Error: rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.mft
File:                     EM-TisLXu-onXaNYtXSpw2wAlB8.mft (raw, json)
Hash identifier:          5U9CpQaQ52nBoFqGftW/uTE/4dvlCYdYlbu0z7dU48E=
Subject key identifier:   7D:ED:3A:B4:19:C8:03:44:AC:42:FC:A6:4F:41:1C:74:FA:B0:E4:62
Authority key identifier: 10:CF:93:8A:C2:D7:BB:EA:27:5D:A3:58:B5:74:A9:C3:6C:00:94:1F
Certificate issuer:       /CN=F364111CAF/serialNumber=10CF938AC2D7BBEA275DA358B574A9C36C00941F
Certificate serial:       015A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EM-TisLXu-onXaNYtXSpw2wAlB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.mft
Manifest number:          0159
Signing time:             Sun 04 Oct 2026 05:10:23 +0000
Manifest this update:     Sun 04 Oct 2026 05:10:22 +0000
Manifest next update:     Tue 06 Oct 2026 05:10:22 +0000
Files and hashes:         1: EM-TisLXu-onXaNYtXSpw2wAlB8.crl (hash: Z0/YDTfINvDFIyoyMHGBar7Ut1Nzr1heBzdDuYDEPDc=)
                          2: FFB77080B4C411F0B753E586DAE4EC9C.roa (hash: wg3JwuDVSQejTto/9mkXyfwhYSQy1FeZB58JMG4S9jU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EM-TisLXu-onXaNYtXSpw2wAlB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 05:10:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364111CAF, serialNumber=10CF938AC2D7BBEA275DA358B574A9C36C00941F
        Validity
            Not Before: Oct  4 05:10:22 2026 GMT
            Not After : Oct  6 05:10:22 2026 GMT
        Subject: CN=6ac1dfbf-8b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:09:95:57:72:5d:82:af:82:b9:da:63:08:
                    36:ba:59:62:0d:81:a5:ee:61:fb:a1:ae:94:a9:d1:
                    af:cd:13:93:a7:e3:9c:3f:79:e9:7d:27:29:57:46:
                    2c:db:50:eb:9c:da:08:be:30:92:ca:b5:2d:05:06:
                    c4:cb:68:31:b1:79:b0:5c:ca:db:b1:45:4b:08:14:
                    e3:97:83:70:24:4c:5d:b8:22:c7:cb:fb:6c:b3:57:
                    9c:dd:cd:6a:c1:62:fa:b1:7e:ff:b9:a4:ce:6d:20:
                    1b:b1:20:be:65:56:44:49:36:c2:e4:fc:c9:4e:d3:
                    46:05:ae:1f:00:bb:4d:7f:b8:21:8d:b6:90:fa:54:
                    21:8e:eb:45:b1:81:d8:33:33:0e:c6:cb:f3:09:87:
                    52:8f:52:2e:1c:fa:99:94:a7:b5:90:81:1e:21:36:
                    de:b8:98:a3:96:84:32:8b:22:2c:f4:83:7d:b7:76:
                    54:8f:8e:31:d3:7a:67:3d:4a:ce:06:0b:0a:e0:bc:
                    87:ff:8b:aa:95:1e:5b:92:df:30:e8:c5:ed:d8:ec:
                    c7:6e:38:49:68:76:15:df:c4:9f:98:e4:b7:a2:16:
                    fa:72:85:17:6c:ee:1a:f8:be:bf:e2:3e:58:83:95:
                    c5:c3:14:69:6e:6c:14:d4:16:93:37:de:d7:07:da:
                    17:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:ED:3A:B4:19:C8:03:44:AC:42:FC:A6:4F:41:1C:74:FA:B0:E4:62
            X509v3 Authority Key Identifier:
                keyid:10:CF:93:8A:C2:D7:BB:EA:27:5D:A3:58:B5:74:A9:C3:6C:00:94:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EM-TisLXu-onXaNYtXSpw2wAlB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364111C/A4E938AAB4C411F0B09BB786DAE4EC9C/EM-TisLXu-onXaNYtXSpw2wAlB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b3:9e:92:37:d6:a4:72:a8:ef:5f:ba:6c:61:a5:bf:bf:a5:
         b7:ab:4a:e6:25:a4:07:cd:f4:ad:de:ac:b7:80:19:75:d2:42:
         0d:31:f6:f9:e6:d3:a7:f3:04:3f:13:d0:5a:59:6a:a8:71:87:
         c1:c8:63:00:47:08:3a:1a:ec:2b:40:3a:c5:16:99:98:2c:04:
         fd:e6:39:c0:21:91:e0:91:07:f5:79:1b:66:84:3e:ea:f6:b1:
         0a:c8:ae:b2:73:d1:f5:e9:96:dd:ea:fb:18:80:bd:d3:8d:d8:
         ab:9c:03:4b:5f:41:7f:48:22:31:31:73:a1:81:af:bd:a0:6e:
         79:46:37:93:1b:29:bd:f3:dc:02:9e:c3:1d:ac:de:1d:45:38:
         bf:ab:fd:a3:52:53:b2:26:3f:08:22:fe:63:62:b7:6d:d9:9f:
         a8:81:25:ff:61:26:2a:01:14:d6:a1:c6:fe:b4:64:c7:2f:07:
         33:cd:e8:78:db:8a:71:e3:66:3e:1e:dd:68:81:6f:cc:a1:f3:
         f5:ca:99:a0:61:28:22:79:4e:51:4a:cc:8a:9f:fb:b5:8d:ba:
         c5:f3:ae:ea:93:c5:75:4d:34:f0:71:02:6c:1d:b9:ec:5c:60:
         a0:cf:20:9f:a2:24:33:67:46:5f:c6:f5:d5:5c:6f:2a:8d:b4:
         6e:74:21:d7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAVowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDExMUNBRjExMC8GA1UEBRMoMTBDRjkzOEFDMkQ3QkJFQTI3NURBMzU4QjU3NEE5
QzM2QzAwOTQxRjAeFw0yNjEwMDQwNTEwMjJaFw0yNjEwMDYwNTEwMjJaMBgxFjAU
BgNVBAMTDTZhYzFkZmJmLThiN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKMQmVV3Jdgq+CudpjCDa6WWINgaXuYfuhrpSp0a/NE5On45w/eel9JylX
RizbUOuc2gi+MJLKtS0FBsTLaDGxebBcytuxRUsIFOOXg3AkTF24IsfL+2yzV5zd
zWrBYvqxfv+5pM5tIBuxIL5lVkRJNsLk/MlO00YFrh8Au01/uCGNtpD6VCGO60Wx
gdgzMw7Gy/MJh1KPUi4c+pmUp7WQgR4hNt64mKOWhDKLIiz0g323dlSPjjHTemc9
Ss4GCwrgvIf/i6qVHluS3zDoxe3Y7MduOElodhXfxJ+Y5LeiFvpyhRds7hr4vr/i
PliDlcXDFGlubBTUFpM33tcH2hchAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfe06
tBnIA0SsQvymT0EcdPqw5GIwHwYDVR0jBBgwFoAUEM+TisLXu+onXaNYtXSpw2wA
lB8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQxMTFDL0E0RTkzOEFBQjRDNDExRjBCMDlCQjc4NkRBRTRFQzlDL0VNLVRp
c0xYdS1vblhhTll0WFNwdzJ3QWxCOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VNLVRpc0xYdS1vblhhTll0WFNwdzJ3QWxCOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDExMUMvQTRFOTM4QUFCNEM0MTFGMEIwOUJCNzg2REFF
NEVDOUMvRU0tVGlzTFh1LW9uWGFOWXRYU3B3MndBbEI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBds56SN9akcqjvX7psYaW/v6W3q0rm
JaQHzfSt3qy3gBl10kINMfb55tOn8wQ/E9BaWWqocYfByGMARwg6GuwrQDrFFpmY
LAT95jnAIZHgkQf1eRtmhD7q9rEKyK6yc9H16Zbd6vsYgL3TjdirnANLX0F/SCIx
MXOhga+9oG55RjeTGym989wCnsMdrN4dRTi/q/2jUlOyJj8IIv5jYrdt2Z+ogSX/
YSYqARTWocb+tGTHLwczzeh424px42Y+Ht1ogW/MofP1ypmgYSgieU5RSsyKn/u1
jbrF867qk8V1TTTwcQJsHbnsXGCgzyCfoiQzZ0ZfxvXVXG8qjbRudCHX
-----END CERTIFICATE-----
Generated at Sun Oct 4 17:53:14 2026 by rpki-client