Error: rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
File:                     gvHGYRo6FGfbPXikpf7VCgilexM.mft (raw, json)
Hash identifier:          mZ5UxI9ZhEZoTQi2I4mbWabKQHPHuCIHGdTOYAf3z04=
Subject key identifier:   A4:1B:70:DC:45:6F:2D:28:3B:02:91:E3:8B:E4:5B:20:C9:F5:01:8A
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       089C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
Manifest number:          083E
Signing time:             Mon 21 Sep 2026 02:18:14 +0000
Manifest this update:     Mon 21 Sep 2026 02:18:13 +0000
Manifest next update:     Wed 23 Sep 2026 02:18:13 +0000
Files and hashes:         1: gvHGYRo6FGfbPXikpf7VCgilexM.crl (hash: SJy/JGhUphKGz5QxAPoiLMarXwRsohj+SowhrARmk0M=)
                          2: 364CE70A334211F1BC84101ECF1D38B0.roa (hash: SzY0M69wl8kbhZdJv0mbrKWF59ghGQkBzNtNqRXdeks=)
                          3: EE287DA62D1811F1BD0A6C7ADAE4EC9C.roa (hash: pdJON2oLaF8IedNpv4LxRG7g+R9Qeyi4W75wQ52QQ1c=)
                          4: 3D4622F431BE11F1B0952483DAE4EC9C.roa (hash: 9codvlAei9UqHKLAiSqHgXThiO5HpMqG0grwQ1kO/0k=)
                          5: 478AB26031BF11F1A6BDDD88DAE4EC9C.roa (hash: Lv1cV1DETQTGDmZ6WDynxJ207w7/5uQQidy8jh7V8yI=)
                          6: DFA7A342B04911F187D1F3DFCE1D38B0.roa (hash: EQXjr+GeRZbv3c4OcOdL9TP+7SybAubMWSm6gSx0/6s=)
                          7: E76F4CF831C611F190C479B3DAE4EC9C.roa (hash: faD0G33rEe95uhhlPweEbpanRsZcsjWv3e68sG62k44=)
                          8: 77D3E0C6333C11F1805420FDCE1D38B0.roa (hash: YU4iJ8s6p9raAZL7JWDoAn+gjmxoRUJUec2K/33AiEA=)
                          9: 91EA49D8333B11F1B22EFDF6CE1D38B0.roa (hash: Leg6xrK4VU4HGI0NvQ1v004esZ1TDt8++lioLjxNeuE=)
                          10: 8DB94274288211F1A74615F3DAE4EC9C.roa (hash: B0UVviCFUnADjgeCgBwbY+DmzXyTTHx6vlKGunTI9IM=)
                          11: AC275DBC631B11F1A22A1419CF1D38B0.roa (hash: xoGazta3G0QJLsgZ7iZuJsXZt3X8rgvX9PE2KdUCQaM=)
                          12: C2372772334111F18BB80E1ACF1D38B0.roa (hash: Gwi4ueCCvJZIEZsnyEOTtAlQafyA/I+7H+Prmzi5eP8=)
                          13: EB475FF031C111F1A71AC296DAE4EC9C.roa (hash: Y9/MUITjWqXrHS2rgjPQqYV3XME+v0umVdBOKsh062M=)
                          14: 12E03A6431CC11F19A97B0CEDAE4EC9C.roa (hash: lFjlkbuuShNgq6PRvQFC/93Tiq0B/QhMlHkqwc1W/u4=)
                          15: EF98E58A333B11F19E91FDF8CE1D38B0.roa (hash: ag2v5reb+zDo0vsvEh1NsL0zM4GQBnL1uS0jIXx6S14=)
                          16: 74D18C2231CD11F1A17488D6DAE4EC9C.roa (hash: Ox6dJbpLiRALf6E85u1k7Yfr6Od7UQqYMnIso8XRqBo=)
                          17: 9C892C2631CC11F1A1108ED2DAE4EC9C.roa (hash: QnqI3tvcewW1sAf9rxjG6hGUqhmFIswnl1mqgcxGm5k=)
                          18: 9DB6F4F831C111F183F9D694DAE4EC9C.roa (hash: QcMFrNwLjMz1DFo2YDIDBDhUUpqBoNq1P1d/q0F+85M=)
                          19: 95AD80F831CE11F1B34C2DDEDAE4EC9C.roa (hash: 7GSszHcBSLoAhRcmrcuX+aOLze2LfqETieE1ohOZlfA=)
                          20: 653646CC2D1811F1BF3D1FF5DAE4EC9C.roa (hash: u3IUn4tj5zxayKjv7Mj9uwx0wbWiOsgT9S4T/OJURIU=)
