Error: rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File:                     NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier:          RVfrS/TUyRFzZrD5z1fk4ppUDIp978llzM8KPUoLJWg=
Subject key identifier:   A3:EC:FA:0B:03:33:54:82:DF:90:92:50:C9:FA:B0:F4:67:3A:3D:26
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer:       /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial:       0780
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number:          077E
Signing time:             Sun 11 Oct 2026 02:22:04 +0000
Manifest this update:     Sun 11 Oct 2026 02:22:04 +0000
Manifest next update:     Tue 13 Oct 2026 02:22:04 +0000
Files and hashes:         1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: wNXhvrdSOQ9EFDJ1q5FiBKOx0uCrni30gkUTGSHIWWM=)
                          2: B83520CE3C5411F0B678C6A7DAE4EC9C.roa (hash: G6iOOYX+72GS+UQO3yIOd7hEz/TAFLzGnnM38j3t3+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1920 (0x780)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633396AF, serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
        Validity
            Not Before: Oct 11 02:22:04 2026 GMT
            Not After : Oct 13 02:22:04 2026 GMT
        Subject: CN=6acaf2cc-12f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f1:d1:6f:87:4c:64:29:68:04:46:95:d7:67:
                    7a:9d:59:38:96:33:13:3a:cf:a7:4c:8a:75:8b:92:
                    44:05:2d:a4:02:dd:ef:f5:85:3f:d5:f1:c0:bf:26:
                    cf:2c:ac:2c:cf:f2:a4:25:2d:36:e4:92:76:8b:1e:
                    b3:e6:b2:e7:bb:2f:3c:8e:50:61:7c:e0:12:5b:b0:
                    56:f8:b4:60:f7:0f:cd:76:58:7b:39:4f:90:75:24:
                    d4:cc:c7:f0:3b:4c:01:86:c8:ff:3d:e0:b8:03:ab:
                    f1:ee:e3:bd:1b:80:c4:2f:9c:14:ca:80:52:f0:4a:
                    ec:84:0d:f5:5d:2d:82:b5:54:a1:8d:4c:53:37:af:
                    b9:16:56:a9:f8:68:8b:c1:de:70:3f:d2:92:39:55:
                    c4:30:f3:f0:d4:79:76:c7:1e:2b:f2:24:88:67:94:
                    98:b7:9f:1a:4f:94:04:66:ea:b9:df:22:2b:34:db:
                    28:a1:e7:93:4e:0f:b9:1d:6f:ca:d3:84:62:8f:d1:
                    75:57:f5:22:db:af:6f:b1:04:72:42:13:d0:ec:ee:
                    72:3c:8d:d0:7f:71:fb:7c:54:e9:0b:d8:4d:52:06:
                    18:6e:e6:cd:f6:7c:4c:4a:19:b9:ae:61:2e:b6:cb:
                    27:33:81:35:48:2e:96:78:06:ea:70:4a:11:3a:76:
                    c4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:EC:FA:0B:03:33:54:82:DF:90:92:50:C9:FA:B0:F4:67:3A:3D:26
            X509v3 Authority Key Identifier:
                keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:0a:4f:01:f3:73:47:28:f6:d4:d0:88:c8:30:be:dd:42:d1:
         b4:c1:21:b1:e0:c6:0b:1f:42:46:e1:a5:34:04:4e:7a:6f:6c:
         5f:9f:ef:d9:59:8d:4e:bc:7c:51:26:5a:9b:ee:fb:71:84:61:
         d9:9d:5c:dc:9a:a8:d6:45:d9:6d:77:1d:92:73:a1:ec:0f:27:
         78:c6:02:1c:63:64:4f:62:0a:37:af:95:62:a7:ee:8a:93:fd:
         38:38:5a:43:7a:df:cd:f8:af:c8:ed:46:9c:50:51:89:df:19:
         e5:3f:25:ef:64:87:11:d3:96:74:8d:79:1b:6d:b8:ec:06:f3:
         68:bc:ca:83:35:08:f5:93:60:a0:82:53:f6:42:f9:f1:98:3e:
         e2:17:fa:fa:24:33:f4:ec:b3:d8:9e:99:da:e1:3d:3a:7d:a8:
         2f:f7:4b:eb:9a:e0:e8:6e:ac:8b:12:40:50:1d:4a:96:74:f6:
         12:a3:14:ab:07:ac:ff:b0:59:8e:dc:0b:75:c2:2a:8a:9e:57:
         36:8c:93:98:62:c2:d6:fb:30:be:08:74:0a:82:d9:9c:99:14:
         40:16:72:50:db:94:f8:26:48:42:2f:bb:b9:69:a4:64:21:8e:
         30:0a:a8:ba:72:65:25:f7:e8:be:66:2e:f8:cb:e6:38:9e:08:
         00:0f:af:0f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzMzOTZBRjExMC8GA1UEBRMoMzUyQkE3MUQxMUQ3NkE0ODNDOUVDNzlCNDk2NDZG
OEI0NUQ4MzhCQTAeFw0yNjEwMTEwMjIyMDRaFw0yNjEwMTMwMjIyMDRaMBgxFjAU
BgNVBAMTDTZhY2FmMmNjLTEyZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDm8dFvh0xkKWgERpXXZ3qdWTiWMxM6z6dMinWLkkQFLaQC3e/1hT/V8cC/
Js8srCzP8qQlLTbkknaLHrPmsue7LzyOUGF84BJbsFb4tGD3D812WHs5T5B1JNTM
x/A7TAGGyP894LgDq/Hu470bgMQvnBTKgFLwSuyEDfVdLYK1VKGNTFM3r7kWVqn4
aIvB3nA/0pI5VcQw8/DUeXbHHivyJIhnlJi3nxpPlARm6rnfIis02yih55NOD7kd
b8rThGKP0XVX9SLbr2+xBHJCE9Ds7nI8jdB/cft8VOkL2E1SBhhu5s32fExKGbmu
YS62yyczgTVILpZ4BupwShE6dsRbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUo+z6
CwMzVILfkJJQyfqw9Gc6PSYwHwYDVR0jBBgwFoAUNSunHRHXakg8nsebSWRvi0XY
OLowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMzMzk2L0ZDNTY3NTA4MDY3NzExRUM5RDE2M0Q1QUQ4QTAxNENFL05TdW5I
UkhYYWtnOG5zZWJTV1J2aTBYWU9Mby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05TdW5IUkhYYWtnOG5zZWJTV1J2aTBYWU9Mby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzMzOTYvRkM1Njc1MDgwNjc3MTFFQzlEMTYzRDVBRDhB
MDE0Q0UvTlN1bkhSSFhha2c4bnNlYlNXUnZpMFhZT0xvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpCk8B83NHKPbU0IjIML7dQtG0wSGx
4MYLH0JG4aU0BE56b2xfn+/ZWY1OvHxRJlqb7vtxhGHZnVzcmqjWRdltdx2Sc6Hs
Dyd4xgIcY2RPYgo3r5Vip+6Kk/04OFpDet/N+K/I7UacUFGJ3xnlPyXvZIcR05Z0
jXkbbbjsBvNovMqDNQj1k2CgglP2QvnxmD7iF/r6JDP07LPYnpna4T06fagv90vr
muDobqyLEkBQHUqWdPYSoxSrB6z/sFmO3At1wiqKnlc2jJOYYsLW+zC+CHQKgtmc
mRRAFnJQ25T4JkhCL7u5aaRkIY4wCqi6cmUl9+i+Zi74y+Y4nggAD68P
-----END CERTIFICATE-----
Generated at Sun Oct 11 14:59:17 2026 by rpki-client