Error: rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
File:                     wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft (raw, json)
Hash identifier:          8PRXSQRfGJTbP5t4N5w6Ii1nUTuymyV7IuzqbO4o+wM=
Subject key identifier:   A6:22:C6:B3:19:71:AA:4E:C9:BC:06:A3:7C:56:77:2A:21:9E:71:C3
Authority key identifier: C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27
Certificate issuer:       /CN=F366553AAF/serialNumber=C07079E5175605888D9BE4767F7C2BFD9714E027
Certificate serial:       0AD7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
Manifest number:          0AD1
Signing time:             Sun 27 Sep 2026 01:19:10 +0000
Manifest this update:     Sun 27 Sep 2026 01:19:09 +0000
Manifest next update:     Tue 29 Sep 2026 01:19:09 +0000
Files and hashes:         1: wHB55RdWBYiNm-R2f3wr_ZcU4Cc.crl (hash: NWv22X8/tJSAGCCirF9N27HxOKRS6cSk6M/Jz6c7arc=)
                          2: 2A9617F866B411EFA2140445762E951A.roa (hash: aNfthBucjZ9+psYAUe+uWNPR/qRQFUARcMPznxavRTY=)
                          3: 6C3012C266AA11EF8E812E87762E951A.roa (hash: n7zkATB1H4RlSuKLcrCB/Jgsgt6yqHll4YIJhTQe0fI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775 (0xad7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366553AAF, serialNumber=C07079E5175605888D9BE4767F7C2BFD9714E027
        Validity
            Not Before: Sep 27 01:19:09 2026 GMT
            Not After : Sep 29 01:19:09 2026 GMT
        Subject: CN=6ab86f0e-3e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f5:2b:f7:89:a9:b5:63:33:6e:c6:87:50:f1:
                    9f:28:9d:c3:40:32:bf:28:3c:93:c2:d0:69:f9:0d:
                    d4:bf:f7:dc:e0:1e:85:16:5a:5a:38:85:13:1e:67:
                    56:0c:5b:ff:10:b0:a9:12:21:53:1c:35:1d:7b:74:
                    27:1c:f7:02:b6:82:f5:c5:e4:3d:a4:38:53:1e:63:
                    50:fb:78:7f:2d:85:cf:10:f3:8a:ed:a8:41:5b:8c:
                    e8:ca:ee:af:5f:2d:d7:1f:2a:71:4f:29:a5:7f:8e:
                    17:48:9d:64:88:51:75:75:68:80:05:a8:15:50:b8:
                    13:56:7f:91:31:8c:76:68:47:52:de:61:b4:aa:8f:
                    87:7e:b2:b2:8b:19:d2:8c:78:b2:93:53:e9:39:e6:
                    7f:72:a6:81:18:e0:59:b8:72:e0:a9:99:63:b7:81:
                    e4:2c:db:b5:45:e0:20:3e:1c:03:8c:cf:40:4d:02:
                    05:ab:e6:08:93:b5:6e:f5:5e:8e:07:dd:3d:12:bd:
                    56:f8:22:46:92:91:ea:fa:11:a8:13:0b:c1:b7:63:
                    db:29:93:e6:5e:65:e0:31:52:9b:ef:f2:31:83:18:
                    76:72:97:9c:85:8b:19:02:05:98:e3:99:6b:8f:a8:
                    2b:6f:ca:c0:4b:1f:11:27:87:6c:3c:1a:bf:d4:e8:
                    67:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:22:C6:B3:19:71:AA:4E:C9:BC:06:A3:7C:56:77:2A:21:9E:71:C3
            X509v3 Authority Key Identifier:
                keyid:C0:70:79:E5:17:56:05:88:8D:9B:E4:76:7F:7C:2B:FD:97:14:E0:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366553A/859681AC703711E9878A505EF8AEA228/wHB55RdWBYiNm-R2f3wr_ZcU4Cc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:eb:7d:de:c1:45:90:fc:4d:14:1a:e2:e3:0e:25:60:da:6a:
         c0:a8:e3:0b:19:b2:6d:db:95:05:0f:bd:d7:1b:2f:9a:1f:c4:
         46:f9:02:95:3b:fa:67:4f:85:4d:50:44:46:35:49:48:23:53:
         9e:37:02:a7:fe:c0:44:0d:42:c3:16:e3:62:c4:7e:46:7c:e2:
         19:39:23:b2:80:28:be:3d:34:08:ed:aa:0a:7a:d1:5e:a7:4b:
         46:42:d2:65:9c:f1:8e:3c:ba:8b:2d:92:89:b8:03:67:6c:89:
         fc:ee:9c:f9:2c:9d:24:fd:c9:14:d5:75:03:2f:af:b5:e1:95:
         a4:05:b8:46:88:f3:e3:2d:5c:62:c6:12:77:46:82:33:8a:19:
         56:1a:2d:f4:7b:00:27:3b:f5:40:0d:4d:7f:6d:45:43:db:c3:
         27:03:aa:33:1e:ec:63:16:77:e0:32:79:61:e4:a9:6b:f2:26:
         d3:bb:4a:7d:54:77:94:35:b3:b7:19:be:8d:67:73:f6:82:25:
         fc:ca:7b:1a:04:b4:ae:4e:11:92:b5:99:82:24:c9:a0:09:02:
         49:47:6e:59:6c:0a:13:37:12:32:e1:54:e8:35:a1:c2:ef:fc:
         be:6e:2c:3e:57:b0:93:ea:b0:03:ca:ed:e4:7d:ed:28:aa:e2:
         e9:ca:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:27:54 2026 by rpki-client