Error: rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
File:                     gl2wNPq0N6iajdJEBqtygseLYro.mft (raw, json)
Hash identifier:          jUwN6hmUPcJSnovmOMnk+hFyjyuRSK/rZE5BnB/4sMs=
Subject key identifier:   56:00:0F:D9:86:70:F5:EB:8B:9C:6B:7F:5C:38:10:CE:44:C5:17:F1
Authority key identifier: 82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA
Certificate issuer:       /CN=F368F4A1AR/serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
Certificate serial:       0347
Authority info access:    rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
Manifest number:          033F
Signing time:             Sat 26 Sep 2026 04:18:53 +0000
Manifest this update:     Sat 26 Sep 2026 04:18:52 +0000
Manifest next update:     Mon 28 Sep 2026 04:18:52 +0000
Files and hashes:         1: gl2wNPq0N6iajdJEBqtygseLYro.crl (hash: gFLINnxhesGUpHqQG0g2TbZipE3s8/JwD5oOZhiMFh8=)
                          2: A11224BE49CA11EF9C401F91762E951A.roa (hash: KDj2Lzc4dz6ze7gmYdXtI25bUBjs8RYx75qbzXwadro=)
                          3: FFBD17A449C911EF9BD0848C762E951A.roa (hash: 1q6DfjzPCakdGBa3y25kmYy0lgCV4qqQEYn4uXM0n0g=)
                          4: EC0AAE60435711EFB8E0D6BA762E951A.roa (hash: CywE6U5JIpUptFBIfv36q/lnpSHgsnnC42/YpAaW+DI=)
                          5: B6688076435611EFAB2BE6B1762E951A.roa (hash: 9tse/mxNJXfyu1H3gIXX1krLQVJ31qcACHPTQWNjpxU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
                          rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AR, serialNumber=825DB034FAB437A89A8DD24406AB7282C78B62BA
        Validity
            Not Before: Sep 26 04:18:52 2026 GMT
            Not After : Sep 28 04:18:52 2026 GMT
        Subject: CN=6ab747ad-f35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:eb:82:e6:7c:e9:c9:2e:35:d5:0b:f9:5e:aa:
                    4f:5b:c4:5b:2e:35:80:3d:33:06:8b:5a:5b:04:bb:
                    f3:5d:83:5a:10:28:d2:8f:0d:72:18:86:d4:c7:26:
                    72:8d:bb:6d:0f:48:4e:dc:47:49:81:85:e7:fe:9a:
                    b0:a6:c0:85:9a:4d:0c:1e:f9:2d:dc:ef:13:01:3d:
                    26:9b:da:a8:7a:d4:09:3d:05:b0:e4:00:d6:27:49:
                    13:b4:56:80:28:f6:64:5b:9a:d8:7b:70:c1:2c:db:
                    25:90:4d:09:40:40:43:55:39:12:ce:14:ad:5d:a5:
                    08:43:1c:a0:19:10:a4:f6:4a:8f:f9:bc:f5:d3:0d:
                    bd:e5:60:06:5b:a7:bd:71:3d:ff:09:70:0e:15:b9:
                    64:ab:69:6e:12:0b:9f:be:84:99:b0:25:f1:29:e7:
                    44:f5:bf:59:58:b2:d6:fc:57:8f:4d:f7:89:c6:8f:
                    b3:01:cc:0b:60:3c:38:98:ee:86:06:57:48:3d:52:
                    2d:3e:53:6c:c4:46:14:f8:5f:a3:e8:a9:e1:46:2e:
                    8b:1f:39:48:f8:4e:ca:da:98:3d:12:9b:a6:63:33:
                    1c:73:b7:0e:7d:1a:ec:45:5e:49:1e:84:b4:dc:60:
                    13:c2:f5:e7:e2:3e:da:29:e6:e1:45:cc:1f:e3:1a:
                    d0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:00:0F:D9:86:70:F5:EB:8B:9C:6B:7F:5C:38:10:CE:44:C5:17:F1
            X509v3 Authority Key Identifier:
                keyid:82:5D:B0:34:FA:B4:37:A8:9A:8D:D2:44:06:AB:72:82:C7:8B:62:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/gl2wNPq0N6iajdJEBqtygseLYro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/A61F3BB83F5C11EF9D4CC77E762E951A/gl2wNPq0N6iajdJEBqtygseLYro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d7:30:72:7e:a9:33:c1:e3:09:e2:17:93:36:93:99:d3:20:
         f3:8b:97:1c:49:0b:77:18:f8:c0:1b:a2:0d:0a:57:77:fc:51:
         ba:13:4e:a6:08:12:08:6c:26:39:cd:88:ce:e6:58:6b:0f:30:
         01:85:63:a8:65:ad:b8:c1:ef:c4:45:30:80:04:f6:94:4e:6e:
         a7:d7:48:49:90:03:1c:78:84:26:50:93:05:5d:44:0f:54:1b:
         83:dc:b6:5b:ab:e5:f2:9c:e4:39:d3:ba:56:82:4a:05:04:5f:
         a4:c1:74:e7:a1:ad:db:a3:2e:53:da:1c:f8:1b:4d:39:35:50:
         4f:ba:ad:65:87:b8:40:87:f8:fd:46:d3:d7:f9:54:9e:2a:c3:
         99:1d:af:81:d3:fe:df:51:be:a0:d2:df:04:c9:15:d8:aa:8d:
         b5:6e:7b:ab:68:5f:69:a0:2b:8b:e9:6a:b2:9b:26:25:fa:6a:
         d7:ac:05:a4:43:c2:fb:ad:51:33:08:91:fa:14:12:28:34:52:
         64:35:7b:94:ab:1f:28:a6:ed:38:da:43:42:73:43:a6:43:6d:
         a7:c6:c8:69:cc:0d:85:3c:e1:b0:ab:a4:03:0f:f3:e4:c0:42:
         f0:ba:67:b6:7e:56:d3:3d:31:62:20:e6:cb:12:2a:a4:6b:61:
         49:a3:4c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:49:32 2026 by rpki-client