Error: rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft
File:                     6ET7WQu7iZkxvh7b23d61vkKmoM.mft (raw, json)
Hash identifier:          5vFl6CRJk3H+cl947RiX1QWO+nIiyspSPfM+Yi/hM8g=
Subject key identifier:   81:CC:54:E8:9F:AB:93:8E:0E:FB:A5:5B:FB:53:B3:00:EE:EF:FC:27
Authority key identifier: E8:44:FB:59:0B:BB:89:99:31:BE:1E:DB:DB:77:7A:D6:F9:0A:9A:83
Certificate issuer:       /CN=F36D76CBAF/serialNumber=E844FB590BBB899931BE1EDBDB777AD6F90A9A83
Certificate serial:       0606
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6ET7WQu7iZkxvh7b23d61vkKmoM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft
Manifest number:          0604
Signing time:             Sun 15 Nov 2026 02:59:36 +0000
Manifest this update:     Sun 15 Nov 2026 02:59:36 +0000
Manifest next update:     Tue 17 Nov 2026 02:59:36 +0000
Files and hashes:         1: 6ET7WQu7iZkxvh7b23d61vkKmoM.crl (hash: q88UJfukaCY1CxnwtzBudwsUdD6MAxwnH220DyjJEbc=)
                          2: 4E125C00FAC411F08DFCF0E5DAE4EC9C.roa (hash: zhpsFFfJy0rDDOkB91cAHS513yglblay1GukI7BbG8U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6ET7WQu7iZkxvh7b23d61vkKmoM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D76CBAF, serialNumber=E844FB590BBB899931BE1EDBDB777AD6F90A9A83
        Validity
            Not Before: Nov 15 02:59:36 2026 GMT
            Not After : Nov 17 02:59:36 2026 GMT
        Subject: CN=6af92018-e428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ac:86:f4:5b:dc:d4:96:77:8e:1f:a6:75:7d:
                    5d:f8:92:8e:fe:32:b7:e4:ea:bb:09:80:b8:6b:26:
                    54:49:5f:9b:79:b3:26:2b:06:fb:2c:3d:b9:5f:d5:
                    52:82:63:4a:9a:87:63:d0:e2:89:43:9c:b8:1a:ea:
                    78:b1:15:8e:38:f8:13:1d:72:59:57:cd:5b:e7:60:
                    58:58:b2:c4:5e:67:ec:f1:11:2d:a1:10:f2:cd:31:
                    b1:0f:9a:7b:cc:03:f2:77:3e:12:32:91:87:cf:89:
                    59:1c:c6:9a:dd:24:b6:e2:dc:18:dc:ab:65:00:99:
                    99:a0:5f:b4:bb:cc:51:f5:f2:a6:c3:bb:98:70:89:
                    53:ec:34:ec:33:4b:62:62:bd:cd:8e:98:ce:ca:14:
                    17:b6:47:bd:90:d9:90:62:3d:1d:0b:f6:84:cd:10:
                    5d:04:2f:e0:b5:2d:50:ae:fe:d1:22:29:76:6b:37:
                    40:0c:b8:33:90:b2:ad:77:4e:45:97:bc:59:c4:3a:
                    3e:e9:98:78:32:cc:e3:48:2b:df:ce:8d:84:b3:de:
                    54:cb:92:50:8c:2d:5c:98:3a:56:3b:ae:64:3a:7f:
                    c1:4c:ae:89:7f:63:3a:92:58:f8:24:c6:7c:52:67:
                    fb:58:fd:cc:5f:39:7b:79:1f:da:50:97:40:4e:1b:
                    27:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:CC:54:E8:9F:AB:93:8E:0E:FB:A5:5B:FB:53:B3:00:EE:EF:FC:27
            X509v3 Authority Key Identifier:
