Error: rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
File:                     On6mEjuyi5myrc0qWftjiY7momU.mft (raw, json)
Hash identifier:          zGOzT0ffQAqW5SGdWvwlM5ylgizpoR7mDl2SFRuC4HM=
Subject key identifier:   4B:92:27:A1:CB:24:21:E4:FF:0B:CE:2A:84:18:B0:F4:32:FC:CB:84
Authority key identifier: 3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65
Certificate issuer:       /CN=F36A0B3BAF/serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
Certificate serial:       027C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
Manifest number:          027B
Signing time:             Tue 20 Oct 2026 04:45:36 +0000
Manifest this update:     Tue 20 Oct 2026 04:45:36 +0000
Manifest next update:     Thu 22 Oct 2026 04:45:36 +0000
Files and hashes:         1: On6mEjuyi5myrc0qWftjiY7momU.crl (hash: tCsnR5Ef8nAan/pODIE9KYmMrG1kJyM4uMkJ5Npo1x4=)
                          2: 8500AAA4DFA511EFA4A0995A762E951A.roa (hash: vzRjRuX2GZhGU/X4T8gnBdvjxS1YirPqGZKLuKJg1+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0B3BAF, serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
        Validity
            Not Before: Oct 20 04:45:36 2026 GMT
            Not After : Oct 22 04:45:36 2026 GMT
        Subject: CN=6ad6f1f0-94d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:37:df:88:e6:39:ab:5c:de:b2:e5:fa:91:
                    1f:95:96:2c:c1:28:97:d3:6c:8d:ad:0a:64:93:c6:
                    ac:42:21:e1:e9:5b:39:c5:e2:7c:0c:8a:60:89:2f:
                    3d:90:66:1f:d5:f2:7f:20:5b:1d:d2:90:11:44:01:
                    b4:bf:cc:67:30:e7:7d:bb:d2:9f:21:3a:10:9e:83:
                    2d:af:43:ed:00:b3:32:e6:04:40:a8:b7:2c:a6:12:
                    fa:da:71:3b:2c:0b:b7:81:2e:9f:49:03:b8:53:7a:
                    78:ca:97:cd:f7:8d:be:53:6f:f3:df:3e:f2:a9:ad:
                    f0:b6:bb:63:2b:dd:cc:bc:52:cb:69:c8:a4:e4:4d:
                    13:91:da:81:a3:c5:f8:59:47:1e:64:90:90:7d:32:
                    af:ef:d4:f8:30:6e:58:eb:cb:52:ae:30:7e:32:91:
                    b0:31:aa:6f:3d:3d:47:40:c4:05:8e:67:1d:85:42:
                    6b:e6:2d:07:09:36:52:80:88:91:0d:52:8a:a8:60:
                    c9:ca:0b:26:74:8b:35:1d:cc:24:df:2d:3b:ff:0b:
                    07:94:b4:d7:d0:b3:99:d2:24:ac:30:35:00:b1:6a:
                    33:f9:5e:6f:53:eb:73:55:52:21:d5:95:f7:63:4f:
                    71:14:df:de:d9:6d:f7:07:a8:62:3f:15:8e:04:03:
                    10:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:92:27:A1:CB:24:21:E4:FF:0B:CE:2A:84:18:B0:F4:32:FC:CB:84
            X509v3 Authority Key Identifier:
