Error: rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.mft
File:                     Ml7jslC5xoK_sCCzNsuiieG80jA.mft (raw, json)
Hash identifier:          1YIsPPCZE+iNJ9NYi0VnbByC0TYRizGFKqBSKC3YNmk=
Subject key identifier:   68:E5:D1:59:D6:79:07:D3:9F:72:F7:57:E2:C2:2A:AE:E8:60:ED:2B
Authority key identifier: 32:5E:E3:B2:50:B9:C6:82:BF:B0:20:B3:36:CB:A2:89:E1:BC:D2:30
Certificate issuer:       /CN=F365FABEAF/serialNumber=325EE3B250B9C682BFB020B336CBA289E1BCD230
Certificate serial:       01ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ml7jslC5xoK_sCCzNsuiieG80jA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.mft
Manifest number:          01E6
Signing time:             Tue 13 Oct 2026 04:57:50 +0000
Manifest this update:     Tue 13 Oct 2026 04:57:49 +0000
Manifest next update:     Thu 15 Oct 2026 04:57:49 +0000
Files and hashes:         1: Ml7jslC5xoK_sCCzNsuiieG80jA.crl (hash: MVOMrz5k1ZdOuBa8WZPKyjK7EcQvbkuv0BGFq8K8NdA=)
                          2: D80D99D6A43B11F090E5B5A8DAE4EC9C.roa (hash: D+Q0jMvULF15SYOkGjIS9wZnck6JWgh8vGMk1HYUiV0=)
                          3: 393C8F06A43B11F0BF194FA4DAE4EC9C.roa (hash: fUUjOIp6axnwPaI5dPQEnBdrpcfbpmPmVK6Qw1U8Quo=)
                          4: 3DBD6BF8A43C11F0B0207BA9DAE4EC9C.roa (hash: QDcjTFM5zSxqp1TZUhDrR2cluwqbX9KhJ+5ywKso8Ew=)
                          5: 5BFC886CA43A11F09DF5B99FDAE4EC9C.roa (hash: qRzDlU/qHUyC2u1ZlXfDmCut9uXsJqNgW766/Y6J1Zk=)
                          6: C4A29802A43A11F0BE4458A0DAE4EC9C.roa (hash: 2lo94doOrg8TyD+YuEEJsOCrwgG4ilm7x/SAveRYMBE=)
                          7: DE032292A5B311F0994B3AB0DAE4EC9C.roa (hash: vkzFSLbDU0uihMdr3rdbCYc718qKER6rMg7GebnGpTc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ml7jslC5xoK_sCCzNsuiieG80jA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:57:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FABEAF, serialNumber=325EE3B250B9C682BFB020B336CBA289E1BCD230
        Validity
            Not Before: Oct 13 04:57:49 2026 GMT
            Not After : Oct 15 04:57:49 2026 GMT
        Subject: CN=6acdba4e-504b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:06:7e:25:fc:4d:10:88:9b:9b:81:57:b1:53:
                    75:01:c0:2a:30:99:2e:c4:d3:74:0d:e2:74:20:66:
                    eb:99:e9:d4:2c:9b:50:d6:72:5c:c9:38:b9:11:98:
                    52:2a:b4:3d:42:86:2f:cd:a6:c5:ae:1d:0d:3a:e8:
                    75:5f:9c:b0:f8:79:18:13:58:73:74:fe:09:4d:ef:
                    80:31:f0:bf:8f:50:02:f2:42:ba:b7:bc:91:88:4a:
                    45:36:7a:cd:27:19:09:4d:fd:a3:f6:8c:6d:ba:1f:
                    ac:bc:80:9e:7c:9e:99:cf:8a:00:38:4c:1a:0f:c6:
                    ef:81:94:79:2c:6e:02:88:d1:6e:82:b2:a1:4a:2e:
                    9b:a9:6d:c5:e2:97:b2:09:f7:b6:d3:b1:18:ae:8f:
                    b7:e5:08:6a:66:72:09:f6:41:25:56:d1:4d:f4:54:
                    c4:2b:fc:29:03:9b:16:a1:b8:fd:58:1b:b2:f3:96:
                    73:c4:07:49:e2:04:c8:dd:47:7e:fa:aa:d5:fa:05:
                    34:f0:0c:b1:39:57:3e:a1:34:57:0a:e9:6a:09:02:
                    d8:ff:19:3b:a2:c2:e2:26:0b:3a:05:49:8d:f9:ce:
                    0d:66:f9:16:a8:e8:8b:78:ba:db:9d:27:26:4f:22:
                    b7:b0:7e:26:dc:28:9d:a4:f4:48:71:cf:ab:a6:14:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:E5:D1:59:D6:79:07:D3:9F:72:F7:57:E2:C2:2A:AE:E8:60:ED:2B
            X509v3 Authority Key Identifier:
                keyid:32:5E:E3:B2:50:B9:C6:82:BF:B0:20:B3:36:CB:A2:89:E1:BC:D2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ml7jslC5xoK_sCCzNsuiieG80jA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FABE/1D3B5B38534211F097EA85DADAE4EC9C/Ml7jslC5xoK_sCCzNsuiieG80jA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:01:0b:0d:a2:86:80:89:72:a1:e1:0e:67:9a:9b:9a:f1:c6:
         ef:c9:5f:23:da:a9:90:3f:ea:47:2a:1a:99:52:a7:82:9a:9d:
         03:3f:29:53:e5:d2:93:a3:39:38:70:57:bc:07:ac:9a:ae:62:
         e2:ee:6c:ed:62:8c:d7:0e:4e:78:4c:1d:1b:19:3b:41:95:21:
         fc:be:b5:a0:ee:8a:61:ed:0a:e7:a1:4e:cf:28:a1:f6:4d:93:
         5c:05:ee:17:43:8b:1d:90:88:c1:37:5b:32:11:4b:87:62:41:
         05:e3:5a:83:68:b1:68:58:7a:ac:3c:c1:00:62:c3:dd:49:6b:
         3f:a4:2e:4b:a1:68:c3:f3:a7:ae:bf:a9:fa:71:72:7a:41:1c:
         e8:78:13:b0:cb:89:c9:ac:8e:d2:ea:e6:d7:7f:8e:3e:98:15:
         49:a5:f3:af:b0:1e:83:8b:cc:48:8f:63:1f:2d:c8:d8:03:1d:
         47:d2:da:bc:a7:64:a6:39:e1:a6:f7:8e:01:17:d1:13:93:70:
         ba:61:2a:46:d4:7c:17:d4:20:15:f0:9e:c3:c4:a1:b0:3b:ae:
         3c:20:85:f7:65:97:32:ea:6a:54:b4:70:fe:9f:c8:3e:86:c4:
         6b:d5:3c:22:5b:ba:80:c2:8c:12:bd:b6:c3:8e:56:8b:a1:6b:
         b8:d0:36:9c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAe0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUZBQkVBRjExMC8GA1UEBRMoMzI1RUUzQjI1MEI5QzY4MkJGQjAyMEIzMzZDQkEy
ODlFMUJDRDIzMDAeFw0yNjEwMTMwNDU3NDlaFw0yNjEwMTUwNDU3NDlaMBgxFjAU
BgNVBAMTDTZhY2RiYTRlLTUwNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVBn4l/E0QiJubgVexU3UBwCowmS7E03QN4nQgZuuZ6dQsm1DWclzJOLkR
mFIqtD1Chi/NpsWuHQ066HVfnLD4eRgTWHN0/glN74Ax8L+PUALyQrq3vJGISkU2
es0nGQlN/aP2jG26H6y8gJ58npnPigA4TBoPxu+BlHksbgKI0W6CsqFKLpupbcXi
l7IJ97bTsRiuj7flCGpmcgn2QSVW0U30VMQr/CkDmxahuP1YG7LzlnPEB0niBMjd
R376qtX6BTTwDLE5Vz6hNFcK6WoJAtj/GTuiwuImCzoFSY35zg1m+Rao6It4utud
JyZPIrewfibcKJ2k9Ehxz6umFIwXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaOXR
WdZ5B9OfcvdX4sIqruhg7SswHwYDVR0jBBgwFoAUMl7jslC5xoK/sCCzNsuiieG8
0jAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGQUJFLzFEM0I1QjM4NTM0MjExRjA5N0VBODVEQURBRTRFQzlDL01sN2pz
bEM1eG9LX3NDQ3pOc3VpaWVHODBqQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01sN2pzbEM1eG9LX3NDQ3pOc3VpaWVHODBqQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUZBQkUvMUQzQjVCMzg1MzQyMTFGMDk3RUE4NURBREFF
NEVDOUMvTWw3anNsQzV4b0tfc0NDek5zdWlpZUc4MGpBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6AQsNooaAiXKh4Q5nmpua8cbvyV8j
2qmQP+pHKhqZUqeCmp0DPylT5dKTozk4cFe8B6yarmLi7mztYozXDk54TB0bGTtB
lSH8vrWg7oph7QrnoU7PKKH2TZNcBe4XQ4sdkIjBN1syEUuHYkEF41qDaLFoWHqs
PMEAYsPdSWs/pC5LoWjD86euv6n6cXJ6QRzoeBOwy4nJrI7S6ubXf44+mBVJpfOv
sB6Di8xIj2MfLcjYAx1H0tq8p2SmOeGm944BF9ETk3C6YSpG1HwX1CAV8J7DxKGw
O648IIX3ZZcy6mpUtHD+n8g+hsRr1TwiW7qAwowSvbbDjlaLoWu40Dac
-----END CERTIFICATE-----
Generated at Wed Oct 14 01:38:38 2026 by rpki-client