Error: rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
File:                     SiVNJMpKR_MJflNc67lFFN3kGvc.mft (raw, json)
Hash identifier:          Jfq3jpyRsyrnM0Egij/KcEzOHoAguxjwpWibyuPRrYg=
Subject key identifier:   E2:1C:31:87:49:EF:B1:D4:E4:BA:C2:90:7F:5C:00:B1:0D:56:49:B2
Authority key identifier: 4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7
Certificate issuer:       /CN=F366628AAF/serialNumber=4A254D24CA4A47F3097E535CEBB94514DDE41AF7
Certificate serial:       0101
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
Manifest number:          FF
Signing time:             Sun 11 Oct 2026 05:27:16 +0000
Manifest this update:     Sun 11 Oct 2026 05:27:15 +0000
Manifest next update:     Tue 13 Oct 2026 05:27:15 +0000
Files and hashes:         1: SiVNJMpKR_MJflNc67lFFN3kGvc.crl (hash: gMvatRNwIuCuDnYfxSkSfQwHY+VJVYyia5qzoweENSY=)
                          2: 4131DF64010A11F1B0D566F5DAE4EC9C.roa (hash: Rsivq+fHXDUBU8/LxssiLCoPmxJgnPOYnoomwdzu8Q8=)
                          3: 7CA19D6E010A11F1B33B93F5DAE4EC9C.roa (hash: eBGoqpMded71txXxv9Heybn7AQTKDKjxLftIRu9jW6g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 05:27:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366628AAF, serialNumber=4A254D24CA4A47F3097E535CEBB94514DDE41AF7
        Validity
            Not Before: Oct 11 05:27:15 2026 GMT
            Not After : Oct 13 05:27:15 2026 GMT
        Subject: CN=6acb1e34-e97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:00:e3:e7:f7:de:3e:38:99:c2:5d:23:01:7a:
                    4f:30:c5:92:90:3b:fd:fe:0d:3b:22:fe:3e:b5:1b:
                    c5:72:8e:5d:23:16:7f:bb:db:b4:0f:f6:35:4a:a8:
                    51:f8:8f:67:73:7b:2a:55:91:c2:03:a9:3b:86:68:
                    94:ee:89:e5:04:cf:ff:5e:71:0d:d5:2d:4b:9f:b6:
                    01:be:a8:9c:f6:74:9a:ea:21:5b:94:31:f0:34:be:
                    74:ee:05:4b:54:ba:64:a1:58:ce:2c:a5:52:1f:fc:
                    27:9f:7e:cc:0c:e2:26:e0:cf:ca:7b:e5:31:86:3a:
                    74:2f:f1:39:98:3d:11:c4:71:68:bf:8a:fd:23:6d:
                    44:4f:34:bd:04:f0:10:a5:e5:87:15:7c:ae:ba:fb:
                    ad:5c:92:b5:27:3c:c5:60:2e:cf:93:3d:b8:0f:75:
                    fb:f1:bb:d4:ca:39:54:df:0d:a8:e0:91:31:f2:7e:
                    94:63:d8:6f:c0:be:de:22:38:38:1b:66:d9:33:48:
                    9f:b3:34:e4:72:b0:61:12:2c:0e:cf:c7:12:3a:06:
                    7a:3b:14:6a:15:69:b5:23:09:c0:38:3a:35:22:b1:
                    a5:e8:38:5b:a6:99:4d:ed:0f:ff:c0:7a:c2:40:5c:
                    ed:4b:a4:94:ba:ad:15:87:66:d8:73:de:52:68:ea:
                    24:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1C:31:87:49:EF:B1:D4:E4:BA:C2:90:7F:5C:00:B1:0D:56:49:B2
            X509v3 Authority Key Identifier:
