Error: rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File:                     imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier:          PGuGaP4ecbW/hhsq6ur7BYzNfm/qFn4f9obVbojKYD0=
Subject key identifier:   DB:09:FD:C8:D6:7B:E6:34:45:9C:C9:D9:57:3E:CD:55:DF:ED:09:CF
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer:       /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial:       1013
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number:          1013
Signing time:             Sat 03 Oct 2026 00:57:29 +0000
Manifest this update:     Sat 03 Oct 2026 00:57:28 +0000
Manifest next update:     Mon 05 Oct 2026 00:57:28 +0000
Files and hashes:         1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: 89R4yci2UdPhgqepoONVwF41p3rszOsgdFuHAR7z8Ks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4115 (0x1013)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAF37AF, serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
        Validity
            Not Before: Oct  3 00:57:28 2026 GMT
            Not After : Oct  5 00:57:28 2026 GMT
        Subject: CN=6ac052f9-4fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:cd:78:46:b6:48:8a:e8:c7:2f:99:aa:1e:8a:
                    04:aa:d8:2b:32:c0:d4:cc:64:42:4a:3d:27:dc:28:
                    51:19:52:8d:8b:6e:d1:ac:f6:ce:11:f4:e6:d2:65:
                    01:b9:09:93:d4:7b:51:07:a7:a1:10:2c:91:fe:cb:
                    19:e5:27:8d:e7:39:4b:ab:76:37:ab:60:ea:39:50:
                    07:e0:d6:c5:c2:af:27:c9:9a:11:f0:10:6e:9d:f4:
                    0c:b6:5a:e4:45:54:65:b3:a5:35:6d:3b:86:14:41:
                    08:47:f0:44:4f:2f:bd:e7:d8:3f:14:01:e1:c3:e8:
                    27:1c:4c:46:6e:41:99:74:9b:86:ad:fe:e1:9c:15:
                    54:89:3f:d4:61:83:2d:4e:d5:4d:a2:44:89:10:76:
                    7e:51:d1:03:93:45:ef:ba:90:61:70:b7:33:1b:15:
                    df:dd:f8:c0:da:68:21:42:61:49:55:04:a2:17:94:
                    41:e8:28:c7:02:04:0c:81:fd:79:78:f2:7d:22:d1:
                    5c:f8:4e:b9:7c:0d:88:68:b0:8c:f8:b5:b3:53:e4:
                    ae:eb:6b:19:97:c4:21:05:38:27:62:59:ab:a8:25:
                    82:1a:15:af:65:86:08:eb:da:af:5c:a9:54:6c:07:
                    07:a8:1d:56:5c:58:c3:b5:a4:23:0e:2e:95:37:ec:
                    03:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:09:FD:C8:D6:7B:E6:34:45:9C:C9:D9:57:3E:CD:55:DF:ED:09:CF
            X509v3 Authority Key Identifier:
                keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:fe:cd:b4:41:47:c6:ce:c5:0f:3e:aa:ae:e4:65:45:6b:9b:
         32:db:68:8d:1d:a6:56:25:30:e0:e7:21:d4:9a:37:7c:50:eb:
         5e:24:9c:48:35:96:6a:2c:19:a7:ae:82:06:04:47:3b:b9:f6:
         e7:42:8b:f8:d2:7a:9a:7b:4c:54:07:9c:43:c3:bd:88:4e:50:
         81:56:e3:89:08:f7:bd:2d:29:cf:44:ff:99:f3:22:e1:73:95:
         57:aa:3f:7d:07:4d:b3:d1:c4:71:88:9b:20:83:90:7b:89:25:
         a8:f7:f4:da:38:59:77:67:ed:f2:05:d5:e4:b1:34:1d:bd:c6:
         6e:36:d5:1f:52:f7:dc:8b:a8:26:54:c9:c8:a2:73:77:dd:df:
         7e:b3:6f:bd:2b:28:f3:dd:50:d2:c5:37:dc:8a:2e:18:30:78:
         5c:4a:73:a4:7a:6e:14:16:28:41:9c:cb:db:52:25:23:29:47:
         97:e6:a1:8e:4e:9e:d0:bc:eb:bc:dc:21:c4:de:69:d8:ea:4a:
         c4:30:43:1d:08:8d:d5:09:4d:a6:a9:50:c4:3a:ed:63:69:4f:
         fa:63:89:8c:2d:4f:df:c5:7b:06:80:30:2c:4a:3c:3a:54:b4:
         69:bd:80:d4:aa:66:87:97:75:8e:74:c1:8b:2e:60:73:5c:2d:
         9b:13:36:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:29:03 2026 by rpki-client