                keyid:E8:44:FB:59:0B:BB:89:99:31:BE:1E:DB:DB:77:7A:D6:F9:0A:9A:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6ET7WQu7iZkxvh7b23d61vkKmoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D76CB/7C95ABDA487111ED9CFD7B84F1222468/6ET7WQu7iZkxvh7b23d61vkKmoM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:89:c0:76:de:bc:c6:fe:88:9d:0d:95:23:4e:51:32:92:43:
         28:88:f3:e9:2d:fe:53:4c:d5:8b:f2:f2:95:d2:65:f4:0a:c8:
         47:ae:4b:d0:e5:2c:12:8b:81:4b:47:9b:dc:f0:62:cf:7e:45:
         f5:63:95:24:a1:9c:f0:b4:81:ea:e7:37:2d:66:cd:eb:34:cf:
         aa:e3:26:d9:31:b2:13:20:5e:46:37:2d:07:ac:1b:28:ce:7d:
         51:bb:2d:6c:43:0b:d1:52:dc:23:b7:7d:21:f4:fb:01:56:54:
         59:22:12:ff:b3:50:c8:1b:d1:e5:56:54:d2:03:8e:e0:22:9f:
         06:81:48:4d:14:3f:af:d8:2a:e1:9f:79:d2:b3:d4:b3:ea:8a:
         68:90:be:16:20:a5:80:31:6c:50:e5:d5:2f:35:c4:48:1d:dc:
         73:79:4d:9f:bf:09:83:18:7d:4c:69:c2:11:25:4e:66:c6:5e:
         ce:fc:66:96:4d:98:f3:a3:6c:48:52:dd:76:a4:3f:1e:ac:ed:
         df:05:ac:61:28:4b:58:7b:21:e5:17:c0:51:86:df:11:7b:36:
         b3:6e:31:b9:2d:e6:53:5f:eb:67:b3:11:c3:9a:e7:a0:c8:62:
         0a:a6:ec:ab:9f:b2:39:a6:2f:81:f4:a5:61:98:08:5b:43:1a:
         9c:6d:03:c1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDc2Q0JBRjExMC8GA1UEBRMoRTg0NEZCNTkwQkJCODk5OTMxQkUxRURCREI3NzdB
RDZGOTBBOUE4MzAeFw0yNjExMTUwMjU5MzZaFw0yNjExMTcwMjU5MzZaMBgxFjAU
BgNVBAMTDTZhZjkyMDE4LWU0MjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCVrIb0W9zUlneOH6Z1fV34ko7+Mrfk6rsJgLhrJlRJX5t5syYrBvssPblf
1VKCY0qah2PQ4olDnLga6nixFY44+BMdcllXzVvnYFhYssReZ+zxES2hEPLNMbEP
mnvMA/J3PhIykYfPiVkcxprdJLbi3Bjcq2UAmZmgX7S7zFH18qbDu5hwiVPsNOwz
S2Jivc2OmM7KFBe2R72Q2ZBiPR0L9oTNEF0EL+C1LVCu/tEiKXZrN0AMuDOQsq13
TkWXvFnEOj7pmHgyzONIK9/OjYSz3lTLklCMLVyYOlY7rmQ6f8FMrol/YzqSWPgk
xnxSZ/tY/cxfOXt5H9pQl0BOGyf9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUgcxU
6J+rk44O+6Vb+1OzAO7v/CcwHwYDVR0jBBgwFoAU6ET7WQu7iZkxvh7b23d61vkK
moMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ3NkNCLzdDOTVBQkRBNDg3MTExRUQ5Q0ZEN0I4NEYxMjIyNDY4LzZFVDdX
UXU3aVpreHZoN2IyM2Q2MXZrS21vTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzZFVDdXUXU3aVpreHZoN2IyM2Q2MXZrS21vTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDc2Q0IvN0M5NUFCREE0ODcxMTFFRDlDRkQ3Qjg0RjEy
MjI0NjgvNkVUN1dRdTdpWmt4dmg3YjIzZDYxdmtLbW9NLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDWicB23rzG/oidDZUjTlEykkMoiPPp
Lf5TTNWL8vKV0mX0CshHrkvQ5SwSi4FLR5vc8GLPfkX1Y5UkoZzwtIHq5zctZs3r
NM+q4ybZMbITIF5GNy0HrBsozn1Ruy1sQwvRUtwjt30h9PsBVlRZIhL/s1DIG9Hl
VlTSA47gIp8GgUhNFD+v2Crhn3nSs9Sz6opokL4WIKWAMWxQ5dUvNcRIHdxzeU2f
vwmDGH1MacIRJU5mxl7O/GaWTZjzo2xIUt12pD8erO3fBaxhKEtYeyHlF8BRht8R
ezazbjG5LeZTX+tnsxHDmuegyGIKpuyrn7I5pi+B9KVhmAhbQxqcbQPB
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:32:52 2026 by rpki-client