Error: rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
File:                     WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft (raw, json)
Hash identifier:          EAGV2yjRJVjtbwH6XRT7C0LNCP7A7Q/tf67BpllkEPY=
Subject key identifier:   3B:4C:BF:CF:76:C1:0D:E1:51:7F:A3:5C:63:F2:94:87:AF:93:C4:B3
Authority key identifier: 5A:1A:40:99:27:8F:18:FF:41:96:4D:55:77:B0:4B:3D:5E:43:7C:FB
Certificate issuer:       /CN=F369013CAF/serialNumber=5A1A4099278F18FF41964D5577B04B3D5E437CFB
Certificate serial:       0A7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
Manifest number:          0A7B
Signing time:             Sun 25 Oct 2026 01:33:19 +0000
Manifest this update:     Sun 25 Oct 2026 01:33:18 +0000
Manifest next update:     Tue 27 Oct 2026 01:33:18 +0000
Files and hashes:         1: WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl (hash: Zx2J+uoalN6/RQh04zhvH0YxLMCho5KtnWUztmPMFnA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2684 (0xa7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369013CAF, serialNumber=5A1A4099278F18FF41964D5577B04B3D5E437CFB
        Validity
            Not Before: Oct 25 01:33:18 2026 GMT
            Not After : Oct 27 01:33:18 2026 GMT
        Subject: CN=6add5c5e-e44b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8a:b7:c8:6b:74:d3:f7:ef:08:c4:d2:9e:4d:
                    a7:63:9f:8e:16:55:4b:38:df:90:9e:6a:31:3f:c4:
                    bb:f9:db:89:44:fa:e0:97:99:ae:7d:dc:87:4c:8d:
                    76:43:38:2a:e9:f0:ed:79:3e:ec:cf:71:63:19:3d:
                    1e:3c:5d:a5:e2:00:6b:be:a7:ed:9f:5b:8f:60:b0:
                    3e:48:dd:89:17:81:f7:79:f2:9f:54:15:22:cb:8f:
                    e5:f1:01:ad:ab:b4:40:af:28:fd:3f:df:7c:52:f1:
                    91:3a:42:50:f9:d3:20:f5:e2:a1:44:cb:27:66:06:
                    e3:8f:e2:d6:d3:e7:1b:dc:51:06:6a:89:51:7c:4a:
                    4b:31:2b:39:6f:45:19:37:33:fe:33:59:8d:ee:69:
                    00:24:87:61:94:5e:60:33:9d:58:2d:34:13:13:dc:
                    60:90:d9:95:82:a4:76:cf:4e:6b:f2:81:fd:c1:ae:
                    9f:fa:15:91:bc:b9:be:db:47:b5:e7:bd:39:9d:85:
                    39:db:ce:57:d9:84:92:2c:d1:6c:0c:5e:8d:0a:69:
                    7a:d8:d9:46:8a:4d:b9:78:59:c6:27:09:41:65:d4:
                    b2:c3:db:3e:f0:77:a5:c3:2f:54:53:f0:d8:b6:4a:
                    b6:3f:25:7c:46:44:6f:b0:54:21:9b:c2:d3:f2:ea:
                    76:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:4C:BF:CF:76:C1:0D:E1:51:7F:A3:5C:63:F2:94:87:AF:93:C4:B3
            X509v3 Authority Key Identifier:
                keyid:5A:1A:40:99:27:8F:18:FF:41:96:4D:55:77:B0:4B:3D:5E:43:7C:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WhpAmSePGP9Blk1Vd7BLPV5DfPs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369013C/B0AB51B2C4D111E9984DE320F8AEA228/WhpAmSePGP9Blk1Vd7BLPV5DfPs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:48:fd:f2:ca:93:ac:57:36:0b:fc:92:dc:9b:9f:24:2c:f2:
         07:f4:e1:3c:a3:f9:05:94:08:21:0f:b9:2e:c3:48:14:ee:6e:
         22:29:7f:22:20:ef:97:84:54:b4:55:92:95:62:c5:47:80:33:
         c2:51:00:16:18:2f:e0:cf:e8:42:9f:fa:1c:bb:c9:6d:fa:f1:
         79:75:fe:41:20:a8:01:8e:e2:45:dc:b4:52:3f:69:a1:fc:08:
         8b:f4:7d:8e:41:81:c9:78:d2:4c:1d:ad:f0:81:12:59:5c:75:
         99:2c:5a:5c:ee:fd:21:16:26:dd:c0:2f:b4:5f:a6:53:28:a2:
         2f:49:fc:b4:ae:6f:23:39:bb:32:cf:2b:52:80:c6:72:65:1d:
         2e:4f:00:3c:4a:c3:1c:38:b0:5d:f8:c1:ca:6d:f4:46:d3:65:
         cd:21:e0:11:c5:0e:96:15:39:3e:50:eb:85:2e:e6:9a:d5:d3:
         29:f9:70:f2:ed:fb:86:51:d7:b7:93:fb:dd:e5:36:9b:49:60:
         14:d7:50:4a:1a:0e:60:79:66:b6:95:0f:58:fc:06:b6:9d:bf:
         e9:72:49:b2:89:89:45:43:9f:fd:83:79:8f:32:b1:0c:89:bb:
         2d:94:6e:40:74:0e:da:d5:b6:6f:93:e4:fc:95:2b:37:27:06:
         50:08:34:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:44:30 2026 by rpki-client