Error: rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
File:                     WVlvdhVYQOfUJnWNllJakxzZR40.mft (raw, json)
Hash identifier:          GgIFYQ6/fs5KaNttvvAjJ+cVzhs4yk35aB4l009GC+c=
Subject key identifier:   BF:F6:CD:E6:03:EA:3B:7D:D2:E1:FC:E4:C8:EE:E7:CB:DB:53:C8:28
Authority key identifier: 59:59:6F:76:15:58:40:E7:D4:26:75:8D:96:52:5A:93:1C:D9:47:8D
Certificate issuer:       /CN=F36776F1AF/serialNumber=59596F76155840E7D426758D96525A931CD9478D
Certificate serial:       02AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/WVlvdhVYQOfUJnWNllJakxzZR40.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
Manifest number:          02AB
Signing time:             Sun 11 Oct 2026 04:42:26 +0000
Manifest this update:     Sun 11 Oct 2026 04:42:26 +0000
Manifest next update:     Tue 13 Oct 2026 04:42:26 +0000
Files and hashes:         1: WVlvdhVYQOfUJnWNllJakxzZR40.crl (hash: d+hs8ylDY56zlUHcJHIbdEeR3FydFYZ6UeDnB/qx7O0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
                          rsync://rpki.afrinic.net/repository/afrinic/WVlvdhVYQOfUJnWNllJakxzZR40.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36776F1AF, serialNumber=59596F76155840E7D426758D96525A931CD9478D
        Validity
            Not Before: Oct 11 04:42:26 2026 GMT
            Not After : Oct 13 04:42:26 2026 GMT
        Subject: CN=6acb13b2-8dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f0:33:aa:88:fe:00:8a:23:2e:10:68:84:82:
                    91:7e:ed:e6:66:6f:04:5c:a3:1c:ce:ab:08:ae:82:
                    e4:70:a6:27:d9:07:79:1f:7b:a2:03:f4:14:32:45:
                    14:d3:fe:a8:a7:ab:d6:27:28:88:b1:8d:2f:45:56:
                    89:35:5a:fa:76:81:0a:12:ca:72:90:c8:31:cd:2c:
                    ad:27:2c:9e:b7:db:3c:41:75:91:e7:95:8d:80:41:
                    27:ba:c3:c7:97:32:05:0c:53:3b:c6:4d:97:79:30:
                    e0:ae:a3:a3:ab:58:ec:3f:dd:6c:3c:ea:60:d2:fc:
                    13:7b:75:5c:51:3e:ad:6c:4a:7e:4f:7e:ed:1a:5c:
                    59:c4:02:9d:92:8f:8f:09:95:2a:dd:ea:65:7e:1a:
                    b0:ad:08:f3:cf:2a:ad:a4:91:72:31:46:7c:7d:a3:
                    e9:04:b7:99:65:3a:19:9c:37:31:08:29:6f:71:e0:
                    fb:7c:18:67:cf:b7:5d:8a:ae:2c:c7:16:3b:33:a8:
                    c4:15:ce:32:28:fc:6b:eb:bb:ab:4d:14:e0:ab:c3:
                    16:6a:40:2c:26:4c:09:60:08:00:dd:c3:ec:93:4c:
                    63:cc:02:27:6e:d8:7f:49:3f:2d:24:0f:a9:c2:83:
                    dc:6f:de:13:5f:7f:a7:0d:0a:8b:65:b4:3b:19:6e:
                    ce:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F6:CD:E6:03:EA:3B:7D:D2:E1:FC:E4:C8:EE:E7:CB:DB:53:C8:28
            X509v3 Authority Key Identifier:
                keyid:59:59:6F:76:15:58:40:E7:D4:26:75:8D:96:52:5A:93:1C:D9:47:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/WVlvdhVYQOfUJnWNllJakxzZR40.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/6F1EA592B89511EFAB953F6B762E951A/WVlvdhVYQOfUJnWNllJakxzZR40.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:7e:3c:59:95:27:8e:4a:99:ce:d5:1a:60:d5:d3:df:5d:17:
         b9:b7:92:3d:87:51:36:06:36:a8:5a:e4:47:d5:02:b3:e6:cc:
         52:00:d4:25:77:10:15:6f:e9:a6:34:14:06:19:f8:7b:f8:49:
         df:d3:6d:51:fc:95:89:67:38:0d:38:31:66:14:dd:bc:d7:18:
         ea:95:cb:8a:f5:8a:78:fb:9d:f2:76:92:ba:f9:f9:0b:1e:9d:
         26:44:cb:da:23:a7:e5:72:02:6f:d0:c4:6f:f1:66:e1:7c:a2:
         6a:68:b5:a7:7d:89:71:d6:f8:d5:48:28:83:4e:7e:fa:8d:39:
         10:f6:ac:7b:6a:3a:c7:0b:d9:85:e8:ec:bd:c8:04:df:c7:79:
         01:4b:5b:99:43:fb:de:b3:6f:70:ae:b7:b1:63:03:9e:c5:9e:
         96:d9:9b:7f:af:ab:9d:75:4e:ce:1d:4c:43:a3:19:aa:7d:18:
         91:67:b9:28:00:c8:c4:ed:e1:72:42:17:3a:c1:7b:48:f2:a7:
         ed:bd:8b:6b:d2:52:8b:c0:14:90:bf:d0:8b:50:4b:0e:4f:32:
         34:b6:4a:7c:bf:c1:a7:dc:bc:71:e5:f3:cd:7c:c0:4e:ff:94:
         77:d1:3a:65:50:96:a4:02:20:43:86:f8:81:de:81:9e:45:20:
         f6:22:5a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:21:02 2026 by rpki-client