Error: rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
File:                     48qwYej4izcp5wmOfReIqfb_C0c.mft (raw, json)
Hash identifier:          nVUeLpgRXxL48uEw27q+QmsFaWY/6nh9+BM83oQHuZQ=
Subject key identifier:   BD:87:9D:8A:B4:C3:A8:2B:37:31:B4:BF:9C:D5:ED:3E:65:A0:09:8A
Authority key identifier: E3:CA:B0:61:E8:F8:8B:37:29:E7:09:8E:7D:17:88:A9:F6:FF:0B:47
Certificate issuer:       /CN=F36939A6AF/serialNumber=E3CAB061E8F88B3729E7098E7D1788A9F6FF0B47
Certificate serial:       055B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/48qwYej4izcp5wmOfReIqfb_C0c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
Manifest number:          055B
Signing time:             Sun 25 Oct 2026 03:15:48 +0000
Manifest this update:     Sun 25 Oct 2026 03:15:47 +0000
Manifest next update:     Tue 27 Oct 2026 03:15:47 +0000
Files and hashes:         1: 48qwYej4izcp5wmOfReIqfb_C0c.crl (hash: gDEUXcV5Sk1TTnZQw6sTgsytBkVCHk/3BeKWOTHycs0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/48qwYej4izcp5wmOfReIqfb_C0c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1371 (0x55b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AF, serialNumber=E3CAB061E8F88B3729E7098E7D1788A9F6FF0B47
        Validity
            Not Before: Oct 25 03:15:47 2026 GMT
            Not After : Oct 27 03:15:47 2026 GMT
        Subject: CN=6add7464-6adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:81:f1:a4:56:c2:99:90:70:c8:ad:7d:12:
                    90:f9:c3:f5:da:f1:13:47:21:62:d7:b8:c3:4b:39:
                    14:fd:38:77:ba:36:ce:f9:88:55:46:66:ea:b4:28:
                    49:a0:be:5f:3d:9d:cf:e1:32:07:8f:f4:cf:3e:aa:
                    a8:15:97:b4:e0:75:6e:2c:ef:7d:66:76:d5:70:28:
                    80:02:50:1d:07:c6:84:9e:16:4e:a3:b0:63:21:bf:
                    bd:53:51:25:c6:b5:a1:3e:91:79:a1:01:11:79:d2:
                    06:2f:06:cd:67:15:f5:4e:6c:8a:03:73:ab:19:2d:
                    8b:5a:aa:d8:97:99:3e:b8:07:b6:f4:33:56:79:68:
                    f9:80:79:c5:64:08:2f:46:08:38:7b:9e:45:d9:75:
                    c8:da:19:70:01:2b:69:b4:38:0e:56:86:a1:fb:f6:
                    b0:62:17:65:64:ba:9f:33:09:d6:f3:9e:c8:b6:55:
                    3d:65:04:1c:fe:e4:b7:9c:71:8f:a1:46:df:c6:32:
                    75:04:2c:45:84:b7:ad:c5:19:17:0e:17:ff:41:2b:
                    be:c7:bf:54:a9:45:ab:9f:26:c5:94:7a:6a:ba:60:
                    09:5e:33:92:33:d4:10:8e:82:15:66:bb:23:3d:af:
                    15:65:16:4b:75:9c:bf:27:6f:01:87:fe:f2:fc:8a:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:87:9D:8A:B4:C3:A8:2B:37:31:B4:BF:9C:D5:ED:3E:65:A0:09:8A
            X509v3 Authority Key Identifier:
                keyid:E3:CA:B0:61:E8:F8:8B:37:29:E7:09:8E:7D:17:88:A9:F6:FF:0B:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/48qwYej4izcp5wmOfReIqfb_C0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/94472A7AB5FD11EDAC1427F1F1222468/48qwYej4izcp5wmOfReIqfb_C0c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:bc:1a:fb:3a:71:12:07:43:0e:b3:e3:73:b1:d3:22:51:33:
         27:44:d0:7f:ba:d9:f5:23:35:80:4c:30:2c:98:22:79:55:cb:
         79:23:cb:63:f8:36:db:3f:1b:55:9f:01:ce:28:5f:57:fd:ea:
         e0:bd:02:cb:eb:eb:68:12:8a:5c:fa:05:d6:6a:22:89:1c:ea:
         b1:d0:41:5c:6b:73:d9:36:7f:73:b5:0a:6b:5a:61:94:71:d6:
         21:55:9b:7f:c0:bd:1c:a6:d6:d6:fb:f6:da:db:67:bd:bf:0e:
         80:23:8d:b7:3a:7e:58:29:9c:1b:ea:ab:e7:8d:2b:83:d3:85:
         82:ae:78:eb:dc:0e:a0:e5:9d:1f:11:f2:11:9d:8a:e5:6e:80:
         be:42:6e:20:f6:de:72:34:17:5e:f3:ed:50:cd:86:69:c5:17:
         51:fb:e5:62:fa:9d:48:d6:e3:41:02:f6:d7:2c:3f:ac:09:b2:
         55:ad:ba:56:e8:dd:a0:91:a9:0e:66:26:4f:2f:88:52:72:06:
         5a:6a:4e:f0:49:30:c3:22:b8:63:43:e4:73:a0:66:8f:c1:34:
         ce:60:72:82:db:11:3f:e7:03:82:9f:cd:12:cd:b0:d9:37:dd:
         61:af:41:98:02:b9:5d:9a:69:62:9e:2a:37:20:d2:e4:cc:5a:
         8f:0a:3a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:07:20 2026 by rpki-client