Error: rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
File:                     7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft (raw, json)
Hash identifier:          hcphCjT/f2C/rhKsXbe/brE1K0aG0fPc675Z2w/Yaas=
Subject key identifier:   1E:80:B9:84:7E:09:AD:24:F9:2F:B7:8F:D6:1D:E4:5D:FA:30:E5:A1
Authority key identifier: EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04
Certificate issuer:       /CN=F361C3A1RI/serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
Certificate serial:       0B9D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
Manifest number:          0B99
Signing time:             Sun 11 Oct 2026 01:16:10 +0000
Manifest this update:     Sun 11 Oct 2026 01:16:09 +0000
Manifest next update:     Tue 13 Oct 2026 01:16:09 +0000
Files and hashes:         1: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl (hash: apzBRPghdy9UBTjOkvFm+6vtthIqxPoKMzX2eTfga3k=)
                          2: 672BF774187D11F1AA17F08EDAE4EC9C.roa (hash: 6jF1YxAnbb2FfRaYjhnIgikan05PqQq9CZOBEQf8wgQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                          rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:45:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2973 (0xb9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1RI, serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
        Validity
            Not Before: Oct 11 01:16:09 2026 GMT
            Not After : Oct 13 01:16:09 2026 GMT
        Subject: CN=6acae35a-4700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:8d:fd:7f:a7:6b:b1:85:9e:ea:06:10:52:aa:
                    c0:6a:f9:63:8a:0a:03:cb:cb:10:d6:35:97:20:cf:
                    08:29:93:60:a3:7a:81:16:47:d3:af:94:f8:90:71:
                    3d:c6:df:22:1c:c7:8e:38:eb:b6:9a:39:30:c9:36:
                    57:02:c9:e5:08:c8:ee:67:29:15:3d:bb:ca:60:88:
                    1d:a0:dd:f2:ea:6b:08:c3:a3:bc:6a:ed:1d:e5:1b:
                    bf:60:72:be:82:c6:f8:10:2d:b7:72:0c:ae:05:25:
                    7c:b2:9e:b9:42:4b:cb:21:03:94:64:42:20:9f:be:
                    ea:58:30:b3:10:6b:f9:33:c6:e8:18:f2:e5:2c:67:
                    fd:7d:8f:c4:22:ae:31:e7:9b:84:11:9a:f4:75:21:
                    d9:71:c7:b7:ee:46:e9:47:ab:5f:81:1d:54:a5:f6:
                    3e:58:46:81:c2:68:c2:97:f9:45:a8:e3:06:38:e9:
                    3f:b1:76:d4:cd:58:2a:c8:8a:b1:fb:a5:4d:c4:a3:
                    aa:04:b9:9d:03:dd:0f:85:04:bc:a4:86:63:6c:31:
                    76:84:6b:fc:b1:e5:cb:82:08:a9:b0:f8:df:7d:ac:
                    d2:34:ab:df:04:a5:b9:3e:de:76:dc:4d:08:4d:2f:
                    6e:62:b0:b8:a3:21:6f:20:94:0c:84:52:96:66:36:
                    c0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:80:B9:84:7E:09:AD:24:F9:2F:B7:8F:D6:1D:E4:5D:FA:30:E5:A1
