Error: rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
File:                     -fFqivVlH4qYTwMxRWULP55dioY.mft (raw, json)
Hash identifier:          368AvhmoCkgX8FkH2jSitYtILjZgwSKTzj9CIBrBjXU=
Subject key identifier:   3D:F1:40:CE:74:2F:3F:02:B3:DA:D2:1E:D8:2A:60:1C:FD:93:84:BD
Authority key identifier: F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86
Certificate issuer:       /CN=F36EC460AF/serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
Certificate serial:       06CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
Manifest number:          06CA
Signing time:             Thu 24 Sep 2026 02:37:33 +0000
Manifest this update:     Thu 24 Sep 2026 02:37:32 +0000
Manifest next update:     Sat 26 Sep 2026 02:37:32 +0000
Files and hashes:         1: -fFqivVlH4qYTwMxRWULP55dioY.crl (hash: 4osuQTivZ+joJ5vSrU3A2aodGyIO69BMtEz3jv6qS0Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC460AF, serialNumber=F9F16A8AF5651F8A984F033145650B3F9E5D8A86
        Validity
            Not Before: Sep 24 02:37:32 2026 GMT
            Not After : Sep 26 02:37:32 2026 GMT
        Subject: CN=6ab48ced-e0aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:af:d4:e9:b2:51:e2:7e:26:29:4c:05:93:7d:
                    28:38:35:0e:61:55:9d:a8:6f:07:3f:84:66:01:4f:
                    4f:b1:5c:7d:2c:d8:88:a0:42:27:5c:6d:45:e8:7f:
                    8d:de:79:fc:bc:16:a4:90:a6:5c:a8:09:b3:85:87:
                    d1:55:6c:f4:f6:a8:18:41:17:63:40:ef:89:b6:39:
                    5b:49:d8:d4:ea:07:2a:19:36:14:b2:c4:70:81:14:
                    f5:94:08:c9:48:4b:97:5b:38:1c:0c:ce:a6:b5:07:
                    07:eb:8f:e6:20:3c:ae:c8:06:b6:aa:48:08:90:be:
                    f8:c5:68:ff:45:92:0b:71:b0:d6:3c:79:9b:0d:9c:
                    c7:7e:89:be:45:63:0d:d8:32:d3:f4:22:a9:62:3d:
                    78:af:d5:2a:b7:97:52:88:59:ae:f2:52:13:26:0b:
                    0b:07:f1:f4:64:34:a4:b7:7b:24:5b:70:d9:16:60:
                    88:f2:ad:98:fa:03:78:46:22:63:c1:9f:99:29:86:
                    02:4b:41:04:e4:a6:d0:bb:b2:f9:04:c5:66:a8:5a:
                    52:af:e0:75:a5:7b:05:80:41:be:20:a1:f9:52:6c:
                    75:94:37:c9:65:90:73:63:ab:2e:8c:c7:2a:2d:d7:
                    5e:5c:44:d5:47:95:96:f3:9b:b0:b0:90:44:ce:ca:
                    8e:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F1:40:CE:74:2F:3F:02:B3:DA:D2:1E:D8:2A:60:1C:FD:93:84:BD
            X509v3 Authority Key Identifier:
                keyid:F9:F1:6A:8A:F5:65:1F:8A:98:4F:03:31:45:65:0B:3F:9E:5D:8A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-fFqivVlH4qYTwMxRWULP55dioY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/ACEC2D22898111EC95D350B45A40D577/-fFqivVlH4qYTwMxRWULP55dioY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:17:a4:19:d3:45:04:4e:1d:ed:17:c9:54:49:d2:60:c8:19:
         e8:fc:45:a5:fc:a1:e8:c3:46:2c:fc:a8:b9:71:90:51:76:61:
         6f:5c:ad:26:63:7a:94:c3:f1:d0:d0:b1:c3:dd:ca:cf:79:69:
         23:4d:fe:03:22:bc:21:87:8c:b5:b0:bc:d4:ee:a1:f5:38:40:
         63:d6:4a:e3:f7:36:d6:d7:98:8e:d5:28:98:7c:93:2b:45:7e:
         a7:37:fd:a9:28:c6:02:04:fe:99:72:22:e5:d1:0e:8e:e5:c1:
         18:3b:6c:04:b2:7c:81:5a:a9:31:2b:f8:30:96:26:64:9f:e5:
         92:84:fe:4a:0d:50:a9:b1:b0:b0:f5:46:14:17:e0:46:b1:43:
         d1:fe:d2:dc:74:56:72:f1:7e:af:b3:7f:8d:21:f4:67:6a:dd:
         bc:ed:ae:04:24:6e:09:35:87:08:25:3a:ea:59:3f:9b:21:d7:
         16:74:e1:be:d1:54:c4:90:9f:9e:cc:f6:40:f7:0a:9a:cd:c0:
         14:d8:a2:ba:78:91:9c:47:e2:37:81:db:ee:1a:eb:d0:47:cd:
         4d:98:28:f2:ed:1d:82:25:b4:0d:c5:12:85:5e:5e:49:7a:e8:
         67:5a:3c:61:c1:be:bd:83:bb:c5:51:9e:a0:ba:de:42:03:ed:
         fc:3a:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:31:19 2026 by rpki-client