Error: rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
File:                     D0ElrSzSvYs64WLz4yLl9YEEdVw.mft (raw, json)
Hash identifier:          bCp1evoLwmhVdeqSA8EeIm1/pfe5cao6nRSrRXBtE6c=
Subject key identifier:   C8:D0:2E:71:6E:A9:7D:E3:81:39:9C:CB:EB:CD:2F:08:8B:80:5A:81
Authority key identifier: 0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C
Certificate issuer:       /CN=F369E1AEAF/serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
Certificate serial:       041B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
Manifest number:          0416
Signing time:             Sat 10 Oct 2026 03:55:16 +0000
Manifest this update:     Sat 10 Oct 2026 03:55:15 +0000
Manifest next update:     Mon 12 Oct 2026 03:55:15 +0000
Files and hashes:         1: D0ElrSzSvYs64WLz4yLl9YEEdVw.crl (hash: 8pDWE170eGqhNa51Ej7ljXnHDXYQvx1NDyvni5tgwfQ=)
                          2: B919C81C65D111F1BEB357FFCE1D38B0.roa (hash: x2d+bsJIxu+I4SIhjiWk8t+DzbcsDbeFDy/rEZKeKBk=)
                          3: 377F8AB4FF9F11F0848280B7DAE4EC9C.roa (hash: gFLOPNqksbsyHx1yrYoxHSQi3UU734l3ljRLt/JU9Nc=)
                          4: 47AF2FF6F14011F09B4F1487DAE4EC9C.roa (hash: BdQgr789FxdUtgxj7i45jCOlxF6k3e5lzdi6pI5Zqcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E1AEAF, serialNumber=0F4125AD2CD2BD8B3AE162F3E322E5F58104755C
        Validity
            Not Before: Oct 10 03:55:15 2026 GMT
            Not After : Oct 12 03:55:15 2026 GMT
        Subject: CN=6ac9b724-5a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:27:73:73:24:6b:9b:a0:07:7a:2c:64:db:06:
                    e4:a0:5b:3d:f5:50:be:17:76:60:71:78:02:c2:20:
                    83:5a:48:fb:d4:da:05:0f:06:69:a3:8d:2e:43:f1:
                    44:52:33:0c:a8:40:f0:c7:50:c3:00:56:d8:bc:50:
                    44:a7:1b:ea:60:24:28:03:e1:f0:2d:0c:37:79:e9:
                    98:dc:ec:02:07:a1:fe:10:21:b6:cd:e9:3a:38:34:
                    c7:0d:da:a6:50:f3:09:68:2e:e8:3e:5c:40:fb:ae:
                    dd:9a:e6:7b:e5:24:cf:b3:e3:d9:68:5b:e7:c0:79:
                    c3:a0:dd:7e:13:da:4d:1c:68:44:e8:d1:b2:0d:87:
                    fb:c4:85:95:bf:13:bb:47:cf:cb:f3:8d:b3:d0:a0:
                    27:21:31:5c:ed:88:96:79:08:47:79:07:04:4a:8e:
                    0b:92:d7:ac:ba:4e:a7:34:ed:4a:c4:c5:b9:aa:18:
                    4d:f0:62:11:e9:9c:31:a6:2e:3d:18:11:39:71:51:
                    3a:0e:f6:aa:df:20:ac:44:60:06:65:43:4a:af:10:
                    2e:dc:4e:21:be:5b:e7:31:51:8c:ea:8c:ca:99:ef:
                    ba:61:37:15:f8:3d:7b:09:bb:9d:99:0c:55:33:c7:
                    8a:77:ef:76:e8:55:a9:8c:53:9e:24:1f:f9:10:cf:
                    3b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D0:2E:71:6E:A9:7D:E3:81:39:9C:CB:EB:CD:2F:08:8B:80:5A:81
            X509v3 Authority Key Identifier:
