Error: rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          OeEO9XzQN+7ouvzzPShLK+PlOP5brpun3SB4nnt++Pc=
Subject key identifier:   0F:49:5D:A2:2C:53:C5:4A:55:85:61:AC:45:57:65:9F:37:A1:78:99
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       03C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          03C3
Signing time:             Thu 15 Oct 2026 04:04:57 +0000
Manifest this update:     Thu 15 Oct 2026 04:04:57 +0000
Manifest next update:     Sat 17 Oct 2026 04:04:57 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: 7CwkgOBt0IQdLqV/bUAB/CgRlpOM0vLp7KWnbVwXtPQ=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 964 (0x3c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Oct 15 04:04:57 2026 GMT
            Not After : Oct 17 04:04:57 2026 GMT
        Subject: CN=6ad050e9-72dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:ac:1c:28:63:30:18:f4:f4:a1:d1:d1:69:
                    2d:48:4b:5a:ec:e6:cb:4d:6f:1e:a5:db:f7:38:eb:
                    d9:7e:03:9d:24:25:68:2c:61:3c:c6:b6:0a:e5:71:
                    0e:95:99:68:70:bf:6a:f9:d0:ea:71:d5:69:e9:7f:
                    bc:bd:b6:90:e9:51:60:54:2c:0c:d7:de:65:cb:d3:
                    c6:fc:c1:c2:77:01:4e:b6:89:71:53:aa:bd:e8:6d:
                    d3:4d:7a:a3:54:ae:a5:00:a6:da:a4:47:7f:0e:63:
                    2f:26:b3:11:53:76:60:bc:0e:e5:05:c5:11:b8:16:
                    05:47:09:28:40:ca:0c:b2:fc:d5:d5:3c:5c:99:8b:
                    c4:ca:d8:01:24:b9:8f:87:98:35:96:dc:2d:91:ef:
                    e6:f7:9d:e1:60:eb:e7:84:6f:cc:4f:e6:37:a7:39:
                    0c:40:96:66:cd:25:68:49:9f:a4:15:5b:c5:c3:7d:
                    7b:d4:ce:7e:b0:44:ca:e5:31:09:93:a5:d2:5c:06:
                    08:3e:e6:80:b8:b5:02:4f:48:7b:45:32:b0:a9:8e:
                    18:e8:4d:2a:59:f0:65:ec:fe:e3:68:a0:8d:df:f9:
                    d4:42:b4:9e:6d:bd:34:8e:23:51:18:a8:59:f0:93:
                    f9:2f:ca:7f:25:a9:73:f9:9c:50:6f:18:a3:23:76:
                    f6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:49:5D:A2:2C:53:C5:4A:55:85:61:AC:45:57:65:9F:37:A1:78:99
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:12:33:bb:33:fb:87:5d:6e:75:9e:32:3b:ac:d1:55:9a:bd:
         11:e8:91:e7:df:ff:fe:4e:e8:a0:bd:8f:15:47:a6:03:1c:84:
         ca:5e:e5:f3:8c:1e:bd:46:f9:af:b0:b8:51:e4:dc:ec:29:19:
         77:a8:f7:f5:96:14:e9:6b:68:54:ab:4f:09:fe:c4:2d:21:e8:
         bf:5b:26:65:b8:c6:b2:0b:a6:e7:d6:b3:e2:fc:7c:d1:6e:23:
         70:00:ec:f2:b8:56:3d:5f:24:8d:10:d7:11:b7:b9:b8:77:cc:
         85:0a:df:09:72:23:36:3c:25:4a:ed:06:67:ec:01:5d:1e:7b:
         a5:db:c7:1f:92:8f:12:c9:90:8d:c7:15:fd:04:79:c6:3b:29:
         f4:50:76:e0:80:6d:22:fc:e8:51:85:12:d0:6c:29:b3:da:13:
         93:d9:79:85:64:63:5a:3f:da:94:4c:f5:cd:3b:bc:34:09:d7:
         1e:c7:ca:ef:c4:79:8b:a7:e0:33:8d:7b:85:e7:b1:4d:f7:31:
         54:42:fc:5d:8c:cd:b5:45:5e:43:1f:1e:d4:28:7c:2a:f6:9a:
         ee:22:17:d5:c1:08:8e:43:18:0c:cf:71:3c:0e:27:55:34:d2:
         64:20:60:35:c6:32:a1:34:cc:d2:61:c6:a4:a6:f3:be:9a:83:
         92:7f:90:c3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA8QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ1ODBBRjExMC8GA1UEBRMoMkNFRDI1MDg5MkQ5N0E5MEFBMTMzMjNBQ0E0RTQ1
RDI1MTc2OTI1ODAeFw0yNjEwMTUwNDA0NTdaFw0yNjEwMTcwNDA0NTdaMBgxFjAU
BgNVBAMTDTZhZDA1MGU5LTcyZGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCt06wcKGMwGPT0odHRaS1IS1rs5stNbx6l2/c469l+A50kJWgsYTzGtgrl
cQ6VmWhwv2r50Opx1Wnpf7y9tpDpUWBULAzX3mXL08b8wcJ3AU62iXFTqr3obdNN
eqNUrqUAptqkR38OYy8msxFTdmC8DuUFxRG4FgVHCShAygyy/NXVPFyZi8TK2AEk
uY+HmDWW3C2R7+b3neFg6+eEb8xP5jenOQxAlmbNJWhJn6QVW8XDfXvUzn6wRMrl
MQmTpdJcBgg+5oC4tQJPSHtFMrCpjhjoTSpZ8GXs/uNooI3f+dRCtJ5tvTSOI1EY
qFnwk/kvyn8lqXP5nFBvGKMjdvZhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUD0ld
oixTxUpVhWGsRVdlnzeheJkwHwYDVR0jBBgwFoAULO0lCJLZepCqEzI6yk5F0lF2
klgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0NTgwL0UxOUI3QjIyRTIxNzExRUVBMThFOEFCRjc3NTQxMkU2L0xPMGxD
SkxaZXBDcUV6STZ5azVGMGxGMmtsZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xPMGxDSkxaZXBDcUV6STZ5azVGMGxGMmtsZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjQ1ODAvRTE5QjdCMjJFMjE3MTFFRUExOEU4QUJGNzc1
NDEyRTYvTE8wbENKTFplcENxRXpJNnlrNUYwbEYya2xnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtEjO7M/uHXW51njI7rNFVmr0R6JHn
3//+TuigvY8VR6YDHITKXuXzjB69RvmvsLhR5NzsKRl3qPf1lhTpa2hUq08J/sQt
Iei/WyZluMayC6bn1rPi/HzRbiNwAOzyuFY9XySNENcRt7m4d8yFCt8JciM2PCVK
7QZn7AFdHnul28cfko8SyZCNxxX9BHnGOyn0UHbggG0i/OhRhRLQbCmz2hOT2XmF
ZGNaP9qUTPXNO7w0Cdcex8rvxHmLp+AzjXuF57FN9zFUQvxdjM21RV5DHx7UKHwq
9pruIhfVwQiOQxgMz3E8DidVNNJkIGA1xjKhNMzSYcakpvO+moOSf5DD
-----END CERTIFICATE-----
Generated at Thu Oct 15 08:31:17 2026 by rpki-client