                          21: 5C5FD9AC31C611F19419AEAFDAE4EC9C.roa (hash: Vfi3YXIFXtroc+xlvW/NnuJNGpVT1vqCm7HLYJu9x5o=)
                          22: 9B8752862DBB11F189ED3DB1DAE4EC9C.roa (hash: 5W62VXfhv8h4fla6dJXbBmlFhR3DzFBJKL2EWMvoUbg=)
                          23: E27323D22DCF11F1AA18CAA5DAE4EC9C.roa (hash: 4BxkClyTNHcRQAjTgzhuIwOnw53YqhmtdQmVdBzKibE=)
                          24: A662608285F011F1B19268A4CE1D38B0.roa (hash: UMIy7Die2cFrodGJSjrF5fxQ8Z0dpn4wV5XE1qmScCk=)
                          25: C54D1BE2333C11F1B6BD59FDCE1D38B0.roa (hash: p6RZ8QJpgz3xEcvp6tMRCbchfnm4VVw01lhILVzRfjA=)
                          26: 8058325C291811F1BCA469E5DAE4EC9C.roa (hash: tn84rYgdhGNCGvc6GHqAV2yntcG3hM0yk13lx2/0f0g=)
                          27: 32A4F74C31CA11F1A89426C5DAE4EC9C.roa (hash: 6PvDVTzGzqpsU1NuvcWjmyoaxR1Pmky5CuTuNIv3Vuk=)
                          28: 3CA9E5062D1811F1B62BFBF4DAE4EC9C.roa (hash: i9e2Z/xX/L9oVfHEoB5qHiCLB71AT9kMB03oQMgB07s=)
                          29: 1E751F0431CF11F1A29171E0DAE4EC9C.roa (hash: Wva+Ot8drC807YhHscETaYZc4/LMLEyI5FKmSQmkMb0=)
                          30: 8F5F9A36334211F1952ABDA1CE1D38B0.roa (hash: TRLftW7bQP4YHkozq600eml5OVZhzd6UoYvqA+Pi6rY=)
                          31: 5F6C45B02D1911F19C780B7BDAE4EC9C.roa (hash: bOxuL7xuj8ZVGs3jT5rSLBPTBOPxm9e39rt/LXAf8q4=)
                          32: BEFF110C2D1811F1A1F97CF5DAE4EC9C.roa (hash: 3agqaHMVa66E4J+qH2SRoSQKzgeQvz+LrhURDFz8B1I=)
                          33: 24407F2431DD11F1B2EF6FB0DAE4EC9C.roa (hash: swExoTSzr/HphO/RuiYU4vF1Uh5yVj5x3/uO3edAUWw=)
                          34: 901DEFCA2D1811F1A30C24F5DAE4EC9C.roa (hash: idx082MQgEGFii3PMe5uhvENRLBGqI2MvkDj/0s+aOo=)
                          35: 095EF0C031E011F190717FC1DAE4EC9C.roa (hash: dzflDoxOpzpUgSIWiEA972HPgxMsTyqLlK8yrYd0ey4=)
                          36: 3F0F0F7031C211F19F838798DAE4EC9C.roa (hash: n7CiBbLyLhTC5G5W9u5fi8nfjYNPB7ln0RUmNgrJ9zI=)
                          37: 31CEFF34333C11F1A29948F9CE1D38B0.roa (hash: vwXLDZXZzTg/OEkNIbZZslfRneJP1AMm64AZWINF7J8=)
                          38: 1306C5242D0A11F1ACE79FA2DAE4EC9C.roa (hash: Yap6AiBkD3ixZ9mWZ1ZB8OCM/j6jVoGOnv3+2v/DDNI=)
                          39: 14B3FDF031C511F19BFBF3A7DAE4EC9C.roa (hash: yki70wMJjkF8GK10Y244hzfzk5cj+gAW3eBV96fUOME=)
                          40: 83A6A4D4334011F1A7D0E413CF1D38B0.roa (hash: 74QB8V26zqay7IX5/bDpPWmQodgpJK1gmMK9RYjD57I=)
                          41: CC2DC63031BD11F1991EE480DAE4EC9C.roa (hash: BOHs5+10RMjUndeT2FzPUD4KqFm+1OkeMgiCuz86fDw=)
                          42: 9FF9476C31BB11F1BEBBC5F1DAE4EC9C.roa (hash: ng+xI/QLSvaWcBtYJKU3+sh8o2b7s+XTpnLUsVJRDNQ=)
                          43: 637EEFD031BB11F1B9968FF1DAE4EC9C.roa (hash: 8v1K6f5pVaGEkN0RYF56XSCdk82jOyqLTbXIL2m0YSQ=)
                          44: 48690C5431C911F1981D27BFDAE4EC9C.roa (hash: EUVMx+SXkeZ58/9y3EmTr96W5XKI9Y2B6lAIh14TtcI=)