                keyid:0F:41:25:AD:2C:D2:BD:8B:3A:E1:62:F3:E3:22:E5:F5:81:04:75:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D0ElrSzSvYs64WLz4yLl9YEEdVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E1AE/A3E2EC72A56611EEBE59906AD25BE465/D0ElrSzSvYs64WLz4yLl9YEEdVw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:96:c8:db:9e:f2:8b:3b:6f:3c:dc:2d:4b:cc:9d:ce:07:f1:
         0d:ac:0e:aa:23:f0:5f:e5:1c:2c:fb:a9:3b:d0:da:91:4d:cf:
         36:d6:55:78:d4:ff:16:ac:55:5f:4b:b0:cb:63:cf:1b:e8:7a:
         85:9b:9e:11:4c:45:77:97:48:bc:da:7d:fa:a8:0e:d6:66:9e:
         cf:e0:f9:44:29:62:c4:ae:12:0d:0b:ed:81:8f:9f:6f:a5:3b:
         cd:4e:9c:ae:a5:f4:d5:e5:a4:cd:66:c1:4b:71:3f:1d:7d:aa:
         a5:33:be:99:e7:a3:7f:64:5d:8a:1a:4f:25:a1:1f:f2:77:19:
         e3:63:c5:19:a0:52:5c:09:1f:2d:19:b9:e1:10:a8:86:10:d6:
         92:04:de:69:8b:f5:d9:b3:ac:7e:90:09:a9:d8:3d:38:8a:18:
         74:18:cd:23:6d:3d:ec:4e:af:a2:3b:0f:ca:d0:bd:a6:b6:f9:
         4f:66:36:87:6d:db:8d:88:c3:23:d0:0b:95:6a:aa:a9:88:b3:
         fd:e8:26:2f:c8:4b:14:ea:11:a8:50:27:31:eb:7a:e6:2f:33:
         ba:1a:9e:56:ca:af:28:88:c3:13:50:10:7f:12:34:02:23:16:
         bf:82:bc:4d:88:20:7e:12:47:33:30:16:d8:14:f8:5b:e3:0f:
         4b:a1:0d:28
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUUxQUVBRjExMC8GA1UEBRMoMEY0MTI1QUQyQ0QyQkQ4QjNBRTE2MkYzRTMyMkU1
RjU4MTA0NzU1QzAeFw0yNjEwMTAwMzU1MTVaFw0yNjEwMTIwMzU1MTVaMBgxFjAU
BgNVBAMTDTZhYzliNzI0LTVhMjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOJ3NzJGuboAd6LGTbBuSgWz31UL4XdmBxeALCIINaSPvU2gUPBmmjjS5D
8URSMwyoQPDHUMMAVti8UESnG+pgJCgD4fAtDDd56Zjc7AIHof4QIbbN6To4NMcN
2qZQ8wloLug+XED7rt2a5nvlJM+z49loW+fAecOg3X4T2k0caETo0bINh/vEhZW/
E7tHz8vzjbPQoCchMVztiJZ5CEd5BwRKjguS16y6Tqc07UrExbmqGE3wYhHpnDGm
Lj0YETlxUToO9qrfIKxEYAZlQ0qvEC7cTiG+W+cxUYzqjMqZ77phNxX4PXsJu52Z
DFUzx4p373boVamMU54kH/kQzzuHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyNAu
cW6pfeOBOZzL680vCIuAWoEwHwYDVR0jBBgwFoAUD0ElrSzSvYs64WLz4yLl9YEE
dVwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFMUFFL0EzRTJFQzcyQTU2NjExRUVCRTU5OTA2QUQyNUJFNDY1L0QwRWxy
U3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0QwRWxyU3pTdllzNjRXTHo0eUxsOVlFRWRWdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUUxQUUvQTNFMkVDNzJBNTY2MTFFRUJFNTk5MDZBRDI1
QkU0NjUvRDBFbHJTelN2WXM2NFdMejR5TGw5WUVFZFZ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHlsjbnvKLO2883C1LzJ3OB/ENrA6q
I/Bf5Rws+6k70NqRTc821lV41P8WrFVfS7DLY88b6HqFm54RTEV3l0i82n36qA7W
Zp7P4PlEKWLErhINC+2Bj59vpTvNTpyupfTV5aTNZsFLcT8dfaqlM76Z56N/ZF2K
Gk8loR/ydxnjY8UZoFJcCR8tGbnhEKiGENaSBN5pi/XZs6x+kAmp2D04ihh0GM0j
bT3sTq+iOw/K0L2mtvlPZjaHbduNiMMj0AuVaqqpiLP96CYvyEsU6hGoUCcx63rm
LzO6Gp5Wyq8oiMMTUBB/EjQCIxa/grxNiCB+EkczMBbYFPhb4w9LoQ0o
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:57:08 2026 by rpki-client