Error: rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
File:                     6J7-NR5gJSomJW2N7o9p53JMrVo.mft (raw, json)
Hash identifier:          DkmkOj2JQjPxyY11r+iHFMNW0Q4GGAl6kgaUpnUJmBo=
Subject key identifier:   6D:5D:48:F5:B4:63:6D:30:DC:4E:48:9D:17:AC:9B:4E:64:E4:BA:E3
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Certificate issuer:       /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial:       05A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
Manifest number:          0599
Signing time:             Sun 25 Oct 2026 03:11:46 +0000
Manifest this update:     Sun 25 Oct 2026 03:11:45 +0000
Manifest next update:     Tue 27 Oct 2026 03:11:45 +0000
Files and hashes:         1: 6J7-NR5gJSomJW2N7o9p53JMrVo.crl (hash: SL56FB3vvc9NakL2MjDOGK+hpyrt4LUCglYSjO68eyA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1447 (0x5a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FF0AF, serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
        Validity
            Not Before: Oct 25 03:11:45 2026 GMT
            Not After : Oct 27 03:11:45 2026 GMT
        Subject: CN=6add7372-ccf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:de:bf:ce:f2:c5:ed:2f:ce:53:45:94:73:70:
                    ae:89:7a:9b:f4:7e:3f:53:30:e3:cf:47:d5:11:99:
                    6e:2e:66:ad:64:16:8f:ee:72:95:19:48:a3:6f:e2:
                    30:49:23:2c:24:0a:27:99:38:f4:a1:13:fa:cf:29:
                    2b:c8:59:75:3d:e5:23:9b:58:b1:59:2b:99:ae:70:
                    da:18:b6:ca:0e:d7:08:b9:7a:15:51:9f:c6:cb:63:
                    51:f4:ea:bb:26:d7:ca:91:ae:98:17:da:bb:d7:cf:
                    f3:e1:fa:74:86:61:cf:03:89:07:09:f7:38:ed:72:
                    0e:65:68:54:1a:ac:9a:21:cd:01:dc:7a:f0:f7:6b:
                    ff:05:04:55:76:32:57:20:64:a4:16:83:1b:ef:c8:
                    7c:66:14:e4:3a:63:a9:4f:38:06:41:d1:e1:01:7d:
                    dc:aa:9a:00:57:f9:f1:a2:bf:9d:9d:13:ae:a9:99:
                    de:13:17:22:6c:e4:88:78:0a:51:53:6b:f0:f3:f2:
                    24:c8:9d:5d:20:39:1b:d8:0d:93:01:8b:4c:be:b8:
                    ae:02:ff:18:4d:b8:92:c6:67:cb:b6:5e:9b:21:c5:
                    24:a6:1f:8a:ca:0b:57:38:a4:99:8a:90:de:9c:8c:
                    d0:b3:0f:59:b5:55:27:0d:40:c4:22:47:ab:8c:c4:
                    f5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5D:48:F5:B4:63:6D:30:DC:4E:48:9D:17:AC:9B:4E:64:E4:BA:E3
            X509v3 Authority Key Identifier:
                keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:bf:11:55:16:97:70:ae:2c:ae:5e:52:90:68:93:57:90:
         85:d8:37:e1:ba:0d:42:89:41:b5:79:9e:0a:d1:0f:73:4c:89:
         6f:16:b5:e0:3f:a0:4b:5b:8e:9e:0e:69:0f:e2:fe:65:5a:17:
         8c:d1:b9:bf:81:57:9e:2f:19:22:ff:b4:6f:2d:cc:95:a3:f5:
         e0:e0:dc:0a:d9:21:49:86:cf:85:5e:be:56:72:54:f9:ef:15:
         4c:d8:b6:1c:88:bd:99:b8:8d:21:06:58:59:78:f9:87:fd:53:
         37:28:64:2e:f2:bf:d7:57:c3:b9:c9:a6:af:ff:73:f3:7c:81:
         1a:ed:45:ff:f6:cb:d0:d4:e7:2a:a9:07:be:2f:d2:bb:ff:d0:
         e8:69:0e:b1:95:06:8f:13:e3:bb:a2:1c:c5:9f:22:34:14:9d:
         1b:b0:2f:ac:7a:55:f3:3e:42:c3:e2:1e:db:5f:c7:c6:70:37:
         39:70:b9:e5:a4:84:5a:4a:9c:44:ad:bd:e6:c6:fc:27:f3:4c:
         3a:94:60:86:0f:16:26:d4:05:79:77:e1:21:37:64:59:1d:6f:
         2c:14:b2:d3:ae:14:37:29:12:e3:81:fd:f6:ed:18:96:13:ba:
         dc:61:d5:ba:13:63:a0:33:c6:82:90:93:00:7a:78:32:5d:b5:
         63:35:99:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:10:55 2026 by rpki-client