Error: rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
File:                     5PfkpBui3-Gkmtw2NMzweTXpIRg.mft (raw, json)
Hash identifier:          ykaw2t9+wgL65JmZGhdRq0WLc+CmBjo23lbbMexq2xo=
Subject key identifier:   5D:70:61:FA:1F:46:4F:98:AE:6C:FC:AF:84:FE:69:E2:CB:BF:7A:DD
Authority key identifier: E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18
Certificate issuer:       /CN=F368356FAR/serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
Certificate serial:       01B9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
Manifest number:          01B7
Signing time:             Sat 26 Sep 2026 05:01:51 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:50 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:50 +0000
Files and hashes:         1: 5PfkpBui3-Gkmtw2NMzweTXpIRg.crl (hash: pwfhE7ZVOLc/E/C6jbo4Ojh1TMe+1kVUq2BLyKC8Efg=)
                          2: 5BCF46A8923911F0BEE309F5DAE4EC9C.roa (hash: ncq+Mwbrx6oQKK1sHldvuf8E9iLus0kj4fB63aqtMb4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
                          rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAR, serialNumber=E4F7E4A41BA2DFE1A49ADC3634CCF07935E92118
        Validity
            Not Before: Sep 26 05:01:50 2026 GMT
            Not After : Sep 28 05:01:50 2026 GMT
        Subject: CN=6ab751bf-428c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:db:36:13:d2:ec:2f:18:2d:a0:7f:08:3c:19:
                    86:24:01:2b:1e:c5:7e:ac:4b:f3:03:46:4d:43:dc:
                    6a:a7:82:49:50:85:59:6d:2f:d2:61:ea:69:3c:a8:
                    f6:65:47:0d:69:13:e5:0a:0e:6d:67:20:b8:16:a7:
                    36:b7:45:62:5d:8b:a5:dd:37:6e:e4:ea:3e:99:fc:
                    0f:f4:d5:4e:6d:6f:38:87:9f:7f:35:7b:0e:7d:f2:
                    81:ab:01:da:8e:95:41:6b:5f:34:96:0b:e4:28:ea:
                    e4:cf:ca:6f:40:49:89:d5:c7:f4:9f:c4:48:78:ee:
                    91:cc:60:1a:a4:92:e9:15:9e:19:6e:b7:63:1b:19:
                    de:be:ee:a0:58:5d:fc:76:23:96:55:97:34:8b:07:
                    f6:8b:9f:7f:97:9e:73:23:5a:be:f4:bd:40:8e:77:
                    a4:09:87:b0:4b:45:cd:83:ca:a1:10:fb:b2:8f:b6:
                    3e:4c:bd:80:b0:ae:83:3a:35:f1:ca:7a:f1:50:fe:
                    42:80:88:4d:a3:d7:db:56:cc:bc:f7:6e:da:cb:1e:
                    84:a4:bd:6a:d7:9d:92:48:32:c8:4c:26:31:d7:db:
                    64:21:53:b7:ad:87:23:d2:18:cc:f3:1e:a8:10:fe:
                    75:ab:d2:1e:e9:d8:54:79:cf:0d:70:c7:a0:7e:c6:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:61:FA:1F:46:4F:98:AE:6C:FC:AF:84:FE:69:E2:CB:BF:7A:DD
            X509v3 Authority Key Identifier:
