Error: rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
File:                     SdbI5u983B6XdR7zkR1lCLYMIp8.mft (raw, json)
Hash identifier:          YqrvMh90n//3BbQfI/Gc8ogWTRLO2T9PuBuOpWF1cCA=
Subject key identifier:   19:A8:2E:F9:85:BC:3C:5A:FE:DF:39:D8:96:89:B8:A8:91:F1:EE:02
Authority key identifier: 49:D6:C8:E6:EF:7C:DC:1E:97:75:1E:F3:91:1D:65:08:B6:0C:22:9F
Certificate issuer:       /CN=F36C3523AF/serialNumber=49D6C8E6EF7CDC1E97751EF3911D6508B60C229F
Certificate serial:       075A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SdbI5u983B6XdR7zkR1lCLYMIp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
Manifest number:          0758
Signing time:             Fri 25 Sep 2026 02:23:28 +0000
Manifest this update:     Fri 25 Sep 2026 02:23:27 +0000
Manifest next update:     Sun 27 Sep 2026 02:23:27 +0000
Files and hashes:         1: SdbI5u983B6XdR7zkR1lCLYMIp8.crl (hash: GVT1O+c2CVWqv1++3nbEWdqdVayzBYc/9DyR0jgjqCs=)
                          2: 46935BB485F211F1A9C4F5ACCE1D38B0.roa (hash: gXi6GZQR7cizkA0sBJkkqkY7x15aPSEtpYpReDKdKRk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SdbI5u983B6XdR7zkR1lCLYMIp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1882 (0x75a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3523AF, serialNumber=49D6C8E6EF7CDC1E97751EF3911D6508B60C229F
        Validity
            Not Before: Sep 25 02:23:27 2026 GMT
            Not After : Sep 27 02:23:27 2026 GMT
        Subject: CN=6ab5db20-1ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f5:38:77:f8:9d:1a:35:79:f5:14:6d:7e:2d:
                    2f:67:ea:0b:3d:6d:c7:eb:fc:b2:77:2e:54:ae:ce:
                    14:d6:17:8c:6f:ef:99:a6:ff:c1:3d:88:87:94:24:
                    25:91:3b:66:56:b5:72:77:0c:89:2c:3f:bf:f3:e6:
                    e2:7c:95:19:00:e6:15:06:72:07:a3:39:a3:d5:19:
                    6d:73:64:fd:8d:b5:21:71:36:4f:ce:68:32:42:1b:
                    30:23:d1:97:29:fd:a4:34:59:b4:37:d0:7b:8d:fb:
                    78:17:ae:b5:d9:03:42:de:54:19:94:d2:c6:74:49:
                    d8:51:77:92:9d:56:b0:a7:79:ed:6c:5f:14:28:0f:
                    17:3d:f1:f4:bb:8f:93:6d:8c:fa:8e:1c:a0:a2:bf:
                    06:bc:1f:07:fd:cf:68:00:fe:be:5f:f4:bd:2e:0f:
                    78:bf:14:f4:ec:1e:97:9b:f6:14:ab:9c:ce:a4:d8:
                    9d:67:24:ab:19:37:5e:ea:d3:1a:6b:2e:be:dc:27:
                    35:40:c9:99:9c:df:9f:06:b6:f5:16:a4:af:60:22:
                    0c:cd:19:01:8a:3c:65:2e:cd:06:8b:6a:08:34:ab:
                    c5:d9:78:7c:0d:82:2f:5c:6b:21:01:0d:f9:c6:f2:
                    41:11:bc:ca:d9:a6:98:c5:67:ba:63:d5:23:da:19:
                    ba:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A8:2E:F9:85:BC:3C:5A:FE:DF:39:D8:96:89:B8:A8:91:F1:EE:02
            X509v3 Authority Key Identifier:
