Error: rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft (raw, json)
Hash identifier:          Byhabg2yFhyvYxxO+Ztb7MFv+MiCq/aMNH5crgljAmE=
Subject key identifier:   1D:1F:5C:D9:63:B3:E7:C0:8F:43:D6:E7:15:C3:14:AF:B4:F7:FA:C1
Authority key identifier: 5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Certificate issuer:       /CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Certificate serial:       031A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
Manifest number:          0319
Signing time:             Tue 22 Sep 2026 04:22:39 +0000
Manifest this update:     Tue 22 Sep 2026 04:22:39 +0000
Manifest next update:     Thu 24 Sep 2026 04:22:39 +0000
Files and hashes:         1: XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl (hash: e33syWQZgGyNpGJ0O5DviEi92hul821IVyXGWCZt/Pc=)
                          2: 47D8021A53D411EFA7C83C74762E951A.roa (hash: QwK+XpG/BTzSdMaFzgcL2FXrrpo9GOI3wltkdoXtHnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627065AF, serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
        Validity
            Not Before: Sep 22 04:22:39 2026 GMT
            Not After : Sep 24 04:22:39 2026 GMT
        Subject: CN=6ab2028f-58cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e0:4f:fa:28:d2:c3:da:c5:e0:44:4a:fa:c1:
                    62:8b:98:77:79:41:4d:e5:64:2c:d0:87:c7:2e:3b:
                    38:a9:ea:9b:64:6b:47:7e:6f:ce:d9:b2:76:7e:5c:
                    52:96:bd:04:4a:5f:70:fb:0c:08:63:c6:fd:a0:a3:
                    7f:18:df:3f:2d:d3:96:8e:73:14:b4:11:7a:30:b9:
                    74:3c:c1:c5:e6:f3:79:39:6c:d4:85:5f:73:48:69:
                    1c:64:14:0c:8a:67:6e:00:78:8e:e9:c3:2c:c3:73:
                    63:d0:42:2f:df:08:f7:6b:56:53:eb:a4:27:33:0c:
                    6c:90:2b:d4:a8:55:1c:9a:4a:94:7c:f3:f7:bc:14:
                    a2:2e:6b:ab:13:39:57:ba:89:7b:b5:d7:5e:67:1b:
                    25:40:95:b4:e7:60:c2:a4:be:51:ca:58:55:d6:1d:
                    cf:0f:ca:31:5c:f9:ff:66:d6:fc:1a:ee:0a:c6:8d:
                    9f:a0:80:bd:43:b7:58:86:01:ee:28:3e:64:dd:e3:
                    e3:59:e3:b1:4e:f5:fa:1f:16:5c:5a:24:75:c9:44:
                    32:87:fb:cc:2f:28:01:b4:72:ef:64:97:0d:4a:fe:
                    13:22:27:13:56:44:3a:ff:c9:aa:3d:aa:e2:8e:df:
                    49:69:e2:7f:b2:8d:2f:7c:62:66:5a:6d:b7:e2:37:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1F:5C:D9:63:B3:E7:C0:8F:43:D6:E7:15:C3:14:AF:B4:F7:FA:C1
            X509v3 Authority Key Identifier:
