Error: rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.mft
File:                     JzGb_ZxuxZU-VilZmv_i0mqUBPI.mft (raw, json)
Hash identifier:          nzPbpRVpeZ+nXx7ihq2NL3jaGU7IQOz5Ox+aItmaEQg=
Subject key identifier:   2A:5B:7D:3A:B0:E5:66:56:31:6C:77:31:C7:B4:22:1B:19:EB:3F:D1
Authority key identifier: 27:31:9B:FD:9C:6E:C5:95:3E:56:29:59:9A:FF:E2:D2:6A:94:04:F2
Certificate issuer:       /CN=F369BAF0AF/serialNumber=27319BFD9C6EC5953E5629599AFFE2D26A9404F2
Certificate serial:       0757
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JzGb_ZxuxZU-VilZmv_i0mqUBPI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.mft
Manifest number:          074D
Signing time:             Sun 27 Sep 2026 02:28:56 +0000
Manifest this update:     Sun 27 Sep 2026 02:28:55 +0000
Manifest next update:     Tue 29 Sep 2026 02:28:55 +0000
Files and hashes:         1: JzGb_ZxuxZU-VilZmv_i0mqUBPI.crl (hash: YB8kY5TJYRaUnNijmXjeV6upu27muEXOtNUg1f1FQ8o=)
                          2: DEC02F5E28CB11F19DF8BCA7DAE4EC9C.roa (hash: QG4MgBoLVMH9mncdgz6VjEgC+bzdC7DdbHcSL/0kUPw=)
                          3: B3BD4FFA28C911F1BAB1DA99DAE4EC9C.roa (hash: 2Lhyg9HENr7nMb6qF0oSS50hWjaCOuUpDm6G/xYCc3c=)
                          4: 29138D7028CD11F1B1DE07B0DAE4EC9C.roa (hash: FVha578pmV4I0yZsmrJ4PMcD94wqDJGjrVui6FDbj3U=)
                          5: 9A33DCE228CA11F196365C9FDAE4EC9C.roa (hash: oH0IVcHq3gD09d0vYVREytolp0W9EMsMMXjiuaCN3pA=)
                          6: 7C75004428CC11F1ACA6F9ABDAE4EC9C.roa (hash: ezPDMLZmmawBK1YKbQBWx31MDM/oObn+2yUUMTjG/YI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JzGb_ZxuxZU-VilZmv_i0mqUBPI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1879 (0x757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BAF0AF, serialNumber=27319BFD9C6EC5953E5629599AFFE2D26A9404F2
        Validity
            Not Before: Sep 27 02:28:55 2026 GMT
            Not After : Sep 29 02:28:55 2026 GMT
        Subject: CN=6ab87f68-8c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:8b:12:41:d0:c9:5d:ab:1a:63:1a:3d:bc:
                    f8:3d:1b:e7:b1:72:b3:9d:a0:ce:a1:e9:95:a0:f2:
                    d5:9c:8d:bf:72:53:3a:96:7a:a6:21:11:e7:0b:07:
                    0a:63:54:b7:32:46:df:56:aa:f4:fc:63:bb:71:7c:
                    6f:db:ce:be:d0:91:3e:7f:7c:14:21:7e:b6:f8:4f:
                    11:bc:5c:b5:68:b2:c8:ef:68:58:e8:a7:73:d9:11:
                    33:25:af:dc:04:a5:06:a3:fa:a6:1d:fb:40:2c:6d:
                    2a:94:5b:1d:a3:b1:d2:db:76:7e:e0:01:d5:e9:95:
                    3a:d1:a0:d6:66:90:0f:90:ba:6d:15:cd:19:ae:a1:
                    7b:c2:d8:5e:49:f8:05:a4:19:d0:ce:7d:a7:84:2a:
                    dd:01:16:f7:88:ea:7a:8c:69:33:65:4a:39:9d:f9:
                    f8:be:6c:8b:c1:75:41:ea:0d:d4:6a:ef:1f:ff:ff:
                    40:b5:34:09:46:55:7a:c2:03:ff:1e:5e:8d:2b:b5:
                    d9:8f:16:b9:fb:eb:f4:8e:20:da:8c:ba:af:64:55:
                    e0:9f:93:22:7e:f5:0c:51:17:3c:79:fe:da:c9:c0:
                    62:73:6e:f9:42:06:f4:27:8f:6d:b6:99:4a:28:6c:
                    53:b9:d9:89:7e:56:20:ca:ee:b2:b1:b1:f9:df:b0:
                    49:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:5B:7D:3A:B0:E5:66:56:31:6C:77:31:C7:B4:22:1B:19:EB:3F:D1
            X509v3 Authority Key Identifier:
                keyid:27:31:9B:FD:9C:6E:C5:95:3E:56:29:59:9A:FF:E2:D2:6A:94:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JzGb_ZxuxZU-VilZmv_i0mqUBPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BAF0/129844362CBB11ECB2D8366ED8A014CE/JzGb_ZxuxZU-VilZmv_i0mqUBPI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:11:5d:a0:c6:94:0a:5f:0c:bd:32:cd:d6:ff:82:1d:65:7a:
         40:48:7a:06:67:86:ba:78:77:84:39:9b:d3:b5:b0:f9:0d:03:
         67:c9:ab:37:60:73:f2:ce:ae:9b:6b:d2:66:5c:b3:b3:3f:cc:
         10:bd:71:dd:11:46:ae:2e:31:e5:39:64:4a:bb:a7:27:18:f8:
         91:7a:a8:6a:43:76:d8:00:82:8c:2b:c3:e7:8b:95:ff:0f:24:
         19:e1:d7:b0:dd:d6:07:89:69:58:04:a3:1a:50:ae:ab:f9:d0:
         b9:da:1b:70:01:e4:58:b8:62:ee:a5:64:ab:e5:f9:83:5d:62:
         c9:82:dc:ad:e4:d3:0a:1c:79:1f:05:fb:ec:ed:87:59:72:5b:
         1a:f8:ff:aa:a4:9f:ff:90:71:fc:54:0c:8a:9e:3f:4a:79:9e:
         70:84:3b:8e:d3:f5:fc:d4:8e:97:e0:fd:40:f7:d1:c7:de:cb:
         5c:5c:a5:da:86:92:6c:c0:c0:59:f9:9e:dd:27:c1:f2:27:43:
         fb:a1:79:2b:ad:bd:16:0b:42:be:fa:45:1f:99:af:ac:d1:4a:
         5a:8d:58:d9:6a:00:00:76:0a:28:3a:69:fb:45:9f:32:c7:17:
         c7:04:e6:7f:53:25:f0:50:e8:71:3a:f0:21:99:6a:9f:91:42:
         c8:63:83:71
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB1cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUJBRjBBRjExMC8GA1UEBRMoMjczMTlCRkQ5QzZFQzU5NTNFNTYyOTU5OUFGRkUy
RDI2QTk0MDRGMjAeFw0yNjA5MjcwMjI4NTVaFw0yNjA5MjkwMjI4NTVaMBgxFjAU
BgNVBAMTDTZhYjg3ZjY4LThjMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDISYsSQdDJXasaYxo9vPg9G+excrOdoM6h6ZWg8tWcjb9yUzqWeqYhEecL
BwpjVLcyRt9WqvT8Y7txfG/bzr7QkT5/fBQhfrb4TxG8XLVossjvaFjop3PZETMl
r9wEpQaj+qYd+0AsbSqUWx2jsdLbdn7gAdXplTrRoNZmkA+Qum0VzRmuoXvC2F5J
+AWkGdDOfaeEKt0BFveI6nqMaTNlSjmd+fi+bIvBdUHqDdRq7x///0C1NAlGVXrC
A/8eXo0rtdmPFrn76/SOINqMuq9kVeCfkyJ+9QxRFzx5/trJwGJzbvlCBvQnj222
mUoobFO52Yl+ViDK7rKxsfnfsEkjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKlt9
OrDlZlYxbHcxx7QiGxnrP9EwHwYDVR0jBBgwFoAUJzGb/ZxuxZU+VilZmv/i0mqU
BPIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlCQUYwLzEyOTg0NDM2MkNCQjExRUNCMkQ4MzY2RUQ4QTAxNENFL0p6R2Jf
Wnh1eFpVLVZpbFptdl9pMG1xVUJQSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0p6R2JfWnh1eFpVLVZpbFptdl9pMG1xVUJQSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUJBRjAvMTI5ODQ0MzYyQ0JCMTFFQ0IyRDgzNjZFRDhB
MDE0Q0UvSnpHYl9aeHV4WlUtVmlsWm12X2kwbXFVQlBJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0EV2gxpQKXwy9Ms3W/4IdZXpASHoG
Z4a6eHeEOZvTtbD5DQNnyas3YHPyzq6ba9JmXLOzP8wQvXHdEUauLjHlOWRKu6cn
GPiReqhqQ3bYAIKMK8Pni5X/DyQZ4dew3dYHiWlYBKMaUK6r+dC52htwAeRYuGLu
pWSr5fmDXWLJgtyt5NMKHHkfBfvs7YdZclsa+P+qpJ//kHH8VAyKnj9KeZ5whDuO
0/X81I6X4P1A99HH3stcXKXahpJswMBZ+Z7dJ8HyJ0P7oXkrrb0WC0K++kUfma+s
0UpajVjZagAAdgooOmn7RZ8yxxfHBOZ/UyXwUOhxOvAhmWqfkULIY4Nx
-----END CERTIFICATE-----
Generated at Mon Sep 28 00:27:58 2026 by rpki-client