Error: rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
File:                     gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft (raw, json)
Hash identifier:          STRJtMs1Yxgcf/C080/GOLrT3VeOffa0SdizN7rMCCc=
Subject key identifier:   1C:01:00:AD:2D:CC:B5:51:B2:20:56:C5:A7:DB:4A:E5:84:9A:CE:36
Authority key identifier: 80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B
Certificate issuer:       /CN=F36406B8AF/serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
Certificate serial:       05AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
Manifest number:          05A4
Signing time:             Tue 22 Sep 2026 03:05:57 +0000
Manifest this update:     Tue 22 Sep 2026 03:05:57 +0000
Manifest next update:     Thu 24 Sep 2026 03:05:57 +0000
Files and hashes:         1: gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl (hash: LL0uaIYktgBNFHmFYFpaOSR+eZERAfvTQohS0XDTIPo=)
                          2: 4BA72CDE8D8611F188BA33FFCE1D38B0.roa (hash: cw9g2s04/COrl+LRO4OYoMGslSquNMRf6PN6a84xlKA=)
                          3: FEC946868D8511F180501CFFCE1D38B0.roa (hash: CWipig5AzHYUxKIbL/YPjyYHhWXTpViUaZtjKOq5MX4=)
                          4: 42D1AB66708F11F19031F516CF1D38B0.roa (hash: Zb1p98m0ViAkNrzIFyuvBX8Z2Ph7xSavwuUeOgVqSLg=)
                          5: 841819848D8611F1978B1301CF1D38B0.roa (hash: TNRh/dYQgKFiO+EhvFiULYhPkysHWF/ny2EXt6klxvI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406B8AF, serialNumber=8073823624AEC1F6AC1AB069D978E65D9F72056B
        Validity
            Not Before: Sep 22 03:05:57 2026 GMT
            Not After : Sep 24 03:05:57 2026 GMT
        Subject: CN=6ab1f095-cc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b3:18:ea:73:e3:99:af:66:1e:3e:e1:2f:93:
                    1a:97:ff:f7:c4:58:a5:d8:13:40:ee:95:41:c6:71:
                    c1:c4:81:dc:3a:a3:0a:3d:25:d8:20:7b:b3:50:96:
                    f8:b6:e6:aa:ce:d2:14:ac:db:8c:0f:da:27:82:33:
                    83:2d:28:0d:c3:e3:71:a1:36:0c:b1:a8:05:0f:1b:
                    91:c3:ea:d0:77:fd:7f:51:24:e9:08:b0:0a:92:a6:
                    8a:de:b1:5f:a8:04:c9:11:9c:ec:b8:ef:68:8b:d7:
                    7a:b3:d9:2d:be:e3:c3:7f:04:e1:78:42:13:97:6b:
                    de:bc:de:f9:08:e5:bd:ce:f5:8f:60:fa:d8:73:a6:
                    1c:42:8d:dd:41:1f:e4:b2:10:26:f8:62:85:84:f3:
                    be:8b:65:59:93:73:67:89:33:de:52:01:55:54:f5:
                    9e:12:81:b1:2f:91:41:66:17:81:54:45:94:f1:76:
                    e5:e7:07:11:48:04:04:18:21:8d:f9:ab:6e:21:ca:
                    90:48:f2:cb:d4:80:d1:00:2c:cd:03:d9:2e:2e:08:
                    db:63:ab:dd:e5:22:16:c1:00:f8:9b:d0:53:c0:e7:
                    07:76:66:e1:54:6e:67:46:f8:33:69:e1:54:31:c0:
                    c8:a1:da:ba:1a:55:b1:51:79:ff:ba:84:19:03:6a:
                    36:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:01:00:AD:2D:CC:B5:51:B2:20:56:C5:A7:DB:4A:E5:84:9A:CE:36