                keyid:E4:F7:E4:A4:1B:A2:DF:E1:A4:9A:DC:36:34:CC:F0:79:35:E9:21:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5PfkpBui3-Gkmtw2NMzweTXpIRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/EC354FA666E411F081B08C92DAE4EC9C/5PfkpBui3-Gkmtw2NMzweTXpIRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:0d:8a:2e:69:30:53:91:04:29:93:4f:b1:87:44:de:66:6b:
         3f:e6:64:15:8c:10:f0:bd:9c:5e:ba:f5:31:91:0e:27:9d:d8:
         08:73:1e:ef:b2:fb:1a:ed:51:9b:fe:3d:30:7e:3f:ba:ef:68:
         e1:a9:56:5f:21:f9:da:81:49:86:e7:f5:9c:88:21:97:ad:97:
         e1:fc:71:46:9d:26:e6:f8:ea:1e:62:38:f2:0c:1a:ff:04:1a:
         d2:36:1f:ab:43:9a:94:77:34:6d:83:3b:51:c6:01:59:e0:87:
         b7:57:25:9c:26:31:f7:6a:c0:d6:dd:54:88:60:e0:f8:c6:78:
         93:5b:58:72:54:05:22:07:d5:27:24:39:33:2a:04:6b:28:5a:
         66:22:61:c2:23:e3:6b:93:b5:29:1d:d6:59:a5:72:7d:7a:71:
         88:73:2c:04:1c:55:c5:97:42:c2:8e:0b:c8:50:cf:57:9d:58:
         e9:20:58:4e:a4:d5:88:5f:00:84:5e:35:73:e0:7e:f5:b9:f4:
         68:eb:d8:46:d7:a7:a2:a1:38:25:6f:b5:cd:94:01:9d:0c:44:
         4e:72:26:de:54:fa:54:f3:57:15:6a:10:27:df:85:e9:32:2f:
         47:99:7b:ad:52:1f:10:74:c3:92:e8:05:e9:7e:61:51:33:4f:
         59:af:cb:51
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAbkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODM1NkZBUjExMC8GA1UEBRMoRTRGN0U0QTQxQkEyREZFMUE0OUFEQzM2MzRDQ0Yw
NzkzNUU5MjExODAeFw0yNjA5MjYwNTAxNTBaFw0yNjA5MjgwNTAxNTBaMBgxFjAU
BgNVBAMTDTZhYjc1MWJmLTQyOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCs2zYT0uwvGC2gfwg8GYYkASsexX6sS/MDRk1D3GqngklQhVltL9Jh6mk8
qPZlRw1pE+UKDm1nILgWpza3RWJdi6XdN27k6j6Z/A/01U5tbziHn381ew598oGr
AdqOlUFrXzSWC+Qo6uTPym9ASYnVx/SfxEh47pHMYBqkkukVnhlut2MbGd6+7qBY
Xfx2I5ZVlzSLB/aLn3+XnnMjWr70vUCOd6QJh7BLRc2DyqEQ+7KPtj5MvYCwroM6
NfHKevFQ/kKAiE2j19tWzLz3btrLHoSkvWrXnZJIMshMJjHX22QhU7ethyPSGMzz
HqgQ/nWr0h7p2FR5zw1wx6B+xjF1AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUXXBh
+h9GT5iubPyvhP5p4su/et0wHwYDVR0jBBgwFoAU5PfkpBui3+Gkmtw2NMzweTXp
IRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzNTZGL0VDMzU0RkE2NjZFNDExRjA4MUIwOEM5MkRBRTRFQzlDLzVQZmtw
QnVpMy1Ha210dzJOTXp3ZVRYcElSZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzVQZmtwQnVpMy1Ha210dzJOTXp3ZVRYcElSZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODM1NkYvRUMzNTRGQTY2NkU0MTFGMDgxQjA4QzkyREFFNEVD
OUMvNVBma3BCdWkzLUdrbXR3Mk5NendlVFhwSVJnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBPDYouaTBTkQQpk0+xh0TeZms/5mQVjBDw
vZxeuvUxkQ4nndgIcx7vsvsa7VGb/j0wfj+672jhqVZfIfnagUmG5/WciCGXrZfh
/HFGnSbm+OoeYjjyDBr/BBrSNh+rQ5qUdzRtgztRxgFZ4Ie3VyWcJjH3asDW3VSI
YOD4xniTW1hyVAUiB9UnJDkzKgRrKFpmImHCI+Nrk7UpHdZZpXJ9enGIcywEHFXF
l0LCjgvIUM9XnVjpIFhOpNWIXwCEXjVz4H71ufRo69hG16eioTglb7XNlAGdDERO
cibeVPpU81cVahAn34XpMi9HmXutUh8QdMOS6AXpfmFRM09Zr8tR
-----END CERTIFICATE-----
Generated at Sat Sep 26 16:06:32 2026 by rpki-client