Error: rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
File:                     QOQ11_MUFa_OV9DelQm3hi-WClc.mft (raw, json)
Hash identifier:          MNi+3HINiYmoxZcQnaW6ZRk5AbDdlJ7VGJNhWNqPwBw=
Subject key identifier:   39:38:C3:72:3D:81:60:14:A6:77:F6:D2:C1:CC:D4:73:54:D3:9E:DF
Authority key identifier: 40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57
Certificate issuer:       /CN=F36D5C19AF/serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
Certificate serial:       0AD1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
Manifest number:          0ACE
Signing time:             Sun 11 Oct 2026 01:21:18 +0000
Manifest this update:     Sun 11 Oct 2026 01:21:17 +0000
Manifest next update:     Tue 13 Oct 2026 01:21:17 +0000
Files and hashes:         1: QOQ11_MUFa_OV9DelQm3hi-WClc.crl (hash: fXpTtWyT7xe83GQL5gbExv5CmKCFMfVonBTMPWDhMSY=)
                          2: DD1E8AE47BAB11E98D80B33FF8AEA228.roa (hash: BTzcxln9lknQk/0gio9sglyD4baCdk8/WR9c29o94Hk=)
                          3: 881335FA7BAA11E9A046BD3EF8AEA228.roa (hash: OkMDhpXF8khmK7w80DsO5vKxDjM8RKk6XbZwgTPRn50=)
                          4: 54220D207BAA11E9BEE08A3EF8AEA228.roa (hash: 6mAfvCPcBikixr82UHSocOCucUOi7FCh+gOmIS/+gHs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5C19AF, serialNumber=40E435D7F31415AFCE57D0DE9509B7862F960A57
        Validity
            Not Before: Oct 11 01:21:17 2026 GMT
            Not After : Oct 13 01:21:17 2026 GMT
        Subject: CN=6acae48d-059c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:1b:33:74:e5:07:4c:83:50:2f:3d:a3:ca:
                    f5:5e:23:65:f3:ff:65:48:6f:f6:22:07:a0:03:fc:
                    42:cc:3a:cd:11:61:1e:a9:e8:11:9b:97:a4:c3:67:
                    8a:14:c4:90:3b:a5:d0:7d:c1:2a:0a:6a:ae:ab:2e:
                    cd:25:28:87:3f:74:90:93:1c:44:94:14:7b:de:62:
                    f4:0c:f7:cb:61:dc:3a:c8:83:4e:e0:66:0f:4d:c6:
                    27:c1:3f:a3:88:db:1b:c8:2c:74:84:75:78:6f:92:
                    ca:63:a4:31:27:61:16:ce:dc:45:24:8f:cb:8b:08:
                    e8:07:b6:5c:76:8c:98:29:ff:f0:76:03:40:77:cb:
                    3e:93:b3:e4:1f:fd:61:2f:5d:90:08:8e:09:90:6a:
                    e8:b7:2b:22:33:56:69:96:30:d4:a1:29:99:e0:a5:
                    6c:8d:9f:32:22:19:4d:69:04:71:6d:4a:02:a5:9f:
                    ad:78:8c:1d:38:54:25:36:b1:4f:80:5d:e9:7a:2e:
                    bd:56:dc:46:63:46:05:56:7a:61:65:5f:ed:5e:ab:
                    75:c4:c5:8c:74:60:9e:1c:f3:ab:e5:80:fa:d3:b4:
                    f6:46:f9:45:c3:72:ba:89:8d:15:66:66:a1:65:10:
                    de:ac:96:04:f9:da:07:e4:03:a7:0c:f1:5a:2f:e6:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:38:C3:72:3D:81:60:14:A6:77:F6:D2:C1:CC:D4:73:54:D3:9E:DF
            X509v3 Authority Key Identifier:
                keyid:40:E4:35:D7:F3:14:15:AF:CE:57:D0:DE:95:09:B7:86:2F:96:0A:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QOQ11_MUFa_OV9DelQm3hi-WClc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/6D11B7167BA711E9B091553CF8AEA228/QOQ11_MUFa_OV9DelQm3hi-WClc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:46:b4:6b:30:25:1e:cc:d4:99:a4:a0:1d:7f:3d:e8:77:1c:
         6b:3c:e7:e7:9c:1a:10:75:61:73:5c:04:1c:6c:0f:8f:cb:21:
         dc:02:f0:50:b0:76:c5:4e:59:a6:6a:c5:d0:47:d2:ef:75:1b:
         85:75:68:38:f5:db:ab:ff:09:a7:42:61:f3:75:b9:04:8a:d3:
         69:38:f2:de:99:78:f7:d8:52:88:e3:16:a4:57:ff:7d:52:1a:
         ba:82:12:c5:e7:81:6c:c5:3f:31:e6:8f:6b:43:5c:5d:ee:56:
         41:04:37:d9:ce:27:30:a6:79:ef:90:8c:84:2a:b5:f0:18:2d:
         d3:21:89:ba:f9:2f:a9:7b:58:28:07:9c:fe:11:0a:9b:ec:90:
         27:45:da:8f:84:58:20:a2:e4:5f:48:f6:66:ae:2b:9a:9b:10:
         c6:37:f0:ec:30:35:fb:ae:d6:b2:45:fa:83:8d:7f:e3:c1:a6:
         45:9d:59:aa:8c:cf:74:d5:98:0e:44:07:7c:f4:39:95:7e:46:
         10:3a:07:50:b1:ae:ce:75:2b:80:1b:35:26:bb:a6:20:db:e2:
         2c:1f:0c:ec:58:92:cc:a2:68:0c:b9:b0:23:95:cd:00:d2:f0:
         38:b3:77:3f:87:57:d2:ec:39:43:94:1b:29:bb:99:1c:9f:9a:
         38:51:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:09:46 2026 by rpki-client