Error: rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
File:                     xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft (raw, json)
Hash identifier:          g5UrSaTwubSEZNSL5pJhgPVLlA/uPt8NeSPuH19aoPQ=
Subject key identifier:   D1:21:AD:2C:DE:25:6D:43:15:8E:F0:73:2D:03:C0:C1:CC:9D:C7:02
Authority key identifier: C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D
Certificate issuer:       /CN=F369FA36AR/serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
Certificate serial:       0ADE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
Manifest number:          0AD3
Signing time:             Sat 10 Oct 2026 01:22:57 +0000
Manifest this update:     Sat 10 Oct 2026 01:22:56 +0000
Manifest next update:     Mon 12 Oct 2026 01:22:56 +0000
Files and hashes:         1: xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl (hash: cO1hUXpPt7hXNBRpf5/PGPFi0MGUxl5H3CrQWxXMDnE=)
                          2: D4B109C4B0AF11EF94AB2EA4762E951A.roa (hash: Dru2mYr5BfjKlr8vM+NaW5CnYd2mn2FHYHVMnOlP6ow=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                          rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2782 (0xade)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FA36AR, serialNumber=C5F86148A44116A6292C008A09B4E75B8BD9DA1D
        Validity
            Not Before: Oct 10 01:22:56 2026 GMT
            Not After : Oct 12 01:22:56 2026 GMT
        Subject: CN=6ac99371-7028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:88:3c:95:02:6f:4a:b3:50:a3:1d:14:81:
                    2c:8e:09:ba:00:00:0b:d2:fc:4b:bc:64:bb:bb:7c:
                    9a:50:96:a6:ef:b5:eb:c5:c7:bc:c7:17:2d:70:f0:
                    27:71:fb:9c:83:77:11:03:bf:a4:82:c4:de:9d:85:
                    c7:a1:db:05:d0:4d:8f:8b:16:2a:92:fe:c3:4b:8c:
                    8c:76:4e:1c:0e:22:ee:88:36:f9:e0:ce:b4:2c:42:
                    b5:a6:e4:e7:8b:a0:84:d2:d6:ad:1a:f4:1a:50:25:
                    4c:90:c5:83:d3:fe:3f:49:53:30:a4:1a:a4:22:86:
                    90:bc:bc:39:62:c8:00:bd:3c:66:77:95:ee:36:3e:
                    13:da:07:63:42:1b:02:08:68:02:11:44:82:ba:97:
                    51:41:a4:f1:e5:85:be:5e:d6:73:d1:8f:de:92:91:
                    a5:b8:d5:da:b6:6b:35:b2:bd:13:85:68:00:ae:29:
                    86:48:63:ea:34:69:c9:4a:ca:d1:67:56:dc:ff:3f:
                    8d:b9:98:ba:e6:ea:00:f9:7d:07:91:ae:49:6f:4d:
                    d4:9e:23:d8:eb:57:2a:46:6c:b7:41:f0:3c:42:fa:
                    c5:dc:70:b3:a3:4e:9d:79:52:53:3d:59:78:b8:a5:
                    8d:17:57:41:bc:47:d4:83:07:df:aa:15:bc:d5:b5:
                    f1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:21:AD:2C:DE:25:6D:43:15:8E:F0:73:2D:03:C0:C1:CC:9D:C7:02
            X509v3 Authority Key Identifier:
