Error: rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
File:                     SoPzGxsGBMptC3KkU9qj61h7TII.mft (raw, json)
Hash identifier:          jMO9uQigLtPBE1KUMtOfTJpedFpz4MywhPxZU2eaUFw=
Subject key identifier:   F7:27:19:9E:04:37:20:A2:29:CF:41:36:BC:1A:2D:CA:2B:14:1B:88
Authority key identifier: 4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82
Certificate issuer:       /CN=F3681ED0AF/serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
Certificate serial:       056F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
Manifest number:          0559
Signing time:             Sun 25 Oct 2026 03:21:43 +0000
Manifest this update:     Sun 25 Oct 2026 03:21:43 +0000
Manifest next update:     Tue 27 Oct 2026 03:21:43 +0000
Files and hashes:         1: SoPzGxsGBMptC3KkU9qj61h7TII.crl (hash: yd3V1Cx4ZEx7wDhDnljyphG/CzzquZWZhXzH06fZw7o=)
                          2: C644833AEE7111EE86F7F361775412E6.roa (hash: YgdlYAvq9L3YlpIV33voCNPfR5sCeCWFkjxpZfRsE/k=)
                          3: 7D97AFC0552311F18C4E5A19CF1D38B0.roa (hash: HPUJELzm6QYKUxc7EThIZngZppM/cTN5/ffnqB4Ryv4=)
                          4: 7B89F0F65C1011F097764BA7DAE4EC9C.roa (hash: eGy/v5dJ9Sg7LBFixJArYusJNOZkmFriL3Cy5EJmVsc=)
                          5: BFD118C27C3E11F0A02173AEDAE4EC9C.roa (hash: E8rOx5Kz5JNVd/9IEaiBcjxCcyJDlnKMUqqptEDdwRw=)
                          6: 3090B8681EC611F1BB0A92BDDAE4EC9C.roa (hash: HnTfIVu9muq+g847NRBmW0pVK2J4iJgCN/MFxOihXGI=)
                          7: F65930865B2911F0A6F411CCDAE4EC9C.roa (hash: zlBIS1j6PkXW4nIJqeYYZE1QxvGn2R6vJr3qJUI1Apc=)
                          8: C210ED2E064611F094E66494762E951A.roa (hash: Gw9d4UydYI1TKn6YtgmxyrXffZXD7vcLeB5cryG7IG4=)
                          9: 557D1FE81EC311F1A8C107ABDAE4EC9C.roa (hash: 6E/4b3jG5+WBAhKMmUMbiYpLspky+skYf9xDIZrtcIA=)
                          10: 840D0A8C1EC111F1A3925CA1DAE4EC9C.roa (hash: FFwjG289Rtmc3S8JKRbxfJUbpIIY+o+EMq5pX7s2ODo=)
                          11: 1587E6CCEE7111EEAAFBB25C775412E6.roa (hash: zasoVhr4ZDA3BPJ+ug5ooyH3/rY2lwS6n6p8BUEgx2w=)
                          12: 4F0B564AF51511EEB208C151775412E6.roa (hash: XNyDHYdBwPvc7NbnPS7pTjwqkoohEdJw312l57VSDB8=)
                          13: C1012DD81EC611F18633B7BFDAE4EC9C.roa (hash: AEjIQDoJkuCV2zdXj8TYSJzuJbyASHlYynXe4LN5vrk=)
                          14: F2B741AE1EC211F1A3DB35A9DAE4EC9C.roa (hash: wNGAjIUP8OIxnYbE9SkgsQ9UkCWPS1lv4jOwO2xoulg=)
                          15: 4A7830A0D18B11EFAB9E6B88762E951A.roa (hash: xV745XWxYsFhNII926E/fN4gSuSPSdyN3viLNfdZy9M=)
                          16: 506B37B0FD0A11EEA3B5DB34017001B1.roa (hash: 12EkqcvUqaX3EcpZliJ64g6Wrfs7WAZ3LR6j5D262RI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1391 (0x56f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3681ED0AF, serialNumber=4A83F31B1B0604CA6D0B72A453DAA3EB587B4C82
