Error: rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
File:                     LnFCh3b4tjGvSw1suVUM0cqUVlU.mft (raw, json)
Hash identifier:          wL1GxXBy9Ll5tU5cgYb2KsTU6LkypaJQwYkQzbKaS3o=
Subject key identifier:   54:1F:E5:0C:F0:AE:2C:20:34:DD:35:46:B3:06:C8:72:0A:F2:17:EA
Authority key identifier: 2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55
Certificate issuer:       /CN=F365CA10AF/serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
Certificate serial:       0995
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
Manifest number:          0995
Signing time:             Tue 27 Oct 2026 01:43:38 +0000
Manifest this update:     Tue 27 Oct 2026 01:43:37 +0000
Manifest next update:     Thu 29 Oct 2026 01:43:37 +0000
Files and hashes:         1: LnFCh3b4tjGvSw1suVUM0cqUVlU.crl (hash: +5eCtNBzCT3cGF9j2f/VlDED7/AU+/MZE1n+uqaC2TQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365CA10AF, serialNumber=2E71428776F8B631AF4B0D6CB9550CD1CA945655
        Validity
            Not Before: Oct 27 01:43:37 2026 GMT
            Not After : Oct 29 01:43:37 2026 GMT
        Subject: CN=6ae001ca-a791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:22:84:ac:4d:27:78:44:dd:98:22:63:cf:
                    e7:99:82:93:07:f0:30:54:bc:ef:85:1b:da:60:73:
                    b2:e3:d0:4f:4d:95:72:3d:76:82:5c:2b:d9:71:cc:
                    fe:7e:28:4d:15:68:46:63:1a:01:86:4f:02:3e:03:
                    fc:67:b8:84:b6:64:09:44:18:3a:90:89:d0:32:8b:
                    b0:37:b6:b6:a1:55:5b:3d:10:ec:20:77:13:8d:f3:
                    25:55:6c:51:57:be:36:ed:25:15:cf:fa:8c:5d:01:
                    59:a8:20:4e:0e:99:10:13:84:c0:ad:7f:ca:d9:3d:
                    ca:24:3f:08:3a:ed:cc:da:9e:78:ea:4a:fe:ad:de:
                    5e:be:75:5b:00:ff:8a:b8:56:e5:3c:41:2e:05:41:
                    da:27:67:1d:1d:cb:62:6c:83:b5:40:a9:4a:7a:f7:
                    ff:f8:ec:fd:e8:ac:f5:5c:89:c9:44:35:b8:80:29:
                    70:5d:e6:d3:70:85:66:d0:16:2d:5f:99:c3:c2:33:
                    41:7a:79:b7:d7:22:9e:11:03:15:f4:26:f6:0d:f3:
                    2c:0a:a2:32:f1:7f:de:4e:79:5d:b2:42:da:d7:87:
                    6c:99:74:79:31:82:75:bd:90:42:ec:c4:43:12:3d:
                    8e:b4:8f:81:89:cc:cb:8c:65:a9:e5:40:73:57:a6:
                    7a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:1F:E5:0C:F0:AE:2C:20:34:DD:35:46:B3:06:C8:72:0A:F2:17:EA
            X509v3 Authority Key Identifier:
                keyid:2E:71:42:87:76:F8:B6:31:AF:4B:0D:6C:B9:55:0C:D1:CA:94:56:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnFCh3b4tjGvSw1suVUM0cqUVlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365CA10/430D8A1674A911EA96CC793EF8AEA228/LnFCh3b4tjGvSw1suVUM0cqUVlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:50:87:36:55:44:7f:7b:2a:96:c8:8c:77:47:1e:26:87:6b:
         9a:5b:53:1d:63:29:d7:10:0d:b4:b4:7c:67:d5:19:10:f0:38:
         d1:1b:07:01:61:b6:a4:bb:5d:0a:1d:64:59:05:9c:7d:e7:b4:
         b4:0f:9c:7b:26:10:f1:31:90:38:15:77:08:66:71:7e:91:75:
         01:88:24:32:b9:f1:0a:a7:62:eb:fb:7c:c1:93:2a:30:88:67:
         c0:76:6c:c5:0c:d5:cb:1b:85:3b:8a:ea:44:0c:dc:99:9a:e6:
         e4:13:08:64:a6:5f:ad:90:9f:9a:c6:da:ea:49:b7:a6:da:a2:
         27:a5:13:2c:07:ba:32:7a:05:69:0c:d5:7a:c8:02:08:f8:51:
         d0:b9:c0:a9:20:66:a9:22:c0:2e:88:90:9c:4d:ab:ae:f7:ee:
         a9:69:4b:9a:c9:7a:33:19:9b:72:29:fd:7e:cc:b7:b2:e0:5b:
         88:9d:37:42:a7:a7:ec:90:58:27:97:e8:17:8f:da:90:13:52:
         00:4f:e6:ad:30:04:79:31:0e:ac:4a:e0:76:4b:dc:db:63:9c:
         00:d9:9a:33:66:49:e7:b9:e5:7b:d6:84:f2:0e:26:c8:ce:a3:
         fe:8c:b9:47:77:2f:e4:7b:c6:87:ef:72:61:d7:74:9e:a8:09:
         25:be:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:58:24 2026 by rpki-client