Error: rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
File:                     A_5dcm806TzhqV2UUY4SI3rD4sY.mft (raw, json)
Hash identifier:          Whgm5HQTxaogs0rsXp3BnCrYv1e4/LG8EawhwWivYBs=
Subject key identifier:   2A:0D:C4:76:71:EF:43:5D:7E:A7:3F:17:7E:95:9B:0B:08:AA:E7:ED
Authority key identifier: 03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6
Certificate issuer:       /CN=F36B3234AF/serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
Certificate serial:       0804
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
Manifest number:          07C9
Signing time:             Thu 08 Oct 2026 02:26:08 +0000
Manifest this update:     Thu 08 Oct 2026 02:26:07 +0000
Manifest next update:     Sat 10 Oct 2026 02:26:07 +0000
Files and hashes:         1: A_5dcm806TzhqV2UUY4SI3rD4sY.crl (hash: oM0fM5KmCyg9vsVjX5fsn5vqWEDtkkZVD+ujiHNzPE8=)
                          2: F073103AED8511F098246590DAE4EC9C.roa (hash: 7/OBPMvHgaBhBjcdfmAskDW47LM3Vtw//UfK9zD6ZTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 02:26:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B3234AF, serialNumber=03FE5D726F34E93CE1A95D94518E12237AC3E2C6
        Validity
            Not Before: Oct  8 02:26:07 2026 GMT
            Not After : Oct 10 02:26:07 2026 GMT
        Subject: CN=6ac6ff40-8cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:4d:2e:3f:72:22:10:02:35:40:01:eb:e3:
                    de:a9:77:35:56:61:71:d2:6f:43:a2:c3:6c:a4:ee:
                    1b:79:44:b3:e3:1a:05:d4:6a:61:a8:61:34:bc:01:
                    21:12:ad:ba:54:ad:5e:f5:08:ad:9d:31:f7:6f:6c:
                    b0:f9:88:06:6e:5a:1a:07:72:05:bb:be:13:84:17:
                    73:4b:86:f4:07:30:e9:8e:17:6b:a2:c8:8e:93:26:
                    f7:17:34:83:22:f8:7f:dd:4d:61:1c:c0:c9:05:19:
                    56:60:1d:d9:21:a9:35:e1:c3:90:5e:1f:13:08:e6:
                    99:f3:f9:29:38:f5:8c:1b:55:75:7f:42:cc:c6:ab:
                    ed:f8:97:69:7d:db:cd:f8:86:e2:63:6d:cc:41:d5:
                    8e:b5:3d:a6:69:c4:14:ef:c6:f0:9f:57:cc:12:57:
                    31:31:a2:55:18:6e:bf:1f:01:2c:87:0b:df:4b:1f:
                    00:15:5c:b8:44:34:dc:2d:c5:b9:80:bc:c7:e3:df:
                    46:c5:ed:d3:02:73:d0:cc:84:82:02:e1:3e:00:fc:
                    e5:ac:ae:08:ff:f3:54:ab:c2:16:8d:06:fc:03:29:
                    f0:e3:02:9c:39:f0:19:ea:4c:af:73:59:05:8f:b3:
                    85:8b:8f:cf:aa:18:57:ef:2e:8d:3b:aa:47:a5:7d:
                    dd:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0D:C4:76:71:EF:43:5D:7E:A7:3F:17:7E:95:9B:0B:08:AA:E7:ED
            X509v3 Authority Key Identifier:
