Error: rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
File:                     CvRXhhBplSRPEehsGgUDMTN9DuE.mft (raw, json)
Hash identifier:          7L8wHRloFMnnwYs0KW7ZD8biQ/DxoNcjc7T1xzCAeGk=
Subject key identifier:   BC:DE:98:30:59:FF:5F:1C:38:82:C6:23:34:1C:FD:33:A5:10:34:7B
Authority key identifier: 0A:F4:57:86:10:69:95:24:4F:11:E8:6C:1A:05:03:31:33:7D:0E:E1
Certificate issuer:       /CN=F3691A30AF/serialNumber=0AF45786106995244F11E86C1A050331337D0EE1
Certificate serial:       57
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CvRXhhBplSRPEehsGgUDMTN9DuE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
Manifest number:          57
Signing time:             Fri 25 Sep 2026 05:43:33 +0000
Manifest this update:     Fri 25 Sep 2026 05:43:33 +0000
Manifest next update:     Sun 27 Sep 2026 05:43:32 +0000
Files and hashes:         1: CvRXhhBplSRPEehsGgUDMTN9DuE.crl (hash: 0TJCy62SKlj35yIFX773fIfgiviE7OKRWD+/Xjt3MIs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CvRXhhBplSRPEehsGgUDMTN9DuE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691A30AF, serialNumber=0AF45786106995244F11E86C1A050331337D0EE1
        Validity
            Not Before: Sep 25 05:43:33 2026 GMT
            Not After : Sep 27 05:43:32 2026 GMT
        Subject: CN=6ab60a05-bb8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6b:c2:7d:42:9d:4b:77:84:1e:c3:7d:1a:4f:
                    07:de:30:3d:64:7e:eb:82:e6:c5:3c:36:86:5b:94:
                    32:0f:fe:ba:6c:11:27:ba:7c:5b:a6:ad:a7:b8:26:
                    d7:08:88:59:6f:f9:ea:48:75:6a:d5:15:4b:1d:06:
                    43:ea:42:04:bf:04:aa:74:e9:8e:de:e0:11:b1:5e:
                    db:ec:b6:9a:8b:b5:fd:8a:60:80:4c:bc:28:a8:3b:
                    d5:2a:6d:34:b2:61:f3:ec:77:10:cd:89:b3:c7:55:
                    17:61:16:03:e8:1c:40:13:77:ca:d6:5b:5d:8d:21:
                    08:e5:e4:fd:fd:31:70:5f:1c:62:b4:1d:3d:2f:d7:
                    be:37:73:39:6d:4d:98:d1:3c:c3:71:50:a4:ba:b3:
                    ee:0f:9e:df:e5:12:89:6b:67:64:f6:6c:b1:43:53:
                    40:80:c2:f2:aa:4b:98:92:1a:a6:96:15:87:da:9b:
                    7f:91:ee:e5:91:ed:75:40:92:db:6d:30:c3:3f:62:
                    a0:2f:10:86:39:74:1c:18:67:51:81:cc:7e:d7:15:
                    f9:a0:6f:41:54:9c:c3:57:dc:7c:bb:ee:67:88:17:
                    24:c2:a4:97:33:9d:38:84:75:71:8d:be:80:d2:09:
                    0b:cd:cf:cc:45:54:62:d9:86:2a:6c:86:79:07:42:
                    2b:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:DE:98:30:59:FF:5F:1C:38:82:C6:23:34:1C:FD:33:A5:10:34:7B
            X509v3 Authority Key Identifier:
                keyid:0A:F4:57:86:10:69:95:24:4F:11:E8:6C:1A:05:03:31:33:7D:0E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CvRXhhBplSRPEehsGgUDMTN9DuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691A30/894600B4753611F1A823C9E4CE1D38B0/CvRXhhBplSRPEehsGgUDMTN9DuE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:e4:5e:96:d0:18:8e:ca:39:c9:eb:23:02:1d:00:8f:88:
         37:58:11:e1:9d:08:51:40:cb:3f:77:14:3e:e4:0c:5a:d3:11:
         5c:9a:83:fa:30:93:82:f9:3d:f5:52:74:ff:d0:65:85:40:b1:
         74:61:fc:d2:ec:2c:c7:31:30:fe:aa:4b:ee:0d:02:0c:5c:61:
         2e:7e:06:33:13:db:31:ca:12:5a:16:06:d2:8b:47:cc:45:59:
         91:23:e5:33:a9:0e:9c:f8:8b:fb:95:62:c7:be:3c:02:76:32:
         cd:c3:32:fe:9c:30:90:8b:36:a6:91:c8:5c:98:0d:eb:71:ce:
         1b:e0:35:50:ad:fc:9c:a5:d2:9d:6f:71:f8:0b:ae:16:84:8e:
         06:df:33:67:ff:3d:43:06:f5:2d:f4:01:5b:c9:59:f4:6b:0d:
         a7:b8:8d:16:7d:f5:9c:ba:94:ad:1e:89:b8:9d:e6:52:54:a2:
         9c:0d:3c:c9:3b:b5:ca:b1:1e:3f:ac:d0:9a:0c:d1:f2:92:63:
         35:f8:1e:59:92:d7:7a:ef:38:7f:90:f0:21:68:82:bd:76:2a:
         1a:43:91:08:02:40:dd:1c:8e:2b:37:f0:d5:98:47:da:51:af:
         e5:b4:40:fd:f9:cf:ef:7c:07:cb:9f:90:24:60:5f:4f:f7:09:
         62:ef:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:21:19 2026 by rpki-client