                keyid:49:D6:C8:E6:EF:7C:DC:1E:97:75:1E:F3:91:1D:65:08:B6:0C:22:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SdbI5u983B6XdR7zkR1lCLYMIp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6f:44:ba:07:11:a9:73:7b:41:e5:b9:c8:b5:d0:15:31:52:
         ab:7e:59:f0:f4:bd:08:a9:df:42:83:31:79:8a:0c:eb:02:80:
         d1:a2:52:84:d7:7f:ac:30:af:cf:09:47:af:80:ff:cd:ee:b4:
         4b:20:34:a9:1b:75:b3:a1:1d:3d:84:27:38:86:2c:0a:4b:1e:
         b1:7b:38:15:ad:48:7d:61:b4:1f:99:78:d2:43:d8:b3:f8:9a:
         8a:b8:22:01:b5:b4:3a:e7:a5:6a:f1:32:9b:81:cf:9f:1f:57:
         44:58:97:f1:60:90:83:37:75:cf:93:3f:b3:82:20:70:64:88:
         e2:d0:bd:58:30:c7:89:e3:5f:46:a8:99:a5:fb:02:9b:63:50:
         2a:e2:75:48:de:12:3e:b9:74:e1:f1:00:6d:1a:66:00:2e:ce:
         40:ac:e7:c4:34:2b:07:d7:59:9a:00:02:7e:2a:46:c4:f2:ab:
         6a:b1:9c:94:e9:09:3d:9f:8e:19:26:67:ed:4c:25:ea:bf:0a:
         4e:b5:50:aa:eb:bf:a3:0f:e1:04:2e:f7:9a:a8:6a:20:05:25:
         6e:33:94:3a:0f:a3:60:86:01:44:b7:70:bf:d2:cc:f5:c3:57:
         13:ba:0d:01:d3:00:ba:a5:ed:67:e4:a1:5f:4b:af:23:da:25:
         d3:15:b8:a9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB1owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzM1MjNBRjExMC8GA1UEBRMoNDlENkM4RTZFRjdDREMxRTk3NzUxRUYzOTExRDY1
MDhCNjBDMjI5RjAeFw0yNjA5MjUwMjIzMjdaFw0yNjA5MjcwMjIzMjdaMBgxFjAU
BgNVBAMTDTZhYjVkYjIwLTFhZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDI9Th3+J0aNXn1FG1+LS9n6gs9bcfr/LJ3LlSuzhTWF4xv75mm/8E9iIeU
JCWRO2ZWtXJ3DIksP7/z5uJ8lRkA5hUGcgejOaPVGW1zZP2NtSFxNk/OaDJCGzAj
0Zcp/aQ0WbQ30HuN+3gXrrXZA0LeVBmU0sZ0SdhRd5KdVrCnee1sXxQoDxc98fS7
j5NtjPqOHKCivwa8Hwf9z2gA/r5f9L0uD3i/FPTsHpeb9hSrnM6k2J1nJKsZN17q
0xprLr7cJzVAyZmc358GtvUWpK9gIgzNGQGKPGUuzQaLagg0q8XZeHwNgi9cayEB
DfnG8kERvMrZppjFZ7pj1SPaGbpVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGagu
+YW8PFr+3znYlom4qJHx7gIwHwYDVR0jBBgwFoAUSdbI5u983B6XdR7zkR1lCLYM
Ip8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMzNTIzLzA4QThBMzlDMTc3RDExRUM5OEFCRUMxNEQ4QTAxNENFL1NkYkk1
dTk4M0I2WGRSN3prUjFsQ0xZTUlwOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NkYkk1dTk4M0I2WGRSN3prUjFsQ0xZTUlwOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzM1MjMvMDhBOEEzOUMxNzdEMTFFQzk4QUJFQzE0RDhB
MDE0Q0UvU2RiSTV1OTgzQjZYZFI3emtSMWxDTFlNSXA4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNb0S6BxGpc3tB5bnItdAVMVKrflnw
9L0Iqd9CgzF5igzrAoDRolKE13+sMK/PCUevgP/N7rRLIDSpG3WzoR09hCc4hiwK
Sx6xezgVrUh9YbQfmXjSQ9iz+JqKuCIBtbQ656Vq8TKbgc+fH1dEWJfxYJCDN3XP
kz+zgiBwZIji0L1YMMeJ419GqJml+wKbY1Aq4nVI3hI+uXTh8QBtGmYALs5ArOfE
NCsH11maAAJ+KkbE8qtqsZyU6Qk9n44ZJmftTCXqvwpOtVCq67+jD+EELveaqGog
BSVuM5Q6D6NghgFEt3C/0sz1w1cTug0B0wC6pe1n5KFfS68j2iXTFbip
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:47:08 2026 by rpki-client