Error: rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
File:                     nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft (raw, json)
Hash identifier:          gxyuMwn/uFBRTWmiaeT2Mvmk0ro4PTL85qi/CIDt1Ys=
Subject key identifier:   7D:B6:C5:2B:B5:F1:3A:96:10:57:A0:19:D7:08:4D:61:A7:DF:2D:AF
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Certificate issuer:       /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial:       089D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
Manifest number:          0896
Signing time:             Tue 13 Oct 2026 01:56:29 +0000
Manifest this update:     Tue 13 Oct 2026 01:56:28 +0000
Manifest next update:     Thu 15 Oct 2026 01:56:28 +0000
Files and hashes:         1: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl (hash: wwx9w9uM2xSk0q3iWdnBXxFzbEamlPcSOagpmrRNpL4=)
                          2: 2B48BC985C0C11EB9996AA30F8AEA228.roa (hash: q6nVowz9VuDpjWX/IbvfjqSfChWzoCDvGswNPS2gk/0=)
                          3: FE6D92CA5C0B11EB95157330F8AEA228.roa (hash: BYjhKLTeS3/YMIgCsGSrv774yAnK9WPRQzbv65YQDbs=)
                          4: 336BF2CA332411EBB561BF72F8AEA228.roa (hash: z0Vqh2yhGazkcY6WrmD+gGwdIRbocCnl8S5PFmlQhf8=)
                          5: 66D788525C0C11EB89D7F330F8AEA228.roa (hash: T1mAIRrcLYmyaqd64q3hHsdJGYOwe7vCQdctkyt3sqY=)
                          6: 4D1819725C0C11EBB458D830F8AEA228.roa (hash: Y5bEDudGZy2SxFSFnv47v/c/OeLSoqXcxTY9JA/Rm5g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205 (0x89d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FF17AF, serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
        Validity
            Not Before: Oct 13 01:56:28 2026 GMT
            Not After : Oct 15 01:56:28 2026 GMT
        Subject: CN=6acd8fcd-69d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:90:af:64:3f:05:c1:36:a0:06:a4:53:25:5e:
                    9d:f5:61:e8:7e:b3:e5:9d:62:58:4a:49:e2:fb:77:
                    70:df:37:b3:3a:6b:e8:b0:d7:48:92:81:01:37:38:
                    b6:30:8a:df:f5:e9:12:09:ac:95:a0:dc:ff:1c:3e:
                    1d:eb:3f:73:21:75:95:b0:c3:77:d7:ab:99:e9:a3:
                    00:08:db:d0:56:fe:a6:ce:1b:36:21:f1:04:8f:dc:
                    e8:eb:ac:df:fb:ba:77:11:a4:c5:1e:ee:f9:d2:29:
                    6a:a7:e5:b5:63:d8:d4:17:59:c3:56:87:18:9f:9b:
                    f0:2c:60:45:a7:84:b9:a7:e6:78:21:7a:cd:88:35:
                    50:df:a0:a4:6a:b8:f9:f7:cf:35:a1:e3:01:e9:0e:
                    7d:97:9b:d6:ec:32:f0:63:b5:43:b8:fc:04:4d:cb:
                    88:04:20:71:ec:0e:ae:70:ff:7b:dc:50:ca:c2:d8:
                    82:4e:6c:f3:d1:24:45:b5:12:a4:7c:c1:0f:18:c8:
                    04:26:23:c9:18:67:63:1d:54:53:0d:6e:a3:24:89:
                    fe:31:3b:bf:35:09:cb:c6:cf:69:be:bb:ae:8a:58:
                    18:ea:fd:25:dd:72:52:40:f1:8f:2c:75:3f:29:e7:
                    c0:c6:ad:1c:80:a9:04:35:66:61:4a:f3:86:ed:29:
                    43:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B6:C5:2B:B5:F1:3A:96:10:57:A0:19:D7:08:4D:61:A7:DF:2D:AF
            X509v3 Authority Key Identifier:
                keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ae:ed:1b:99:ad:7a:5b:0d:ee:46:88:bb:bc:2a:0e:dd:30:
         5c:61:90:01:71:46:56:58:38:ca:f2:77:c5:43:fe:a1:1b:2f:
         83:80:bc:1c:79:ba:1c:36:ea:26:6a:f3:84:32:22:df:2a:70:
         e3:61:79:d0:c9:6a:85:83:60:79:d1:fb:db:89:22:13:ed:5e:
         25:30:00:3a:b0:69:fe:01:a3:40:e0:7e:b0:c7:7a:6f:b4:ef:
         0c:5d:97:1f:14:3b:ed:09:8b:60:03:17:0e:e1:ee:24:3f:06:
         0c:9a:f3:95:67:6b:79:29:14:00:f3:31:17:f7:94:75:21:5b:
         43:23:10:95:0e:be:5e:ad:71:fd:3f:aa:5a:16:b1:8c:75:1a:
         51:e5:b9:89:05:d7:7e:0c:75:bd:56:6c:12:ff:91:50:54:c6:
         8d:d0:1d:f8:3b:7e:fd:21:42:7d:63:0b:04:36:ad:e0:8b:77:
         93:58:dc:74:b2:86:ea:d6:c2:66:9e:56:2c:44:cf:b6:89:70:
         ce:c0:21:c2:d3:75:39:6a:e9:2f:1b:18:0f:11:65:0c:ce:e7:
         07:f1:8e:31:ce:10:c5:c7:69:d0:af:f1:64:22:b9:60:3d:30:
         b9:34:7e:2e:ed:84:82:13:be:85:91:7d:7b:1c:bf:a7:26:1a:
         0e:f4:3f:32
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCJ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkZGMTdBRjExMC8GA1UEBRMoOUNENDEzOTZBQkNGOUJCOUVGRjZFMjY4NTUzMjRG
ODNDNTlEQzY5QTAeFw0yNjEwMTMwMTU2MjhaFw0yNjEwMTUwMTU2MjhaMBgxFjAU
BgNVBAMTDTZhY2Q4ZmNkLTY5ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCukK9kPwXBNqAGpFMlXp31Yeh+s+WdYlhKSeL7d3DfN7M6a+iw10iSgQE3
OLYwit/16RIJrJWg3P8cPh3rP3MhdZWww3fXq5npowAI29BW/qbOGzYh8QSP3Ojr
rN/7uncRpMUe7vnSKWqn5bVj2NQXWcNWhxifm/AsYEWnhLmn5nghes2INVDfoKRq
uPn3zzWh4wHpDn2Xm9bsMvBjtUO4/ARNy4gEIHHsDq5w/3vcUMrC2IJObPPRJEW1
EqR8wQ8YyAQmI8kYZ2MdVFMNbqMkif4xO781CcvGz2m+u66KWBjq/SXdclJA8Y8s
dT8p58DGrRyAqQQ1ZmFK84btKUMpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfbbF
K7XxOpYQV6AZ1whNYaffLa8wHwYDVR0jBBgwFoAUnNQTlqvPm7nv9uJoVTJPg8Wd
xpowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGRjE3L0E0NENCQzdFMzMyMjExRUI5M0EyMTU3MUY4QUVBMjI4L25OUVRs
cXZQbTdudjl1Sm9WVEpQZzhXZHhwby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25OUVRscXZQbTdudjl1Sm9WVEpQZzhXZHhwby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkZGMTcvQTQ0Q0JDN0UzMzIyMTFFQjkzQTIxNTcxRjhB
RUEyMjgvbk5RVGxxdlBtN252OXVKb1ZUSlBnOFdkeHBvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPru0bma16Ww3uRoi7vCoO3TBcYZAB
cUZWWDjK8nfFQ/6hGy+DgLwcebocNuomavOEMiLfKnDjYXnQyWqFg2B50fvbiSIT
7V4lMAA6sGn+AaNA4H6wx3pvtO8MXZcfFDvtCYtgAxcO4e4kPwYMmvOVZ2t5KRQA
8zEX95R1IVtDIxCVDr5erXH9P6paFrGMdRpR5bmJBdd+DHW9VmwS/5FQVMaN0B34
O379IUJ9YwsENq3gi3eTWNx0sobq1sJmnlYsRM+2iXDOwCHC03U5aukvGxgPEWUM
zucH8Y4xzhDFx2nQr/FkIrlgPTC5NH4u7YSCE76FkX17HL+nJhoO9D8y
-----END CERTIFICATE-----
Generated at Tue Oct 13 06:59:44 2026 by rpki-client