Error: rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
File:                     7P8kJrGvinEgph0zdg6QjBWcau8.mft (raw, json)
Hash identifier:          ztjSdtZudMIrjvOSQ4xo4N0Z6Iqd3r/YlGD0W4Y4bEc=
Subject key identifier:   61:31:51:C3:4D:17:F2:A6:40:D8:BE:31:38:AB:B9:87:6C:E2:1C:D0
Authority key identifier: EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
Certificate issuer:       /CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Certificate serial:       0AB8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
Manifest number:          0AB2
Signing time:             Sun 20 Sep 2026 01:23:46 +0000
Manifest this update:     Sun 20 Sep 2026 01:23:45 +0000
Manifest next update:     Tue 22 Sep 2026 01:23:45 +0000
Files and hashes:         1: 7P8kJrGvinEgph0zdg6QjBWcau8.crl (hash: uQqM/AeF/ncpvuxiawXZCL4hpIs9R4UPkKLRWdty1CA=)
                          2: AD0F53B2BBB711F0AC4263C8DAE4EC9C.roa (hash: QTqu/VLWHbygv3MQ7118Jtj8nMfZaKlVi2bdNPp1Ims=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2744 (0xab8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AF, serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
        Validity
            Not Before: Sep 20 01:23:45 2026 GMT
            Not After : Sep 22 01:23:45 2026 GMT
        Subject: CN=6aaf35a2-48d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:f9:40:57:22:ed:8f:14:7a:65:2c:32:b3:
                    46:77:9c:86:79:65:7a:2c:1d:30:f2:43:9a:9b:1b:
                    42:7b:ac:55:ac:b2:0d:b2:fb:ad:5f:3b:90:46:5a:
                    fc:e4:53:92:cb:be:b2:6f:9e:3b:92:10:b3:e9:96:
                    9a:61:fb:b0:46:6b:fa:cc:56:a1:c5:20:67:12:d0:
                    bf:c4:db:df:16:b7:68:11:98:04:ef:45:09:69:b9:
                    68:12:cc:cb:2c:9e:5b:89:38:d6:a5:55:67:0f:59:
                    b1:a6:32:98:a4:ac:de:07:00:12:0e:a4:62:f5:6e:
                    23:2c:e8:d3:b3:79:b3:73:24:c9:b7:14:5f:b6:71:
                    cc:02:16:9e:31:24:7c:b3:0c:c8:fe:8d:62:3a:7f:
                    de:7a:b2:3a:86:24:4b:7d:86:c2:ba:0d:7c:1d:8b:
                    62:46:83:f5:2d:3b:f8:ed:e0:5e:08:e8:f9:10:d5:
                    79:71:b5:73:cb:64:e0:3f:90:24:f2:f1:04:9d:8b:
                    cd:9e:e3:fe:c7:d7:d7:fa:50:88:61:86:b8:05:7e:
                    33:ad:a8:9d:35:6d:09:d3:fe:0b:d3:41:72:e1:fd:
                    0e:41:84:de:6c:39:51:66:91:67:a1:03:80:18:f4:
                    c9:83:fa:7e:95:cd:1e:a7:6e:88:6d:f1:02:a9:77:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:31:51:C3:4D:17:F2:A6:40:D8:BE:31:38:AB:B9:87:6C:E2:1C:D0
            X509v3 Authority Key Identifier:
