Error: rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File:                     X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier:          R9Z6Bxx3fjDBiYSbiWjFaH1e7W1+2NaJpgqjfE2NFfk=
Subject key identifier:   79:7D:52:ED:5B:B1:55:57:49:95:F3:5A:91:2C:2E:B7:D0:85:E5:8A
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       0605
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number:          0601
Signing time:             Thu 08 Oct 2026 02:55:45 +0000
Manifest this update:     Thu 08 Oct 2026 02:55:44 +0000
Manifest next update:     Sat 10 Oct 2026 02:55:44 +0000
Files and hashes:         1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: r6xSR5RGo20C3QxNiv1o09u82vBnFcaaAtSxtwgqRKA=)
                          2: ED6720888A4D11F18B3C7BD3CE1D38B0.roa (hash: fy03gYHL7JTAVtW+hjgr7RCIr18BTRSjeQ/qFlmp6EA=)
                          3: 9727295C8A4D11F1AF7D2AD1CE1D38B0.roa (hash: gnUznLVBJQoJLLODckjNn7stwWgqRcBoFzmwFmu5Uy8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 02:55:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1541 (0x605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: Oct  8 02:55:44 2026 GMT
            Not After : Oct 10 02:55:44 2026 GMT
        Subject: CN=6ac70631-a73b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4e:bb:25:ca:be:96:c2:89:72:5b:a6:5c:08:
                    8a:44:ad:94:69:e0:1f:6a:19:c8:e3:5b:fc:87:f3:
                    72:98:3f:ad:f2:44:60:53:9a:47:c1:d1:b0:07:55:
                    da:a3:90:8b:75:d0:17:67:6a:ad:fd:1b:28:4f:ba:
                    07:91:1f:7b:2c:6f:7f:33:f6:18:73:c0:af:c2:06:
                    35:9a:f2:e1:97:98:6e:d6:a6:57:b3:d0:6f:c6:79:
                    9d:2f:68:c0:2c:72:a0:c3:50:cb:76:47:8f:20:d7:
                    22:82:ab:c5:59:dc:b0:b0:06:7f:15:d5:69:9c:1a:
                    6b:d4:11:de:da:7f:07:34:2d:48:05:52:84:a9:8c:
                    e2:0b:fd:c0:c9:ee:5c:dd:a4:dd:4f:23:cb:7f:6b:
                    54:50:8f:fa:70:37:37:d2:2c:39:f3:4d:ff:e3:ee:
                    bf:62:1e:f0:0d:4c:5d:ce:6e:9e:db:28:04:f1:ab:
                    61:56:15:39:1b:92:1e:bb:f1:62:59:b9:7d:06:e7:
                    a4:58:ba:aa:9d:f9:20:2b:69:6f:31:47:57:81:aa:
                    68:b7:1e:7c:e6:c6:b7:f5:10:96:34:36:a5:94:d8:
                    b8:f7:e6:e6:56:86:74:11:04:2a:74:fa:29:7c:c4:
                    7f:1a:24:26:3d:bb:00:be:b0:2e:97:d0:36:9f:91:
                    3b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:7D:52:ED:5B:B1:55:57:49:95:F3:5A:91:2C:2E:B7:D0:85:E5:8A
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b3:f0:a2:9c:1d:e9:af:36:1a:b0:1a:cd:1b:22:b5:43:91:
         a5:de:c7:8e:35:aa:19:c1:27:68:c0:ee:5b:ce:7d:87:fd:74:
         00:c6:c8:73:cf:a8:34:ac:c0:9a:33:8e:db:c3:c0:63:76:9c:
         74:d6:d9:96:c6:15:3c:2a:19:df:8f:c5:21:f4:f9:50:f3:ac:
         ca:49:bc:41:f9:59:a0:79:12:91:88:77:ea:16:b8:2d:4b:15:
         79:2e:a8:53:c3:ad:f5:c0:63:5c:61:6c:30:ac:28:7a:67:b0:
         91:71:06:f4:a6:b2:77:0f:aa:e4:7a:6d:c0:69:e7:db:3b:d8:
         80:ee:fb:7e:d6:4f:bc:98:76:aa:1e:28:d1:7a:a6:50:d9:78:
         2c:11:f8:e2:94:e0:4c:5a:40:66:96:15:cc:6a:d7:14:2a:02:
         ff:08:6c:d3:53:0a:b4:26:63:62:76:d8:a8:03:59:2a:08:8f:
         52:b7:b0:4d:55:3c:11:e3:6a:1b:0f:b6:48:77:41:7d:0c:de:
         e4:6d:01:8c:d9:ac:c6:6b:66:cb:f1:d7:f0:0b:db:75:58:e1:
         83:2b:a1:4c:dc:8a:9b:c2:38:c9:01:26:a0:ff:87:4d:22:c3:
         c8:8f:c2:f4:3b:47:09:01:18:44:77:67:05:7e:07:a6:e8:ae:
         c9:49:ae:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:52:02 2026 by rpki-client