Error: rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
File:                     otd9qqMurfowwn_FTDYvrBwxtaM.mft (raw, json)
Hash identifier:          sOb0YWqaeIwk4aOi1NnXCUkihL7EE+xBcScoz+eCiTc=
Subject key identifier:   54:20:57:19:A7:38:70:A0:F4:E9:21:B6:3F:41:24:4F:1D:82:BE:F7
Authority key identifier: A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
Certificate issuer:       /CN=F36A15D5AR/serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
Certificate serial:       0A73
Authority info access:    rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
Manifest number:          0A71
Signing time:             Sat 10 Oct 2026 01:32:33 +0000
Manifest this update:     Sat 10 Oct 2026 01:32:32 +0000
Manifest next update:     Mon 12 Oct 2026 01:32:32 +0000
Files and hashes:         1: otd9qqMurfowwn_FTDYvrBwxtaM.crl (hash: cGaN2WLhgPkSr20CY6eZr3ZYqfa99QUavJS2ku/wcLM=)
                          2: 9965A5A606AE11EA96066744F8AEA228.roa (hash: wIbFP7nt0VapeRtyrT6a4GxS47/3LZ5/NRY7qSwEjUk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                          rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2675 (0xa73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A15D5AR, serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
        Validity
            Not Before: Oct 10 01:32:32 2026 GMT
            Not After : Oct 12 01:32:32 2026 GMT
        Subject: CN=6ac995b1-66df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b8:47:2a:83:b4:09:d2:4e:56:7e:44:4f:7d:
                    60:3b:16:d0:64:cb:4f:15:ee:09:3a:23:4f:7d:79:
                    2e:4f:9f:77:5c:98:25:b1:a6:d5:fb:5d:43:80:37:
                    cd:2a:aa:30:a5:36:58:11:2e:11:d8:44:37:66:7c:
                    86:36:44:25:13:46:b3:e7:53:d6:32:a4:9b:fb:77:
                    47:4c:de:0e:b5:2c:75:2e:d0:21:56:ee:00:bb:21:
                    d5:d7:5a:f1:8b:7b:cb:48:b0:92:1d:9e:4c:50:03:
                    6f:16:a4:e0:fe:9a:98:16:ff:06:af:21:84:09:4d:
                    93:72:f7:a2:d4:3b:cc:32:4b:d1:0a:49:16:25:2f:
                    0c:4d:3e:0d:57:3b:d8:86:be:65:60:d9:10:b5:8f:
                    ca:c2:78:2f:da:22:1d:12:53:73:5e:20:e3:06:da:
                    45:84:24:73:a8:24:86:ce:c0:c9:da:50:08:d8:d2:
                    60:bb:bd:89:86:39:97:33:1c:54:d5:2b:2c:a2:5f:
                    a2:f5:f3:ff:31:00:0f:ea:6f:2f:90:e3:82:49:31:
                    fa:4b:27:84:87:b1:d1:4b:d7:6e:02:01:56:7d:8f:
                    01:e2:72:d3:9e:e4:ed:fa:a6:14:ee:c2:20:9d:d8:
                    3f:70:f2:cc:a5:90:6e:0f:28:4e:a2:5b:f6:48:46:
                    ce:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:20:57:19:A7:38:70:A0:F4:E9:21:B6:3F:41:24:4F:1D:82:BE:F7
            X509v3 Authority Key Identifier:
                keyid:A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7e:96:4b:af:5b:cb:d0:78:09:93:1e:79:fe:eb:7e:2c:cc:
         6c:4c:5e:0b:19:54:56:d0:63:76:00:39:3b:f7:87:e2:50:45:
         50:8e:e0:c2:71:0e:9a:21:17:e7:9b:73:8f:a8:96:da:86:23:
         31:51:4e:82:98:21:09:fa:0d:26:65:8a:68:7e:71:d6:23:a4:
         00:e7:8e:1e:86:be:d5:b3:f3:00:21:1e:1c:40:07:51:62:bb:
         98:77:4b:87:86:bb:04:be:c0:5a:20:38:5b:d2:fa:f5:0c:c7:
         b0:0e:ff:32:8d:e8:b7:de:f9:87:2d:6b:bd:d4:c3:e5:90:95:
         1b:40:ca:32:7b:a3:fb:fd:d7:ba:2e:b3:48:f6:58:9a:3b:e3:
         fd:9c:9f:5d:5e:d9:86:4e:a9:fd:67:75:2c:97:6f:22:3f:ce:
         5e:a2:52:19:ef:20:e8:7b:d9:1f:bb:20:58:cd:4f:a3:14:cc:
         d4:fa:36:33:69:6a:5a:45:24:7e:4c:d2:29:5c:e1:6c:8c:3a:
         bd:d6:8a:d0:77:4b:f8:91:85:a1:fd:2d:27:f1:16:9e:3a:9f:
         bf:07:0e:40:9b:34:8d:ef:a6:0c:49:04:d9:20:3d:89:33:31:
         be:91:90:07:33:94:f5:60:c7:ab:c5:1b:a4:c7:76:25:ad:55:
         de:09:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:18:34 2026 by rpki-client