Error: rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
File:                     gnLCuLOzie4re71PvVUJZ28yebs.mft (raw, json)
Hash identifier:          N3PtgpbX7KFZDBMMle7Z8voT+v1wPlxEaqi9PbnMzXw=
Subject key identifier:   11:45:69:93:3C:78:47:84:11:7B:18:52:DE:4B:3D:F9:F5:6F:A4:B9
Authority key identifier: 82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB
Certificate issuer:       /CN=F369C94EAF/serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
Certificate serial:       0676
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
Manifest number:          0664
Signing time:             Thu 24 Sep 2026 02:47:35 +0000
Manifest this update:     Thu 24 Sep 2026 02:47:34 +0000
Manifest next update:     Sat 26 Sep 2026 02:47:34 +0000
Files and hashes:         1: gnLCuLOzie4re71PvVUJZ28yebs.crl (hash: 2QtN8wQOw/PJHVzIvT9xcsVj5rAZfouWoEdtT8KAoug=)
                          2: 392B415C962411F1ACFA44BBCE1D38B0.roa (hash: LxzFCi7JU4fjc8I/HMELOkIJrVr9JdHXpdpNxI6Cj2A=)
                          3: 2D8F57BA962511F1A1E11EC3CE1D38B0.roa (hash: iyI7OZNk5JxLuz97Rah8MP9qePaXqqI/w+K+KVaK3ZI=)
                          4: DADAC6EA962311F1B0C214BBCE1D38B0.roa (hash: 5MEKxws/tSLBDcD7RIUBQp5fH5C2lVDbBkZ8cZqbHD8=)
                          5: 28AC077E962611F1AE5DBBC7CE1D38B0.roa (hash: FX1gomZYkFfLAaFV89AIDDf6PT5MVpQU2gAZbD1m4AI=)
                          6: D10078C0962511F182917BC5CE1D38B0.roa (hash: qZiwreEQ5AVLAxnIrMCbPDBr4h7nRd6VecR32M2XQCY=)
                          7: CE1E54E8962411F1A72068BFCE1D38B0.roa (hash: R2CZNdQnuiZF5AcIv4DAPM1jIgHiwP8PJumaHo5AGno=)
                          8: 815FAFC6962411F1995CF8BECE1D38B0.roa (hash: fmHEZWmmyjoAMqBm3ElorytWO2heDwGjaJPbde41qy4=)
                          9: 985212B2962611F1BB996FCBCE1D38B0.roa (hash: azA9FLKur7HtQYuVsDfj8+2Et39GkA9EuUV1YVQs4x4=)
                          10: 86D242BA962511F1A6E696C3CE1D38B0.roa (hash: +aT643r7vwQVIvpoDdf8DbDfhgHMBDbc87UehjNsw8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C94EAF, serialNumber=8272C2B8B3B389EE2B7BBD4FBD5509676F3279BB
        Validity
            Not Before: Sep 24 02:47:34 2026 GMT
            Not After : Sep 26 02:47:34 2026 GMT
        Subject: CN=6ab48f47-51aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:86:0d:33:1a:0a:28:ed:86:28:34:33:22:c9:
                    41:7e:83:09:67:0d:57:a6:f9:05:d9:fd:19:ac:e4:
                    47:20:f0:e3:16:f8:88:68:5a:07:91:91:b3:c1:08:
                    b8:bd:12:08:47:cd:00:55:a8:e8:56:ff:32:59:83:
                    aa:21:22:a0:74:e5:d8:6f:8c:15:7b:4f:8a:be:65:
                    cb:9d:e1:4f:fd:b2:a6:42:81:b1:db:1b:b2:c5:94:
                    21:5a:15:81:d5:66:e7:27:03:e3:04:52:38:0a:91:
                    fa:ce:46:a9:eb:9f:ef:a2:54:47:52:2e:80:cf:75:
                    8c:ab:d7:00:52:90:15:6c:95:07:35:28:e6:d7:9f:
                    a1:e5:95:1a:3b:a8:e1:bb:a4:b8:68:d6:2c:42:cd:
                    e4:a5:cd:8c:95:f5:73:68:b1:bf:21:1a:04:ee:be:
                    85:6c:48:9c:fe:88:15:33:22:10:e4:b7:76:5b:df:
                    54:6f:9b:d2:f4:cb:80:ce:84:78:03:38:6d:f3:9a:
                    9d:15:78:6a:b1:2c:ff:28:1e:15:ad:d7:16:0d:0a:
                    a5:cc:5b:bd:c6:62:4d:91:48:44:70:d4:9a:bf:33:
                    c4:9f:d2:9c:9a:3f:2b:4c:bf:e9:2d:fd:63:24:72:
                    c8:63:9e:bb:63:35:9e:fa:05:d7:55:2e:ad:8e:09:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:45:69:93:3C:78:47:84:11:7B:18:52:DE:4B:3D:F9:F5:6F:A4:B9
            X509v3 Authority Key Identifier:
                keyid:82:72:C2:B8:B3:B3:89:EE:2B:7B:BD:4F:BD:55:09:67:6F:32:79:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gnLCuLOzie4re71PvVUJZ28yebs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C94E/E9D7D8AEE80D11EC977C9690F1222468/gnLCuLOzie4re71PvVUJZ28yebs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:c0:e1:76:6a:40:84:20:32:7b:b0:31:cd:86:58:6b:40:26:
         fb:3d:84:19:c9:0b:6b:ed:22:dc:84:1c:d4:6d:e4:8a:ba:53:
         be:41:9b:ae:04:0b:a9:06:e7:ac:e4:48:cc:58:d2:56:0f:fe:
         44:e6:30:6a:c0:98:4a:45:2d:16:e0:bb:b0:a1:32:a2:54:f5:
         a3:f4:bb:db:8b:04:5a:cb:42:34:54:8b:f8:8e:93:74:6c:40:
         0e:fd:aa:3f:cd:21:52:50:11:9e:35:d5:03:96:0d:56:f8:e1:
         7d:dc:41:0c:5e:e5:2c:f0:21:45:e5:7d:dc:dc:7c:d6:7f:26:
         c4:f1:6a:cb:5b:de:9a:a9:a0:a8:e5:a0:f7:8c:9d:b4:46:c8:
         9a:da:d6:80:ec:29:71:38:84:8c:f3:7f:39:89:dd:bc:dc:2c:
         81:92:82:59:fc:51:58:79:69:62:04:39:95:7f:6e:ba:e1:11:
         e8:b9:2b:59:56:c5:98:82:91:74:64:01:83:42:77:d0:cb:0b:
         bc:8a:31:b5:c1:52:8e:fa:1b:08:45:e4:8a:90:77:a3:3b:06:
         a0:6c:40:8d:26:6d:86:05:65:4c:b7:e5:b9:b1:1a:f4:74:04:
         e1:c5:57:2f:65:50:62:ce:3e:55:f0:14:80:18:83:d7:45:d5:
         93:24:3c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:45:01 2026 by rpki-client