Error: rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
File:                     wuvMmPPo4ykKmvMvnqjYKsevH8o.mft (raw, json)
Hash identifier:          yjMgB+ypibSNUS0McP9e5gP8aYZe6W/NmDTYvghoM8k=
Subject key identifier:   22:18:EC:FD:0D:E0:30:FD:34:95:7D:D9:79:9E:35:0A:4A:AB:07:BF
Authority key identifier: C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA
Certificate issuer:       /CN=F36B6125AF/serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
Certificate serial:       07F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
Manifest number:          07F1
Signing time:             Mon 28 Sep 2026 02:08:30 +0000
Manifest this update:     Mon 28 Sep 2026 02:08:29 +0000
Manifest next update:     Wed 30 Sep 2026 02:08:29 +0000
Files and hashes:         1: wuvMmPPo4ykKmvMvnqjYKsevH8o.crl (hash: 0bT+hl7jy4ZBDvPRoEzxIy0LUWUtwTVOFf/8CyBhJp4=)
                          2: F69DD73A584D11EE90022E504AD9E6FC.roa (hash: r1fopG+YFRoatujRKCNwNwwxGTBHvRCVHWK9xRpijbk=)
                          3: 7F4B6F3A584D11EEA686024F4AD9E6FC.roa (hash: gBNHhgUjU4LCVHRXmohrMyDf+FfyKvFmbeum44PBlv0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041 (0x7f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B6125AF, serialNumber=C2EBCC98F3E8E3290A9AF32F9EA8D82AC7AF1FCA
        Validity
            Not Before: Sep 28 02:08:29 2026 GMT
            Not After : Sep 30 02:08:29 2026 GMT
        Subject: CN=6ab9cc1e-22af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b4:f0:cb:27:a2:ca:62:99:12:70:18:11:af:
                    ef:20:93:d5:a5:db:d5:07:8d:dd:5c:2e:6f:9a:f6:
                    89:c6:0c:2a:ea:6a:b2:d1:e0:07:50:c7:e4:71:a0:
                    11:cf:7f:65:76:13:20:67:3a:5b:63:a7:aa:a7:82:
                    9c:fc:ee:6e:ba:c4:37:2a:a0:b3:f7:d4:45:d7:39:
                    fa:f3:e6:c1:6c:16:0e:9b:8c:f4:95:dc:f1:e8:0a:
                    4a:9c:2e:10:04:d1:4f:69:bf:7f:4c:2b:37:00:ad:
                    0d:bb:33:ab:c5:a6:83:4c:33:92:80:6c:c8:7a:61:
                    49:d9:2c:9a:82:ec:ee:77:80:44:e1:f9:4c:9c:35:
                    30:f2:a9:76:00:36:d2:24:57:b2:7a:76:39:33:46:
                    13:a6:a6:7e:68:75:69:cf:dd:fb:d9:24:ec:e3:34:
                    9d:43:ad:08:e1:c9:5d:a1:89:c4:30:e8:e1:3f:ba:
                    a7:fc:ce:65:77:23:b2:94:8f:a3:5e:4b:ce:96:5e:
                    7a:f8:49:5d:cb:9f:f4:c0:6f:b2:37:82:e0:c4:3f:
                    e7:b2:50:4d:e2:a7:05:56:fc:06:a8:b4:4b:44:da:
                    e5:29:44:00:30:e7:1c:a5:7f:ce:69:35:36:80:39:
                    27:7e:61:35:04:4b:c9:6b:84:52:1d:e3:ae:e5:43:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:18:EC:FD:0D:E0:30:FD:34:95:7D:D9:79:9E:35:0A:4A:AB:07:BF
            X509v3 Authority Key Identifier:
                keyid:C2:EB:CC:98:F3:E8:E3:29:0A:9A:F3:2F:9E:A8:D8:2A:C7:AF:1F:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuvMmPPo4ykKmvMvnqjYKsevH8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6125/644C95C4B42111EB9E897D5FF8AEA228/wuvMmPPo4ykKmvMvnqjYKsevH8o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:03:08:d7:57:d0:60:f6:4d:03:2d:8b:d3:97:27:6f:0e:f5:
         c5:12:a5:e8:8e:f8:05:05:40:6f:be:7d:8b:75:5c:47:9b:e2:
         20:38:1e:2f:38:01:15:f9:70:de:1b:e6:d2:d0:54:68:45:71:
         b4:39:4b:7e:0e:55:f2:e9:7b:dd:32:56:dd:15:95:9a:05:77:
         77:6b:92:24:00:8a:fe:7a:79:cc:91:31:a4:3b:50:07:18:2f:
         ca:ab:e1:b8:b2:61:09:f5:5b:3f:b1:3b:11:dd:e0:34:14:4a:
         d0:fd:34:55:fd:b5:7f:de:fe:4d:a6:0d:64:01:b2:3e:ad:38:
         a8:db:15:2e:d6:22:9b:37:b4:f6:65:94:45:ef:f7:17:ce:c1:
         8b:fd:9e:16:5b:15:7a:cb:f9:79:59:72:7b:07:e0:8a:3b:b6:
         89:aa:87:97:0b:f3:a1:b7:4d:f3:1b:5c:ae:d7:a8:05:f8:96:
         1d:4f:f7:e6:2d:b3:15:98:35:07:ad:86:80:44:64:70:c1:37:
         c9:4b:20:eb:b2:1c:78:3a:b2:f8:08:fe:68:88:60:76:40:d3:
         51:ca:df:b3:96:06:9a:21:71:09:62:18:0e:48:12:0d:15:95:
         de:e6:eb:43:06:bb:64:8f:51:89:4a:f4:76:9b:cc:ff:1d:a3:
         ce:04:f7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:03:03 2026 by rpki-client