Error: rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
File:                     bssXAorVt9tcd32x3OCXh-SVstE.mft (raw, json)
Hash identifier:          eFN8GJQgSIJ/+JI0c4ZCG70wQ/MEvI4DGQ881TLxMMY=
Subject key identifier:   FD:AA:00:9A:5D:1E:7F:00:FA:5B:C4:92:11:9C:1E:33:E0:67:87:20
Authority key identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
Certificate issuer:       /CN=F3630D7EAF/serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
Certificate serial:       0982
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
Manifest number:          097D
Signing time:             Mon 28 Sep 2026 01:45:05 +0000
Manifest this update:     Mon 28 Sep 2026 01:45:05 +0000
Manifest next update:     Wed 30 Sep 2026 01:45:05 +0000
Files and hashes:         1: bssXAorVt9tcd32x3OCXh-SVstE.crl (hash: rWnEzkCAUeijtTGXgSRr+dnMAzG1ocnDLUWckpeincE=)
                          2: 4C93AD482A7111F1BFB9EECADAE4EC9C.roa (hash: 1Oc7qz+Lk94BWa35i9DuQ6Lqo6kBFCtOUZX3ruT365o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2434 (0x982)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630D7EAF, serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
        Validity
            Not Before: Sep 28 01:45:05 2026 GMT
            Not After : Sep 30 01:45:05 2026 GMT
        Subject: CN=6ab9c6a1-942c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:5a:e3:6e:87:4c:8a:c0:72:e3:ef:bb:a6:
                    8b:ec:09:6b:66:86:af:ef:94:f0:ae:d0:d6:3f:64:
                    b5:04:57:af:22:b7:b3:db:c1:f0:75:d8:6a:ba:05:
                    e5:51:a1:a7:da:63:07:14:0c:d0:17:97:4b:f0:9b:
                    59:58:bc:a6:fb:b9:26:6c:2f:9f:4d:19:5f:c9:44:
                    d8:dd:4d:c6:fa:ad:a0:14:c9:6d:db:ea:1a:9c:3d:
                    80:28:9c:fa:9d:c5:b6:70:d2:a6:73:47:40:fc:07:
                    2b:14:62:d7:33:a1:ba:ba:d7:ad:32:ee:23:bd:53:
                    4c:7c:a5:33:b0:a9:48:48:74:f4:be:9c:2b:cc:15:
                    f1:4e:02:24:b1:f7:e0:ce:e1:b4:bf:50:0f:74:f3:
                    b5:bc:ea:6f:de:86:64:25:92:61:9e:0a:87:68:73:
                    71:17:ac:e2:63:bf:1b:09:46:54:be:42:13:76:cd:
                    0a:c3:d6:d7:de:9b:14:1d:7e:c3:65:84:be:68:e6:
                    f7:48:eb:3a:de:2e:c9:b5:e5:e1:08:36:82:31:d9:
                    2e:c6:fb:19:91:03:69:dc:47:fc:dd:1e:b2:7c:e6:
                    5a:0a:4b:7a:06:85:f8:f9:72:3a:19:59:ea:9d:bb:
                    6a:54:7b:22:59:dc:0d:f8:28:20:c8:7e:3d:67:fc:
                    f7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:AA:00:9A:5D:1E:7F:00:FA:5B:C4:92:11:9C:1E:33:E0:67:87:20
            X509v3 Authority Key Identifier:
                keyid:6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:30:f0:dc:a4:fc:52:71:95:6a:37:32:db:f5:a6:c3:e8:6d:
         06:86:50:ce:56:31:8a:6f:db:f9:b6:05:83:08:e7:b2:e8:69:
         bb:0d:42:1a:58:a3:b7:a4:b8:11:cf:15:9d:e6:11:4b:dd:07:
         2e:b9:4f:cd:24:75:12:30:97:77:ec:f7:4e:19:07:1f:19:85:
         63:17:65:d2:7b:20:ee:60:29:5a:0f:31:ac:68:54:b8:11:0c:
         4b:d7:c0:d8:03:4c:9f:a5:17:a8:8f:43:f8:87:b2:3d:b5:c2:
         67:3f:c6:de:8f:6d:a1:55:5e:42:41:14:83:95:bd:4d:89:18:
         03:26:b8:84:20:d8:7c:7f:a7:49:aa:46:65:4d:ec:45:e8:a9:
         84:95:c4:9e:85:61:a9:8b:05:c3:14:bb:3c:41:b6:e5:9c:2e:
         c9:b4:c2:8b:65:8f:2c:3b:d1:4d:a2:83:5c:7c:a9:d1:a0:3c:
         23:d1:05:0f:ba:a2:e7:39:07:26:56:5c:9e:b6:43:df:66:71:
         5f:d5:cd:dc:60:c3:07:85:4b:0a:67:f3:02:fe:7d:f7:9b:b8:
         f0:04:49:22:58:51:c0:27:df:2f:db:6f:23:cd:6f:e2:f6:58:
         29:27:87:9a:01:71:f7:28:30:2b:a4:c8:a1:f5:1c:d7:79:ff:
         a9:32:35:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:22:05 2026 by rpki-client