Error: rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
File:                     FVNwAi5GD0z62wu7AyLauREShM4.mft (raw, json)
Hash identifier:          3mqPZqp1Dj3EZuOHWJjbxvn9f2Uo/brWxOC/9QzOow8=
Subject key identifier:   DF:C9:A6:3A:1A:48:C7:BB:02:DD:1E:49:A8:2E:24:C6:16:E3:3E:45
Authority key identifier: 15:53:70:02:2E:46:0F:4C:FA:DB:0B:BB:03:22:DA:B9:11:12:84:CE
Certificate issuer:       /CN=F361E5BDAF/serialNumber=155370022E460F4CFADB0BBB0322DAB9111284CE
Certificate serial:       108B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
Manifest number:          108A
Signing time:             Wed 14 Oct 2026 00:50:30 +0000
Manifest this update:     Wed 14 Oct 2026 00:50:30 +0000
Manifest next update:     Fri 16 Oct 2026 00:50:30 +0000
Files and hashes:         1: FVNwAi5GD0z62wu7AyLauREShM4.crl (hash: 7vthCN8bBc8MKvefL1KXxJvqfbR038WyefFmEa8Zixk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:11:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4235 (0x108b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E5BDAF, serialNumber=155370022E460F4CFADB0BBB0322DAB9111284CE
        Validity
            Not Before: Oct 14 00:50:30 2026 GMT
            Not After : Oct 16 00:50:30 2026 GMT
        Subject: CN=6aced1d6-ed8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:ff:ca:04:1e:5c:53:ac:4e:f1:1e:c9:40:
                    8d:1a:3a:ef:67:b2:1f:2d:20:c4:ee:68:6a:33:9e:
                    e2:e4:ae:3a:48:f4:30:7d:3e:2b:de:3c:a6:bc:0c:
                    1b:f6:ff:9a:97:d2:9b:5e:07:da:48:e4:24:b7:04:
                    38:0d:cf:45:62:9e:0b:07:78:08:eb:8f:0b:1d:7f:
                    7c:25:9f:1f:06:85:f3:28:2f:0b:58:42:de:83:51:
                    40:8c:cc:09:11:f1:ea:b2:9e:6e:e1:e1:10:07:08:
                    2f:ae:84:d7:e9:d7:31:1a:59:cc:cc:88:91:f1:f6:
                    62:2b:2f:69:fc:09:1c:d3:32:46:97:5b:63:31:48:
                    64:7b:0d:55:99:4d:bf:0a:a1:cc:b9:c6:33:97:0f:
                    c6:4f:76:1f:09:74:37:ef:a7:e4:9e:1b:d4:f7:d8:
                    b2:12:53:64:44:21:bc:ab:ad:da:3b:d8:1b:e5:d5:
                    9c:dc:e9:47:c6:5d:42:f1:0b:c7:67:59:8e:a2:a3:
                    6f:37:7f:3a:8e:99:58:dd:d8:d0:77:1a:85:77:7a:
                    49:08:89:30:d1:7e:0a:51:3f:54:48:81:26:0d:61:
                    41:91:6c:1f:ee:e5:2e:b9:20:99:d4:1a:4b:7a:f2:
                    62:e6:0c:6a:f9:d1:fa:f9:56:c0:19:e0:6d:36:61:
                    51:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C9:A6:3A:1A:48:C7:BB:02:DD:1E:49:A8:2E:24:C6:16:E3:3E:45
            X509v3 Authority Key Identifier:
                keyid:15:53:70:02:2E:46:0F:4C:FA:DB:0B:BB:03:22:DA:B9:11:12:84:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FVNwAi5GD0z62wu7AyLauREShM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E5BD/9BAAB464061D11E58A5F384EF8AEA228/FVNwAi5GD0z62wu7AyLauREShM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:84:d0:a3:a9:78:33:a3:35:36:28:02:9c:0d:cd:05:13:d2:
         7b:26:55:ef:94:de:4c:51:20:35:2b:f1:d7:6c:26:72:20:5b:
         a0:e2:76:20:25:cc:96:98:93:df:d9:df:bd:cb:f7:6e:4e:76:
         66:2e:85:5b:9f:f5:e0:97:d4:7a:fe:71:ea:a5:64:da:ce:df:
         e6:37:74:05:69:9e:f1:46:b6:56:e9:d5:7d:98:6e:b9:22:b7:
         67:44:c5:ae:06:41:9a:43:e4:73:57:f3:23:f0:f9:5b:6c:89:
         46:c5:69:04:a5:02:54:17:e4:ef:a0:22:e1:68:3a:f5:10:21:
         c9:90:6d:21:be:9a:f2:c8:da:06:d8:43:26:fb:63:d5:dc:c3:
         6c:d6:3f:1e:0d:c0:6a:89:97:29:ac:1f:dd:5f:df:83:68:01:
         47:d1:62:6b:72:f8:b4:32:70:1b:52:96:e8:62:d4:f7:32:51:
         49:e8:fb:87:c3:ee:62:61:c2:f3:79:b2:d7:a5:41:61:83:93:
         3d:11:18:69:81:c3:19:42:b4:87:cd:b9:7d:4d:4c:a8:94:e3:
         97:06:12:78:af:7d:fa:c3:2c:ae:35:77:82:87:d6:a3:f2:ae:
         ca:cf:01:55:1e:96:36:01:cc:7f:22:c7:fa:22:5d:d9:ab:95:
         1c:45:46:28
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICEIswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUU1QkRBRjExMC8GA1UEBRMoMTU1MzcwMDIyRTQ2MEY0Q0ZBREIwQkJCMDMyMkRB
QjkxMTEyODRDRTAeFw0yNjEwMTQwMDUwMzBaFw0yNjEwMTYwMDUwMzBaMBgxFjAU
BgNVBAMTDTZhY2VkMWQ2LWVkOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfvf/KBB5cU6xO8R7JQI0aOu9nsh8tIMTuaGoznuLkrjpI9DB9PivePKa8
DBv2/5qX0pteB9pI5CS3BDgNz0VingsHeAjrjwsdf3wlnx8GhfMoLwtYQt6DUUCM
zAkR8eqynm7h4RAHCC+uhNfp1zEaWczMiJHx9mIrL2n8CRzTMkaXW2MxSGR7DVWZ
Tb8Kocy5xjOXD8ZPdh8JdDfvp+SeG9T32LISU2REIbyrrdo72Bvl1Zzc6UfGXULx
C8dnWY6io283fzqOmVjd2NB3GoV3ekkIiTDRfgpRP1RIgSYNYUGRbB/u5S65IJnU
Gkt68mLmDGr50fr5VsAZ4G02YVFNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU38mm
OhpIx7sC3R5JqC4kxhbjPkUwHwYDVR0jBBgwFoAUFVNwAi5GD0z62wu7AyLauRES
hM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFFNUJELzlCQUFCNDY0MDYxRDExRTU4QTVGMzg0RUY4QUVBMjI4L0ZWTndB
aTVHRDB6NjJ3dTdBeUxhdVJFU2hNNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZWTndBaTVHRDB6NjJ3dTdBeUxhdVJFU2hNNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUU1QkQvOUJBQUI0NjQwNjFEMTFFNThBNUYzODRFRjhB
RUEyMjgvRlZOd0FpNUdEMHo2Mnd1N0F5TGF1UkVTaE00Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuhNCjqXgzozU2KAKcDc0FE9J7JlXv
lN5MUSA1K/HXbCZyIFug4nYgJcyWmJPf2d+9y/duTnZmLoVbn/Xgl9R6/nHqpWTa
zt/mN3QFaZ7xRrZW6dV9mG65IrdnRMWuBkGaQ+RzV/Mj8PlbbIlGxWkEpQJUF+Tv
oCLhaDr1ECHJkG0hvpryyNoG2EMm+2PV3MNs1j8eDcBqiZcprB/dX9+DaAFH0WJr
cvi0MnAbUpboYtT3MlFJ6PuHw+5iYcLzebLXpUFhg5M9ERhpgcMZQrSHzbl9TUyo
lOOXBhJ4r336wyyuNXeCh9aj8q7KzwFVHpY2Acx/Isf6Il3Zq5UcRUYo
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:08:28 2026 by rpki-client