After : Sep 26 04:06:14 2026 GMT
        Subject: CN=6ab4a1b6-1acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:e3:2c:96:f2:d7:63:01:90:c6:7c:dd:bc:5c:
                    e6:b6:cf:88:d0:b9:36:97:72:e9:5b:d0:ea:db:b0:
                    77:e0:89:a5:b2:d8:76:54:65:2e:42:1e:b6:d8:d2:
                    55:64:f4:b4:87:23:8a:a5:d1:7c:f0:88:01:cd:b6:
                    4f:65:35:d1:b4:32:61:c6:78:1d:64:c3:91:2d:e9:
                    9f:f7:16:6d:32:23:f3:b4:c7:45:03:39:f6:ea:9d:
                    1c:40:b3:17:71:f1:69:ae:fd:e7:ad:e0:80:3b:f7:
                    72:2d:cc:3b:6d:08:cd:66:14:60:97:56:fc:46:b0:
                    94:ee:12:06:32:7d:e2:50:8e:90:45:b1:68:b6:67:
                    c7:ff:5d:70:d2:7c:ef:f8:5d:7b:f8:7f:cd:fc:5c:
                    73:5e:e0:d8:8a:53:f1:1c:59:61:e9:57:44:8f:65:
                    85:6e:58:f2:06:36:33:30:fb:3a:0b:c7:9c:4f:ca:
                    41:2a:3e:a2:7f:5a:e9:d3:cd:a0:ce:a2:2a:f9:6e:
                    5e:10:74:42:7f:83:3a:2f:6d:41:1e:94:58:d3:e2:
                    31:ee:b0:b1:fb:39:11:0a:ca:06:0a:64:f7:44:cb:
                    9c:ff:17:e4:e8:80:34:85:8e:36:a0:f8:d4:5b:56:
                    3a:79:5a:46:d1:bc:ce:6b:c5:e3:95:5c:df:ec:41:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8D:0C:F7:29:B1:61:98:E0:66:1E:82:EE:2D:3A:33:A8:9D:F7:3E
            X509v3 Authority Key Identifier:
                keyid:4F:48:E7:EA:30:C9:89:B1:5D:36:39:37:76:35:53:A0:7E:16:CD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T0jn6jDJibFdNjk3djVToH4WzY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367BA6A/0F4A37F4ECD911EE9F732C67775412E6/T0jn6jDJibFdNjk3djVToH4WzY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d1:d4:80:33:56:41:dd:a3:cf:3a:ac:00:e6:a0:9a:f7:8f:
         89:83:a6:20:a6:cd:18:00:80:09:ee:53:9f:6a:55:c5:07:3a:
         5c:64:ad:38:30:f3:82:22:0e:85:53:51:34:36:48:0e:6d:58:
         f1:6d:2d:b2:91:03:a7:27:9a:3c:07:2c:ee:0b:ea:b2:bf:34:
         a3:6a:ae:47:bb:c4:82:2b:85:cd:bc:fa:81:9f:7e:4c:e0:19:
         47:77:84:d3:61:55:a2:de:c8:1e:b1:76:d3:f9:62:f1:a3:10:
         e1:6e:4c:8e:f6:c0:08:e2:a9:08:f3:3d:98:2c:11:fe:f2:f8:
         f7:b5:2e:71:01:98:1d:22:58:27:33:77:f1:23:e7:99:4e:74:
         22:1c:e4:5f:c7:47:fb:80:85:a3:c8:2c:ba:2f:55:ba:25:4c:
         f0:11:27:5c:0e:af:29:d6:fb:3a:92:d4:a2:14:d0:1b:e2:57:
         26:d3:ce:ce:62:54:5c:11:a8:10:04:cf:43:f5:43:90:fc:aa:
         ef:09:85:21:34:67:79:1a:47:ab:e4:80:ee:a6:63:5d:43:60:
         3c:b6:8f:a8:b3:74:53:f2:c9:19:09:da:8f:41:2c:c2:23:cb:
         dc:4f:fb:fb:56:04:92:02:dd:0a:2a:58:64:c6:51:68:01:bf:
         d3:90:be:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:14:04 2026 by rpki-client