Error: rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
File:                     v13ZvUEyHNq78daooOZkfm_v0uM.mft (raw, json)
Hash identifier:          Pmq/BWQcAonoiIvdO3Gv65mOQHarB6e9Gt6FCO6rD1c=
Subject key identifier:   E7:77:05:CE:40:8F:AC:56:EC:24:AD:0E:5B:D5:D0:44:EB:E6:F3:FD
Authority key identifier: BF:5D:D9:BD:41:32:1C:DA:BB:F1:D6:A8:A0:E6:64:7E:6F:EF:D2:E3
Certificate issuer:       /CN=F3634E70AF/serialNumber=BF5DD9BD41321CDABBF1D6A8A0E6647E6FEFD2E3
Certificate serial:       09B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v13ZvUEyHNq78daooOZkfm_v0uM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
Manifest number:          09B3
Signing time:             Sat 10 Oct 2026 01:42:52 +0000
Manifest this update:     Sat 10 Oct 2026 01:42:51 +0000
Manifest next update:     Mon 12 Oct 2026 01:42:51 +0000
Files and hashes:         1: v13ZvUEyHNq78daooOZkfm_v0uM.crl (hash: p9laZQWNl+xoB6Z6sXqSK9i4JACJfrIudx/9zQqYmN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v13ZvUEyHNq78daooOZkfm_v0uM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2489 (0x9b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634E70AF, serialNumber=BF5DD9BD41321CDABBF1D6A8A0E6647E6FEFD2E3
        Validity
            Not Before: Oct 10 01:42:51 2026 GMT
            Not After : Oct 12 01:42:51 2026 GMT
        Subject: CN=6ac9981c-9373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:29:fb:f3:b7:4b:bb:05:e4:c2:4d:28:c6:
                    da:2d:fd:f7:a6:2f:d6:60:e5:22:bc:f6:d8:cc:4f:
                    ea:a6:57:b0:86:fc:fb:66:8a:a0:b5:ff:13:de:53:
                    55:8c:81:76:66:9b:91:df:dc:d5:b8:20:67:8f:26:
                    38:0a:74:e4:33:19:06:27:dd:bd:84:39:4b:54:05:
                    f6:e1:62:6a:97:1f:fc:fe:69:13:d8:e8:8d:81:24:
                    2d:74:2d:38:c4:d6:94:5e:ea:29:fe:e0:3b:29:9c:
                    5f:52:2c:79:07:61:59:e4:b0:ea:72:82:d9:f2:f6:
                    75:d4:e4:4b:cf:ca:8f:67:32:85:14:41:18:79:2e:
                    58:e0:68:62:4d:99:68:3e:6f:ec:0c:38:35:ad:44:
                    c7:78:0a:98:6f:f5:ef:c4:66:6a:c6:c1:5f:66:25:
                    b7:e2:6c:f3:9c:49:ed:3d:12:eb:d7:40:9a:95:00:
                    dd:3a:e1:ad:09:dc:b8:85:b7:0a:d3:08:0c:9a:70:
                    dd:6d:0e:bb:6f:fe:2b:e5:30:80:5c:c0:cc:9f:f8:
                    1b:e3:cb:8a:3d:e0:46:52:33:c8:2b:0b:af:91:7a:
                    3b:a5:09:4d:19:42:fc:92:32:21:7f:6e:11:37:f6:
                    eb:0c:c2:b4:d3:44:ed:79:50:a6:b0:b5:6d:85:4c:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:05:CE:40:8F:AC:56:EC:24:AD:0E:5B:D5:D0:44:EB:E6:F3:FD
            X509v3 Authority Key Identifier:
                keyid:BF:5D:D9:BD:41:32:1C:DA:BB:F1:D6:A8:A0:E6:64:7E:6F:EF:D2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v13ZvUEyHNq78daooOZkfm_v0uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E70/E1461B52594311EA89ACD861F8AEA228/v13ZvUEyHNq78daooOZkfm_v0uM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:7a:01:35:51:6c:2f:a9:19:3c:90:ca:16:d3:d6:6b:69:1c:
         89:5e:b5:77:f3:6f:a5:6c:c0:31:85:fb:eb:2d:a2:06:cf:3f:
         56:51:47:89:1c:7e:09:13:01:00:65:b5:29:d8:f0:19:5f:42:
         4e:25:ae:3f:14:e1:bc:10:f0:68:71:38:77:6d:a5:5a:82:ee:
         2d:ec:2e:3f:49:e6:f1:ce:79:27:db:b5:8e:f1:07:1a:39:af:
         09:d0:8f:62:68:d7:40:fe:5a:6e:43:4c:ce:f6:fd:81:85:73:
         37:bc:c4:dd:12:29:30:bd:f6:dd:d8:39:5c:0c:ff:6e:b2:d5:
         c4:6e:7e:cb:e5:a4:15:48:5c:cb:d2:23:fe:31:72:02:1c:a7:
         98:59:ca:e6:c6:20:30:be:dc:cd:2d:db:81:43:50:c5:53:1a:
         12:47:15:d3:db:95:87:80:0d:d7:db:2c:76:66:79:55:78:84:
         4b:dd:07:40:a6:7e:c7:b6:5a:d5:d4:48:de:4f:00:b2:d4:6a:
         5b:a7:4c:1f:dc:6f:85:de:a5:98:6a:9d:af:3a:27:39:7c:27:
         76:e8:52:7f:de:d6:12:87:17:d5:52:3e:aa:b4:be:f2:b5:87:
         f4:c3:ca:d2:1a:ca:50:90:ba:37:b7:5b:70:7b:43:7a:84:ea:
         da:62:27:57
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCbkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzRFNzBBRjExMC8GA1UEBRMoQkY1REQ5QkQ0MTMyMUNEQUJCRjFENkE4QTBFNjY0
N0U2RkVGRDJFMzAeFw0yNjEwMTAwMTQyNTFaFw0yNjEwMTIwMTQyNTFaMBgxFjAU
BgNVBAMTDTZhYzk5ODFjLTkzNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/wCn787dLuwXkwk0oxtot/femL9Zg5SK89tjMT+qmV7CG/PtmiqC1/xPe
U1WMgXZmm5Hf3NW4IGePJjgKdOQzGQYn3b2EOUtUBfbhYmqXH/z+aRPY6I2BJC10
LTjE1pRe6in+4DspnF9SLHkHYVnksOpygtny9nXU5EvPyo9nMoUUQRh5LljgaGJN
mWg+b+wMODWtRMd4Cphv9e/EZmrGwV9mJbfibPOcSe09EuvXQJqVAN064a0J3LiF
twrTCAyacN1tDrtv/ivlMIBcwMyf+Bvjy4o94EZSM8grC6+RejulCU0ZQvySMiF/
bhE39usMwrTTRO15UKawtW2FTGi7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU53cF
zkCPrFbsJK0OW9XQROvm8/0wHwYDVR0jBBgwFoAUv13ZvUEyHNq78daooOZkfm/v
0uMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM0RTcwL0UxNDYxQjUyNTk0MzExRUE4OUFDRDg2MUY4QUVBMjI4L3YxM1p2
VUV5SE5xNzhkYW9vT1prZm1fdjB1TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3YxM1p2VUV5SE5xNzhkYW9vT1prZm1fdjB1TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzRFNzAvRTE0NjFCNTI1OTQzMTFFQTg5QUNEODYxRjhB
RUEyMjgvdjEzWnZVRXlITnE3OGRhb29PWmtmbV92MHVNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAuegE1UWwvqRk8kMoW09ZraRyJXrV3
82+lbMAxhfvrLaIGzz9WUUeJHH4JEwEAZbUp2PAZX0JOJa4/FOG8EPBocTh3baVa
gu4t7C4/Sebxznkn27WO8QcaOa8J0I9iaNdA/lpuQ0zO9v2BhXM3vMTdEikwvfbd
2DlcDP9ustXEbn7L5aQVSFzL0iP+MXICHKeYWcrmxiAwvtzNLduBQ1DFUxoSRxXT
25WHgA3X2yx2ZnlVeIRL3QdApn7HtlrV1EjeTwCy1Gpbp0wf3G+F3qWYap2vOic5
fCd26FJ/3tYShxfVUj6qtL7ytYf0w8rSGspQkLo3t1twe0N6hOraYidX
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:37:44 2026 by rpki-client