Error: rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
File:                     qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft (raw, json)
Hash identifier:          aQohRDRFtWY3PloeJwVO6YoYJk9/LvWhrjn2T7uxwic=
Subject key identifier:   54:72:C4:3C:D7:04:BF:3B:45:C3:DB:10:34:AB:CE:F1:5F:33:14:98
Authority key identifier: AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65
Certificate issuer:       /CN=F36C684FRI/serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
Certificate serial:       0A64
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
Manifest number:          0A64
Signing time:             Tue 27 Oct 2026 01:34:36 +0000
Manifest this update:     Tue 27 Oct 2026 01:34:35 +0000
Manifest next update:     Thu 29 Oct 2026 01:34:35 +0000
Files and hashes:         1: qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl (hash: tgC+YLOLeoelzXs2jyUzDsWA1//XS2+LwFPB3hRNh6w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                          rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2660 (0xa64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C684FRI, serialNumber=AAADB379435087A094F27D7609DFB862FC5CC465
        Validity
            Not Before: Oct 27 01:34:35 2026 GMT
            Not After : Oct 29 01:34:35 2026 GMT
        Subject: CN=6adfffac-c66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:a8:0a:d9:d4:10:5d:d9:d3:78:18:5d:82:
                    ef:79:74:98:4a:38:1f:af:5a:db:1c:aa:df:9a:bd:
                    ea:94:ea:16:a0:1b:dd:08:46:c1:df:45:24:8f:92:
                    5f:0e:c7:3e:c6:65:af:2d:c8:48:46:eb:94:ad:2d:
                    cc:26:72:dd:1e:ce:e0:70:e1:7e:6b:ca:89:5b:6a:
                    b2:59:69:19:4a:1c:5c:6c:32:3d:99:b4:e4:8b:a5:
                    6f:9d:1f:4b:b4:3a:03:7c:41:cd:be:ee:a6:8c:09:
                    17:8f:25:0d:14:06:40:a4:a7:d8:be:66:ad:f4:54:
                    12:cf:22:3b:a1:77:33:87:25:4c:11:07:ce:4b:b4:
                    a9:5d:ff:bc:2a:86:c0:3a:70:c0:5c:b1:ce:d7:4c:
                    71:2c:4d:7b:9e:73:70:c0:57:dc:a3:49:0d:f9:55:
                    40:4e:68:4b:b3:87:a4:e7:70:72:45:df:4c:65:41:
                    c3:50:e6:38:19:e8:8c:16:be:3f:6c:c8:cd:98:36:
                    71:26:45:c9:cd:18:05:fc:32:51:9c:3f:fa:7e:a9:
                    71:79:13:53:58:3e:92:58:c9:02:05:6e:32:37:cb:
                    59:30:31:6d:b3:f1:22:5d:d3:f9:2d:f0:d1:84:cc:
                    90:09:d0:6e:05:03:24:0d:d9:a3:47:eb:0d:58:d7:
                    0f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:72:C4:3C:D7:04:BF:3B:45:C3:DB:10:34:AB:CE:F1:5F:33:14:98
            X509v3 Authority Key Identifier:
                keyid:AA:AD:B3:79:43:50:87:A0:94:F2:7D:76:09:DF:B8:62:FC:5C:C4:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C684F/C401133ED48311E98A92991CF8AEA228/qq2zeUNQh6CU8n12Cd-4YvxcxGU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:ab:97:73:e7:1a:68:33:18:42:d7:d6:bf:b6:ff:46:0e:04:
         0d:24:f0:77:d0:4e:7f:9a:5e:bf:ca:b3:ac:6e:d0:81:bc:a7:
         7b:22:6d:d2:9b:4d:06:18:69:57:bc:c1:5c:c6:4a:f0:18:3e:
         45:e0:92:2d:31:37:cc:4c:e1:02:bd:39:2d:b0:a7:1b:aa:2e:
         e2:4e:85:f7:9f:aa:09:74:a4:f8:97:c3:fe:ae:22:0c:27:7a:
         1d:60:98:f9:45:79:7f:16:2a:9c:dd:84:b4:8b:8d:4f:65:e9:
         9d:cd:bd:1c:80:fe:ae:3d:8d:89:84:5d:b2:b0:a4:12:b6:72:
         0f:52:63:db:e8:25:f9:a5:3e:29:52:c0:e9:c9:5c:eb:07:0d:
         2d:78:96:b3:01:63:c8:e0:76:81:f3:6d:dc:29:2a:08:5b:96:
         43:40:73:be:e0:e6:a3:5e:a5:d0:a3:a7:11:f4:b5:29:e3:b1:
         79:29:60:14:89:b0:d9:b8:e4:b2:f2:81:23:5b:c4:22:0a:db:
         eb:65:21:77:20:96:5c:c6:3a:9a:bd:b7:87:ab:90:b3:fb:5f:
         b2:29:06:00:30:16:14:e1:30:23:8b:6b:87:67:ce:6f:ec:0c:
         1f:7e:9f:1d:ea:29:9b:05:30:c5:60:7a:b4:31:d1:7d:c3:17:
         fa:4b:6c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:15:46 2026 by rpki-client