Error: rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
File:                     _wMoIAB4rDbwLXEB0DS3vll-oVg.mft (raw, json)
Hash identifier:          qyfBzyAiGQ7W25R7VKKJ7IoHA0eWQ0EykFIQHfaPWdI=
Subject key identifier:   A5:52:EB:A4:1F:94:F1:67:F1:4D:98:F6:FB:B4:08:B6:A2:A9:7D:44
Authority key identifier: FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58
Certificate issuer:       /CN=F36EC712AF/serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
Certificate serial:       0557
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
Manifest number:          0553
Signing time:             Sat 24 Oct 2026 03:19:55 +0000
Manifest this update:     Sat 24 Oct 2026 03:19:54 +0000
Manifest next update:     Mon 26 Oct 2026 03:19:54 +0000
Files and hashes:         1: _wMoIAB4rDbwLXEB0DS3vll-oVg.crl (hash: dpgOYcr4G8ChdJW0f9xz3cxLEO9/DWledyuIePGr2EE=)
                          2: D025818C847A11F1B5502AB7CE1D38B0.roa (hash: s3DKvzZqZ1yrsDDeKf3A4fFbQn6aVQ+8rQd1FiSdSzk=)
                          3: 5C84A38E847A11F19D393BB3CE1D38B0.roa (hash: AHaUFDbGD5NxejHMZa7exucr+iFPx6p3m8Tht7NKBYE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1367 (0x557)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC712AF, serialNumber=FF0328200078AC36F02D7101D034B7BE597EA158
        Validity
            Not Before: Oct 24 03:19:54 2026 GMT
            Not After : Oct 26 03:19:54 2026 GMT
        Subject: CN=6adc23db-e463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6e:27:bc:44:35:06:6f:f5:f2:36:7a:e3:57:
                    8f:83:07:49:43:b5:08:23:3c:01:fa:f3:7a:9a:ae:
                    55:69:a7:6b:b5:e6:76:0e:18:9e:34:c3:cd:49:59:
                    2e:32:96:dc:cc:35:5e:90:41:70:68:c9:27:ad:1f:
                    8a:a2:f1:35:09:81:7a:ee:ea:b8:b5:40:7a:79:3c:
                    c5:66:87:9e:93:a0:a7:d2:41:1d:5d:47:ce:73:12:
                    e2:4c:10:97:1c:74:19:a8:11:9c:7f:7a:ab:bb:e2:
                    0a:ef:55:a3:05:68:07:aa:1a:76:b3:18:3f:01:b4:
                    8f:75:83:04:85:8d:c8:0b:35:7a:d6:b7:0d:df:75:
                    c0:a1:a2:67:5d:ca:46:93:dc:7b:a9:74:68:b4:c7:
                    e8:74:9f:94:00:43:c2:45:1c:45:40:ba:71:a5:43:
                    49:06:73:64:4d:f0:9b:77:0d:13:90:3b:95:23:d7:
                    22:e9:f0:f8:44:52:8e:34:4e:c4:3a:cd:fc:d4:28:
                    26:83:20:ea:ef:2a:bb:6b:08:c7:dc:79:54:5c:de:
                    35:31:50:7c:ba:8a:30:5c:b0:bb:fc:62:06:28:e4:
                    fa:b3:c9:62:a8:b4:dc:9e:7c:0a:5b:46:ea:e1:b0:
                    40:b5:d8:67:26:3f:0e:10:b0:bf:c3:82:86:6b:b9:
                    b4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:52:EB:A4:1F:94:F1:67:F1:4D:98:F6:FB:B4:08:B6:A2:A9:7D:44
            X509v3 Authority Key Identifier:
                keyid:FF:03:28:20:00:78:AC:36:F0:2D:71:01:D0:34:B7:BE:59:7E:A1:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_wMoIAB4rDbwLXEB0DS3vll-oVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC712/66579706BF6E11ED933CE482F1222468/_wMoIAB4rDbwLXEB0DS3vll-oVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:99:2f:78:f8:4e:e7:c0:3c:91:07:e2:5d:ae:3c:a9:76:
         aa:be:28:79:23:3a:38:d6:db:27:35:12:17:01:87:67:91:8f:
         a1:c7:f9:47:07:34:3f:ca:4a:ad:12:84:f6:e9:dd:c3:7d:ec:
         16:21:a8:1b:60:4e:b5:f2:65:47:0f:1e:32:0c:3d:fb:94:ce:
         22:60:1c:48:95:00:d0:66:36:9d:b0:ef:75:4d:8d:f9:7a:03:
         e2:63:d4:57:65:75:b9:5e:da:d8:91:9a:6d:21:be:13:5b:2c:
         33:ec:b2:77:ee:e7:24:18:3a:56:a4:7f:e7:55:c7:f3:2f:b1:
         94:59:b5:42:7e:22:d3:2b:c9:58:b8:22:a5:be:ab:42:26:43:
         f5:80:1b:bf:1f:48:47:0f:8a:5d:27:e1:26:32:61:c4:39:88:
         ae:e1:ef:3a:c0:0e:fd:08:66:af:94:84:d1:15:98:2e:0a:f3:
         52:e9:89:31:f5:48:17:7d:58:69:0d:c2:ec:c8:cf:f1:b3:9d:
         c6:ff:63:72:8a:7e:08:f6:af:c3:36:9c:ae:6e:0e:d1:e8:c0:
         1e:c3:bb:90:05:8e:0b:08:ce:37:5b:fa:6c:01:22:4e:4d:1e:
         db:70:1f:2c:89:a4:1c:bb:86:fb:0f:e1:b1:d2:e6:05:1c:0a:
         2e:8e:b0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:05 2026 by rpki-client