        Validity
            Not Before: Oct 25 03:21:43 2026 GMT
            Not After : Oct 27 03:21:43 2026 GMT
        Subject: CN=6add75c7-477d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:51:62:f9:b4:85:aa:c8:64:a6:4f:17:75:3b:
                    ed:58:aa:b3:3d:7c:3e:39:b0:c8:fd:58:3b:e1:d5:
                    37:f7:c4:b7:3a:5d:9e:cf:62:98:9f:79:48:6a:4f:
                    41:df:69:02:6a:5e:f2:7c:ee:b7:1c:53:4a:60:fa:
                    3d:fc:34:60:b9:39:da:cd:5c:3b:ba:ec:58:69:10:
                    a1:4a:b6:21:9f:74:3f:9c:73:47:6e:31:21:5b:a6:
                    ef:cf:43:2f:8e:c9:82:78:95:fb:71:d9:86:08:c3:
                    71:7e:fb:6e:9d:3d:19:51:29:7b:ff:28:87:0e:53:
                    ed:df:94:e3:f5:3a:9e:df:af:c8:c8:ce:fa:8a:a8:
                    21:aa:ec:05:c3:e2:96:9c:47:af:4b:2c:36:e5:7d:
                    96:61:a0:0e:61:97:b4:03:f3:39:68:96:ba:05:f7:
                    2a:f0:2f:cd:8f:33:20:62:dc:46:20:62:14:fe:cd:
                    d0:4f:ad:40:a1:d8:3d:d4:bf:03:66:b8:2c:4e:77:
                    a6:9b:69:f4:29:54:1e:94:fe:e5:2f:bc:8c:00:9f:
                    76:01:99:4a:68:cb:3a:f0:4c:6c:e5:5b:65:0f:c6:
                    3a:a8:12:dc:16:5a:c2:75:ed:9c:c1:f1:2b:16:71:
                    3b:7d:d1:70:67:18:e1:b5:8c:b7:c6:96:ac:a4:24:
                    23:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:19:9E:04:37:20:A2:29:CF:41:36:BC:1A:2D:CA:2B:14:1B:88
            X509v3 Authority Key Identifier:
                keyid:4A:83:F3:1B:1B:06:04:CA:6D:0B:72:A4:53:DA:A3:EB:58:7B:4C:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SoPzGxsGBMptC3KkU9qj61h7TII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3681ED0/5251C078CE2411EDA092D0ACF1222468/SoPzGxsGBMptC3KkU9qj61h7TII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:83:52:a2:3d:78:a0:1c:9b:6a:ff:e3:65:b6:e9:f9:66:a4:
         8e:f4:9f:03:4c:b3:3e:fb:b5:5d:de:d5:49:91:69:41:36:c4:
         9c:0b:29:49:4c:87:64:cb:10:54:e0:2f:57:2a:fb:93:f4:4d:
         61:b4:bd:b9:6a:93:06:23:3b:80:3f:9e:45:2c:6a:a3:e6:87:
         7f:6e:52:94:0b:05:f7:9d:cc:58:1f:bb:3d:8f:78:5d:7b:94:
         23:0d:c4:bd:19:46:a5:53:47:31:c5:09:43:cb:2d:aa:ed:6a:
         87:fd:6d:88:34:eb:de:25:0b:68:9b:56:7c:d7:13:28:e7:93:
         a9:1c:cc:df:23:8a:cc:80:54:b3:27:f6:a6:92:60:2e:62:c8:
         06:a5:ec:a8:46:f1:fe:13:e9:ec:e9:f3:f6:3e:e3:c9:3a:72:
         72:b6:e8:ad:a8:01:c0:bb:84:f5:46:a2:54:27:d8:2d:6f:ca:
         06:0d:1f:c0:63:64:50:bf:c2:8e:2c:dc:06:6f:36:c0:01:07:
         e1:44:ca:f7:4a:a7:2c:5d:a4:cd:2f:5f:96:b9:78:72:c3:c0:
         90:b8:83:76:1b:49:c8:f4:35:7d:86:51:12:64:f0:03:dc:88:
         84:f5:b1:8a:f7:1e:81:90:62:79:80:d3:02:a0:82:f3:9e:b6:
         1f:0a:ae:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:38:46 2026 by rpki-client