Error: rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
File:                     8oCesrM_mm8nojXfSsFD0ZKvTiA.mft (raw, json)
Hash identifier:          Zy9LgNIJtYWacvRmOgDYF90GnWmoVR0jH8hQdygpd80=
Subject key identifier:   73:CF:2E:98:ED:11:24:D7:FB:0F:B3:C9:01:28:BD:3B:68:9A:6C:ED
Authority key identifier: F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20
Certificate issuer:       /CN=F362D462AF/serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
Certificate serial:       0148
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
Manifest number:          0143
Signing time:             Mon 21 Sep 2026 05:14:49 +0000
Manifest this update:     Mon 21 Sep 2026 05:14:48 +0000
Manifest next update:     Wed 23 Sep 2026 05:14:48 +0000
Files and hashes:         1: 8oCesrM_mm8nojXfSsFD0ZKvTiA.crl (hash: 96AvBnznww7Z5pUNjspkqu3ofXy+KJtWlxzOEI3LCgY=)
                          2: B2C8AACAC52F11F0998AD295DAE4EC9C.roa (hash: M1WCEGgxvoFjPYMq+CtmmycDaqSwGszFTRcc1Y1aToY=)
                          3: 45DD78D8C52E11F08D363A8DDAE4EC9C.roa (hash: yfdoYAwEYWo4igb+kX7l8vEmL7IfitH9Vwqq7einS1w=)
                          4: DE3F4FCEC52F11F0BE75EE95DAE4EC9C.roa (hash: ZoPAKhD86vIDvu9auYJyv1OJTVxIksNymQURFZTgdYQ=)
                          5: 26BDEBE4C52F11F0A755A591DAE4EC9C.roa (hash: RjPpOx06Fz/3A2OGNli01TWWFc5ri4vhGZoXWXhU+F8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362D462AF, serialNumber=F2809EB2B33F9A6F27A235DF4AC143D192AF4E20
        Validity
            Not Before: Sep 21 05:14:48 2026 GMT
            Not After : Sep 23 05:14:48 2026 GMT
        Subject: CN=6ab0bd49-0f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:cd:28:0c:bd:e5:8e:d8:eb:98:33:0a:69:
                    94:66:09:c9:2a:b9:2c:f4:9e:03:2e:7f:37:91:51:
                    83:8d:42:00:8d:7c:c9:27:70:80:0a:f3:2e:7c:70:
                    20:0b:5c:2d:ae:d8:80:a7:cd:50:dc:68:00:23:64:
                    5b:30:ad:d5:d6:de:be:3e:c3:51:11:ba:1c:f6:a8:
                    01:dd:43:97:61:54:cc:60:d6:26:7c:0a:c6:f6:49:
                    7e:5d:60:e7:ab:fc:b8:79:00:c8:ed:ed:98:a3:13:
                    a9:4a:d4:b9:fd:40:87:c1:c1:81:79:c7:9f:46:79:
                    c3:48:9d:78:95:2c:3b:1c:9a:23:88:7d:f0:12:d1:
                    5f:12:e9:aa:97:d1:bb:d0:c1:33:70:32:15:56:77:
                    eb:16:79:5c:db:a8:d0:34:b2:90:91:c7:f2:d7:6c:
                    9c:5a:09:e2:92:b3:1a:ae:4a:13:b7:8b:02:e1:cc:
                    05:b3:dd:c1:69:8c:ed:97:8f:5e:d1:de:13:e8:15:
                    e3:fa:9a:f9:ca:10:4b:37:20:d6:74:d1:8b:6f:5e:
                    d3:c3:8a:cb:f5:1e:81:d1:1d:5d:88:7b:91:a2:17:
                    1a:e9:ab:b6:29:6a:b3:f1:7d:0b:cc:30:26:5b:c5:
                    c1:85:3c:6c:15:eb:a5:b3:04:7e:25:fb:6e:3a:fb:
                    66:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CF:2E:98:ED:11:24:D7:FB:0F:B3:C9:01:28:BD:3B:68:9A:6C:ED
