Error: rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
File:                     FVNwAi5GD0z62wu7AyLauREShM4.mft (raw, json)
Hash identifier:          9Bk7jPIkHwkazO61oK/+pTcr+PESVjGXalkK2uuYiKc=
Subject key identifier:   BA:EA:C1:09:E9:6D:AC:E3:C2:31:08:76:7E:58:DB:A2:48:59:91:78
Authority key identifier: 15:53:70:02:2E:46:0F:4C:FA:DB:0B:BB:03:22:DA:B9:11:12:84:CE
Certificate issuer:       /CN=F361E5BDAF/serialNumber=155370022E460F4CFADB0BBB0322DAB9111284CE
Certificate serial:       1084
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
Manifest number:          1083
Signing time:             Wed 07 Oct 2026 00:50:32 +0000
Manifest this update:     Wed 07 Oct 2026 00:50:31 +0000
Manifest next update:     Fri 09 Oct 2026 00:50:31 +0000
Files and hashes:         1: FVNwAi5GD0z62wu7AyLauREShM4.crl (hash: ag4hGayQLfaxSbf7WVpauRIBTmYkTlVcgaunw5WqStU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 00:50:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4228 (0x1084)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E5BDAF, serialNumber=155370022E460F4CFADB0BBB0322DAB9111284CE
        Validity
            Not Before: Oct  7 00:50:31 2026 GMT
            Not After : Oct  9 00:50:31 2026 GMT
        Subject: CN=6ac59758-0f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f6:8e:e4:db:b5:4f:e4:7e:97:bc:c8:9e:e1:
                    8a:09:aa:1a:eb:7a:da:b4:c6:8d:1a:a6:33:ac:d7:
                    1b:82:d5:3c:3d:92:0e:7e:35:24:cc:da:11:c9:90:
                    b2:c0:50:86:1e:9b:a2:27:97:9f:2f:b8:b9:45:40:
                    63:2d:18:58:77:f7:68:35:30:40:9f:85:b2:75:67:
                    eb:4f:47:df:1a:fd:5f:9e:50:d5:b2:03:62:a7:a9:
                    c4:a5:3e:a0:ad:63:a8:0a:19:82:bb:e6:03:9f:ab:
                    14:15:94:6f:c2:d5:df:51:b1:08:ff:83:7c:71:97:
                    1c:5e:63:fd:6e:39:40:32:5f:80:54:a4:69:50:1f:
                    71:09:4e:e0:7a:d5:be:f9:0c:4c:c4:dc:39:23:aa:
                    80:1c:a9:78:9f:a3:41:2b:d8:b9:c9:4a:8d:2a:bd:
                    58:40:02:9b:34:dd:72:db:7e:2d:ec:e6:f6:ab:13:
                    da:7f:f8:c0:77:41:a7:24:1d:10:24:31:53:aa:8e:
                    d9:93:f5:cc:08:7a:f8:e2:7d:ea:76:2e:e4:6d:d4:
                    d1:8e:26:0c:1c:58:16:eb:2f:de:00:db:b6:d3:a0:
                    b5:71:3c:a1:43:22:fe:95:57:ff:1c:e1:2c:55:b0:
                    43:f9:1b:0a:22:e0:b8:8d:73:81:3f:44:e1:d2:ca:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EA:C1:09:E9:6D:AC:E3:C2:31:08:76:7E:58:DB:A2:48:59:91:78
            X509v3 Authority Key Identifier:
                keyid:15:53:70:02:2E:46:0F:4C:FA:DB:0B:BB:03:22:DA:B9:11:12:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:34:76:51:85:dd:de:3f:88:c3:a7:80:22:86:50:7b:ff:34:
         e0:05:d7:25:5f:75:3f:6c:20:11:33:f8:90:94:2e:db:35:55:
         37:f3:4b:5e:b0:07:83:08:f9:8f:e2:2d:30:0e:40:61:66:53:
         b0:d8:81:fe:aa:2c:b5:1d:77:2c:31:f1:f7:fa:b4:2b:fc:2c:
         a9:ce:16:e4:93:ca:21:bc:63:d2:d5:3b:c4:50:f5:3e:f2:5f:
         5f:4d:fc:fa:a7:26:73:ee:02:50:32:62:14:00:15:08:5b:db:
         d6:be:1d:19:03:23:fc:4a:44:81:e9:05:f2:34:f1:fd:54:6b:
         2b:e6:ae:4a:f5:99:75:ee:9e:85:6d:8e:9c:b1:9a:7b:9d:dc:
         4c:2e:96:79:c5:8f:8b:c1:ee:86:c5:9d:0f:e6:16:20:a5:de:
         64:0c:a1:84:ab:be:fd:c8:9a:33:b1:c0:41:7a:19:5f:39:17:
         67:44:fc:80:ec:3a:8a:0e:28:b6:ec:51:6b:3a:0b:97:f4:f1:
         ab:ee:e8:c1:76:ec:23:e0:7c:d8:a1:82:47:82:fd:e7:f0:63:
         f0:9b:9b:cb:64:ef:f1:84:5a:79:7b:71:15:79:82:bd:1a:43:
         11:1b:05:0c:b8:5f:1e:c2:39:69:57:2d:4b:82:7c:4f:ea:60:
         84:f5:10:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:25:00 2026 by rpki-client