Error: rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/rR50DGW1NRDO0GWpJE0e1JjBA7A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/rR50DGW1NRDO0GWpJE0e1JjBA7A.mft
File:                     rR50DGW1NRDO0GWpJE0e1JjBA7A.mft (raw, json)
Hash identifier:          3xU+545dgKamU4cwd7LFepYtHHhWjS4GQvuleZJMyPQ=
Subject key identifier:   2D:5F:9E:DA:B1:E1:DE:07:0A:EA:C9:20:14:8E:AD:24:48:1D:E3:44
Authority key identifier: AD:1E:74:0C:65:B5:35:10:CE:D0:65:A9:24:4D:1E:D4:98:C1:03:B0
Certificate issuer:       /CN=F367A972AF/serialNumber=AD1E740C65B53510CED065A9244D1ED498C103B0
Certificate serial:       0710
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rR50DGW1NRDO0GWpJE0e1JjBA7A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/rR50DGW1NRDO0GWpJE0e1JjBA7A.mft
Manifest number:          070D
Signing time:             Thu 24 Sep 2026 02:32:45 +0000
Manifest this update:     Thu 24 Sep 2026 02:32:44 +0000
Manifest next update:     Sat 26 Sep 2026 02:32:44 +0000
Files and hashes:         1: rR50DGW1NRDO0GWpJE0e1JjBA7A.crl (hash: AUCF/AA5YfVG1bWxareJBCHy7k5zMnUAqcgZ1GYcK70=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/rR50DGW1NRDO0GWpJE0e1JjBA7A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/rR50DGW1NRDO0GWpJE0e1JjBA7A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rR50DGW1NRDO0GWpJE0e1JjBA7A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:32:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367A972AF, serialNumber=AD1E740C65B53510CED065A9244D1ED498C103B0
        Validity
            Not Before: Sep 24 02:32:44 2026 GMT
            Not After : Sep 26 02:32:44 2026 GMT
        Subject: CN=6ab48bcd-1004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:77:3e:19:26:8e:9d:a2:49:e8:aa:e2:a0:
                    0c:78:6f:d2:e9:93:a1:12:16:21:03:ea:cd:42:89:
                    c8:5c:75:7f:a8:7f:70:8b:12:b5:91:42:2b:ac:e0:
                    44:c7:79:b7:b0:39:69:56:ca:1e:83:74:87:00:50:
                    f0:72:6f:f3:7f:16:05:e9:9b:d9:c5:c9:2e:7c:79:
                    61:a5:99:cc:f6:4d:a6:5d:42:86:60:7a:69:cd:f7:
                    6f:81:49:45:53:a5:30:89:88:93:e0:5e:9e:1b:d3:
                    2c:a3:07:23:4e:4e:07:e1:8d:82:cc:4c:f9:bc:8c:
                    f4:ef:d3:9a:3d:99:f2:ff:3b:db:82:e8:64:bb:d5:
                    40:01:ec:7e:4e:55:a9:db:49:30:b3:46:9c:48:9a:
                    cd:e8:17:72:6c:67:e3:2e:56:26:1f:f5:0a:c2:dd:
                    5e:2e:b1:15:40:c7:e3:8b:54:27:68:98:97:d9:34:
                    98:3d:be:52:a6:20:09:e1:0d:00:4b:4c:d7:1f:03:
                    0a:a8:42:28:92:34:d7:22:c6:3a:cb:55:97:1c:c0:
                    50:1a:b6:d6:d4:9e:26:fa:02:8a:a7:ea:35:f1:a8:
                    c7:ad:f8:00:6b:8b:4b:54:f9:4e:10:e2:f7:04:da:
                    bb:17:3d:5b:23:c9:2c:12:51:94:b6:a0:50:6b:84:
                    14:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5F:9E:DA:B1:E1:DE:07:0A:EA:C9:20:14:8E:AD:24:48:1D:E3:44
            X509v3 Authority Key Identifier:
                keyid:AD:1E:74:0C:65:B5:35:10:CE:D0:65:A9:24:4D:1E:D4:98:C1:03:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/rR50DGW1NRDO0GWpJE0e1JjBA7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rR50DGW1NRDO0GWpJE0e1JjBA7A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367A972/02153F04536411EC85B02637D8A014CE/rR50DGW1NRDO0GWpJE0e1JjBA7A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:cf:57:ad:e1:90:0c:4a:43:fe:9d:0e:ea:c1:4a:de:22:8b:
         45:2c:9c:53:83:e5:52:8f:d3:ce:e6:e2:cb:90:05:9b:14:bf:
         cf:e8:f8:08:8c:f1:33:06:44:a8:ac:4c:2d:54:db:84:72:49:
         6a:ea:5f:c3:94:cf:9e:0c:fc:ea:cc:80:85:ed:b1:20:00:7f:
         2c:6f:af:44:e5:c6:3f:fb:0b:77:7e:45:1e:42:c8:ec:81:62:
         d5:3c:9f:3f:aa:6b:7f:9e:cc:28:ed:eb:49:c2:51:c9:5c:0c:
         02:f5:35:e6:87:a2:9f:69:b8:f8:b0:aa:25:6d:65:b8:31:77:
         19:53:f9:ab:2d:a9:57:1f:37:77:9d:9f:db:08:65:58:a3:de:
         28:02:7e:32:65:66:a6:67:d4:fe:e5:d9:90:0c:0e:33:d9:aa:
         4f:56:11:3a:70:04:d7:45:cc:47:70:b6:1e:15:c2:3f:37:2b:
         63:41:de:fc:ed:e2:a8:8a:aa:11:f9:cf:cd:43:01:db:74:24:
         cc:19:6d:b0:b6:e1:96:4f:e8:e0:58:68:3f:82:ac:49:53:f7:
         06:11:f5:61:f2:a7:78:84:66:03:2f:b9:6f:32:9e:86:26:f5:
         3b:23:58:04:2d:7c:d4:e7:3e:7f:55:99:c5:23:ef:d1:0b:dd:
         71:93:5f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:34:37 2026 by rpki-client