Error: rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
File:                     qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft (raw, json)
Hash identifier:          VSbjlm8fxuHULl6WhLxZbxeQAktrJrv++dcqat+D2ws=
Subject key identifier:   01:45:B3:30:D6:F9:09:B4:36:2E:5F:A2:7A:E5:D8:47:24:4A:D0:BD
Authority key identifier: AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
Certificate issuer:       /CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Certificate serial:       0311
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
Manifest number:          0310
Signing time:             Mon 12 Oct 2026 04:27:11 +0000
Manifest this update:     Mon 12 Oct 2026 04:27:11 +0000
Manifest next update:     Wed 14 Oct 2026 04:27:11 +0000
Files and hashes:         1: qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl (hash: bQtfUB+VDck4u+pkS8B4qq6zQYVHGajFNPjwJQoZ5z8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                          rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 04:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AR, serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
        Validity
            Not Before: Oct 12 04:27:11 2026 GMT
            Not After : Oct 14 04:27:11 2026 GMT
        Subject: CN=6acc619f-9a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:bf:10:d8:41:a5:c3:68:9a:82:5f:a9:20:
                    50:40:54:8d:cd:92:cb:e6:3c:11:67:a6:3a:90:1c:
                    30:17:71:5d:85:78:5c:05:cb:17:e5:4c:06:6b:e1:
                    49:9c:19:dc:33:bb:52:49:1d:5f:1e:79:72:b3:f5:
                    60:75:df:28:3f:1d:24:92:eb:fc:07:c0:2c:09:72:
                    ff:2d:0b:1c:98:8a:70:56:3e:54:3e:35:1f:59:a0:
                    3c:49:75:e8:94:c6:c9:5a:6b:b0:05:8b:6a:8b:0c:
                    af:35:0a:29:e2:4e:81:f4:46:8f:ae:58:e2:bb:c4:
                    bc:f1:51:ff:93:79:f9:c7:f2:17:34:1b:d9:6d:03:
                    3e:a1:55:ac:39:8b:77:be:b8:98:46:d4:3e:15:b2:
                    f4:4e:33:45:7a:b4:c1:56:17:7a:0b:47:2f:2e:4e:
                    0d:e2:de:3a:36:8e:90:73:a2:14:c1:12:c4:a1:05:
                    2c:68:12:b7:05:77:1a:07:ae:46:33:b3:c4:b1:2c:
                    b1:f5:1b:b5:d5:e4:41:67:75:fa:69:e2:75:6e:f3:
                    5b:8f:72:a1:12:e2:7f:af:3e:72:a6:70:45:1b:9d:
                    8e:50:c3:e4:06:a4:cc:d5:37:92:99:b3:95:d6:d1:
                    49:25:62:44:ec:78:07:df:e0:3f:ad:cd:2d:8c:b4:
                    b5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:45:B3:30:D6:F9:09:B4:36:2E:5F:A2:7A:E5:D8:47:24:4A:D0:BD
            X509v3 Authority Key Identifier:
                keyid:AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:92:c6:24:30:f3:73:1f:be:97:18:53:1a:ca:0e:1e:5e:
         4e:49:f9:48:44:f8:8f:0b:2c:ed:5e:15:93:2c:3e:15:b6:70:
         92:0b:48:8d:e3:d3:b3:4b:8b:93:b8:e7:f3:87:12:ba:fe:01:
         6c:5c:26:4c:86:b2:14:d6:d0:a1:24:5f:0a:2e:25:91:b2:f0:
         50:7b:e5:c5:a5:2c:8f:f4:65:94:0f:6a:3d:ae:48:bb:5c:b8:
         69:62:2c:78:81:62:15:13:f2:fc:a7:00:b1:62:8d:67:61:45:
         c9:d3:59:6b:c0:8d:74:11:86:ce:ac:75:45:42:f2:bd:6b:0e:
         89:67:5e:d7:90:c3:8b:c7:0f:db:27:b2:0b:e5:ad:6a:e7:82:
         98:6b:3e:36:d5:ea:7b:22:9c:93:4e:19:2c:d7:63:e3:50:76:
         33:b9:3a:8b:b4:f0:80:61:c9:82:20:69:9c:d1:93:d0:bb:65:
         e4:52:e8:22:30:40:01:03:61:29:70:c4:9b:ba:7a:ec:fd:9a:
         28:b6:69:95:b3:39:66:6c:1c:08:ca:42:6b:63:52:03:7f:d0:
         86:de:e5:43:08:c8:d3:c2:b9:aa:91:0e:fe:2f:f8:57:59:de:
         be:2c:90:70:16:bd:74:48:1b:43:10:81:08:51:ad:86:9f:84:
         90:f5:b4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:37:50 2026 by rpki-client