Error: rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
File:                     B0Bo8Lwdf2xlr15SAuIhENaFelk.mft (raw, json)
Hash identifier:          qtEbOQd69EhsPhLWurbCmGW3y97zjnDZIUbiCxCl8qo=
Subject key identifier:   31:FA:87:E5:B7:80:5E:A5:1C:13:64:BD:D2:01:B8:93:62:BF:9C:D6
Authority key identifier: 07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59
Certificate issuer:       /CN=F368D59FAF/serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
Certificate serial:       AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
Manifest number:          AD
Signing time:             Thu 24 Sep 2026 05:31:44 +0000
Manifest this update:     Thu 24 Sep 2026 05:31:43 +0000
Manifest next update:     Sat 26 Sep 2026 05:31:43 +0000
Files and hashes:         1: B0Bo8Lwdf2xlr15SAuIhENaFelk.crl (hash: L5quxStJwM2zZwCuRZQoH6pPy2cIloiy1zeaS7okEKk=)
                          2: CDA23108324A11F1B60EAEB9DAE4EC9C.roa (hash: cE1RonJWQjRj/5iPA//z9En6WXcsSeuTNBdrevPeLx8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:31:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D59FAF, serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
        Validity
            Not Before: Sep 24 05:31:43 2026 GMT
            Not After : Sep 26 05:31:43 2026 GMT
        Subject: CN=6ab4b5c0-167d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:1b:ae:08:84:2a:3c:78:8e:cd:47:ad:39:
                    05:9e:de:81:61:1e:7a:ca:07:6e:02:c1:0f:ab:11:
                    f8:47:7b:41:1e:fe:87:6c:8d:ca:cc:05:ed:67:67:
                    17:96:65:b1:0c:61:ff:ca:64:52:81:54:58:dd:c9:
                    2f:a4:35:ba:7f:30:ab:7d:a4:16:3b:42:f2:b5:09:
                    a4:29:44:7b:1a:c6:e7:88:7f:cf:84:70:ff:37:35:
                    90:ab:64:41:e0:5e:e7:91:f4:e5:ef:cf:48:81:2b:
                    bd:f8:04:4b:3b:9a:a8:ff:ac:b2:4b:75:34:c4:4a:
                    10:bc:e6:67:79:1f:77:10:46:1f:50:07:fd:9c:aa:
                    5f:8b:fa:9e:bf:27:d1:ed:0a:2f:0d:25:1d:d1:59:
                    19:35:38:41:61:b6:d0:ff:a3:c5:2b:f7:1e:cc:59:
                    8f:af:e6:77:31:01:b2:72:fc:24:4a:02:d0:54:88:
                    36:d1:ca:8b:85:06:2f:e4:c6:d6:98:bc:95:13:4c:
                    22:f3:86:59:f2:86:6c:28:c9:28:4f:82:28:ac:da:
                    b3:ef:17:d8:29:3e:56:d0:9c:d1:ed:e6:5c:d2:8c:
                    68:de:24:b6:a0:f3:be:5a:68:27:91:55:47:3b:53:
                    81:a6:23:d7:16:0e:48:b9:18:a1:8a:1d:f6:55:85:
                    12:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:87:E5:B7:80:5E:A5:1C:13:64:BD:D2:01:B8:93:62:BF:9C:D6
            X509v3 Authority Key Identifier:
                keyid:07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:0a:ea:26:f2:bf:22:ed:e0:6b:c6:49:57:be:8a:39:11:b7:
         ac:c2:82:d7:dc:b1:b7:b6:fb:c4:99:8c:69:d3:81:04:84:8d:
         40:42:d4:25:db:c3:b5:de:cf:ef:cc:f6:cc:c8:be:55:06:07:
         9e:d9:86:30:49:30:e9:a5:97:fc:32:b9:d1:d0:e3:19:7d:b2:
         27:9f:9f:66:95:7c:d8:08:5d:c8:b2:25:f3:06:e2:dd:06:bc:
         29:1a:57:85:ca:be:02:8a:72:0b:ac:28:7b:5b:d9:64:5c:44:
         fe:73:a1:b3:98:77:a2:13:96:30:54:ac:30:4e:91:57:84:8e:
         80:af:af:fe:85:1c:eb:e1:e8:ef:8b:b6:c6:c8:4e:77:92:44:
         54:be:3b:f4:78:c3:20:21:dc:63:e4:e9:72:ca:a1:d9:15:88:
         36:e7:23:dd:17:69:f2:0b:66:f5:e3:14:56:5e:77:78:40:64:
         25:fe:6f:ad:aa:72:c4:60:cc:bd:5d:d0:44:72:c1:7d:3d:23:
         dd:07:66:40:f6:00:01:2d:56:6a:37:62:42:73:3b:3d:b5:4e:
         19:dd:68:c1:88:d5:6a:03:34:91:6b:89:7f:79:83:60:bc:04:
         a3:28:7a:a7:19:77:3b:a5:1e:ff:29:d0:1f:39:f6:f8:bd:38:
         56:c4:b3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:51:45 2026 by rpki-client