Error: rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
File:                     INQ_9eRM5MOe47-3ribe6wBBH9U.mft (raw, json)
Hash identifier:          s6gs40nXEaJ/37KcB8+pnzr49u1T4baF8mAkn/b/tLU=
Subject key identifier:   CB:8C:18:24:BA:DB:02:E3:17:C3:9E:8E:61:38:7A:B2:F2:15:4E:EB
Authority key identifier: 20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5
Certificate issuer:       /CN=F365D370AF/serialNumber=20D43FF5E44CE4C39EE3BFB7AE26DEEB00411FD5
Certificate serial:       045B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/INQ_9eRM5MOe47-3ribe6wBBH9U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
Manifest number:          045B
Signing time:             Sat 26 Sep 2026 03:43:49 +0000
Manifest this update:     Sat 26 Sep 2026 03:43:48 +0000
Manifest next update:     Mon 28 Sep 2026 03:43:48 +0000
Files and hashes:         1: INQ_9eRM5MOe47-3ribe6wBBH9U.crl (hash: kGSZDVXy3Fl2PDDILVYtTQzHXAna3TziFI4B8AjUp1M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/INQ_9eRM5MOe47-3ribe6wBBH9U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1115 (0x45b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365D370AF, serialNumber=20D43FF5E44CE4C39EE3BFB7AE26DEEB00411FD5
        Validity
            Not Before: Sep 26 03:43:48 2026 GMT
            Not After : Sep 28 03:43:48 2026 GMT
        Subject: CN=6ab73f75-db5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:08:1d:21:70:c0:e2:1c:a4:a8:ca:f1:c5:48:
                    a4:6c:52:b1:05:08:63:11:e1:de:51:a3:dc:86:60:
                    5e:8a:b0:90:c1:e9:30:48:e2:93:96:77:24:27:ad:
                    90:9a:cf:1b:0d:f3:f8:14:93:b7:dc:71:f9:ba:e3:
                    21:15:c7:c4:fb:57:95:33:6e:0f:5b:cc:24:64:df:
                    33:35:4e:22:5c:28:a5:23:03:c3:d9:d7:ea:8a:c1:
                    3c:90:0b:64:b3:79:7b:f7:e8:30:28:f2:1a:4a:31:
                    88:a7:d1:af:f6:24:0c:57:6f:a5:7a:ed:1b:06:c7:
                    e6:e8:8f:45:72:37:a4:04:fe:a9:44:b4:66:75:04:
                    e3:65:23:d7:4c:89:98:bf:5b:19:34:f5:5c:a1:e3:
                    44:e0:a2:ab:5c:88:13:31:2d:1a:b5:68:80:e2:90:
                    4f:2a:87:fd:b1:08:56:75:0e:34:fd:de:c8:32:9c:
                    eb:29:bf:4a:54:94:0b:e7:f0:5d:61:58:bb:6a:f5:
                    b7:37:8b:4e:ae:5a:75:74:d4:32:77:38:f5:c4:58:
                    6f:53:7d:2e:fe:52:d8:49:50:c0:ba:24:60:3f:1a:
                    9f:7c:d6:88:dc:2a:f8:0e:4c:d1:37:7c:a9:c6:59:
                    af:58:44:e0:00:7d:e2:28:8c:db:88:09:25:b8:52:
                    d1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8C:18:24:BA:DB:02:E3:17:C3:9E:8E:61:38:7A:B2:F2:15:4E:EB
            X509v3 Authority Key Identifier:
                keyid:20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/INQ_9eRM5MOe47-3ribe6wBBH9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:c8:11:b9:76:62:46:fb:f2:c8:a2:06:cc:a5:24:94:76:6e:
         1f:6c:f7:b2:75:89:6f:43:ed:85:b1:08:c7:73:71:d9:6f:ca:
         36:eb:6d:ea:f3:93:d7:70:eb:24:93:1e:de:d3:27:94:65:4d:
         c7:65:08:f5:aa:b8:c6:63:92:2f:9e:c9:0d:06:10:8a:b8:9d:
         76:ea:0c:63:ae:d2:71:f0:e5:01:6d:d3:e0:da:e4:ea:f5:96:
         ad:d5:51:c1:83:01:9d:15:97:d4:e1:85:cd:5d:f3:63:1a:bd:
         1b:22:ae:83:dc:dc:f5:e5:11:2e:1c:f7:d8:28:c2:0f:06:40:
         aa:61:ee:35:a4:2a:b7:c8:a3:a8:1b:6d:98:4b:bf:26:27:68:
         7f:65:bb:b5:14:53:16:c7:66:85:42:8a:3c:72:a4:ae:84:58:
         b9:36:13:85:67:ad:9e:91:0c:68:46:aa:59:04:34:86:f6:10:
         e5:c6:48:c8:42:27:e6:46:cf:5e:cd:31:4a:f1:56:39:17:2f:
         24:50:64:53:07:c1:65:49:92:de:a7:d1:20:b3:a3:fe:57:12:
         98:8b:b5:33:b6:7e:1a:bc:40:cd:02:05:1b:3e:2e:bd:a8:55:
         e3:5d:a5:87:01:ba:f9:39:31:ea:dd:22:51:0c:54:4d:21:dc:
         e9:f5:f8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:44:17 2026 by rpki-client