            X509v3 Authority Key Identifier:
                keyid:F2:80:9E:B2:B3:3F:9A:6F:27:A2:35:DF:4A:C1:43:D1:92:AF:4E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8oCesrM_mm8nojXfSsFD0ZKvTiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362D462/A57C2528C06011F08EE86AB9DAE4EC9C/8oCesrM_mm8nojXfSsFD0ZKvTiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:4f:10:de:1b:b3:87:2b:d3:89:e7:bf:38:35:12:e5:b7:88:
         47:cc:d0:68:4a:1f:cd:a1:f1:19:e1:03:0d:59:6f:f1:ec:05:
         49:53:fa:07:ea:e9:be:13:6b:25:fb:fc:e7:b8:e8:d1:62:46:
         c9:fc:a8:72:88:ba:06:5c:e4:31:ff:de:b6:e4:3b:8b:9d:54:
         ba:b8:5f:8e:aa:7d:ed:ba:32:a7:ff:fb:dd:bc:3c:1d:4e:db:
         13:99:56:f0:e7:48:da:44:f8:05:00:62:da:a5:3b:73:77:12:
         f6:8a:84:48:c8:8f:95:94:57:87:1b:d2:5f:b0:10:66:0a:83:
         66:9c:0c:43:fd:cd:25:93:24:a2:20:60:89:54:e3:f3:c3:b7:
         44:13:12:ff:a3:f6:c9:96:15:cb:82:54:a0:4f:7b:cf:5e:2f:
         fc:42:79:75:a5:be:1e:10:14:5b:2f:ff:f0:57:44:d8:93:62:
         76:46:04:ed:b9:9e:49:8f:5d:73:56:92:6d:1c:c1:8f:dc:b9:
         5b:2b:b2:22:f7:00:92:b7:a1:a2:4d:94:af:e9:35:6a:55:2c:
         6b:b0:7c:76:c5:d1:6a:80:df:97:8f:ec:56:36:77:f8:1e:82:
         9b:89:8d:8c:6f:2d:d3:05:38:c2:96:8c:03:d1:57:65:72:f9:
         a4:44:9e:24
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkQ0NjJBRjExMC8GA1UEBRMoRjI4MDlFQjJCMzNGOUE2RjI3QTIzNURGNEFDMTQz
RDE5MkFGNEUyMDAeFw0yNjA5MjEwNTE0NDhaFw0yNjA5MjMwNTE0NDhaMBgxFjAU
BgNVBAMTDTZhYjBiZDQ5LTBmOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvYs0oDL3ljtjrmDMKaZRmCckquSz0ngMufzeRUYONQgCNfMkncIAK8y58
cCALXC2u2ICnzVDcaAAjZFswrdXW3r4+w1ERuhz2qAHdQ5dhVMxg1iZ8Csb2SX5d
YOer/Lh5AMjt7ZijE6lK1Ln9QIfBwYF5x59GecNInXiVLDscmiOIffAS0V8S6aqX
0bvQwTNwMhVWd+sWeVzbqNA0spCRx/LXbJxaCeKSsxquShO3iwLhzAWz3cFpjO2X
j17R3hPoFeP6mvnKEEs3INZ00YtvXtPDisv1HoHRHV2Ie5GiFxrpq7YparPxfQvM
MCZbxcGFPGwV66WzBH4l+246+2a1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUc88u
mO0RJNf7D7PJASi9O2iabO0wHwYDVR0jBBgwFoAU8oCesrM/mm8nojXfSsFD0ZKv
TiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJENDYyL0E1N0MyNTI4QzA2MDExRjA4RUU4NkFCOURBRTRFQzlDLzhvQ2Vz
ck1fbW04bm9qWGZTc0ZEMFpLdlRpQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzhvQ2Vzck1fbW04bm9qWGZTc0ZEMFpLdlRpQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkQ0NjIvQTU3QzI1MjhDMDYwMTFGMDhFRTg2QUI5REFF
NEVDOUMvOG9DZXNyTV9tbThub2pYZlNzRkQwWkt2VGlBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyTxDeG7OHK9OJ5784NRLlt4hHzNBo
Sh/NofEZ4QMNWW/x7AVJU/oH6um+E2sl+/znuOjRYkbJ/KhyiLoGXOQx/9625DuL
nVS6uF+Oqn3tujKn//vdvDwdTtsTmVbw50jaRPgFAGLapTtzdxL2ioRIyI+VlFeH
G9JfsBBmCoNmnAxD/c0lkySiIGCJVOPzw7dEExL/o/bJlhXLglSgT3vPXi/8Qnl1
pb4eEBRbL//wV0TYk2J2RgTtuZ5Jj11zVpJtHMGP3LlbK7Ii9wCSt6GiTZSv6TVq
VSxrsHx2xdFqgN+Xj+xWNnf4HoKbiY2Mby3TBTjClowD0VdlcvmkRJ4k
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:48 2026 by rpki-client