                keyid:EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b8:7b:86:8e:39:05:6a:ad:16:3d:6d:cc:a7:46:db:fe:d6:
         44:98:7f:1a:70:e7:4e:61:18:8f:dd:51:3f:d6:bc:44:f1:8b:
         7b:4f:2f:99:83:b2:85:5f:e1:d7:30:b3:7e:f4:09:db:29:56:
         4b:7d:da:ce:9f:d1:bd:7b:c3:82:87:e0:36:9e:16:4a:85:ea:
         40:19:d9:7d:72:89:5a:28:96:4f:f0:20:17:26:df:6a:6d:50:
         c4:1e:ff:27:c4:b8:37:af:37:38:50:5d:4d:a2:f5:ef:87:a4:
         97:b9:80:5b:1c:91:a9:b8:11:e8:4a:47:f1:f3:65:d5:b0:30:
         e1:fd:c4:e0:b7:07:d1:be:b8:78:a0:a2:7f:56:4b:34:bf:f7:
         f9:f1:94:a6:38:50:fd:47:59:f3:17:ee:3f:92:8e:68:2f:10:
         99:c2:f2:23:2c:3d:66:bb:37:1e:ba:2c:17:a0:37:16:06:ea:
         7e:a3:bc:97:0c:73:b1:e9:7d:6f:05:8a:54:2b:f8:55:ea:a8:
         33:dc:f8:f3:b7:4f:0f:36:92:4f:a1:d2:88:fd:33:97:da:9b:
         08:25:3b:89:5b:32:26:1a:14:43:1e:62:1b:85:07:ea:b9:93:
         55:87:21:8e:31:4a:4a:73:2b:bd:a4:13:81:1e:93:0d:90:4b:
         ba:8a:0c:43
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCrgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkFGMDJBRjExMC8GA1UEBRMoRUNGRjI0MjZCMUFGOEE3MTIwQTYxRDMzNzYwRTkw
OEMxNTlDNkFFRjAeFw0yNjA5MjAwMTIzNDVaFw0yNjA5MjIwMTIzNDVaMBgxFjAU
BgNVBAMTDTZhYWYzNWEyLTQ4ZDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAXvlAVyLtjxR6ZSwys0Z3nIZ5ZXosHTDyQ5qbG0J7rFWssg2y+61fO5BG
WvzkU5LLvrJvnjuSELPplpph+7BGa/rMVqHFIGcS0L/E298Wt2gRmATvRQlpuWgS
zMssnluJONalVWcPWbGmMpikrN4HABIOpGL1biMs6NOzebNzJMm3FF+2ccwCFp4x
JHyzDMj+jWI6f956sjqGJEt9hsK6DXwdi2JGg/UtO/jt4F4I6PkQ1XlxtXPLZOA/
kCTy8QSdi82e4/7H19f6UIhhhrgFfjOtqJ01bQnT/gvTQXLh/Q5BhN5sOVFmkWeh
A4AY9MmD+n6VzR6nboht8QKpd1STAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYTFR
w00X8qZA2L4xOKu5h2ziHNAwHwYDVR0jBBgwFoAU7P8kJrGvinEgph0zdg6QjBWc
au8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJBRjAyLzNBN0VDRjVFODM4QzExRTk5NTMwQzUxMUY4QUVBMjI4LzdQOGtK
ckd2aW5FZ3BoMHpkZzZRakJXY2F1OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdQOGtKckd2aW5FZ3BoMHpkZzZRakJXY2F1OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkFGMDIvM0E3RUNGNUU4MzhDMTFFOTk1MzBDNTExRjhB
RUEyMjgvN1A4a0pyR3ZpbkVncGgwemRnNlFqQldjYXU4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhuHuGjjkFaq0WPW3Mp0bb/tZEmH8a
cOdOYRiP3VE/1rxE8Yt7Ty+Zg7KFX+HXMLN+9AnbKVZLfdrOn9G9e8OCh+A2nhZK
hepAGdl9colaKJZP8CAXJt9qbVDEHv8nxLg3rzc4UF1NovXvh6SXuYBbHJGpuBHo
Skfx82XVsDDh/cTgtwfRvrh4oKJ/Vks0v/f58ZSmOFD9R1nzF+4/ko5oLxCZwvIj
LD1muzceuiwXoDcWBup+o7yXDHOx6X1vBYpUK/hV6qgz3Pjzt08PNpJPodKI/TOX
2psIJTuJWzImGhRDHmIbhQfquZNVhyGOMUpKcyu9pBOBHpMNkEu6igxD
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:44:15 2026 by rpki-client