                keyid:4A:25:4D:24:CA:4A:47:F3:09:7E:53:5C:EB:B9:45:14:DD:E4:1A:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SiVNJMpKR_MJflNc67lFFN3kGvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366628A/47ADEDA2010911F1A94412EFDAE4EC9C/SiVNJMpKR_MJflNc67lFFN3kGvc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:89:91:aa:9f:3a:a4:30:5a:d9:86:c9:a0:8d:f4:38:86:c2:
         23:f5:e8:6b:b6:ff:6f:0b:ab:5c:c7:cc:94:b3:81:f7:21:f6:
         85:43:6e:05:2c:84:36:dd:97:99:76:8f:91:23:de:96:f3:01:
         21:c3:4f:3b:de:12:e5:42:e2:b6:aa:e0:52:a3:a7:78:ad:6d:
         ba:e6:4e:0e:39:19:68:0e:8d:a1:7e:cf:11:a5:02:01:1d:40:
         0f:c2:0e:77:5c:53:ae:96:87:79:5a:37:2a:bf:70:99:5c:27:
         1b:91:55:3c:46:67:eb:9b:95:f0:19:d9:c0:a7:cd:25:b3:7c:
         9b:d2:f1:07:b4:da:bd:bd:71:23:02:09:dd:5f:88:1f:6d:c3:
         2c:ca:0e:85:aa:e5:3e:2e:a3:1f:84:a4:f8:97:d0:28:4b:9b:
         d2:35:b5:ec:f7:8d:3f:e0:6d:8d:77:a0:70:2a:30:6e:8b:de:
         41:e8:09:eb:8e:9e:bc:ae:7b:c2:30:50:d6:e4:11:a4:9c:ca:
         52:a2:5a:71:56:a3:99:cd:77:57:3b:8a:e1:a8:0c:76:92:13:
         8b:93:fc:0e:1e:cc:c7:5f:1f:55:92:97:9c:4f:27:9d:ab:28:
         55:49:44:39:04:23:c3:55:f0:eb:61:51:e0:ef:55:4b:f3:38:
         0e:08:ca:e1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjYyOEFBRjExMC8GA1UEBRMoNEEyNTREMjRDQTRBNDdGMzA5N0U1MzVDRUJCOTQ1
MTREREU0MUFGNzAeFw0yNjEwMTEwNTI3MTVaFw0yNjEwMTMwNTI3MTVaMBgxFjAU
BgNVBAMTDTZhY2IxZTM0LWU5N2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtAOPn994+OJnCXSMBek8wxZKQO/3+DTsi/j61G8Vyjl0jFn+727QP9jVK
qFH4j2dzeypVkcIDqTuGaJTuieUEz/9ecQ3VLUuftgG+qJz2dJrqIVuUMfA0vnTu
BUtUumShWM4spVIf/CeffswM4ibgz8p75TGGOnQv8TmYPRHEcWi/iv0jbURPNL0E
8BCl5YcVfK66+61ckrUnPMVgLs+TPbgPdfvxu9TKOVTfDajgkTHyfpRj2G/Avt4i
ODgbZtkzSJ+zNORysGESLA7PxxI6Bno7FGoVabUjCcA4OjUisaXoOFummU3tD//A
esJAXO1LpJS6rRWHZthz3lJo6iTXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4hwx
h0nvsdTkusKQf1wAsQ1WSbIwHwYDVR0jBBgwFoAUSiVNJMpKR/MJflNc67lFFN3k
GvcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2MjhBLzQ3QURFREEyMDEwOTExRjFBOTQ0MTJFRkRBRTRFQzlDL1NpVk5K
TXBLUl9NSmZsTmM2N2xGRk4za0d2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NpVk5KTXBLUl9NSmZsTmM2N2xGRk4za0d2Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjYyOEEvNDdBREVEQTIwMTA5MTFGMUE5NDQxMkVGREFF
NEVDOUMvU2lWTkpNcEtSX01KZmxOYzY3bEZGTjNrR3ZjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCiZGqnzqkMFrZhsmgjfQ4hsIj9ehr
tv9vC6tcx8yUs4H3IfaFQ24FLIQ23ZeZdo+RI96W8wEhw0873hLlQuK2quBSo6d4
rW265k4OORloDo2hfs8RpQIBHUAPwg53XFOulod5Wjcqv3CZXCcbkVU8Rmfrm5Xw
GdnAp80ls3yb0vEHtNq9vXEjAgndX4gfbcMsyg6FquU+LqMfhKT4l9AoS5vSNbXs
940/4G2Nd6BwKjBui95B6Anrjp68rnvCMFDW5BGknMpSolpxVqOZzXdXO4rhqAx2
khOLk/wOHszHXx9VkpecTyedqyhVSUQ5BCPDVfDrYVHg71VL8zgOCMrh
-----END CERTIFICATE-----
Generated at Mon Oct 12 04:34:42 2026 by rpki-client