Error: rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
File:                     xwJ5nqS9Xbo-09BppxkblBtad5o.mft (raw, json)
Hash identifier:          RmDNWDi/CAcZ2C8OvaDjYEA8hWRAo5MUlYI4NWB13cA=
Subject key identifier:   46:0E:1F:0C:D6:BC:D3:E4:F9:94:CF:E8:05:8A:7A:A6:65:89:8C:FB
Authority key identifier: C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A
Certificate issuer:       /CN=F36F6034AF/serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
Certificate serial:       09A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
Manifest number:          098D
Signing time:             Tue 13 Oct 2026 01:47:00 +0000
Manifest this update:     Tue 13 Oct 2026 01:46:59 +0000
Manifest next update:     Thu 15 Oct 2026 01:46:59 +0000
Files and hashes:         1: xwJ5nqS9Xbo-09BppxkblBtad5o.crl (hash: uRYVLHsLO3Zhyrl94pdw4wNKpqXNSKwu2RdHTKtQKD4=)
                          2: 1CB4AD46B54D11F0AE8DE1DFDAE4EC9C.roa (hash: GpBCPBpYP7jSKCmZZyQgNpO5GbazBb3Ixsp5RwZj6vM=)
                          3: 608B48BEB55611F0B2E28A9CDAE4EC9C.roa (hash: 6xR9Yw6qiVIfQSJDhytaGImSZ1A3jFhmSl44es/ykHg=)
                          4: B9EABCD2B54C11F09D128FDFDAE4EC9C.roa (hash: FQu8ySvpjzSm8Wt9V+i50XqTr/lNpOUbbdjMIfmS/L8=)
                          5: DF5534A0B1C911F184211CFCCE1D38B0.roa (hash: tdKG3fAnZ8O4SvFAeUfYg2GlcrozRV06z8IlLTGUwMs=)
                          6: 094FEDD4B55611F08FD11F9CDAE4EC9C.roa (hash: jvqPC+LV3haBj2mis1++y3ICQS3fsxJo9KRlAft0JPY=)
                          7: 96B4A35AB55511F08FC6E597DAE4EC9C.roa (hash: 6Qab2GQfV990KSXtH4bePzdjsFn7IxaaFDENDt4G4Yc=)
                          8: DBE779FCB55511F09281119CDAE4EC9C.roa (hash: r38PJu83hUBvf7P5w3SkDI8cVfAvH12yPWpkkk25OPA=)
                          9: 2E1AF6B8B55611F0BCB8249CDAE4EC9C.roa (hash: BLNEGjyDBYxkX0YHPraswO3BVBLrA7gab5y1HJSh2U4=)
                          10: 7F2A789EB55611F097EC52A0DAE4EC9C.roa (hash: 2L2OgLFRPecgH2xTdenUefSJFiuBkC2MjqJciX7PRvY=)
                          11: C4C9B73AB55511F08736369ADAE4EC9C.roa (hash: CMYKxCS3jFNWQQUqDagCHxfFByaW82mbkSwsyKkTgQ4=)
                          12: E79DE1AEB54C11F092F6BDDFDAE4EC9C.roa (hash: yiPtl3UM2gTn4BwT0BadrawkZ+QM2YDZW4gZb83Wnio=)
                          13: 9A0C2716B55611F094735AA0DAE4EC9C.roa (hash: 43UkRVumG67YdCPCBU+yiy01Xg1w6Ryu6pqrcLYThmU=)
                          14: 457A28BEB54D11F085FD31E0DAE4EC9C.roa (hash: WvjKJ61Ybf7E0w2qd2kPgyK95N5i97V0MyHCGmY1W6o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2473 (0x9a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AF, serialNumber=C702799EA4BD5DBA3ED3D069A7191B941B5A779A
        Validity
            Not Before: Oct 13 01:46:59 2026 GMT
            Not After : Oct 15 01:46:59 2026 GMT
