Error: rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
File:                     mANBymMoP9xkLng8RVg-pGRCMxs.mft (raw, json)
Hash identifier:          40uvudZE1J1/xsrVfbp1oj3euBzcdMvdHWNK3FNWgSA=
Subject key identifier:   F1:AD:F8:C3:33:20:12:29:BC:13:26:B8:F7:03:C7:9E:78:5F:11:0D
Authority key identifier: 98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B
Certificate issuer:       /CN=F36852F0AR/serialNumber=980341CA63283FDC642E783C45583EA46442331B
Certificate serial:       0196
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
Manifest number:          0193
Signing time:             Thu 24 Sep 2026 05:07:42 +0000
Manifest this update:     Thu 24 Sep 2026 05:07:41 +0000
Manifest next update:     Sat 26 Sep 2026 05:07:41 +0000
Files and hashes:         1: mANBymMoP9xkLng8RVg-pGRCMxs.crl (hash: WYFNaSbD0d9QrgBjqRRa5JmP9uUvRzMSrS9QuaI0OCw=)
                          2: FD63E742542D11F1B1186BC0CE1D38B0.roa (hash: fxenuwc8NyJlxjY3DT8FzVGfGv8t70BydAqVxj3Y6hI=)
                          3: 6D2177B4832511F0892AAFC7DAE4EC9C.roa (hash: aHAZN2QhTCRQrqiHV0Jl7+gEXu4WrL625sFACBWD1qA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                          rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406 (0x196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36852F0AR, serialNumber=980341CA63283FDC642E783C45583EA46442331B
        Validity
            Not Before: Sep 24 05:07:41 2026 GMT
            Not After : Sep 26 05:07:41 2026 GMT
        Subject: CN=6ab4b01e-95d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:4f:45:5b:a7:30:e1:7d:46:68:fe:4c:9f:
                    25:fc:e8:65:33:61:6b:91:f1:ee:65:a4:6d:89:9d:
                    e9:c1:f3:43:8f:bf:4b:f7:36:93:38:cd:a3:c6:cc:
                    b3:ef:62:b9:b9:c0:e3:6b:42:4c:1f:67:9c:68:66:
                    c3:b3:f6:b0:52:b2:eb:8f:23:44:f3:b7:55:84:bf:
                    dc:af:f7:52:f1:a4:8f:26:0e:d1:a7:fb:6d:56:4d:
                    a9:c1:d8:28:d5:ed:cf:96:de:6c:f0:66:1a:ef:6e:
                    11:e2:df:10:8d:fa:e6:81:6b:b2:71:d6:58:7e:d8:
                    c7:87:cb:aa:9a:49:dd:a4:be:88:33:41:58:b8:50:
                    91:83:91:47:60:8d:27:22:b3:e6:55:d2:44:88:1b:
                    a7:14:9f:44:6f:01:6f:45:66:2f:78:9d:24:2a:93:
                    f3:4c:85:cf:7f:6d:06:b8:a1:d9:44:41:7f:e4:72:
                    3f:62:08:85:fa:d7:59:02:c9:2e:6c:17:2a:bf:08:
                    98:95:f4:65:46:0b:35:59:72:8c:f6:a5:42:9e:58:
                    83:3d:9c:24:c4:36:68:ff:af:41:a2:fb:9b:a5:17:
                    a0:07:95:5d:90:0c:37:1e:68:70:b2:cd:6e:be:81:
                    54:7e:a3:ce:e3:98:5e:67:ec:bf:bd:1d:c8:0c:b8:
                    35:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AD:F8:C3:33:20:12:29:BC:13:26:B8:F7:03:C7:9E:78:5F:11:0D
            X509v3 Authority Key Identifier:
                keyid:98:03:41:CA:63:28:3F:DC:64:2E:78:3C:45:58:3E:A4:64:42:33:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mANBymMoP9xkLng8RVg-pGRCMxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36852F0/C35834EC825811F08AF34E8CDAE4EC9C/mANBymMoP9xkLng8RVg-pGRCMxs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2a:e5:ae:20:e6:61:1a:6f:29:45:fd:65:6c:0d:2b:6c:7f:
         58:f7:bf:c8:b1:9c:5f:9f:ab:68:05:56:be:0b:67:42:17:15:
         1e:3d:2b:d9:c7:f3:01:87:02:9f:8f:7d:ae:0d:49:d7:b5:3c:
         65:9b:75:72:0a:aa:87:8e:6d:c7:ff:3e:b0:0c:5a:95:f0:a3:
         ac:b9:78:f0:4c:83:50:e9:cd:48:07:ff:68:9f:b0:1c:14:45:
         41:fb:5a:9c:da:03:29:65:7c:62:42:7c:c3:f5:42:b3:79:1c:
         54:ce:85:40:9c:23:43:66:dd:d3:cf:5f:56:23:96:7d:44:e4:
         e0:e7:38:15:26:d2:58:fb:e8:98:55:61:89:76:cc:aa:b2:13:
         ee:d3:da:ee:6b:23:59:7f:6b:00:33:02:1b:4f:46:9f:f8:95:
         20:fd:39:38:5d:68:5d:12:ff:5f:f4:78:51:7f:3f:4c:f2:25:
         fd:bf:b1:ba:d9:b9:c6:4d:e8:4f:d2:a3:5f:ba:25:9d:55:19:
         05:7f:68:1f:54:fb:f8:42:24:d9:db:6f:89:81:e8:c5:01:51:
         9d:b4:ac:c7:d4:d0:eb:c3:29:95:5e:3f:01:00:2b:d0:79:56:
         b7:31:e8:e0:22:be:43:eb:f5:10:6c:ad:67:61:db:b4:54:d7:
         65:5a:e3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:54:27 2026 by rpki-client