                keyid:03:FE:5D:72:6F:34:E9:3C:E1:A9:5D:94:51:8E:12:23:7A:C3:E2:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A_5dcm806TzhqV2UUY4SI3rD4sY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B3234/9E121C0C241011ECB2D06956D8A014CE/A_5dcm806TzhqV2UUY4SI3rD4sY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:d9:bf:95:12:52:ac:60:47:a2:9d:61:f2:62:d1:94:63:b3:
         a2:85:3b:4c:7c:9d:64:94:20:c3:8b:1b:5a:4f:2a:22:7d:bc:
         98:27:c0:85:c8:46:74:fa:76:8d:73:c7:30:96:96:57:92:ee:
         ca:3f:d1:fa:85:78:68:4c:0c:1f:83:a6:72:80:16:1f:ff:16:
         16:2d:61:c9:e3:54:7e:32:9c:ad:7e:d8:3b:b1:94:81:40:4b:
         96:8a:3d:68:c6:74:71:71:9e:2f:68:fc:20:d1:8d:7e:40:75:
         60:b0:99:13:e6:20:39:ea:fa:87:1c:f2:33:8c:8d:47:5a:66:
         83:7a:5e:fe:10:12:98:60:f3:0b:6b:d2:39:69:11:19:e7:de:
         f6:64:8d:23:fb:e2:b4:d3:df:64:9a:fe:9d:0f:e7:ad:8a:47:
         5a:58:05:d5:eb:52:80:c7:a6:3d:45:fb:ea:59:f4:ee:aa:f9:
         57:74:47:c8:81:59:a7:80:ed:a0:98:0e:ff:16:6a:9d:69:70:
         32:c8:7d:43:b6:1b:23:88:dc:43:82:29:67:8a:49:3d:77:c2:
         6d:ed:d1:ea:43:62:5f:9a:01:d4:22:50:9a:5e:e0:0e:7e:cf:
         07:0e:58:21:fe:f5:60:33:82:a3:00:bb:29:17:cf:9f:3d:bd:
         61:cb:f1:4e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCAQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjMyMzRBRjExMC8GA1UEBRMoMDNGRTVENzI2RjM0RTkzQ0UxQTk1RDk0NTE4RTEy
MjM3QUMzRTJDNjAeFw0yNjEwMDgwMjI2MDdaFw0yNjEwMTAwMjI2MDdaMBgxFjAU
BgNVBAMTDTZhYzZmZjQwLThjZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCtU0uP3IiEAI1QAHr496pdzVWYXHSb0Oiw2yk7ht5RLPjGgXUamGoYTS8
ASESrbpUrV71CK2dMfdvbLD5iAZuWhoHcgW7vhOEF3NLhvQHMOmOF2uiyI6TJvcX
NIMi+H/dTWEcwMkFGVZgHdkhqTXhw5BeHxMI5pnz+Sk49YwbVXV/QszGq+34l2l9
2834huJjbcxB1Y61PaZpxBTvxvCfV8wSVzExolUYbr8fASyHC99LHwAVXLhENNwt
xbmAvMfj30bF7dMCc9DMhIIC4T4A/OWsrgj/81SrwhaNBvwDKfDjApw58BnqTK9z
WQWPs4WLj8+qGFfvLo07qkelfd03AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKg3E
dnHvQ11+pz8XfpWbCwiq5+0wHwYDVR0jBBgwFoAUA/5dcm806TzhqV2UUY4SI3rD
4sYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIzMjM0LzlFMTIxQzBDMjQxMDExRUNCMkQwNjk1NkQ4QTAxNENFL0FfNWRj
bTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FfNWRjbTgwNlR6aHFWMlVVWTRTSTNyRDRzWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjMyMzQvOUUxMjFDMEMyNDEwMTFFQ0IyRDA2OTU2RDhB
MDE0Q0UvQV81ZGNtODA2VHpocVYyVVVZNFNJM3JENHNZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAl2b+VElKsYEeinWHyYtGUY7OihTtM
fJ1klCDDixtaTyoifbyYJ8CFyEZ0+naNc8cwlpZXku7KP9H6hXhoTAwfg6ZygBYf
/xYWLWHJ41R+Mpytftg7sZSBQEuWij1oxnRxcZ4vaPwg0Y1+QHVgsJkT5iA56vqH
HPIzjI1HWmaDel7+EBKYYPMLa9I5aREZ5972ZI0j++K0099kmv6dD+etikdaWAXV
61KAx6Y9RfvqWfTuqvlXdEfIgVmngO2gmA7/FmqdaXAyyH1DthsjiNxDgilnikk9
d8Jt7dHqQ2JfmgHUIlCaXuAOfs8HDlgh/vVgM4KjALspF8+fPb1hy/FO
-----END CERTIFICATE-----
Generated at Thu Oct 8 20:23:30 2026 by rpki-client