            X509v3 Authority Key Identifier:
                keyid:EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:c5:bf:2d:63:69:56:46:b0:fa:13:b4:e8:e7:e3:a7:b8:a8:
         7a:e5:bb:f7:06:a9:61:1c:1d:b7:30:51:30:70:4a:ec:d4:b5:
         59:06:7d:6d:c4:8a:71:c7:b7:0c:49:da:d9:66:cd:31:0a:4e:
         7d:1b:d6:13:40:b1:ff:a7:00:3b:e9:83:8c:00:e2:f7:b2:43:
         5c:3d:50:24:52:50:1d:97:9e:e6:d1:9c:21:f0:0d:27:dd:fc:
         dd:6e:ca:d6:a6:84:e2:6c:dc:70:c9:8a:8c:35:71:ed:c0:71:
         cc:65:98:d1:80:83:5a:17:ea:bb:02:d4:b5:9c:99:04:c2:04:
         91:07:2e:a1:4c:d0:e8:79:d5:e9:fb:df:41:a9:4f:64:02:35:
         a4:59:5f:75:ab:96:7c:20:2c:8e:06:5a:1f:ba:b8:99:fd:47:
         ae:d8:04:9d:10:68:cd:3d:08:04:c9:6d:0d:0c:ca:0a:70:d5:
         e5:31:49:88:39:76:6a:81:9b:7e:f4:b7:d7:2b:b2:91:9a:5a:
         9d:f1:ca:51:b6:8a:33:54:a5:83:a6:cc:6b:34:a0:4f:24:65:
         0f:88:2a:91:72:bb:2a:14:5a:d3:bc:cb:89:3c:51:a1:fc:24:
         c8:6c:9f:c8:49:36:96:71:73:a0:d2:ed:d8:20:42:24:af:f9:
         29:35:74:8b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICC50wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUMzQTFSSTExMC8GA1UEBRMoRUNCQUNCNzE5QUJBNUQzMkJEOTkwRUYzNjg1QjVB
QTM2QjA4Q0EwNDAeFw0yNjEwMTEwMTE2MDlaFw0yNjEwMTMwMTE2MDlaMBgxFjAU
BgNVBAMTDTZhY2FlMzVhLTQ3MDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTjf1/p2uxhZ7qBhBSqsBq+WOKCgPLyxDWNZcgzwgpk2CjeoEWR9OvlPiQ
cT3G3yIcx44467aaOTDJNlcCyeUIyO5nKRU9u8pgiB2g3fLqawjDo7xq7R3lG79g
cr6CxvgQLbdyDK4FJXyynrlCS8shA5RkQiCfvupYMLMQa/kzxugY8uUsZ/19j8Qi
rjHnm4QRmvR1Idlxx7fuRulHq1+BHVSl9j5YRoHCaMKX+UWo4wY46T+xdtTNWCrI
irH7pU3Eo6oEuZ0D3Q+FBLykhmNsMXaEa/yx5cuCCKmw+N99rNI0q98Epbk+3nbc
TQhNL25isLijIW8glAyEUpZmNsAnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUHoC5
hH4JrST5L7eP1h3kXfow5aEwHwYDVR0jBBgwFoAU7LrLcZq6XTK9mQ7zaFtao2sI
ygQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFDM0ExLzQ3REY2RDY2RTBEMDExRThBNTQ2MjExQ0Y4QUVBMjI4LzdMckxj
WnE2WFRLOW1RN3phRnRhbzJzSXlnUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzdMckxjWnE2WFRLOW1RN3phRnRhbzJzSXlnUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MUMzQTEvNDdERjZENjZFMEQwMTFFOEE1NDYyMTFDRjhBRUEy
MjgvN0xyTGNacTZYVEs5bVE3emFGdGFvMnNJeWdRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCxb8tY2lWRrD6E7To5+OnuKh65bv3Bqlh
HB23MFEwcErs1LVZBn1txIpxx7cMSdrZZs0xCk59G9YTQLH/pwA76YOMAOL3skNc
PVAkUlAdl57m0Zwh8A0n3fzdbsrWpoTibNxwyYqMNXHtwHHMZZjRgINaF+q7AtS1
nJkEwgSRBy6hTNDoedXp+99BqU9kAjWkWV91q5Z8ICyOBlofuriZ/Ueu2ASdEGjN
PQgEyW0NDMoKcNXlMUmIOXZqgZt+9LfXK7KRmlqd8cpRtoozVKWDpsxrNKBPJGUP
iCqRcrsqFFrTvMuJPFGh/CTIbJ/ISTaWcXOg0u3YIEIkr/kpNXSL
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:54:17 2026 by rpki-client