                keyid:5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:4e:de:3b:1a:83:91:6c:37:1a:6a:8e:a0:06:fd:86:4d:95:
         34:8f:de:8c:0d:82:19:bd:27:42:ba:0d:96:a1:83:96:e9:93:
         68:cd:20:ee:b7:18:f5:37:2a:89:3a:98:31:d1:aa:cb:7b:18:
         47:2d:c8:09:94:8d:27:f4:db:57:fa:03:cb:50:94:73:ef:08:
         f2:61:85:80:a1:4e:4d:60:12:7a:42:23:a0:9d:6f:0a:d7:05:
         4b:39:f7:82:20:f8:fe:ab:f2:6b:99:24:be:f5:76:dd:ff:01:
         5a:ac:4d:5b:19:40:42:a7:5e:62:f7:3f:ba:9b:79:35:e2:ad:
         80:52:0c:ad:7f:27:78:e1:d0:8a:f3:7f:00:89:aa:06:dd:81:
         a6:55:8b:8e:16:d9:48:eb:9d:44:c7:eb:d3:b0:0e:1f:74:37:
         67:f3:ac:5c:3e:8e:ef:de:c3:f2:06:c9:ee:89:ba:c1:02:9d:
         1d:40:3f:4c:ab:75:3e:f2:72:2f:3d:48:32:ee:76:39:2c:cb:
         46:36:6f:f4:85:57:ac:a6:21:86:80:d2:20:56:13:94:92:8b:
         73:5b:02:8b:2b:f3:8f:26:ac:c8:ed:e2:bf:e3:0d:67:fd:d9:
         71:73:03:84:62:c0:1d:5a:02:88:64:ce:40:cf:df:91:f5:2c:
         0c:8a:9d:61
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAxowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjcwNjVBRjExMC8GA1UEBRMoNUMwRThGMUU4QjkwRkREMjk0QjU0RDU3MzA5MDEz
RkM1QTA2QTM1QjAeFw0yNjA5MjIwNDIyMzlaFw0yNjA5MjQwNDIyMzlaMBgxFjAU
BgNVBAMTDTZhYjIwMjhmLTU4Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC94E/6KNLD2sXgREr6wWKLmHd5QU3lZCzQh8cuOzip6ptka0d+b87ZsnZ+
XFKWvQRKX3D7DAhjxv2go38Y3z8t05aOcxS0EXowuXQ8wcXm83k5bNSFX3NIaRxk
FAyKZ24AeI7pwyzDc2PQQi/fCPdrVlPrpCczDGyQK9SoVRyaSpR88/e8FKIua6sT
OVe6iXu1115nGyVAlbTnYMKkvlHKWFXWHc8PyjFc+f9m1vwa7grGjZ+ggL1Dt1iG
Ae4oPmTd4+NZ47FO9fofFlxaJHXJRDKH+8wvKAG0cu9klw1K/hMiJxNWRDr/yao9
quKO30lp4n+yjS98YmZabbfiN94NAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHR9c
2WOz58CPQ9bnFcMUr7T3+sEwHwYDVR0jBBgwFoAUXA6PHouQ/dKUtU1XMJAT/FoG
o1swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3MDY1LzY1QUQzNjU4NTNEMzExRUY5QkI3NkY2Rjc2MkU5NTFBL1hBNlBI
b3VRX2RLVXRVMVhNSkFUX0ZvR28xcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hBNlBIb3VRX2RLVXRVMVhNSkFUX0ZvR28xcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjcwNjUvNjVBRDM2NTg1M0QzMTFFRjlCQjc2RjZGNzYy
RTk1MUEvWEE2UEhvdVFfZEtVdFUxWE1KQVRfRm9HbzFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZTt47GoORbDcaao6gBv2GTZU0j96M
DYIZvSdCug2WoYOW6ZNozSDutxj1NyqJOpgx0arLexhHLcgJlI0n9NtX+gPLUJRz
7wjyYYWAoU5NYBJ6QiOgnW8K1wVLOfeCIPj+q/JrmSS+9Xbd/wFarE1bGUBCp15i
9z+6m3k14q2AUgytfyd44dCK838AiaoG3YGmVYuOFtlI651Ex+vTsA4fdDdn86xc
Po7v3sPyBsnuibrBAp0dQD9Mq3U+8nIvPUgy7nY5LMtGNm/0hVespiGGgNIgVhOU
kotzWwKLK/OPJqzI7eK/4w1n/dlxcwOEYsAdWgKIZM5Az9+R9SwMip1h
-----END CERTIFICATE-----
Generated at Wed Sep 23 02:22:49 2026 by rpki-client