Error: rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.mft
File:                     WWnc-xFUwU4N031UCr45kHDAWaE.mft (raw, json)
Hash identifier:          BNV16XTcj1WW/6bdvJ6wkJttxpE70Zh8oNfc9QTxD+Y=
Subject key identifier:   E8:48:73:B9:98:8D:BB:F0:54:49:3D:28:E9:47:C2:54:BA:F2:C0:EA
Authority key identifier: 59:69:DC:FB:11:54:C1:4E:0D:D3:7D:54:0A:BE:39:90:70:C0:59:A1
Certificate issuer:       /CN=F36C588DAF/serialNumber=5969DCFB1154C14E0DD37D540ABE399070C059A1
Certificate serial:       0384
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WWnc-xFUwU4N031UCr45kHDAWaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.mft
Manifest number:          037E
Signing time:             Thu 10 Sep 2026 04:09:25 +0000
Manifest this update:     Thu 10 Sep 2026 04:09:24 +0000
Manifest next update:     Sat 12 Sep 2026 04:09:24 +0000
Files and hashes:         1: WWnc-xFUwU4N031UCr45kHDAWaE.crl (hash: /jgM9qL2yyHJr21CdOnTLjay5WMWLTkBSbwGmU6yF9g=)
                          2: F6F6560C060E11EFB4E35F4C017001B1.roa (hash: GSvLQkr/waoSrA3GVFmHcevF4Ot+nEJtFB+O9JL751k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WWnc-xFUwU4N031UCr45kHDAWaE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 04:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 900 (0x384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C588DAF, serialNumber=5969DCFB1154C14E0DD37D540ABE399070C059A1
        Validity
            Not Before: Sep 10 04:09:24 2026 GMT
            Not After : Sep 12 04:09:24 2026 GMT
        Subject: CN=6aa22d75-400b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a6:3b:f4:74:48:84:28:b0:62:26:d5:86:f1:
                    0e:8d:c5:06:fd:65:7b:d7:26:d3:fa:05:b0:40:88:
                    16:89:52:2d:84:c1:53:13:84:e8:ad:6b:9e:eb:c7:
                    29:6c:cc:09:f2:68:fa:c2:b0:bf:8c:a8:fd:a3:4b:
                    d7:48:fc:91:94:6c:91:8b:a7:d4:29:3c:9c:c8:0a:
                    10:0e:74:7d:b0:f1:b3:04:a0:8a:5e:89:5e:47:32:
                    e7:d1:2d:30:3c:a9:b2:30:a5:0b:f5:15:70:87:2f:
                    0a:f1:4a:6b:49:d1:de:d1:22:60:17:28:bd:07:83:
                    db:ca:08:a2:6d:6a:34:88:53:98:cd:ac:7e:1a:38:
                    6c:51:ef:58:51:84:cb:d8:7f:b4:9c:85:d8:a4:9d:
                    ce:80:9b:3e:0f:ca:12:b3:72:e5:04:fa:a1:b9:11:
                    35:bb:03:14:5a:0b:10:92:3b:57:15:df:de:90:d9:
                    3f:07:53:71:38:3b:f5:e6:58:b4:f6:d0:7b:ed:2d:
                    fa:d6:ec:58:6f:c9:39:2e:97:ad:0c:81:68:2c:da:
                    69:73:7b:84:1d:08:81:d7:db:20:d9:de:0c:0a:ff:
                    f2:71:99:21:2c:75:36:5d:21:dc:e7:0f:d3:dc:f5:
                    6f:d6:fe:5b:e2:1e:3d:26:bf:cf:3f:22:b8:c5:53:
                    d8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:48:73:B9:98:8D:BB:F0:54:49:3D:28:E9:47:C2:54:BA:F2:C0:EA
            X509v3 Authority Key Identifier:
                keyid:59:69:DC:FB:11:54:C1:4E:0D:D3:7D:54:0A:BE:39:90:70:C0:59:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WWnc-xFUwU4N031UCr45kHDAWaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C588D/F2684ACA060C11EFAC45D53B017001B1/WWnc-xFUwU4N031UCr45kHDAWaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:46:3d:0f:2c:d7:6f:a4:85:a4:25:9b:a4:3f:5e:18:03:33:
         79:a2:d5:10:d8:b1:8e:bf:11:2b:00:1d:54:c7:e1:7b:31:54:
         07:c3:d2:d1:ad:5e:ee:f3:6d:ed:e6:bf:d6:35:d7:41:bb:44:
         47:eb:ac:37:4a:1f:34:3c:30:b3:d3:92:d6:9f:19:bb:a2:27:
         19:ff:e8:65:63:c2:ca:fd:6b:3c:2b:70:7b:f6:27:b8:9d:01:
         a3:9c:dc:ed:7c:e4:e9:c4:d1:b0:55:aa:d7:23:0c:24:84:3a:
         19:d8:80:b9:c5:6a:14:c8:e4:74:dc:86:1b:e5:43:31:97:60:
         1b:b6:eb:ae:6e:37:9e:d1:53:cd:ae:19:09:2a:df:94:c2:a4:
         2e:1f:cd:8e:d8:56:9a:d2:8f:b3:ec:f5:7f:d1:38:a8:d0:0f:
         4d:b8:5f:ea:8f:d9:87:1e:e5:2e:09:ae:ee:7d:23:73:f8:71:
         7b:d8:21:5b:14:22:4e:35:e4:d6:cd:a1:f9:33:82:56:b8:4c:
         75:7b:bf:6e:a3:91:4d:bc:db:35:72:30:16:77:7e:93:f5:a5:
         4e:80:1f:2d:f3:4a:48:31:2c:87:64:8d:9f:be:d0:ae:6f:5b:
         4d:78:3f:88:19:8b:0e:98:38:bd:3c:67:cb:a8:7b:af:27:b8:
         f1:ed:3c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:17 2026 by rpki-client