                          45: B2FA3840288211F1BDB7ECF4DAE4EC9C.roa (hash: 5/ROpgAZwkQdj2BqP/MW/qlEH7eR3MDQUUaLt+Ee2ao=)
                          46: 5527F30431D011F1958427E9DAE4EC9C.roa (hash: AIvtBN5UUEa0IW3TZyf90eURXW/vkLS6CaLRuEgcyQM=)
                          47: 45C2EF7E333B11F1ADF4D3F4CE1D38B0.roa (hash: V86xrnh/y+DTVy0ksoIWIJSKRIobCwk+V5t+KofAi+I=)
                          48: 181970DA552211F1B9642311CF1D38B0.roa (hash: FrqgJULwxDs9PKgC0s454c8XZzkNJcz5Z/71KciqL8E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:18:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: Sep 21 02:18:13 2026 GMT
            Not After : Sep 23 02:18:13 2026 GMT
        Subject: CN=6ab093e6-060d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:5e:82:26:14:4e:66:33:14:0f:b9:10:c7:
                    cb:53:4d:ec:3a:c8:32:42:37:3d:34:d3:ab:f3:2f:
                    e4:9c:dd:38:45:c5:f3:87:3c:14:0b:e6:4e:9a:6f:
                    a7:37:bd:fa:4e:28:92:65:57:01:e7:b8:5c:8c:22:
                    c0:d2:94:8e:c4:49:8c:24:b5:ff:7c:73:05:15:2a:
                    81:44:08:b0:b5:03:4a:1e:df:45:06:18:74:46:21:
                    c7:a7:b0:4e:48:22:78:1f:40:0f:a0:36:c5:97:22:
                    fd:44:96:28:6e:73:f7:27:f4:34:f5:5b:ca:b5:7a:
                    49:34:c8:8d:eb:46:11:9d:0f:2c:0b:30:77:7c:89:
                    4b:44:9c:2a:82:eb:75:17:4d:f2:31:79:31:cc:5f:
                    fb:00:4f:1f:52:ab:19:06:e3:25:a4:3e:53:25:7c:
                    69:6d:80:00:2e:e8:f9:c8:ed:dc:e5:36:49:e4:66:
                    e2:e4:1f:57:22:14:7e:16:c7:6a:db:fe:a9:c7:00:
                    47:fd:65:43:da:c6:4a:3a:a0:bc:07:eb:df:06:2a:
                    4f:bb:40:d7:ff:bc:8d:f6:c1:b1:de:0f:82:c4:f2:
                    80:ea:32:ef:24:7c:1b:91:44:b3:43:5e:6c:78:44:
                    49:95:dd:41:2e:23:aa:fc:56:bd:2e:8a:60:69:0b:
                    81:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1B:70:DC:45:6F:2D:28:3B:02:91:E3:8B:E4:5B:20:C9:F5:01:8A
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:ce:59:fb:5a:d7:34:f8:a9:37:48:84:b0:25:4a:c8:3a:d9:
         45:c2:ea:18:4f:09:1c:25:37:60:e5:e6:fb:a6:5e:6a:fe:a3:
         52:94:59:bb:0d:29:d1:bf:c0:84:9d:d9:f7:ef:75:51:d8:1a:
         d1:67:29:27:17:3e:25:50:b5:13:39:0e:10:de:77:b4:e2:26:
         0f:45:7f:ec:41:58:92:cc:3c:51:31:6a:28:81:17:75:42:87:
         71:89:77:bd:ff:6a:d7:27:bc:26:e6:2d:a9:26:27:e5:c3:2d:
         c8:d1:bd:9e:0f:5f:49:27:88:00:db:39:24:9b:d6:53:58:65:
         33:6b:75:0f:56:b3:72:b9:32:0c:03:4c:f6:ae:fa:95:a6:06:
         74:c9:76:82:ed:72:da:03:fd:4a:03:0a:5d:af:e1:d5:42:10:
         66:6e:f9:3b:f6:f3:73:be:aa:bc:20:45:9b:3a:e9:8f:98:81:
         e7:5c:1a:e5:4f:b5:6d:24:79:0a:f9:8d:38:2d:1b:37:32:4f:
         b8:5e:e7:f6:a5:c6:64:f8:8a:37:70:28:dc:dc:85:a4:52:a7:
         34:ff:d1:90:0d:ba:76:15:8f:d5:5e:56:60:9f:72:38:4a:01:
         36:bd:4e:d7:ed:72:c4:92:1e:ef:0f:da:e7:13:ac:af:3a:42:
         1c:b6:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:34:51 2026 by rpki-client