Error: rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
File:                     VacCz2rVFBmN-x1soZywXkltX2U.mft (raw, json)
Hash identifier:          aIYtaBC7JKmukw8T0OwXROq15u+L3KorrtGKf2QCA6s=
Subject key identifier:   DF:BC:27:74:CF:C6:40:91:A9:34:34:5D:C7:DD:5E:D6:50:59:D4:EA
Authority key identifier: 55:A7:02:CF:6A:D5:14:19:8D:FB:1D:6C:A1:9C:B0:5E:49:6D:5F:65
Certificate issuer:       /CN=F368BC41AR/serialNumber=55A702CF6AD514198DFB1D6CA19CB05E496D5F65
Certificate serial:       0370
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
Manifest number:          0370
Signing time:             Mon 02 Nov 2026 04:15:13 +0000
Manifest this update:     Mon 02 Nov 2026 04:15:13 +0000
Manifest next update:     Wed 04 Nov 2026 04:15:13 +0000
Files and hashes:         1: VacCz2rVFBmN-x1soZywXkltX2U.crl (hash: yYEZqyc08hF1gglsLKwwbZ7MtOyU7UF5uWxPT6gbbO8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
                          rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BC41AR, serialNumber=55A702CF6AD514198DFB1D6CA19CB05E496D5F65
        Validity
            Not Before: Nov  2 04:15:13 2026 GMT
            Not After : Nov  4 04:15:13 2026 GMT
        Subject: CN=6ae80e51-4b9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b1:1f:3b:6b:0d:c1:22:f0:c6:0a:88:e3:a7:
                    54:05:b4:fe:d2:c9:38:b2:4b:4d:2e:f8:aa:49:89:
                    a8:70:6a:38:9a:5e:2f:26:c9:95:60:2d:6f:96:4a:
                    a7:a3:c1:47:8b:5f:48:98:7f:ec:50:fc:ab:f3:3b:
                    bb:6a:3b:95:c4:a6:3e:6f:06:20:8d:8f:ca:9a:cf:
                    01:85:16:0e:90:ba:ed:d2:c7:34:3a:74:d1:ff:16:
                    06:98:dd:4e:c5:fb:a4:6c:d6:fd:ce:d5:18:b7:16:
                    68:da:fe:fb:6a:6a:ce:a1:df:f8:90:df:77:ba:cf:
                    b0:57:0c:23:e6:ed:36:3c:c6:48:ab:ea:8d:17:6d:
                    0c:d5:0a:0f:02:4a:b8:48:e7:9d:8b:83:d7:5a:f6:
                    b1:3f:1d:82:fb:a7:ac:6f:8f:91:30:4c:1c:e3:48:
                    79:8a:58:39:54:c1:db:6a:b4:ec:71:27:7c:59:df:
                    4a:1b:39:00:5a:37:c0:02:fa:3a:f8:5c:d6:91:80:
                    b8:ac:f4:f0:40:ff:c5:0d:76:77:f2:b2:5c:ac:ac:
                    44:92:82:0c:b5:e8:4b:f0:f3:68:c2:11:d2:8f:ea:
                    3a:02:b2:f3:ad:ad:32:a6:a6:c0:19:e6:17:fa:6e:
                    00:5c:c9:86:4a:c7:7d:43:71:a0:72:c3:de:95:fa:
                    a9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BC:27:74:CF:C6:40:91:A9:34:34:5D:C7:DD:5E:D6:50:59:D4:EA
            X509v3 Authority Key Identifier:
                keyid:55:A7:02:CF:6A:D5:14:19:8D:FB:1D:6C:A1:9C:B0:5E:49:6D:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:5f:6b:c2:1f:0a:a4:83:0e:32:20:61:2a:8a:9a:fc:84:d7:
         12:97:a4:09:41:9d:45:7f:97:d7:ef:58:27:b6:64:26:a9:83:
         27:49:e3:c0:2f:9e:24:60:b5:7f:99:50:82:83:fc:e9:23:ad:
         e5:54:10:43:81:30:f5:4f:a7:f8:9f:20:5a:2f:4f:4b:47:ce:
         f7:63:e2:d6:d7:8a:e1:f4:1f:ce:98:d4:2a:a2:73:4a:94:30:
         fa:6d:01:ff:14:28:fd:c2:0d:15:53:38:54:67:30:a1:07:05:
         3b:a8:fc:e5:10:42:9c:e9:ac:b2:d9:3b:85:f6:e5:f2:0e:72:
         fd:a7:4a:2f:08:88:97:3d:79:0b:32:ef:1e:3b:72:3e:f3:2f:
         7f:f5:53:f5:d6:51:08:df:4c:7b:d8:13:28:e1:54:15:b3:c8:
         d8:bd:a2:33:da:aa:10:89:e1:4d:af:20:72:71:ce:37:7a:16:
         2e:a6:03:4f:9d:9d:33:fb:8e:9c:65:3b:49:53:a3:ce:ef:0e:
         ef:1e:7b:d8:1b:88:48:a4:4e:ff:5f:03:ae:23:45:4c:3d:bd:
         48:03:02:6a:74:97:74:4d:90:f6:4b:a4:73:ca:78:41:6d:f6:
         bc:44:9a:ef:b0:fd:07:e8:ea:8c:19:1c:c0:b1:1b:06:5d:20:
         39:f0:4a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:14:49 2026 by rpki-client