Error: rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
File:                     00oZ5jEGlkvQLLLYrRgH35prGQE.mft (raw, json)
Hash identifier:          syLYQ2ImPOWGKV3smvYvd+8Zo6SQua2VU2PA/afPFwU=
Subject key identifier:   02:73:4A:7D:05:77:08:2C:DD:A3:BF:9D:89:DA:50:4A:4E:9B:5B:FB
Authority key identifier: D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01
Certificate issuer:       /CN=F36D987FRI/serialNumber=D34A19E63106964BD02CB2D8AD1807DF9A6B1901
Certificate serial:       59
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
Manifest number:          57
Signing time:             Sun 11 Oct 2026 05:46:46 +0000
Manifest this update:     Sun 11 Oct 2026 05:46:46 +0000
Manifest next update:     Tue 13 Oct 2026 05:46:46 +0000
Files and hashes:         1: 00oZ5jEGlkvQLLLYrRgH35prGQE.crl (hash: Ayffgu02aJMSmY2902nuap5uYBggslewq1g08q5zM18=)
                          2: 2D3A58E2844A11F191A58113CF1D38B0.roa (hash: B/vvT2Jfc++6xpCJZfkdlYiPhk3yse5YiJZ7AjLkKmk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
                          rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FRI, serialNumber=D34A19E63106964BD02CB2D8AD1807DF9A6B1901
        Validity
            Not Before: Oct 11 05:46:46 2026 GMT
            Not After : Oct 13 05:46:46 2026 GMT
        Subject: CN=6acb22c6-6734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c1:14:bd:15:ed:27:b2:4f:f9:85:c6:b7:07:
                    59:3a:79:5d:0f:cc:1d:19:89:83:55:17:a0:c0:85:
                    7a:ba:4a:03:3e:6c:0f:ed:04:a2:5a:fc:c7:56:ef:
                    a3:7c:8b:92:ee:df:78:75:7a:e0:bf:d8:ca:d8:88:
                    9d:c5:b5:02:cc:e5:ea:67:1c:b4:cd:fc:54:6a:97:
                    a6:ba:c0:4c:bc:2d:35:52:12:3b:29:bc:6b:0b:df:
                    32:4f:d5:bb:e7:b1:bd:f9:6f:e5:3b:fd:95:a1:74:
                    40:49:a4:3c:56:12:90:da:dd:5d:a6:2f:dc:8f:2a:
                    31:e7:7a:03:c0:b1:2e:43:a3:18:f8:05:6d:31:3a:
                    08:47:19:4f:0c:03:db:68:d6:02:de:2e:b5:54:4b:
                    39:8d:a9:e5:16:ca:cc:2a:83:db:67:13:65:91:37:
                    0d:bd:ec:24:8b:7d:30:6a:ab:fe:77:17:d4:2b:18:
                    ca:61:aa:d4:aa:c3:af:66:91:5e:9c:80:8e:82:5d:
                    3e:f9:b0:b5:c3:6e:b7:16:f0:12:ea:dd:51:cc:ce:
                    cd:13:d1:4f:e5:33:ad:ae:9b:02:ff:e2:72:db:e5:
                    b8:63:2f:1d:00:75:32:1e:75:d1:a2:7c:03:3b:2b:
                    b7:e4:b4:bb:e1:7b:78:7d:00:47:3e:80:80:33:67:
                    80:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:73:4A:7D:05:77:08:2C:DD:A3:BF:9D:89:DA:50:4A:4E:9B:5B:FB
            X509v3 Authority Key Identifier:
                keyid:D3:4A:19:E6:31:06:96:4B:D0:2C:B2:D8:AD:18:07:DF:9A:6B:19:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/00oZ5jEGlkvQLLLYrRgH35prGQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/134C6996844211F1A57466E5CE1D38B0/00oZ5jEGlkvQLLLYrRgH35prGQE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a5:3c:6e:51:2f:21:b7:4b:de:a7:71:16:39:65:3d:2b:52:
         bd:27:c9:2f:08:5d:a1:83:c2:7f:6e:8c:19:87:b3:ae:ca:c5:
         6a:73:36:cd:e4:8e:b2:af:ea:a2:4c:fe:ce:69:0c:94:4b:ca:
         bc:b1:2e:b5:5a:60:f7:ba:ca:ed:79:8e:bf:55:56:29:80:a1:
         fd:5d:81:b3:51:75:26:29:e7:f1:68:e4:0a:80:72:72:bf:32:
         a1:e9:c7:f2:60:0f:5d:fa:ce:4c:a8:2e:8b:cb:0e:32:9f:7f:
         b3:18:6d:62:d0:23:87:58:dd:e7:fd:75:a8:a5:e2:8f:63:6e:
         4e:2a:38:0b:ba:40:c1:3f:f5:02:9e:39:b9:63:b4:89:0a:ad:
         60:c2:8a:6b:c3:32:9f:49:de:9d:92:1b:f7:11:fa:b8:44:ad:
         f3:25:54:10:80:ca:66:a4:de:63:42:8f:3d:14:1b:23:87:43:
         68:84:d7:94:d6:7a:7e:06:2a:f3:99:68:04:40:1d:06:b0:73:
         5d:61:36:aa:8e:23:29:94:79:d3:9d:01:b6:6e:7a:59:8a:fc:
         60:53:af:ef:98:43:3a:7e:76:d2:58:79:17:cb:6c:ed:87:0e:
         8f:26:ba:40:b2:14:51:98:7b:f8:fb:d0:50:05:f8:b2:53:ad:
         3d:39:53:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:40:10 2026 by rpki-client