Error: rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
File:                     ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft (raw, json)
Hash identifier:          oKaWJK7LqHkCXj4N7ckUHwGR2u3lYlboWKvN6mA8gOs=
Subject key identifier:   D4:26:63:48:6C:0F:A4:B3:C1:FE:43:65:61:C7:2F:9A:5A:00:A7:17
Authority key identifier: 92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6
Certificate issuer:       /CN=F367EEA2AF/serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
Certificate serial:       04DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
Manifest number:          04D6
Signing time:             Sat 14 Nov 2026 03:34:45 +0000
Manifest this update:     Sat 14 Nov 2026 03:34:45 +0000
Manifest next update:     Mon 16 Nov 2026 03:34:45 +0000
Files and hashes:         1: ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl (hash: 0DNmE6l/AxJopQOLepEi+o9S7CiYfi0PjITjTwFGWls=)
                          2: F59C135AD57111EE98F3334E775412E6.roa (hash: DlLkA76T6/DZ7xEc77ZbObEHLYWet3TzWSKSqOWWlnU=)
                          3: 43172C202F6711EEBE578C1B4AD9E6FC.roa (hash: olt87M5UNUaEOcxzcw5wRYVy43osgJdjsy53S5VrdrA=)
                          4: EA6262822EB411EEA85FC5794AD9E6FC.roa (hash: k3VP3qw0EwdYjKV3iUtgdfKB+KXoIlF7qnyQ2hPvZY8=)
                          5: 67238C7E541411F1AD2A15AACE1D38B0.roa (hash: R8x1/0rShcDb+3uaeVfuGgUMj+G8nfBNX3NNkFTszeQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367EEA2AF, serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
        Validity
            Not Before: Nov 14 03:34:45 2026 GMT
            Not After : Nov 16 03:34:45 2026 GMT
        Subject: CN=6af7d6d5-47ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:09:e9:2c:dd:c3:16:cf:cf:2e:21:dd:c9:0a:
                    0a:11:32:11:89:61:4b:95:55:24:45:72:42:f2:14:
                    6e:86:97:67:e5:1c:8d:0a:dd:9f:18:68:66:79:e1:
                    7e:69:85:f8:c3:05:17:ba:5b:f5:b8:6e:f8:22:7b:
                    27:8f:18:99:4c:94:8c:d0:67:26:fd:5e:2f:f3:98:
                    70:e5:de:75:ef:0e:36:32:c2:cc:6d:02:6e:c2:8d:
                    6b:ce:e6:91:63:33:e1:7f:64:0b:ca:75:b6:03:62:
                    e5:5b:bb:03:96:f6:5b:8b:d5:d4:f6:48:03:9c:87:
                    3a:78:4e:2a:b3:7f:8f:a2:d9:e0:85:cc:18:b3:cb:
                    de:1a:7e:a4:48:95:cc:24:22:f0:ce:93:cd:cd:4b:
                    ee:dd:b2:23:f9:16:8f:7c:59:d3:8f:0a:b5:1c:72:
                    b8:cf:7d:5d:8c:be:f3:67:cf:46:25:7a:34:c6:4d:
                    13:7e:7a:7f:e6:1f:58:20:f2:c7:62:b5:64:08:26:
                    34:3a:e9:0f:a2:a2:f2:cc:ae:30:fc:cf:6b:0b:af:
                    70:26:cf:58:96:ff:37:42:82:36:cc:11:ff:4a:26:
                    41:09:72:e2:82:75:f4:69:87:73:43:b6:3c:35:d8:
                    04:fe:60:e2:5f:13:1c:b6:92:5f:c6:31:33:ed:ae:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:26:63:48:6C:0F:A4:B3:C1:FE:43:65:61:C7:2F:9A:5A:00:A7:17
            X509v3 Authority Key Identifier:
                keyid:92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:d4:c4:32:a3:6b:7d:01:ef:8b:ac:00:ff:cd:f5:08:1c:b3:
         51:2b:14:2a:b4:3c:be:88:fa:36:53:a6:57:e6:79:b1:d6:56:
         45:10:15:b7:8e:d7:2e:08:a4:ee:e3:a0:00:73:1c:c4:c8:ef:
         bb:b9:12:6d:b9:5f:db:5c:a9:83:67:d9:5a:14:a7:ec:83:54:
         85:4b:ad:3a:10:59:f2:88:df:3f:80:b0:32:63:4a:eb:6c:6c:
         a3:33:52:ff:ca:8e:fe:fa:d1:b4:b7:d4:38:bc:60:2d:93:d2:
         10:4b:c4:b4:0d:bf:e1:28:4b:f1:b1:d7:06:98:43:f9:ae:19:
         94:b1:33:0f:9b:9b:de:89:f7:ef:cf:cb:2f:56:4e:eb:9d:38:
         06:6c:5c:26:d2:cb:db:4a:4a:5d:33:37:f3:1a:14:5c:32:6f:
         6d:96:f8:43:77:1c:35:d4:bf:bb:41:89:2b:12:1b:02:5e:63:
         57:af:3c:7d:57:6b:e6:00:8a:21:44:9b:8b:43:12:53:54:c0:
         7a:c7:5f:99:75:bb:3f:30:e3:fa:55:63:37:17:01:1a:06:eb:
         97:6f:21:7a:5c:14:d1:e2:97:1d:a3:a3:87:48:89:fb:7f:29:
         e9:49:49:ec:ed:94:8c:2a:e0:d0:cd:d8:28:b6:31:fb:7a:29:
         5e:ae:e4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:39:44 2026 by rpki-client