Error: rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File:                     Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier:          n9kYg1Ppqw5xW9ZcE496JWPKQxFTShEd6a7MdQB0jwc=
Subject key identifier:   41:AF:B9:04:07:0A:D5:40:A8:55:73:06:E7:92:10:E7:2A:CA:5A:D3
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer:       /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial:       055E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number:          055C
Signing time:             Mon 21 Sep 2026 03:11:57 +0000
Manifest this update:     Mon 21 Sep 2026 03:11:57 +0000
Manifest next update:     Wed 23 Sep 2026 03:11:57 +0000
Files and hashes:         1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: fUGzTcp8gYQK+aZF0JFmEM6B5CEjdQow3R7uVoVXaUA=)
                          2: 27EE2B4290B311F09FE99A99DAE4EC9C.roa (hash: 08bdIyeGAvENvyYR9kdIYMQj8xo49Was4u9/sqMLubc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:11:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AF, serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
        Validity
            Not Before: Sep 21 03:11:57 2026 GMT
            Not After : Sep 23 03:11:57 2026 GMT
        Subject: CN=6ab0a07d-c4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:91:63:c0:b5:c4:3d:5b:7f:f7:cf:33:4f:
                    18:78:79:dc:c6:1a:95:06:9a:ee:ed:d8:a8:df:2d:
                    46:f3:60:f8:95:cf:d1:38:c8:10:dc:5a:b6:dd:72:
                    97:c5:76:4c:0f:92:7f:94:a0:2c:c7:2d:36:5a:fb:
                    78:57:d9:b7:47:d4:1d:45:f6:99:69:85:84:e9:36:
                    5b:3a:d7:8d:12:57:e1:4f:cb:7a:83:96:e4:69:83:
                    e5:27:d3:12:0c:c8:08:c9:39:54:33:e9:5e:8f:5a:
                    f0:b7:d9:7a:6e:c3:30:bd:e6:6b:9e:c6:6c:3c:cf:
                    d6:e8:da:f5:b0:5b:40:78:d6:12:5c:46:85:74:af:
                    62:72:f2:dd:b5:6e:db:b6:72:86:da:a1:ae:16:22:
                    52:22:de:14:d9:82:7c:2b:12:5b:13:65:cb:28:0a:
                    55:c9:62:b1:19:e1:03:64:d8:46:17:de:fe:05:6a:
                    b4:cc:e8:70:fe:ff:b8:1a:9e:dd:2a:6e:14:1b:5a:
                    a2:53:65:c0:47:61:e8:be:2f:4e:27:c5:21:94:6c:
                    79:b5:23:c8:7c:7f:3c:f5:9b:01:0b:b7:89:c4:1f:
                    89:11:a8:85:5f:76:0d:95:f5:2b:db:f9:49:7b:4e:
                    89:d6:19:e8:1c:47:1c:2d:0f:2b:d4:06:32:a7:55:
                    8b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AF:B9:04:07:0A:D5:40:A8:55:73:06:E7:92:10:E7:2A:CA:5A:D3
            X509v3 Authority Key Identifier:
                keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:59:2d:65:05:04:4c:5a:9e:9c:fa:43:53:01:25:05:f5:5b:
         e5:d8:31:99:5f:26:34:88:cf:07:3d:bc:7e:ad:9b:d7:f4:af:
         81:cd:54:c0:14:3c:8d:a7:f5:62:6b:60:44:e0:9a:6d:03:c0:
         d6:8a:52:e9:8f:50:27:94:d2:2d:4c:87:b9:c6:22:ac:8e:47:
         b4:e7:62:5b:3b:04:95:ce:71:02:38:00:56:f2:2c:db:ac:41:
         a8:09:a7:f0:59:8a:fd:9b:d1:7f:b0:08:27:ff:de:17:2b:ed:
         5d:ea:72:26:2c:14:75:c3:ef:99:9f:31:f3:f9:7d:90:ab:9d:
         89:4c:ad:86:5f:48:02:31:46:50:c8:4c:19:42:28:60:0b:a7:
         8e:be:7e:19:9b:f0:ef:d9:31:d0:a2:c7:27:ad:51:ba:75:bc:
         71:93:7d:08:51:44:76:4f:9e:22:48:ea:b8:70:f4:01:dc:e7:
         b1:2f:f4:7b:42:74:60:02:a9:72:7b:a2:b5:aa:7d:65:2c:e4:
         c7:aa:9e:f3:5b:c2:08:54:4c:25:37:8e:a7:1c:eb:16:1d:b1:
         1b:a0:34:24:23:4c:15:09:f6:ab:8b:e4:72:ba:90:4b:fc:2a:
         82:4e:7d:4b:4a:3b:42:2c:ac:34:41:e0:4e:61:f6:ca:29:b8:
         ae:34:49:32
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBV4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIxMjNBRjExMC8GA1UEBRMoMUU3RDFCNkUxMjY0NzA4NDA0Mzg3OURFNUREOTA3
OTBBNkFENTAwQjAeFw0yNjA5MjEwMzExNTdaFw0yNjA5MjMwMzExNTdaMBgxFjAU
BgNVBAMTDTZhYjBhMDdkLWM0YTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCbpFjwLXEPVt/988zTxh4edzGGpUGmu7t2KjfLUbzYPiVz9E4yBDcWrbd
cpfFdkwPkn+UoCzHLTZa+3hX2bdH1B1F9plphYTpNls6140SV+FPy3qDluRpg+Un
0xIMyAjJOVQz6V6PWvC32XpuwzC95muexmw8z9bo2vWwW0B41hJcRoV0r2Jy8t21
btu2cobaoa4WIlIi3hTZgnwrElsTZcsoClXJYrEZ4QNk2EYX3v4FarTM6HD+/7ga
nt0qbhQbWqJTZcBHYei+L04nxSGUbHm1I8h8fzz1mwELt4nEH4kRqIVfdg2V9Svb
+Ul7TonWGegcRxwtDyvUBjKnVYu/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQa+5
BAcK1UCoVXMG55IQ5yrKWtMwHwYDVR0jBBgwFoAUHn0bbhJkcIQEOHneXdkHkKat
UAswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMTIzLzBGMzYxN0IyOUQyODExRUQ4MzAyRUM4QUYxMjIyNDY4L0huMGJi
aEprY0lRRU9IbmVYZGtIa0thdFVBcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0huMGJiaEprY0lRRU9IbmVYZGtIa0thdFVBcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjIxMjMvMEYzNjE3QjI5RDI4MTFFRDgzMDJFQzhBRjEy
MjI0NjgvSG4wYmJoSmtjSVFFT0huZVhka0hrS2F0VUFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnWS1lBQRMWp6c+kNTASUF9Vvl2DGZ
XyY0iM8HPbx+rZvX9K+BzVTAFDyNp/Via2BE4JptA8DWilLpj1AnlNItTIe5xiKs
jke052JbOwSVznECOABW8izbrEGoCafwWYr9m9F/sAgn/94XK+1d6nImLBR1w++Z
nzHz+X2Qq52JTK2GX0gCMUZQyEwZQihgC6eOvn4Zm/Dv2THQoscnrVG6dbxxk30I
UUR2T54iSOq4cPQB3OexL/R7QnRgAqlye6K1qn1lLOTHqp7zW8IIVEwlN46nHOsW
HbEboDQkI0wVCfari+RyupBL/CqCTn1LSjtCLKw0QeBOYfbKKbiuNEky
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:42:41 2026 by rpki-client