Error: rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
File:                     AfVtzr_vO4iPtcCITF0ZFyWORaM.mft (raw, json)
Hash identifier:          i8xhKsgS+zPuf7amNDq5jupIlUZPqcdZdelMDuPdQM0=
Subject key identifier:   4D:D8:77:A1:72:A0:D1:7D:92:12:FA:C6:AF:AB:BD:17:D8:7A:ED:FF
Authority key identifier: 01:F5:6D:CE:BF:EF:3B:88:8F:B5:C0:88:4C:5D:19:17:25:8E:45:A3
Certificate issuer:       /CN=F362D276AF/serialNumber=01F56DCEBFEF3B888FB5C0884C5D1917258E45A3
Certificate serial:       02EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AfVtzr_vO4iPtcCITF0ZFyWORaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
Manifest number:          02EE
Signing time:             Wed 07 Oct 2026 04:32:02 +0000
Manifest this update:     Wed 07 Oct 2026 04:32:02 +0000
Manifest next update:     Fri 09 Oct 2026 04:32:02 +0000
Files and hashes:         1: AfVtzr_vO4iPtcCITF0ZFyWORaM.crl (hash: C7sfhjB05Td78+knWsfgCsWIXQLO9OGS2LWUpbac758=)
                          2: 44B4293280DA11EF82CAAF8B762E951A.roa (hash: JpEuKkjfhV0QAzt6LDFVNnb+azEcOUEfekHUP5VBwUI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AfVtzr_vO4iPtcCITF0ZFyWORaM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 04:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D276AF, serialNumber=01F56DCEBFEF3B888FB5C0884C5D1917258E45A3
        Validity
            Not Before: Oct  7 04:32:02 2026 GMT
            Not After : Oct  9 04:32:02 2026 GMT
        Subject: CN=6ac5cb42-41b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:05:ab:e0:88:5b:0f:d0:8b:0e:66:f2:ca:b6:
                    44:f6:ec:5d:55:62:32:6d:92:13:9d:ba:b3:cb:5d:
                    24:4b:04:3e:23:2f:9a:fc:f0:53:56:be:bc:28:e1:
                    6d:61:35:66:0f:51:53:17:50:1c:e8:e8:6e:5c:e9:
                    85:53:9c:73:d4:a5:f9:b0:46:30:51:cf:9c:90:a8:
                    62:cc:bc:97:57:e7:f4:5d:14:bf:b2:95:a5:ec:42:
                    a7:ad:52:7b:5d:d6:51:23:1d:36:9a:94:9d:36:50:
                    3e:3e:62:ec:2c:b6:ee:fa:c5:13:e5:a4:1f:42:28:
                    0c:ee:7a:fb:32:a0:fc:79:d9:83:3d:db:23:24:ea:
                    4b:0b:bd:1d:1b:ad:f0:4f:33:73:1c:e2:67:f9:f4:
                    e1:e9:0e:e4:9f:eb:fd:06:e5:4b:8e:ca:80:b1:6c:
                    db:a0:1c:d5:29:23:ef:99:b0:14:37:53:3b:93:b3:
                    66:8e:95:fd:72:ff:cb:aa:55:11:a3:77:f1:37:cd:
                    4b:53:bb:d1:0c:1a:47:fb:28:14:8f:63:dd:ac:51:
                    32:21:44:0f:71:0e:75:81:a0:c6:99:08:13:46:9c:
                    0b:ba:0f:97:bb:22:12:36:f4:f4:ee:06:ac:aa:8b:
                    6d:f3:fc:1a:4b:41:72:66:9a:ee:43:a7:28:08:ac:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D8:77:A1:72:A0:D1:7D:92:12:FA:C6:AF:AB:BD:17:D8:7A:ED:FF
            X509v3 Authority Key Identifier:
                keyid:01:F5:6D:CE:BF:EF:3B:88:8F:B5:C0:88:4C:5D:19:17:25:8E:45:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AfVtzr_vO4iPtcCITF0ZFyWORaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D276/D1D2999080D311EF9E54A865762E951A/AfVtzr_vO4iPtcCITF0ZFyWORaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:5a:38:d2:16:a6:84:71:54:15:eb:2b:08:2c:58:91:40:64:
         93:72:ad:36:62:38:de:9e:6a:88:dd:93:78:53:9c:4a:5e:97:
         d9:03:8d:2f:0c:44:73:6f:8c:a9:33:cd:c5:ef:97:a4:61:b6:
         f0:32:cf:8f:e6:b4:35:2d:f6:4d:0b:01:a1:4c:c7:6e:c4:17:
         27:a5:74:6f:9b:1c:a8:5b:81:d8:41:ff:71:29:6d:68:91:ea:
         8d:d2:13:8f:a3:1f:8c:02:37:0c:2d:28:29:d1:d4:11:bd:d4:
         7a:99:64:59:d7:0b:c7:43:b4:fd:59:35:7b:e8:83:6c:b4:18:
         7f:9b:8e:a6:b5:40:49:24:f1:75:11:f0:5d:fb:b9:f5:ce:eb:
         7d:ac:45:0c:9c:b4:b4:22:c2:41:38:17:3c:6e:fd:72:93:ed:
         8f:01:76:44:c9:8a:73:c7:4d:1b:d4:0f:a4:50:43:72:53:18:
         83:d3:7d:64:aa:8f:80:bf:d6:d4:84:63:2d:45:80:51:c2:47:
         ad:53:15:f0:56:49:31:73:30:e4:23:e4:7e:21:54:2f:51:f2:
         33:20:a2:16:f6:22:bf:14:62:42:f3:52:31:23:85:19:8d:28:
         fc:f8:c2:4a:de:17:c9:16:ba:63:70:f3:6b:12:33:4c:5f:6f:
         17:e2:fe:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:27:47 2026 by rpki-client