Error: rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.mft
File:                     16MZmo_eBF6cXxxjpPy-_kiNCgw.mft (raw, json)
Hash identifier:          yUKXZUDlhBTW4mI87d3LyG0om96e7LHjsmOrW2J0WGo=
Subject key identifier:   89:89:0F:F9:EE:60:42:61:A9:89:22:7C:32:4E:F9:E3:D9:81:AD:8D
Authority key identifier: D7:A3:19:9A:8F:DE:04:5E:9C:5F:1C:63:A4:FC:BE:FE:48:8D:0A:0C
Certificate issuer:       /CN=F36A53F0AF/serialNumber=D7A3199A8FDE045E9C5F1C63A4FCBEFE488D0A0C
Certificate serial:       08C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/16MZmo_eBF6cXxxjpPy-_kiNCgw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.mft
Manifest number:          08BE
Signing time:             Wed 30 Sep 2026 01:55:25 +0000
Manifest this update:     Wed 30 Sep 2026 01:55:24 +0000
Manifest next update:     Fri 02 Oct 2026 01:55:24 +0000
Files and hashes:         1: 16MZmo_eBF6cXxxjpPy-_kiNCgw.crl (hash: cE0zzjEv7TkDBQftA4gE2XjgDFkcak366XeNJ8J+bOQ=)
                          2: 9A1203A8BA1411F0867A067BDAE4EC9C.roa (hash: J8FC9QmmU1kulVRI9p+22luOvvY9vE5ZV/FWXYtKRUw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/16MZmo_eBF6cXxxjpPy-_kiNCgw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2241 (0x8c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A53F0AF, serialNumber=D7A3199A8FDE045E9C5F1C63A4FCBEFE488D0A0C
        Validity
            Not Before: Sep 30 01:55:24 2026 GMT
            Not After : Oct  2 01:55:24 2026 GMT
        Subject: CN=6abc6c0c-1ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:81:88:be:3d:1f:81:22:a8:f0:23:97:ef:
                    41:96:fe:05:84:38:1d:51:11:12:7d:81:c5:92:b2:
                    47:40:cc:e0:5c:aa:cc:bc:ed:0d:e4:a9:50:9c:f2:
                    a4:16:41:81:fb:70:f3:80:5d:fa:4f:09:13:8c:cc:
                    25:7b:66:9f:b8:8a:b5:f9:4f:15:88:36:de:a6:bf:
                    83:76:d3:01:ac:33:0f:4a:09:85:0e:2c:18:32:14:
                    76:94:2c:c1:42:8d:ec:75:09:49:70:52:30:dd:0a:
                    93:f4:7a:74:b6:ce:8c:a4:e1:0c:63:1d:54:ad:38:
                    51:60:f0:d7:f2:8e:bc:de:11:7a:43:cb:7c:a0:74:
                    cb:41:02:d2:37:32:c5:a6:49:bf:ea:fb:bc:01:0b:
                    52:0a:02:78:dd:98:2b:53:39:ab:d8:64:89:76:a0:
                    48:ed:36:bb:68:16:7a:82:8f:b1:5c:de:1b:9d:ef:
                    a4:04:aa:97:5e:9e:44:fa:d6:0b:12:0c:d9:44:e8:
                    6c:ec:7d:2a:10:20:5d:0e:18:5c:81:2e:e4:e7:62:
                    fb:56:6b:f2:14:b6:d2:69:06:26:38:cb:dd:5a:d8:
                    7e:41:61:38:2c:bd:d5:81:85:70:1d:af:0d:cd:62:
                    8d:63:e8:40:d3:95:34:f6:ed:74:c0:ea:a5:a6:06:
                    39:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:89:0F:F9:EE:60:42:61:A9:89:22:7C:32:4E:F9:E3:D9:81:AD:8D
            X509v3 Authority Key Identifier:
                keyid:D7:A3:19:9A:8F:DE:04:5E:9C:5F:1C:63:A4:FC:BE:FE:48:8D:0A:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/16MZmo_eBF6cXxxjpPy-_kiNCgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A53F0/951D16EC08B411EBB42C9282F8AEA228/16MZmo_eBF6cXxxjpPy-_kiNCgw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:13:d1:23:92:b0:0d:c4:00:38:11:e5:b8:1a:9b:03:1a:96:
         2d:93:46:b1:01:33:41:c0:11:2e:1b:7d:cc:1f:55:19:b6:66:
         6c:ce:29:02:d0:ff:a1:20:0e:ed:57:f7:47:0e:bd:c3:b3:07:
         77:12:67:19:50:72:2b:ea:e2:b8:aa:a8:fb:89:bc:8d:1b:50:
         67:e3:f0:71:9b:73:37:82:18:1f:81:49:e7:33:01:7d:4f:a6:
         d0:08:99:a4:8d:e8:87:12:ef:5d:fc:49:60:41:f7:5c:d5:31:
         80:08:1f:93:a6:5f:3b:d2:b0:e2:62:b1:c4:73:60:ad:ec:6d:
         99:03:df:5a:0c:ff:c9:1d:6b:eb:ff:7f:4f:e7:20:1f:5a:89:
         e3:5e:0d:bb:11:3e:1a:1d:a5:e0:4f:66:52:27:57:89:81:e1:
         fa:f1:b9:10:07:47:a3:57:cc:27:47:5e:b2:47:f2:d2:6b:6d:
         35:65:ba:57:59:4f:c1:ad:53:c5:42:72:4a:e8:f5:90:26:2d:
         ce:3d:b6:cf:ae:2f:f6:1d:23:a7:a3:48:d6:d0:b9:37:2d:07:
         a1:2d:5a:7d:ee:98:64:9c:28:1a:f5:fd:ad:bd:4c:bc:60:86:
         86:90:0c:6f:6a:4f:e9:df:cc:87:7b:ad:b9:5a:1d:53:c7:53:
         41:fd:a8:af
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTUzRjBBRjExMC8GA1UEBRMoRDdBMzE5OUE4RkRFMDQ1RTlDNUYxQzYzQTRGQ0JF
RkU0ODhEMEEwQzAeFw0yNjA5MzAwMTU1MjRaFw0yNjEwMDIwMTU1MjRaMBgxFjAU
BgNVBAMTDTZhYmM2YzBjLTFjZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxKYGIvj0fgSKo8COX70GW/gWEOB1RERJ9gcWSskdAzOBcqsy87Q3kqVCc
8qQWQYH7cPOAXfpPCROMzCV7Zp+4irX5TxWINt6mv4N20wGsMw9KCYUOLBgyFHaU
LMFCjex1CUlwUjDdCpP0enS2zoyk4QxjHVStOFFg8NfyjrzeEXpDy3ygdMtBAtI3
MsWmSb/q+7wBC1IKAnjdmCtTOavYZIl2oEjtNrtoFnqCj7Fc3hud76QEqpdenkT6
1gsSDNlE6GzsfSoQIF0OGFyBLuTnYvtWa/IUttJpBiY4y91a2H5BYTgsvdWBhXAd
rw3NYo1j6EDTlTT27XTA6qWmBjnPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiYkP
+e5gQmGpiSJ8Mk7549mBrY0wHwYDVR0jBBgwFoAU16MZmo/eBF6cXxxjpPy+/kiN
CgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE1M0YwLzk1MUQxNkVDMDhCNDExRUJCNDJDOTI4MkY4QUVBMjI4LzE2TVpt
b19lQkY2Y1h4eGpwUHktX2tpTkNndy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzE2TVptb19lQkY2Y1h4eGpwUHktX2tpTkNndy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTUzRjAvOTUxRDE2RUMwOEI0MTFFQkI0MkM5MjgyRjhB
RUEyMjgvMTZNWm1vX2VCRjZjWHh4anBQeS1fa2lOQ2d3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8E9EjkrANxAA4EeW4GpsDGpYtk0ax
ATNBwBEuG33MH1UZtmZszikC0P+hIA7tV/dHDr3Dswd3EmcZUHIr6uK4qqj7ibyN
G1Bn4/Bxm3M3ghgfgUnnMwF9T6bQCJmkjeiHEu9d/ElgQfdc1TGACB+Tpl870rDi
YrHEc2Ct7G2ZA99aDP/JHWvr/39P5yAfWonjXg27ET4aHaXgT2ZSJ1eJgeH68bkQ
B0ejV8wnR16yR/LSa201ZbpXWU/BrVPFQnJK6PWQJi3OPbbPri/2HSOno0jW0Lk3
LQehLVp97phknCga9f2tvUy8YIaGkAxvak/p38yHe625Wh1Tx1NB/aiv
-----END CERTIFICATE-----
Generated at Wed Sep 30 19:58:01 2026 by rpki-client