Error: rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File:                     OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier:          54f+fKY3QYhH1nx74B5ttTZgFt0GOgFIAFaMAz3VlHg=
Subject key identifier:   17:17:58:03:F4:82:5A:A9:86:3F:95:F6:0D:F0:2F:70:0B:8E:B2:1F
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer:       /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial:       01B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number:          01B3
Signing time:             Mon 21 Sep 2026 05:01:30 +0000
Manifest this update:     Mon 21 Sep 2026 05:01:29 +0000
Manifest next update:     Wed 23 Sep 2026 05:01:29 +0000
Files and hashes:         1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: L83nRIL5ovQojZRrOkf7pAg5MaRPzujmeiTB9uYqo+Q=)
                          2: F8600BDE84B911F085AD04A3DAE4EC9C.roa (hash: DP8mnGerifLfSRadwXVvA2WZ6PCmE2usVrRlV28umhs=)
                          3: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
        Validity
            Not Before: Sep 21 05:01:29 2026 GMT
            Not After : Sep 23 05:01:29 2026 GMT
        Subject: CN=6ab0ba2a-eb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:6a:28:0f:81:4a:70:e2:a2:f8:d5:bf:42:
                    c9:14:ec:e6:52:e3:d2:34:8a:34:b7:df:c6:ea:1e:
                    55:72:fa:d7:10:4f:13:93:ac:69:2f:6b:41:4d:ef:
                    0f:84:50:a4:fc:40:14:d4:fd:aa:1b:ee:5d:f4:de:
                    28:f1:2c:4a:af:97:a6:3b:54:ee:b4:a0:4b:7d:63:
                    ac:f8:87:05:cc:07:db:4a:98:e9:41:48:8b:41:30:
                    50:40:5a:51:09:9a:1a:79:3f:e9:69:75:99:7f:28:
                    ad:59:2c:11:91:c6:2d:b6:e9:5e:76:42:89:fb:4b:
                    ad:a4:0f:f7:43:ba:b9:1b:05:d3:a1:5c:6d:75:26:
                    62:d8:f0:ea:18:82:2c:15:8a:0d:0f:24:03:54:90:
                    f6:fa:94:11:f8:9b:e3:b8:39:9e:e7:79:43:cf:31:
                    3b:89:8a:5d:04:29:6f:1d:e7:ea:e5:d8:a3:4b:26:
                    bc:8e:f7:28:f7:60:1d:e3:85:6b:1b:13:67:4f:c7:
                    d2:25:31:d0:05:71:75:03:fb:ba:88:bd:a9:3f:2e:
                    29:4b:ea:31:a0:45:f7:11:e4:cc:8f:44:78:3f:f8:
                    b8:6c:06:cc:ef:36:ff:1e:2b:ef:ef:c4:ab:60:09:
                    fb:4c:6d:9a:a4:44:b5:61:d3:9a:9e:37:df:3f:9a:
                    11:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:17:58:03:F4:82:5A:A9:86:3F:95:F6:0D:F0:2F:70:0B:8E:B2:1F
            X509v3 Authority Key Identifier:
                keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:23:3e:29:15:5d:7d:de:93:68:58:03:d2:0c:b4:e2:03:ab:
         c2:6e:99:29:e6:4c:30:03:bd:8e:09:1b:18:e9:f9:f0:6e:97:
         ad:b7:ca:a0:7d:9d:79:ab:71:d7:51:ab:68:47:f4:29:29:25:
         4c:21:94:f1:32:99:75:e1:2b:9b:ff:f8:f7:87:55:01:d0:cd:
         82:65:42:18:b3:1f:b6:48:fc:c9:77:05:4e:92:e8:64:e6:cc:
         2e:4b:f5:90:ca:d9:e9:e1:6f:92:18:82:35:3f:6e:05:63:40:
         86:da:9e:31:4f:fd:37:d9:38:49:48:14:f0:84:f0:23:51:34:
         94:aa:13:a8:dd:b3:fd:cb:73:03:4e:02:57:66:af:7b:00:1e:
         83:f8:dd:f8:cf:e7:4f:95:d9:ac:95:89:48:51:51:78:b0:79:
         b7:56:08:6e:86:80:18:b6:a4:d7:ca:b8:ff:fb:61:87:dd:03:
         6e:43:43:89:2c:f4:85:d6:65:f6:fd:50:2b:9b:23:3b:c5:8f:
         42:1b:0f:9c:2f:af:96:35:69:14:c0:1c:3f:b3:36:05:1c:e6:
         58:91:07:80:0b:5f:19:1f:97:af:c9:91:84:60:52:7e:f3:90:
         35:5d:06:91:8e:25:10:78:e6:25:58:c7:84:72:3e:d3:17:39:
         05:33:24:9d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAbYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkEyQjJBRjExMC8GA1UEBRMoM0FFNzY0NkNFNkFENTY5Rjc2MTZFNkE2RjZGRDNC
MTk4NkJFRDQxOTAeFw0yNjA5MjEwNTAxMjlaFw0yNjA5MjMwNTAxMjlaMBgxFjAU
BgNVBAMTDTZhYjBiYTJhLWViMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC64WooD4FKcOKi+NW/QskU7OZS49I0ijS338bqHlVy+tcQTxOTrGkva0FN
7w+EUKT8QBTU/aob7l303ijxLEqvl6Y7VO60oEt9Y6z4hwXMB9tKmOlBSItBMFBA
WlEJmhp5P+lpdZl/KK1ZLBGRxi226V52Qon7S62kD/dDurkbBdOhXG11JmLY8OoY
giwVig0PJANUkPb6lBH4m+O4OZ7neUPPMTuJil0EKW8d5+rl2KNLJryO9yj3YB3j
hWsbE2dPx9IlMdAFcXUD+7qIvak/LilL6jGgRfcR5MyPRHg/+LhsBszvNv8eK+/v
xKtgCftMbZqkRLVh05qeN98/mhETAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFxdY
A/SCWqmGP5X2DfAvcAuOsh8wHwYDVR0jBBgwFoAUOudkbOatVp92Fuam9v07GYa+
1BkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZBMkIyL0QzRjQ0MUFFNjZFNDExRjBBMERBNjY5MkRBRTRFQzlDL091ZGti
T2F0VnA5MkZ1YW05djA3R1lhLTFCay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL091ZGtiT2F0VnA5MkZ1YW05djA3R1lhLTFCay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkEyQjIvRDNGNDQxQUU2NkU0MTFGMEEwREE2NjkyREFF
NEVDOUMvT3Vka2JPYXRWcDkyRnVhbTl2MDdHWWEtMUJrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGIz4pFV193pNoWAPSDLTiA6vCbpkp
5kwwA72OCRsY6fnwbpett8qgfZ15q3HXUatoR/QpKSVMIZTxMpl14Sub//j3h1UB
0M2CZUIYsx+2SPzJdwVOkuhk5swuS/WQytnp4W+SGII1P24FY0CG2p4xT/032ThJ
SBTwhPAjUTSUqhOo3bP9y3MDTgJXZq97AB6D+N34z+dPldmslYlIUVF4sHm3Vghu
hoAYtqTXyrj/+2GH3QNuQ0OJLPSF1mX2/VArmyM7xY9CGw+cL6+WNWkUwBw/szYF
HOZYkQeAC18ZH5evyZGEYFJ+85A1XQaRjiUQeOYlWMeEcj7TFzkFMySd
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:57:31 2026 by rpki-client