Error: rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
File:                     _wMoIAB4rDbwLXEB0DS3vll-oVg.mft (raw, json)
Hash identifier:          jhJQyLlHqc9C/j+jcYQiDFHfZoF0vEy7pC1XkQBqyPE=
Subject key identifier:   47:06:56:F1:8E:70:F1:C8:87:F3:5B:15:E4:46:B7:E5:96:DD:8B:FB
Authority key identifier: FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
Certificate issuer:       /CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Certificate serial:       056D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
Manifest number:          0569
Signing time:             Sun 15 Nov 2026 03:17:02 +0000
Manifest this update:     Sun 15 Nov 2026 03:17:01 +0000
Manifest next update:     Tue 17 Nov 2026 03:17:01 +0000
Files and hashes:         1: _wMoIAB4rDbwLXEB0DS3vll-oVg.crl (hash: JchMlEuuq7PO+LnCYYW/tXoEfyy4igIYMU6JyoxJDqw=)
                          2: D025818C847A11F1B5502AB7CE1D38B0.roa (hash: s3DKvzZqZ1yrsDDeKf3A4fFbQn6aVQ+8rQd1FiSdSzk=)
                          3: 5C84A38E847A11F19D393BB3CE1D38B0.roa (hash: AHaUFDbGD5NxejHMZa7exucr+iFPx6p3m8Tht7NKBYE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC712AF, serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
        Validity
            Not Before: Nov 15 03:17:01 2026 GMT
            Not After : Nov 17 03:17:01 2026 GMT
        Subject: CN=6af9242e-355d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4e:a0:9c:96:6b:76:81:75:ad:b3:e1:98:81:
                    92:d2:1f:3b:d5:e9:14:f6:64:e0:38:5e:dc:d1:63:
                    66:88:9d:0d:bc:e0:ce:5e:d9:72:ed:30:e7:20:8a:
                    1c:7c:d0:cb:16:e3:23:52:b0:9d:79:19:ef:da:47:
                    f3:f4:17:ac:2b:e5:86:8e:0a:1f:bf:51:80:3c:ad:
                    40:28:bc:6e:89:e0:34:36:bf:4c:26:8d:7a:eb:e2:
                    61:19:3c:e9:2e:c2:7b:a3:45:d1:9f:cc:2a:d3:59:
                    1e:ee:d6:5d:b2:f5:c5:d0:29:da:fe:af:6c:48:80:
                    b0:33:b8:7e:5a:20:48:63:c9:1a:42:f2:64:5f:d7:
                    65:5d:e5:22:f1:f6:5d:88:f9:50:fa:ec:86:05:5f:
                    46:6b:71:bb:27:59:e4:bb:32:d5:d6:2c:37:01:c0:
                    9a:1b:6c:de:8e:5e:75:13:92:6b:3e:f2:9d:c7:bd:
                    68:29:86:8c:93:4c:a1:10:23:3a:38:4f:a1:0c:c5:
                    74:21:34:79:5a:30:38:d5:52:3a:80:4f:74:8c:62:
                    8e:5e:ba:23:91:89:1b:cf:a7:9d:22:f5:8f:a5:b7:
                    a4:81:8a:ec:05:0a:7c:1c:66:4d:e0:be:7b:14:fb:
                    ab:fc:00:55:86:97:f5:ca:dc:b3:d5:0c:20:df:92:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:06:56:F1:8E:70:F1:C8:87:F3:5B:15:E4:46:B7:E5:96:DD:8B:FB
            X509v3 Authority Key Identifier:
                keyid:FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:68:5c:4d:8d:2b:a4:61:3a:98:64:d8:b3:a5:f2:82:e2:
         38:bf:bb:ee:3c:c4:19:6e:39:4e:08:bd:57:61:28:28:ea:26:
         4a:83:cc:55:9c:c5:9d:d4:b7:55:ee:71:b6:05:ce:40:5e:56:
         b5:dd:92:de:ea:db:6f:08:c7:8b:77:9e:d4:67:ae:b9:1d:93:
         b4:a5:91:18:2f:ba:68:37:52:33:23:99:70:d0:65:21:03:f8:
         a9:09:39:6e:f0:b0:4d:36:86:33:ee:7e:14:6b:b9:30:e8:18:
         4b:ec:53:d6:4a:84:40:38:5e:cf:13:33:da:f0:67:7e:c6:9a:
         29:5e:43:63:19:c0:c0:b5:9f:3c:56:77:7d:55:96:21:d1:fb:
         dd:96:38:6e:4d:3b:5c:fe:3d:09:26:50:f4:46:4e:14:69:a1:
         8e:36:1e:cc:52:60:af:8b:1f:88:cc:6a:c2:46:39:8c:01:5f:
         fc:01:d3:90:90:8f:4d:50:d9:c9:d3:b2:41:49:a6:af:81:ea:
         0b:07:75:b3:33:21:6c:23:e3:11:ea:ba:b9:52:90:97:2a:65:
         0f:f7:23:38:62:1b:ce:7f:b6:80:c4:f1:29:ed:87:06:9d:d2:
         1f:9e:c3:6d:a0:88:ca:bc:82:3b:c5:26:11:c7:e6:04:bf:71:
         29:13:84:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:07:21 2026 by rpki-client