Error: rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
File:                     C9AISPg4_ZC5ntw3aQcglV-wCQY.mft (raw, json)
Hash identifier:          xdWdTj02/eFXs7rOL4eaZKELaPeF8YuqcjlkUT/BJqo=
Subject key identifier:   BA:EF:19:95:0E:72:17:42:65:D2:83:0B:F2:88:20:BC:94:A8:5C:13
Authority key identifier: 0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06
Certificate issuer:       /CN=F3662367AF/serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
Certificate serial:       0640
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
Manifest number:          0634
Signing time:             Sun 20 Sep 2026 02:50:47 +0000
Manifest this update:     Sun 20 Sep 2026 02:50:47 +0000
Manifest next update:     Tue 22 Sep 2026 02:50:47 +0000
Files and hashes:         1: C9AISPg4_ZC5ntw3aQcglV-wCQY.crl (hash: kmKjWL4tUDljwr6TsrhibSPYFg7sb828oy2XKgjs6c4=)
                          2: D183ECC8085B11EFB55C9B09017001B1.roa (hash: 0wIzN3h+rbMY0RCClFPjyEoqaeNOqCrB7nmVrP7H1cQ=)
                          3: 174CE356189311F1BBE1F791DAE4EC9C.roa (hash: G6Ri5jkow9qJdcSKTln4DeCrX6uyRyiQuhStD3KTAO8=)
                          4: 5360D7AE189211F19AFD138CDAE4EC9C.roa (hash: 5kRmyHtZRcaeGU4ILxEdFGVfX+Za3u6NPetv91VJohw=)
                          5: 069971DEA80C11F0ABBD17E1DAE4EC9C.roa (hash: WcnVuk8znWk2E8XVbTz8BI0h+oYIfhMrZBOZ5CTfGPY=)
                          6: 034B4056317011F0960BB9BBDAE4EC9C.roa (hash: 8EdsfqrdTyiR6sjIsfm2OCwX3gpoE6Lu3uWVDJVedCo=)
                          7: E6DF30E4F82B11EFA5C0E79C762E951A.roa (hash: XT/378XgrexD0cGPoUkpGHpC1ayYncJAvh9qFOMCnmA=)
                          8: 72363EB671BE11EF838644A0762E951A.roa (hash: PA/h5ekoPNUQiLuqHkxlB+THQPCIzkVE47Cb2Ae6PV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662367AF, serialNumber=0BD00848F838FD90B99EDC37690720955FB00906
        Validity
            Not Before: Sep 20 02:50:47 2026 GMT
            Not After : Sep 22 02:50:47 2026 GMT
        Subject: CN=6aaf4a07-445c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:b5:ef:14:da:b7:c5:a2:27:1e:a4:20:26:
                    60:18:42:60:3a:0e:3e:cd:a2:de:eb:97:eb:48:88:
                    f1:81:e7:2a:5d:ee:2f:b0:11:58:58:31:b7:be:10:
                    a6:ec:35:0d:48:3a:90:a3:1a:2c:0f:53:71:2b:aa:
                    f4:c6:aa:59:00:44:f6:5f:0c:2c:d5:f2:6f:74:ba:
                    aa:5a:bc:3f:0d:40:53:eb:52:a3:94:74:0b:4c:73:
                    f0:2c:14:f9:f6:5a:b3:de:f5:f8:7a:63:b0:86:01:
                    1b:b8:47:58:8a:ce:bc:22:da:78:27:25:e2:bb:da:
                    5a:90:ad:4a:56:9f:3b:4b:a2:cb:4e:15:34:4a:e2:
                    13:e4:34:a8:51:b2:c8:8b:3e:bb:50:89:1e:6d:1e:
                    1c:8d:a1:5b:53:7a:eb:26:ac:a5:1c:7a:60:df:4a:
                    a3:aa:c6:1c:16:80:39:6f:3f:e2:38:8b:0d:b8:aa:
                    3a:16:22:db:fc:00:6f:21:7b:20:1d:c5:0c:1b:aa:
                    bd:8a:c5:f0:ea:29:0b:da:7e:7f:7f:43:ad:78:e2:
                    19:be:3b:1e:bd:6c:9e:4a:90:16:31:aa:a7:4f:d7:
                    18:41:36:1f:29:38:a7:72:88:f0:6e:54:c8:ac:70:
                    3c:b7:77:49:75:90:32:a6:6f:63:b1:c7:e6:51:a0:
                    fd:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EF:19:95:0E:72:17:42:65:D2:83:0B:F2:88:20:BC:94:A8:5C:13
            X509v3 Authority Key Identifier:
                keyid:0B:D0:08:48:F8:38:FD:90:B9:9E:DC:37:69:07:20:95:5F:B0:09:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C9AISPg4_ZC5ntw3aQcglV-wCQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662367/B4508CE8082011ED828588F7F1222468/C9AISPg4_ZC5ntw3aQcglV-wCQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:7e:81:c9:14:b9:ec:52:ce:fe:a5:9d:f1:0d:4b:06:96:03:
         d9:92:b2:07:36:96:b0:f7:66:9f:63:b4:1f:47:f1:34:c9:0e:
         5e:4d:b4:39:c5:f7:74:ef:78:17:e7:47:a2:4b:19:06:69:c7:
         99:8a:0c:21:ca:26:41:d5:80:91:04:c0:06:63:a6:04:50:3a:
         ee:79:42:28:d0:08:51:ea:c5:1a:4e:d0:c4:cf:f6:19:73:a5:
         90:6f:36:e2:0a:b4:2c:a6:20:1f:a6:36:0d:27:af:48:73:ea:
         56:97:59:ab:3b:89:d0:96:29:b2:de:e5:51:24:3b:b7:c3:5d:
         b6:af:2f:bf:90:5d:94:3f:60:71:1e:2c:a8:7d:b9:f6:60:fa:
         2a:7d:66:cf:51:79:d2:ee:7f:ea:1c:0b:1d:7f:d6:4a:eb:72:
         42:ec:02:73:08:12:e8:44:29:d3:a9:e8:52:f8:e0:ce:e7:87:
         09:ad:f9:29:5d:1a:90:55:49:a6:41:45:d8:c8:df:71:05:65:
         41:86:7e:1b:3b:19:06:20:97:2e:4f:58:62:14:f6:aa:8d:ac:
         25:6f:0f:61:49:75:4f:25:e2:95:c6:45:ec:c2:8c:93:57:55:
         4a:dd:a3:57:56:a5:82:df:00:05:7b:43:cb:6e:70:fc:47:9f:
         96:3f:b5:bf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBkAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIzNjdBRjExMC8GA1UEBRMoMEJEMDA4NDhGODM4RkQ5MEI5OUVEQzM3NjkwNzIw
OTU1RkIwMDkwNjAeFw0yNjA5MjAwMjUwNDdaFw0yNjA5MjIwMjUwNDdaMBgxFjAU
BgNVBAMTDTZhYWY0YTA3LTQ0NWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9+7XvFNq3xaInHqQgJmAYQmA6Dj7Not7rl+tIiPGB5ypd7i+wEVhYMbe+
EKbsNQ1IOpCjGiwPU3ErqvTGqlkARPZfDCzV8m90uqpavD8NQFPrUqOUdAtMc/As
FPn2WrPe9fh6Y7CGARu4R1iKzrwi2ngnJeK72lqQrUpWnztLostOFTRK4hPkNKhR
ssiLPrtQiR5tHhyNoVtTeusmrKUcemDfSqOqxhwWgDlvP+I4iw24qjoWItv8AG8h
eyAdxQwbqr2KxfDqKQvafn9/Q6144hm+Ox69bJ5KkBYxqqdP1xhBNh8pOKdyiPBu
VMiscDy3d0l1kDKmb2Oxx+ZRoP1nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuu8Z
lQ5yF0Jl0oML8oggvJSoXBMwHwYDVR0jBBgwFoAUC9AISPg4/ZC5ntw3aQcglV+w
CQYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMzY3L0I0NTA4Q0U4MDgyMDExRUQ4Mjg1ODhGN0YxMjIyNDY4L0M5QUlT
UGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0M5QUlTUGc0X1pDNW50dzNhUWNnbFYtd0NRWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjIzNjcvQjQ1MDhDRTgwODIwMTFFRDgyODU4OEY3RjEy
MjI0NjgvQzlBSVNQZzRfWkM1bnR3M2FRY2dsVi13Q1FZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDBfoHJFLnsUs7+pZ3xDUsGlgPZkrIH
Npaw92afY7QfR/E0yQ5eTbQ5xfd073gX50eiSxkGaceZigwhyiZB1YCRBMAGY6YE
UDrueUIo0AhR6sUaTtDEz/YZc6WQbzbiCrQspiAfpjYNJ69Ic+pWl1mrO4nQlimy
3uVRJDu3w122ry+/kF2UP2BxHiyofbn2YPoqfWbPUXnS7n/qHAsdf9ZK63JC7AJz
CBLoRCnTqehS+ODO54cJrfkpXRqQVUmmQUXYyN9xBWVBhn4bOxkGIJcuT1hiFPaq
jawlbw9hSXVPJeKVxkXswoyTV1VK3aNXVqWC3wAFe0PLbnD8R5+WP7W/
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:12:55 2026 by rpki-client