Error: rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
File:                     SmfXXBQJ0u538xkN5zXsl-9jDVg.mft (raw, json)
Hash identifier:          5eW4AbDoxDugNc/7zPLvqICpm72d94J9TWc2NqsH1as=
Subject key identifier:   B5:D7:51:EF:3B:FC:48:0C:1C:83:7C:D3:84:86:28:62:06:4A:65:0C
Authority key identifier: 4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58
Certificate issuer:       /CN=F36700DBAF/serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
Certificate serial:       0783
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
Manifest number:          0783
Signing time:             Sat 26 Sep 2026 02:19:34 +0000
Manifest this update:     Sat 26 Sep 2026 02:19:33 +0000
Manifest next update:     Mon 28 Sep 2026 02:19:33 +0000
Files and hashes:         1: SmfXXBQJ0u538xkN5zXsl-9jDVg.crl (hash: 82bRRdbTQtHuVKZXwr72puhrlmSSusxElbVQH9sXZmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1923 (0x783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAF, serialNumber=4A67D75C1409D2EE77F3190DE735EC97EF630D58
        Validity
            Not Before: Sep 26 02:19:33 2026 GMT
            Not After : Sep 28 02:19:33 2026 GMT
        Subject: CN=6ab72bb6-f598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:33:13:34:b0:a7:5d:87:96:e4:e0:a5:5a:72:
                    8f:cf:11:63:9b:1d:94:e0:b0:d5:f9:4b:4f:08:36:
                    b2:3d:74:f8:9b:10:44:d1:e8:22:dd:0c:fd:93:05:
                    17:63:a2:cd:a3:ce:ae:7b:a7:e0:36:3c:6a:38:c5:
                    c6:36:07:16:7c:19:54:53:44:c6:4c:26:6d:aa:b8:
                    7d:86:e3:36:08:3f:cc:39:e8:1b:c9:8c:ea:07:90:
                    05:56:59:cd:2e:22:02:d8:9b:02:af:d2:91:fc:dd:
                    88:88:7b:e7:75:a8:dc:c0:96:9a:b4:4e:07:d0:b0:
                    32:42:39:d2:fe:a0:0a:73:42:38:c8:31:f5:c3:05:
                    56:68:81:56:83:3a:6e:a5:90:e0:12:f9:5b:1f:2b:
                    07:ef:c8:97:0b:45:4b:f4:7f:ed:96:59:23:e0:88:
                    85:3e:5a:9f:51:71:be:59:49:f1:4b:1f:d3:3b:85:
                    ef:31:62:28:fe:8b:1b:52:43:9c:46:b1:63:28:c6:
                    c0:5f:d9:65:38:ac:72:1f:dd:41:25:ab:02:07:e5:
                    a4:0f:2d:e8:ce:d0:31:af:5c:30:ba:bf:f0:ab:4e:
                    0c:00:db:e8:f3:d4:2c:4f:8d:fc:29:51:7f:b4:c9:
                    30:15:a9:d0:fd:1b:c3:37:1d:32:14:b2:64:36:3e:
                    18:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D7:51:EF:3B:FC:48:0C:1C:83:7C:D3:84:86:28:62:06:4A:65:0C
            X509v3 Authority Key Identifier:
                keyid:4A:67:D7:5C:14:09:D2:EE:77:F3:19:0D:E7:35:EC:97:EF:63:0D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmfXXBQJ0u538xkN5zXsl-9jDVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/F9B08F00F50111EB9095E604D8A014CE/SmfXXBQJ0u538xkN5zXsl-9jDVg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:8a:88:0b:2c:90:45:ad:c1:79:d2:1f:40:15:28:fc:58:b6:
         bd:01:20:f9:90:6d:3e:e1:3f:fc:50:23:7a:aa:0a:2e:b6:5a:
         84:33:02:a6:14:90:81:e6:ab:75:73:8b:f3:10:d2:4d:52:9a:
         bd:68:ac:93:cd:36:78:2b:9d:cc:6f:b9:23:f9:3c:1d:94:e2:
         07:a6:f2:30:e1:54:ce:f6:08:7f:0c:a7:47:49:01:e1:26:8f:
         e4:e7:5f:12:d3:e2:8c:00:f8:3a:d9:e3:82:66:a2:04:34:33:
         30:d2:08:b5:d1:03:e8:84:36:a1:41:f4:db:00:92:b7:e4:ea:
         73:20:a4:fa:10:3c:cd:ff:3e:bc:1b:7e:d8:23:b6:18:ee:e8:
         f6:81:44:2d:ba:fe:3c:71:da:cd:81:cd:53:0f:56:1b:33:c9:
         2b:1a:58:d2:9c:20:7b:bd:67:54:8e:dd:bc:03:44:49:ef:4a:
         06:e4:fe:c0:73:2d:0f:11:a3:fd:5e:2b:c4:e6:5f:35:3d:69:
         03:da:84:9c:0f:0c:8b:ac:ff:eb:29:66:33:0e:39:9f:f5:92:
         b3:3c:d4:7b:0a:8e:cb:bf:75:0b:2e:fb:f5:a9:dd:1f:8a:ee:
         cc:60:e8:04:20:91:3b:1a:cf:56:9a:99:c3:a6:12:aa:20:29:
         14:3a:3c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:29:40 2026 by rpki-client