Error: rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
File:                     2LbhjGXdH5bypUTKz8mAhq75KW8.mft (raw, json)
Hash identifier:          4EliX1QQSJLxAT2JnltLCh3H7NsI4mygDrhV75wP5zE=
Subject key identifier:   E2:72:CC:D1:81:2F:D5:E5:B3:5B:7A:55:95:D1:3A:A0:E1:58:5F:B9
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Certificate issuer:       /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial:       08AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
Manifest number:          088C
Signing time:             Wed 07 Oct 2026 01:59:02 +0000
Manifest this update:     Wed 07 Oct 2026 01:59:01 +0000
Manifest next update:     Fri 09 Oct 2026 01:59:01 +0000
Files and hashes:         1: 2LbhjGXdH5bypUTKz8mAhq75KW8.crl (hash: 55ctPbKqWB74asYAl9l33K7wxGVQFBOgrHK1Uo6mf6E=)
                          2: 4D448904CF5811EE973188BD775412E6.roa (hash: ySSYPE0shLpdO7tNiGvvy73ZDXbdIqU3PG2m2I/Ajqg=)
                          3: DCC047FEE06E11EEB2B0FC6C775412E6.roa (hash: Tz/tIAPulQlEyr/QEKB9q80Zxn8V6++we+recfQKhpE=)
                          4: 15161890CEAC11F0B8BB8AA5DAE4EC9C.roa (hash: sz4t/bgPn6e92FcyejE2oYUP19uwkzdPRB0WWNeOfwU=)
                          5: 2DE942E8F05011EEB7E2EA77775412E6.roa (hash: GBenxdZx6aEBeL1h9fe5p87DnQDStd1SWX74CBckZcY=)
                          6: B26CC39CE06E11EE9B19AF6C775412E6.roa (hash: Ty5HAlTEhASXYCuUF5uWrrX1/gj8dWsdudDz16cov10=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2218 (0x8aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAF, serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
        Validity
            Not Before: Oct  7 01:59:01 2026 GMT
            Not After : Oct  9 01:59:01 2026 GMT
        Subject: CN=6ac5a766-d48c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b9:1b:27:4f:88:cd:f4:08:b1:13:fe:51:69:
                    b5:e6:6f:22:2e:bb:93:8c:fe:a5:63:4b:3f:23:4a:
                    5e:6d:1f:73:58:f0:af:79:2f:b0:2c:02:ec:3f:c7:
                    f1:28:a8:0d:84:8d:47:03:b0:0a:d6:6b:82:47:bd:
                    dd:0a:e0:b0:03:3e:69:c5:0f:cc:53:aa:d2:a0:a9:
                    1f:ca:13:be:97:3d:41:b1:c8:99:5b:bb:1b:ef:77:
                    aa:53:4c:91:d0:00:da:81:2e:9d:a3:3b:88:ea:87:
                    30:4b:01:bb:c7:6d:09:da:1f:29:76:ce:e8:b9:91:
                    78:5f:24:a8:59:46:2b:89:2b:48:60:ab:33:1d:5f:
                    ec:d5:fd:da:11:1c:3f:96:89:62:5c:eb:dd:e6:d4:
                    a1:c1:6e:29:e2:83:68:15:cc:12:91:8b:db:2c:93:
                    98:bc:28:56:7c:e4:0d:d3:8c:4d:68:40:f0:7b:0f:
                    ac:11:bf:2b:a8:ac:16:77:1e:15:b7:e3:3a:05:3f:
                    c4:6f:97:b6:ad:08:ef:8e:29:e4:e8:0a:d8:65:e3:
                    7d:25:46:cd:2d:1e:ba:9f:a1:f7:97:b9:6b:79:16:
                    b1:7d:c3:80:1c:7c:ff:1b:f8:3c:b6:a3:27:8b:1a:
                    5e:b1:dd:e2:8b:f7:3a:74:8a:ac:a3:02:e0:d1:62:
                    d9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:72:CC:D1:81:2F:D5:E5:B3:5B:7A:55:95:D1:3A:A0:E1:58:5F:B9
            X509v3 Authority Key Identifier:
                keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:f0:1b:2e:12:55:7d:d6:69:98:cd:1a:38:11:72:79:ff:6b:
         c3:43:85:db:0f:d2:f0:66:93:d2:65:af:e9:33:27:6d:ea:a0:
         5e:14:eb:bf:7f:f2:0c:86:d8:4f:98:3e:3d:9a:92:c1:68:a4:
         d7:fe:bf:2c:4d:4d:f8:e2:cb:7c:8d:c4:68:2b:69:8c:2d:e0:
         c1:9c:47:4a:5c:1e:16:fc:47:8e:87:2a:f6:b5:7d:a7:da:c2:
         8b:3b:ac:cf:35:e4:b6:26:2f:1f:65:03:16:08:bf:d8:09:ac:
         0c:ce:45:db:33:c8:6f:f8:0a:6d:ef:06:90:ca:7f:a0:23:6e:
         f5:6f:4c:f9:ee:30:25:fc:7f:7e:bb:d3:18:d4:33:14:cf:94:
         aa:d9:14:f7:fa:75:2e:2f:02:2a:48:7e:13:9f:2b:66:d1:ec:
         43:9a:53:d3:df:fc:b9:8f:c4:7d:2b:81:c9:00:65:97:3e:4f:
         c0:5b:78:62:6f:b6:d3:0e:da:1e:fc:07:df:8f:08:28:4f:83:
         1a:ac:ac:53:f7:51:aa:ea:6b:d2:cb:ef:40:3b:22:26:dd:ed:
         38:e7:ce:e1:1f:e8:66:43:8e:1e:62:82:6c:ce:8b:ca:dd:f5:
         4f:2b:e0:bc:16:bd:eb:49:b3:09:64:02:5b:ad:88:46:b0:16:
         e2:4d:31:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:20:01 2026 by rpki-client