Error: rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
File:                     INQ_9eRM5MOe47-3ribe6wBBH9U.mft (raw, json)
Hash identifier:          8RIfEo6PMCcHiFVlIaV54Twv9y9Dx/RXDTH0gK6D5G0=
Subject key identifier:   A6:B3:C8:C7:24:66:60:9D:A3:68:59:AA:83:5F:F7:4F:1D:52:D9:62
Authority key identifier: 20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5
Certificate issuer:       /CN=F365D370AF/serialNumber=20D43FF5E44CE4C39EE3BFB7AE26DEEB00411FD5
Certificate serial:       0478
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/INQ_9eRM5MOe47-3ribe6wBBH9U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
Manifest number:          0478
Signing time:             Sun 25 Oct 2026 03:44:04 +0000
Manifest this update:     Sun 25 Oct 2026 03:44:03 +0000
Manifest next update:     Tue 27 Oct 2026 03:44:03 +0000
Files and hashes:         1: INQ_9eRM5MOe47-3ribe6wBBH9U.crl (hash: cVNEXeLKqEjw67/MngnNDNcx4MQpGP3xpRKit08CYA0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/INQ_9eRM5MOe47-3ribe6wBBH9U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144 (0x478)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365D370AF, serialNumber=20D43FF5E44CE4C39EE3BFB7AE26DEEB00411FD5
        Validity
            Not Before: Oct 25 03:44:03 2026 GMT
            Not After : Oct 27 03:44:03 2026 GMT
        Subject: CN=6add7b03-e4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:79:4b:27:d0:b3:d6:ba:3c:bc:ef:a2:e2:
                    b6:28:5e:28:b0:ca:da:99:62:03:c3:57:7a:f9:61:
                    c2:b9:95:49:f9:85:6d:11:c5:c1:bd:d6:60:a5:47:
                    08:dc:e6:eb:90:9c:50:27:ec:cd:4a:3c:ae:f7:d8:
                    9d:d6:3c:61:1a:ff:a3:e4:8f:86:83:0a:7c:f6:99:
                    3a:39:ea:08:2d:70:8a:a3:c3:c4:20:0d:fd:48:e7:
                    06:16:48:17:0a:59:57:c8:58:0b:b1:c8:db:73:34:
                    e5:3d:37:5d:a5:ff:4a:e5:0c:b7:21:c2:b9:64:f9:
                    0c:84:10:48:28:1a:58:48:87:f4:78:18:bd:34:a5:
                    7a:43:7f:24:5f:02:89:c3:29:3a:f8:5b:39:e5:e9:
                    43:a0:99:b2:b2:af:90:22:91:37:e8:9e:b5:37:d9:
                    b2:83:27:2e:f5:9a:aa:0a:aa:09:29:14:b8:2c:7e:
                    cd:8f:0f:a4:74:bb:c3:50:9f:66:48:3f:e4:6c:1b:
                    a7:28:80:35:f1:68:e4:d6:02:4f:a5:fb:05:ae:82:
                    b8:10:c6:06:8c:7e:be:08:2c:17:ad:2e:cf:39:70:
                    8b:47:57:0e:25:8b:52:83:2e:44:12:d5:71:b1:fb:
                    bf:3e:b7:1a:ae:2e:0c:0c:4a:0d:06:14:91:10:e3:
                    c2:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B3:C8:C7:24:66:60:9D:A3:68:59:AA:83:5F:F7:4F:1D:52:D9:62
            X509v3 Authority Key Identifier:
                keyid:20:D4:3F:F5:E4:4C:E4:C3:9E:E3:BF:B7:AE:26:DE:EB:00:41:1F:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/INQ_9eRM5MOe47-3ribe6wBBH9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D370/9A34BBFA61BF11EEB3B809724AD9E6FC/INQ_9eRM5MOe47-3ribe6wBBH9U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:08:d9:c0:5b:ce:b1:b3:12:e4:a5:4c:4f:a1:5e:6f:d9:0e:
         24:bc:cd:1a:88:c7:c2:65:9c:7b:51:16:45:34:81:07:49:b7:
         ef:f1:7f:6b:90:d1:81:60:2c:ee:29:89:18:7e:03:b6:07:12:
         c0:71:30:84:a1:32:c2:8c:d4:50:85:7a:a0:0a:51:6a:28:1c:
         dd:b7:94:8e:0d:28:70:72:ee:a2:51:b5:3c:1a:80:71:a6:81:
         e5:ce:44:8d:20:6e:a1:a1:c5:e9:bb:ce:3e:85:92:05:ac:a6:
         af:dc:f9:91:84:a1:4d:63:37:ae:2c:12:26:ef:87:f7:88:3a:
         50:87:aa:22:d1:5a:33:45:6e:f3:71:7e:76:77:05:bd:ed:be:
         e2:a4:dd:b7:1c:23:81:ae:f7:b8:31:9f:86:de:81:bd:dc:67:
         44:ed:d4:11:3b:11:65:44:58:4f:05:b6:b8:ea:05:34:4d:bc:
         7d:78:42:3c:f2:be:7e:c8:4e:a3:9c:a0:d7:84:d2:53:6b:77:
         e1:8f:f3:b9:e4:32:ed:ff:38:9e:23:d3:bc:70:c1:ce:3e:da:
         53:e9:28:82:54:dc:95:9a:19:60:c3:62:c2:d9:af:e0:a9:40:
         b9:9a:89:22:5f:ac:c7:23:ec:e3:4a:97:30:9c:59:40:5b:bd:
         9d:65:34:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 11:07:45 2026 by rpki-client