            X509v3 Authority Key Identifier:
                keyid:80:73:82:36:24:AE:C1:F6:AC:1A:B0:69:D9:78:E6:5D:9F:72:05:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gHOCNiSuwfasGrBp2XjmXZ9yBWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406B8/16691BB26FE511ED854B599FF1222468/gHOCNiSuwfasGrBp2XjmXZ9yBWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:e7:c7:4f:68:77:75:12:32:ae:eb:e8:07:c6:e9:c7:82:db:
         30:0d:3c:7a:1a:a8:f0:65:21:fa:b1:bb:49:48:9e:7a:5f:07:
         be:46:ad:60:0b:f5:3a:0f:31:1b:72:4d:20:73:63:10:a4:9d:
         d0:a6:87:91:16:8f:b8:09:83:0d:11:3b:89:35:a9:63:44:fd:
         d0:16:1a:b9:dc:23:d1:c0:b9:a3:72:fd:27:b6:54:ba:e1:ed:
         11:9f:cd:37:31:fa:4c:c7:28:7a:99:d8:ba:b2:27:48:01:90:
         c8:5e:3d:c2:be:68:41:15:e3:38:49:4d:cf:b8:98:dd:7c:b0:
         af:01:8a:4d:ad:a3:e7:91:e2:b3:d3:d6:bb:30:2a:9d:8b:6c:
         6a:22:1e:77:aa:7e:8d:e8:b0:b6:c1:23:99:5b:5e:67:73:1f:
         a0:f2:8d:52:16:bd:8a:39:7c:e1:73:22:6d:36:42:78:e8:dc:
         ca:3d:59:ec:96:03:8b:97:37:a7:19:07:55:28:df:c1:70:23:
         44:ee:9a:88:fd:b4:f0:d4:16:a4:3c:31:89:49:d2:5a:85:ca:
         d6:30:d9:1b:31:07:eb:9e:53:6f:fc:f6:12:60:3f:69:b5:17:
         e5:94:1d:8b:bc:34:5e:8c:20:b6:5d:2c:a8:51:c3:af:1b:dd:
         66:a9:dc:8d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBawwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDA2QjhBRjExMC8GA1UEBRMoODA3MzgyMzYyNEFFQzFGNkFDMUFCMDY5RDk3OEU2
NUQ5RjcyMDU2QjAeFw0yNjA5MjIwMzA1NTdaFw0yNjA5MjQwMzA1NTdaMBgxFjAU
BgNVBAMTDTZhYjFmMDk1LWNjMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCssxjqc+OZr2YePuEvkxqX//fEWKXYE0DulUHGccHEgdw6owo9Jdgge7NQ
lvi25qrO0hSs24wP2ieCM4MtKA3D43GhNgyxqAUPG5HD6tB3/X9RJOkIsAqSpore
sV+oBMkRnOy472iL13qz2S2+48N/BOF4QhOXa9683vkI5b3O9Y9g+thzphxCjd1B
H+SyECb4YoWE876LZVmTc2eJM95SAVVU9Z4SgbEvkUFmF4FURZTxduXnBxFIBAQY
IY35q24hypBI8svUgNEALM0D2S4uCNtjq93lIhbBAPib0FPA5wd2ZuFUbmdG+DNp
4VQxwMih2roaVbFRef+6hBkDajaTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHAEA
rS3MtVGyIFbFp9tK5YSazjYwHwYDVR0jBBgwFoAUgHOCNiSuwfasGrBp2XjmXZ9y
BWswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQwNkI4LzE2NjkxQkIyNkZFNTExRUQ4NTRCNTk5RkYxMjIyNDY4L2dIT0NO
aVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dIT0NOaVN1d2Zhc0dyQnAyWGptWFo5eUJXcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDA2QjgvMTY2OTFCQjI2RkU1MTFFRDg1NEI1OTlGRjEy
MjI0NjgvZ0hPQ05pU3V3ZmFzR3JCcDJYam1YWjl5QldzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC+58dPaHd1EjKu6+gHxunHgtswDTx6
GqjwZSH6sbtJSJ56Xwe+Rq1gC/U6DzEbck0gc2MQpJ3QpoeRFo+4CYMNETuJNalj
RP3QFhq53CPRwLmjcv0ntlS64e0Rn803MfpMxyh6mdi6sidIAZDIXj3CvmhBFeM4
SU3PuJjdfLCvAYpNraPnkeKz09a7MCqdi2xqIh53qn6N6LC2wSOZW15ncx+g8o1S
Fr2KOXzhcyJtNkJ46NzKPVnslgOLlzenGQdVKN/BcCNE7pqI/bTw1BakPDGJSdJa
hcrWMNkbMQfrnlNv/PYSYD9ptRfllB2LvDRejCC2XSyoUcOvG91mqdyN
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:33:02 2026 by rpki-client