                keyid:3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:9c:9d:0d:04:92:44:6e:3f:93:ce:86:24:29:b1:98:ed:
         23:98:6e:16:5a:13:ed:bc:8f:97:c7:b5:8c:6b:f4:91:27:74:
         7d:b1:05:67:94:54:5f:b2:3c:1d:ab:55:37:ff:74:d3:18:0c:
         eb:e4:09:2b:f5:8e:0b:c8:46:bf:3f:25:30:fb:d0:2d:bf:87:
         be:25:5a:75:bf:78:e1:80:26:7d:a1:2c:93:ac:84:0a:b7:87:
         6b:62:b6:c6:6f:3c:e2:19:55:cc:3a:6c:8c:32:59:90:bb:90:
         02:4d:f6:7d:82:f7:ea:e0:28:21:f4:d9:6f:08:90:6d:bd:9d:
         bd:41:97:d0:77:95:75:63:2b:16:c2:11:be:31:4c:1d:ac:cc:
         de:27:53:0f:e0:47:69:e2:1c:67:7e:2d:74:9e:96:07:ac:3d:
         1b:93:a4:b5:81:db:09:ae:2f:00:bf:bf:e7:b0:47:24:b9:76:
         f7:bc:a7:00:cc:4b:65:9b:9d:11:1b:fe:01:eb:af:d7:1a:4b:
         b2:be:fd:de:2e:df:49:16:e4:7c:38:98:6e:28:40:8a:c3:b7:
         cc:c7:1e:93:47:e3:ee:b9:2d:8f:35:e1:4a:db:61:7b:07:a8:
         36:2b:f0:18:ac:c1:92:6a:ee:b4:bf:b6:46:0a:95:40:a7:57:
         22:92:85:0a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTBCM0JBRjExMC8GA1UEBRMoM0E3RUE2MTIzQkIyOEI5OUIyQURDRDJBNTlGQjYz
ODk4RUU2QTI2NTAeFw0yNjEwMjAwNDQ1MzZaFw0yNjEwMjIwNDQ1MzZaMBgxFjAU
BgNVBAMTDTZhZDZmMWYwLTk0ZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJFzffiOY5q1zesuX6kR+VlizBKJfTbI2tCmSTxqxCIeHpWznF4nwMimCJ
Lz2QZh/V8n8gWx3SkBFEAbS/zGcw53270p8hOhCegy2vQ+0AszLmBECotyymEvra
cTssC7eBLp9JA7hTenjKl833jb5Tb/PfPvKprfC2u2Mr3cy8UstpyKTkTROR2oGj
xfhZRx5kkJB9Mq/v1Pgwbljry1KuMH4ykbAxqm89PUdAxAWOZx2FQmvmLQcJNlKA
iJENUoqoYMnKCyZ0izUdzCTfLTv/CweUtNfQs5nSJKwwNQCxajP5Xm9T63NVUiHV
lfdjT3EU397ZbfcHqGI/FY4EAxB/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUS5In
ocskIeT/C84qhBiw9DL8y4QwHwYDVR0jBBgwFoAUOn6mEjuyi5myrc0qWftjiY7m
omUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEwQjNCL0VDNjkyODEyREZBMzExRUZBN0E5MEM0RTc2MkU5NTFBL09uNm1F
anV5aTVteXJjMHFXZnRqaVk3bW9tVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09uNm1FanV5aTVteXJjMHFXZnRqaVk3bW9tVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTBCM0IvRUM2OTI4MTJERkEzMTFFRkE3QTkwQzRFNzYy
RTk1MUEvT242bUVqdXlpNW15cmMwcVdmdGppWTdtb21VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdgJydDQSSRG4/k86GJCmxmO0jmG4W
WhPtvI+Xx7WMa/SRJ3R9sQVnlFRfsjwdq1U3/3TTGAzr5Akr9Y4LyEa/PyUw+9At
v4e+JVp1v3jhgCZ9oSyTrIQKt4drYrbGbzziGVXMOmyMMlmQu5ACTfZ9gvfq4Cgh
9NlvCJBtvZ29QZfQd5V1YysWwhG+MUwdrMzeJ1MP4Edp4hxnfi10npYHrD0bk6S1
gdsJri8Av7/nsEckuXb3vKcAzEtlm50RG/4B66/XGkuyvv3eLt9JFuR8OJhuKECK
w7fMxx6TR+PuuS2PNeFK22F7B6g2K/AYrMGSau60v7ZGCpVAp1cikoUK
-----END CERTIFICATE-----
Generated at Tue Oct 20 08:46:17 2026 by rpki-client