Error: rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
File:                     D0ElrSzSvYs64WLz4yLl9YEEdVw.mft (raw, json)
Hash identifier:          AWHwxKusfRNeocfUhI9oDZZghK+AiW/Hidp/GqkMeVU=
Subject key identifier:   7B:F5:61:9A:91:A0:73:13:A4:B4:CE:FE:DC:9E:3D:1E:F1:76:B0:02
Authority key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Certificate issuer:       /CN=F369E1AEAF/serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Certificate serial:       0415
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
Manifest number:          0410
Signing time:             Sun 04 Oct 2026 03:53:45 +0000
Manifest this update:     Sun 04 Oct 2026 03:53:44 +0000
Manifest next update:     Tue 06 Oct 2026 03:53:44 +0000
Files and hashes:         1: D0ElrSzSvYs64WLz4yLl9YEEdVw.crl (hash: 3xSI91R3vjVD5PMw9GnYCciH0+/9YNqnbUznpmt63tc=)
                          2: B919C81C65D111F1BEB357FFCE1D38B0.roa (hash: x2d+bsJIxu+I4SIhjiWk8t+DzbcsDbeFDy/rEZKeKBk=)
                          3: 377F8AB4FF9F11F0848280B7DAE4EC9C.roa (hash: gFLOPNqksbsyHx1yrYoxHSQi3UU734l3ljRLt/JU9Nc=)
                          4: 47AF2FF6F14011F09B4F1487DAE4EC9C.roa (hash: BdQgr789FxdUtgxj7i45jCOlxF6k3e5lzdi6pI5Zqcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1045 (0x415)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E1AEAF, serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
        Validity
            Not Before: Oct  4 03:53:44 2026 GMT
            Not After : Oct  6 03:53:44 2026 GMT
        Subject: CN=6ac1cdc9-9291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:82:a5:d7:9c:02:f3:ec:a8:23:cf:25:c7:8e:
                    2f:a1:1e:ac:11:cd:71:be:72:3f:ef:3d:36:48:4c:
                    71:aa:bf:6a:18:a1:fa:56:82:06:dd:c3:16:cd:34:
                    1a:ff:b4:61:c4:ff:f4:8e:98:ff:22:0b:f9:8c:c4:
                    0f:47:81:71:fd:0e:e0:77:d0:5a:c7:35:39:33:2a:
                    71:d4:86:ba:ab:09:34:ad:b9:1a:7f:1a:78:19:c7:
                    7f:23:ef:0a:99:fb:c6:59:f1:1b:d1:10:35:49:b5:
                    d4:8e:f1:c3:75:92:45:11:ff:ce:11:25:4b:f0:18:
                    07:7e:4f:11:7b:ca:90:86:ef:f2:9c:3e:07:c9:2d:
                    a6:23:bb:5a:b9:ea:06:f1:d4:35:c5:f5:31:51:fe:
                    ed:71:ab:15:23:5f:9e:c5:55:f4:61:12:95:a0:93:
                    40:eb:9f:65:f3:fb:eb:e3:16:e9:c4:6b:71:87:3d:
                    66:43:8e:36:01:bb:54:e4:fa:0c:2c:08:d1:08:eb:
                    05:75:a4:29:72:13:40:c3:ae:91:2d:3b:7e:f7:33:
                    04:9d:7b:5b:19:f5:ff:19:f1:ae:eb:c1:62:be:bd:
                    3c:0d:0f:ea:1c:bc:4e:e8:79:2f:8c:46:37:df:6d:
                    ce:82:47:76:88:5c:62:aa:7d:0d:ae:ba:b5:8f:b0:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F5:61:9A:91:A0:73:13:A4:B4:CE:FE:DC:9E:3D:1E:F1:76:B0:02
            X509v3 Authority Key Identifier:
                keyid:0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b9:99:43:98:92:8d:4d:4c:51:1b:c4:02:b1:10:ed:24:b3:
         69:ae:6d:a7:cb:d3:2d:30:3a:72:17:0e:72:3f:6a:dd:c1:c5:
         a6:23:26:01:c9:47:3b:eb:33:b4:47:dc:da:99:8f:40:e3:7d:
         fc:27:20:77:6d:d1:9b:a0:bf:89:d5:c5:23:fa:9c:ef:c1:0b:
         15:7f:7c:d6:c4:b9:5a:a3:10:8e:92:e8:fd:79:97:14:3c:f5:
         c2:36:a1:f0:89:ea:a1:60:bb:30:52:15:51:14:a0:70:8b:1e:
         5d:c9:2c:a3:4c:26:8a:eb:76:17:93:21:bb:28:7a:7c:95:9f:
         df:c0:c5:88:c0:cf:5f:86:c2:8a:7d:c3:8d:35:e8:37:74:13:
         38:82:93:6a:26:97:75:a3:71:41:47:4c:33:8a:fd:8e:f7:ee:
         34:c0:f6:3d:18:64:60:39:db:0e:e7:47:15:81:66:00:c9:13:
         2d:1d:7e:d5:4c:1d:bc:9a:40:c3:ce:81:3f:e3:0a:73:09:9c:
         78:a2:8e:c4:1e:34:62:83:4b:0c:7b:8b:f6:b2:b4:b1:45:8e:
         85:c7:06:3b:88:ac:a3:9d:4c:0f:56:96:d7:d5:a9:54:33:0d:
         a0:a0:e2:01:ca:bf:f4:2d:a7:e6:1f:62:3b:9e:64:39:dc:05:
         5a:f2:ad:6a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUUxQUVBRjExMC8GA1UEBRMoMEY0MTI1QUQyQ0QyQkQ4QjNBRTE2MkYzRTMyMkU1
RjU4MTA0NzU1QzAeFw0yNjEwMDQwMzUzNDRaFw0yNjEwMDYwMzUzNDRaMBgxFjAU
BgNVBAMTDTZhYzFjZGM5LTkyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7gqXXnALz7KgjzyXHji+hHqwRzXG+cj/vPTZITHGqv2oYofpWggbdwxbN
NBr/tGHE//SOmP8iC/mMxA9HgXH9DuB30FrHNTkzKnHUhrqrCTStuRp/GngZx38j
7wqZ+8ZZ8RvREDVJtdSO8cN1kkUR/84RJUvwGAd+TxF7ypCG7/KcPgfJLaYju1q5
6gbx1DXF9TFR/u1xqxUjX57FVfRhEpWgk0Drn2Xz++vjFunEa3GHPWZDjjYBu1Tk
+gwsCNEI6wV1pClyE0DDrpEtO373MwSde1sZ9f8Z8a7rwWK+vTwND+ocvE7oeS+M
Rjffbc6CR3aIXGKqfQ2uurWPsN+HAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUe/Vh
mpGgcxOktM7+3J49HvF2sAIwHwYDVR0jBBgwFoAUD0ElrSzSvYs64WLz4yLl9YEE
dVwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFMUFFL0EzRTJFQzcyQTU2NjExRUVCRTU5OTA2QUQyNUJFNDY1L0QwRWxy
U3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0QwRWxyU3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUUxQUUvQTNFMkVDNzJBNTY2MTFFRUJFNTk5MDZBRDI1
QkU0NjUvRDBFbHJTelN2WXM2NFdMejR5TGw5WUVFZFZ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGuZlDmJKNTUxRG8QCsRDtJLNprm2n
y9MtMDpyFw5yP2rdwcWmIyYByUc76zO0R9zamY9A4338JyB3bdGboL+J1cUj+pzv
wQsVf3zWxLlaoxCOkuj9eZcUPPXCNqHwieqhYLswUhVRFKBwix5dySyjTCaK63YX
kyG7KHp8lZ/fwMWIwM9fhsKKfcONNeg3dBM4gpNqJpd1o3FBR0wziv2O9+40wPY9
GGRgOdsO50cVgWYAyRMtHX7VTB28mkDDzoE/4wpzCZx4oo7EHjRig0sMe4v2srSx
RY6FxwY7iKyjnUwPVpbX1alUMw2goOIByr/0LafmH2I7nmQ53AVa8q1q
-----END CERTIFICATE-----
Generated at Sun Oct 4 08:41:45 2026 by rpki-client