                keyid:C5:F8:61:48:A4:41:16:A6:29:2C:00:8A:09:B4:E7:5B:8B:D9:DA:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xfhhSKRBFqYpLACKCbTnW4vZ2h0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FA36/AD43F906813911E9928B381AF8AEA228/xfhhSKRBFqYpLACKCbTnW4vZ2h0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:41:77:af:17:e5:eb:39:9a:65:ca:c1:52:fc:95:87:92:94:
         51:27:6c:6b:13:20:89:c1:08:37:d6:72:cb:32:41:26:2b:1a:
         4d:6f:c0:af:f5:41:72:7a:38:c1:27:14:98:22:c5:d6:10:23:
         3f:bb:4e:05:19:84:60:f8:4e:4c:3c:6f:35:54:04:09:f3:29:
         2a:4d:3c:81:ed:c6:ed:22:c2:b8:88:fc:fe:fe:b0:19:4f:fd:
         64:6d:43:f8:08:5d:b7:10:3d:1e:97:a5:9f:8b:fa:a0:05:48:
         97:fd:2c:2a:9e:ec:46:08:74:d0:e4:04:8e:e3:fe:48:f3:44:
         ec:9e:81:33:79:6f:2b:50:c8:25:12:45:44:15:64:c5:ce:6a:
         65:ad:f3:c8:da:eb:39:fa:ea:56:fd:ac:9a:02:56:2d:23:42:
         d7:54:78:79:d3:31:56:01:2c:13:aa:7f:2d:83:ba:5f:5c:08:
         2f:a1:82:de:79:bb:92:b1:5a:b4:9c:37:49:9b:0d:8e:49:89:
         fe:54:a0:dc:a8:f9:2b:2d:71:71:df:c5:99:f4:60:d8:2c:24:
         e7:d6:29:7b:38:97:ad:66:11:e2:56:21:08:0a:ec:4e:d3:d6:
         b7:83:eb:b0:d7:d6:aa:d5:06:c3:53:d1:3b:c6:43:de:9c:0c:
         3d:27:56:43
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCt4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUZBMzZBUjExMC8GA1UEBRMoQzVGODYxNDhBNDQxMTZBNjI5MkMwMDhBMDlCNEU3
NUI4QkQ5REExRDAeFw0yNjEwMTAwMTIyNTZaFw0yNjEwMTIwMTIyNTZaMBgxFjAU
BgNVBAMTDTZhYzk5MzcxLTcwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6aIg8lQJvSrNQox0UgSyOCboAAAvS/Eu8ZLu7fJpQlqbvtevFx7zHFy1w
8Cdx+5yDdxEDv6SCxN6dhceh2wXQTY+LFiqS/sNLjIx2ThwOIu6INvngzrQsQrWm
5OeLoITS1q0a9BpQJUyQxYPT/j9JUzCkGqQihpC8vDliyAC9PGZ3le42PhPaB2NC
GwIIaAIRRIK6l1FBpPHlhb5e1nPRj96SkaW41dq2azWyvROFaACuKYZIY+o0aclK
ytFnVtz/P425mLrm6gD5fQeRrklvTdSeI9jrVypGbLdB8DxC+sXccLOjTp15UlM9
WXi4pY0XV0G8R9SDB9+qFbzVtfFdAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU0SGt
LN4lbUMVjvBzLQPAwcydxwIwHwYDVR0jBBgwFoAUxfhhSKRBFqYpLACKCbTnW4vZ
2h0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlGQTM2L0FENDNGOTA2ODEzOTExRTk5MjhCMzgxQUY4QUVBMjI4L3hmaGhT
S1JCRnFZcExBQ0tDYlRuVzR2WjJoMC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hmaGhTS1JCRnFZcExBQ0tDYlRuVzR2WjJoMC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OUZBMzYvQUQ0M0Y5MDY4MTM5MTFFOTkyOEIzODFBRjhBRUEy
MjgveGZoaFNLUkJGcVlwTEFDS0NiVG5XNHZaMmgwLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQABQXevF+XrOZplysFS/JWHkpRRJ2xrEyCJ
wQg31nLLMkEmKxpNb8Cv9UFyejjBJxSYIsXWECM/u04FGYRg+E5MPG81VAQJ8ykq
TTyB7cbtIsK4iPz+/rAZT/1kbUP4CF23ED0el6Wfi/qgBUiX/SwqnuxGCHTQ5ASO
4/5I80TsnoEzeW8rUMglEkVEFWTFzmplrfPI2us5+upW/ayaAlYtI0LXVHh50zFW
ASwTqn8tg7pfXAgvoYLeebuSsVq0nDdJmw2OSYn+VKDcqPkrLXFx38WZ9GDYLCTn
1il7OJetZhHiViEICuxO09a3g+uw19aq1QbDU9E7xkPenAw9J1ZD
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:13:56 2026 by rpki-client