Error: rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File:                     SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier:          i6ioy4cbV4vC0U8tzPUVXuuyFmZ61WjZZhisEyp4RKw=
Subject key identifier:   89:88:19:3F:6B:28:C2:25:04:F5:35:96:96:8C:28:55:A8:81:FD:85
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer:       /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial:       0556
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number:          0540
Signing time:             Wed 30 Sep 2026 03:21:34 +0000
Manifest this update:     Wed 30 Sep 2026 03:21:33 +0000
Manifest next update:     Fri 02 Oct 2026 03:21:33 +0000
Files and hashes:         1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: aQi/t8ZxTRTn+0E0gRy4Ciorf66FXTPOa/vsSjASFo4=)
                          2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
                          3: 7D97AFC0552311F18C4E5A19CF1D38B0.roa (hash: HPUJELzm6QYKUxc7EThIZngZppM/cTN5/ffnqB4Ryv4=)
                          4: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
                          5: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
                          6: 3090B8681EC611F1BB0A92BDDAE4EC9C.roa (hash: HnTfIVu9muq+g847NRBmW0pVK2J4iJgCN/MFxOihXGI=)
                          7: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
                          8: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
                          9: 557D1FE81EC311F1A8C107ABDAE4EC9C.roa (hash: 6E/4b3jG5+WBAhKMmUMbiYpLspky+skYf9xDIZrtcIA=)
                          10: 840D0A8C1EC111F1A3925CA1DAE4EC9C.roa (hash: FFwjG289Rtmc3S8JKRbxfJUbpIIY+o+EMq5pX7s2ODo=)
                          11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
                          12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
                          13: C1012DD81EC611F18633B7BFDAE4EC9C.roa (hash: AEjIQDoJkuCV2zdXj8TYSJzuJbyASHlYynXe4LN5vrk=)
                          14: F2B741AE1EC211F1A3DB35A9DAE4EC9C.roa (hash: wNGAjIUP8OIxnYbE9SkgsQ9UkCWPS1lv4jOwO2xoulg=)
                          15: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
                          16: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
        Validity
            Not Before: Sep 30 03:21:33 2026 GMT
            Not After : Oct  2 03:21:33 2026 GMT
        Subject: CN=6abc803e-7c2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:74:e4:5b:06:3f:f6:e4:2d:8d:dc:4a:c9:6f:
                    f3:f4:04:2a:06:d4:23:23:f9:8d:9d:2f:c0:89:59:
                    3f:d3:cd:5f:bf:76:db:46:bc:68:8f:3a:7e:e8:65:
                    f9:fe:31:a6:7d:2c:6e:f8:a3:9f:78:25:5e:81:e3:
                    31:de:97:9c:c3:61:84:28:72:30:52:f8:fc:d5:77:
                    45:ce:25:be:df:b5:7b:87:62:79:00:e9:12:37:d9:
                    be:90:3d:68:11:40:0d:ad:c8:0e:42:a8:c8:33:5f:
                    6a:04:24:b5:02:1b:b9:99:aa:d5:a0:33:f9:8f:ca:
                    8c:7a:0a:04:15:3a:c6:04:e2:3e:7d:ff:f4:2d:88:
                    d5:4c:40:cd:a4:8a:f1:55:d6:65:36:40:09:b4:b0:
                    ac:c8:7f:21:9a:dc:bd:f5:e9:d8:3e:7e:70:56:80:
                    6a:66:70:a7:e1:2d:31:7a:61:ea:e6:bb:4e:55:14:
                    b8:a2:42:f5:75:a0:11:09:98:6f:ab:63:c5:4f:13:
                    03:37:08:46:90:cb:e9:57:4c:7e:27:40:92:d3:00:
                    62:29:2a:e8:98:ce:dd:3d:fb:61:27:01:83:c4:77:
                    7f:f6:18:d3:16:f2:10:d4:a0:a1:d8:3e:73:73:e1:
                    6e:8a:9f:cf:80:be:f5:21:85:02:9b:fb:f0:b0:0f:
                    6b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:88:19:3F:6B:28:C2:25:04:F5:35:96:96:8C:28:55:A8:81:FD:85
            X509v3 Authority Key Identifier:
                keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:94:7e:70:f2:7c:d0:37:5c:14:0e:9e:72:46:c5:b2:1f:f4:
         73:66:11:5e:b7:f6:7d:57:ba:c5:9e:d0:d3:08:c1:22:ee:17:
         dd:50:3f:04:81:b9:86:6e:72:c4:0b:b3:d1:4b:9f:4c:74:b3:
         b6:e2:53:d1:32:6a:5f:82:27:4b:7e:2e:4d:9e:7f:be:9f:7b:
         ed:5a:71:c3:d5:81:14:3e:78:07:01:fa:17:19:d6:a5:b8:42:
         ae:b2:39:0a:7e:0e:c7:7c:2e:9c:40:24:36:1a:ce:a8:66:47:
         32:0c:04:e7:2e:73:0a:bc:fc:f7:af:0a:3b:f6:0d:30:cc:d7:
         10:31:3e:97:7a:8d:54:38:bc:fe:80:7d:ce:f9:c6:2b:28:4f:
         87:84:16:65:66:68:a0:84:3d:63:50:8a:69:5f:77:75:79:95:
         ac:a4:68:06:82:9d:91:3c:1e:e9:05:f6:5b:2c:32:69:8b:b4:
         08:01:45:75:5f:74:be:05:1e:19:3d:7e:6b:a8:98:5e:91:3f:
         9f:85:b3:0c:e2:46:0c:1d:84:d7:fa:48:e1:cc:cc:1f:8a:c0:
         98:be:3f:2e:64:0d:c2:f7:6a:1a:41:29:b6:aa:83:93:d6:b1:
         7b:d7:54:30:f5:7b:48:5f:9f:0a:ea:75:b2:03:7d:f2:cb:79:
         2d:0b:8c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:51:29 2026 by rpki-client