Error: rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
File:                     v62u3NVIMg_I8seYfA4imdy6Opw.mft (raw, json)
Hash identifier:          5t/TqoufRdNTC/IoudFjDgw2g3y6RM9PWGsx4IpLk6M=
Subject key identifier:   5F:ED:1A:FB:75:30:BC:A3:49:E7:CB:90:6F:A4:C8:FA:9B:FC:CA:EB
Authority key identifier: BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
Certificate issuer:       /CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Certificate serial:       0288
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
Manifest number:          0288
Signing time:             Wed 28 Oct 2026 04:43:51 +0000
Manifest this update:     Wed 28 Oct 2026 04:43:50 +0000
Manifest next update:     Fri 30 Oct 2026 04:43:50 +0000
Files and hashes:         1: v62u3NVIMg_I8seYfA4imdy6Opw.crl (hash: 3wr/b/XB1+DJihNaADxrq7hBPRYl50y9xrM2dekWhHc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 648 (0x288)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617770AF, serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
        Validity
            Not Before: Oct 28 04:43:50 2026 GMT
            Not After : Oct 30 04:43:50 2026 GMT
        Subject: CN=6ae17d87-15f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:7b:4d:eb:d1:23:e5:ba:e1:ca:fc:64:95:e1:
                    27:c3:e4:2b:e6:ea:c1:0f:08:a2:a2:b0:4c:df:b7:
                    ba:d0:0c:5a:d6:52:02:c1:85:89:f8:f4:51:40:b8:
                    74:eb:83:07:71:2f:bd:8f:50:d4:eb:d4:f5:c3:53:
                    71:6d:29:28:0c:1d:8b:c2:37:12:71:8d:5c:71:1c:
                    40:92:b7:5f:37:e7:5e:19:75:ab:67:05:52:fb:2b:
                    c0:a9:dd:2e:31:cb:b3:e7:51:f4:e1:f3:c4:ca:e8:
                    ea:4e:36:62:21:65:c6:d3:a7:b6:95:5f:7c:6f:87:
                    62:e3:14:48:2c:04:4d:16:dd:57:6f:88:ee:d4:ab:
                    d9:9f:cf:c2:09:16:33:ee:f1:47:3f:46:43:fa:04:
                    db:10:21:a2:03:ce:13:9b:99:21:7b:1c:05:4c:c0:
                    50:4b:3b:55:ba:e3:4e:7b:c6:f9:96:4f:29:47:1b:
                    49:55:b2:bd:4c:0f:5a:1f:8a:10:32:0d:4c:53:8a:
                    af:44:14:bc:b7:bb:c1:56:d0:c0:43:6c:9e:bc:d7:
                    22:33:db:b5:ce:ad:71:26:78:1c:22:10:4e:fb:e8:
                    1a:3e:fb:ce:b0:fe:a5:07:f9:85:88:59:84:b9:46:
                    0e:9f:5a:45:8f:02:be:3b:7b:aa:85:97:7a:2e:b0:
                    f7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:ED:1A:FB:75:30:BC:A3:49:E7:CB:90:6F:A4:C8:FA:9B:FC:CA:EB
            X509v3 Authority Key Identifier:
                keyid:BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:cd:be:d7:c6:08:c9:74:ca:f4:57:cd:bb:15:29:0a:1f:6c:
         58:d9:ca:1a:10:c7:46:b0:97:fa:39:81:22:64:d0:a1:e3:7a:
         41:1c:83:dc:ed:c0:6b:70:1f:61:ed:c0:db:c5:f9:c2:a6:8d:
         05:46:d7:c7:ad:0a:9f:d2:1d:85:26:46:fc:bb:e3:39:35:b6:
         5b:f2:59:d8:ec:18:81:7e:d2:92:2f:62:13:52:b0:92:2a:34:
         06:23:20:15:6e:77:1e:d2:32:54:90:b6:23:81:d7:9c:f9:a1:
         52:7b:58:3e:81:a4:f1:f1:a3:37:2c:82:22:08:46:ec:35:ec:
         7a:bd:6b:28:bb:bf:02:54:4f:66:56:cf:bb:53:bf:56:d8:8a:
         db:b9:5a:12:08:25:9f:7a:e4:ff:b3:d1:12:31:0e:37:7f:85:
         d9:68:1d:e1:a9:74:2e:da:d1:c0:96:d2:62:5c:55:28:79:5e:
         35:b7:11:bc:f7:19:25:74:d9:29:76:d9:35:fb:63:9f:59:cf:
         cc:4f:0a:0e:c1:e0:bb:9d:d7:c0:c4:14:47:74:12:46:35:09:
         f3:cb:ba:10:b9:a6:e8:f7:e5:15:7b:e6:4f:27:77:f2:8a:a1:
         31:54:21:98:72:44:b1:bb:25:9b:24:67:0d:3b:70:0e:2a:cb:
         7a:d7:7f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 08:00:57 2026 by rpki-client