        Subject: CN=6acd8d94-9bc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:84:30:a1:00:5e:6c:1c:68:74:91:76:0d:
                    44:fc:7d:e9:5f:11:14:b5:a9:2f:b5:b0:d9:96:89:
                    df:0d:69:26:3f:9c:d5:4a:46:ac:8f:a6:95:24:50:
                    a9:90:5a:4e:6c:e9:74:ba:64:de:9f:ee:51:91:ec:
                    f5:80:69:c0:57:63:89:fd:da:08:92:fb:41:9a:93:
                    26:fb:a6:a6:77:a0:4f:b3:f6:2c:46:23:76:f3:9a:
                    0e:99:39:1c:22:ce:dd:38:43:c6:0b:4a:3f:91:25:
                    c3:45:26:e2:34:b5:de:56:f1:f1:ea:f0:25:c4:58:
                    fb:9e:de:88:6a:29:ac:e6:06:77:2f:d5:c6:bd:97:
                    4b:ec:a4:aa:e2:df:a4:83:3c:af:e4:91:71:71:e6:
                    eb:53:fc:2d:34:d3:02:b0:82:0e:06:fc:5b:8e:7f:
                    c7:e4:cf:28:8e:b2:9f:94:5f:04:4b:27:c5:f7:3c:
                    d6:26:fb:a3:56:08:2d:71:11:fd:0d:da:d3:6f:f7:
                    bd:62:0e:68:1d:b6:ab:74:b0:d0:31:c3:2d:66:ee:
                    03:95:04:0d:0e:b6:cc:5e:04:df:e1:c6:a3:09:af:
                    96:ed:a1:f9:64:e7:37:cd:17:9e:60:7c:61:12:de:
                    0d:83:9b:7e:4c:6c:61:09:56:01:e4:ff:de:e3:02:
                    26:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0E:1F:0C:D6:BC:D3:E4:F9:94:CF:E8:05:8A:7A:A6:65:89:8C:FB
            X509v3 Authority Key Identifier:
                keyid:C7:02:79:9E:A4:BD:5D:BA:3E:D3:D0:69:A7:19:1B:94:1B:5A:77:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xwJ5nqS9Xbo-09BppxkblBtad5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/D916758A90FC11EA9D81306EF8AEA228/xwJ5nqS9Xbo-09BppxkblBtad5o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a1:cb:65:86:eb:e9:24:36:5c:c4:53:a5:81:e7:f4:00:4c:
         d6:c2:5c:91:b9:10:07:3d:e8:27:7f:95:89:f2:53:0b:14:0d:
         11:b0:a3:82:2b:21:ee:ad:6f:75:7a:61:69:89:97:d5:7f:73:
         d5:37:ff:8d:44:4d:7d:33:2c:37:3d:45:79:f9:ae:11:58:9d:
         bf:d1:1c:f7:ea:34:a2:1a:0c:6c:36:2e:45:86:f1:d0:ee:ca:
         d4:dd:9e:72:9d:c4:e0:08:cc:45:ec:6b:4a:f0:ec:ef:7f:9d:
         cf:93:a9:13:9e:32:07:d8:d5:ab:b9:ef:d8:51:d8:fd:8c:e1:
         ef:5e:b5:3d:51:11:f2:cd:a3:39:02:c9:4c:a4:1b:3a:e8:27:
         ff:b8:58:0b:4b:37:e7:b7:65:ba:45:98:6d:bf:c7:60:48:a5:
         98:e9:08:c9:80:04:5d:ac:eb:2f:86:d8:32:a1:d7:cf:66:0e:
         6b:79:7c:b8:32:9d:04:a0:f6:1e:b2:7b:55:d6:20:db:38:ca:
         c9:ca:51:47:ec:4d:c0:97:2e:3f:eb:03:3f:5b:3a:be:d2:af:
         4e:9b:38:2c:d9:b4:50:97:9d:55:5b:67:7e:7b:04:8c:c9:a8:
         3e:e6:71:8a:9f:9b:c9:e5:58:1d:76:a3:54:18:20:8a:a2:67:
         67:d0:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:55:52 2026 by rpki-client