Error: rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
File:                     2WACNlD1TrS44dw0q9RZ9QJw140.mft (raw, json)
Hash identifier:          OhleONYATqFrZ+ozUFSFZrjdk4YJAh/MKQg1zzQbhNc=
Subject key identifier:   B8:B1:D9:9B:99:F0:A0:C6:DC:8E:C4:1C:21:21:6E:A5:8B:B6:47:40
Authority key identifier: D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D
Certificate issuer:       /CN=F36B9A81AF/serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
Certificate serial:       0397
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
Manifest number:          0396
Signing time:             Sun 20 Sep 2026 04:07:03 +0000
Manifest this update:     Sun 20 Sep 2026 04:07:02 +0000
Manifest next update:     Tue 22 Sep 2026 04:07:02 +0000
Files and hashes:         1: 2WACNlD1TrS44dw0q9RZ9QJw140.crl (hash: +gfgbtR6lcOV+SpILXojycPnfc0X3EgxPAC+2Ht+0Qk=)
                          2: 31539876F1A311EEAC1F355D775412E6.roa (hash: j6M+6W88movOdd6zMZWbEb9mu+RhA+HSxS5xxIDt/qU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B9A81AF, serialNumber=D960023650F54EB4B8E1DC34ABD459F50270D78D
        Validity
            Not Before: Sep 20 04:07:02 2026 GMT
            Not After : Sep 22 04:07:02 2026 GMT
        Subject: CN=6aaf5be7-6930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e0:d4:bd:c4:ce:bb:a2:85:ad:93:b2:2b:a7:
                    c8:60:bd:08:65:96:dd:30:c3:d2:88:e3:9b:3d:e4:
                    a0:de:85:7e:07:5f:0e:81:af:58:9c:28:21:f2:83:
                    8b:88:dd:c0:6d:19:28:38:b4:87:c1:a1:8d:a7:50:
                    2e:a8:cf:a2:ec:9b:c7:90:f4:16:e5:c4:7c:07:ed:
                    47:97:d8:fd:68:7f:da:15:ad:fa:4b:c2:76:67:c7:
                    fd:a2:ed:9c:75:5b:29:b1:69:a8:03:d0:dd:86:81:
                    65:9d:40:32:96:e8:c7:b0:39:4b:93:f4:49:4a:20:
                    e1:b9:44:85:7d:df:8b:70:56:98:0d:e1:12:2b:2b:
                    48:7e:51:f5:69:06:68:ae:34:fd:74:51:01:0f:a7:
                    8f:81:15:ef:61:5b:06:71:f1:d2:1d:8b:fa:2d:67:
                    99:a8:3b:62:12:3e:af:5a:29:14:ce:2c:4f:50:68:
                    e8:dc:4d:ae:4d:b8:25:af:40:85:5b:a5:44:a4:ad:
                    9a:be:95:4f:a4:6e:d7:e7:de:99:84:44:78:0b:46:
                    f7:ee:63:fe:44:f5:2f:4d:88:8a:d9:26:b8:83:bc:
                    c1:65:89:24:b1:f3:de:ce:c6:6b:8e:ab:f9:1b:a3:
                    f5:d0:a4:2b:7f:cf:9a:89:79:e4:b1:e3:02:e6:f6:
                    39:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B1:D9:9B:99:F0:A0:C6:DC:8E:C4:1C:21:21:6E:A5:8B:B6:47:40
            X509v3 Authority Key Identifier:
                keyid:D9:60:02:36:50:F5:4E:B4:B8:E1:DC:34:AB:D4:59:F5:02:70:D7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2WACNlD1TrS44dw0q9RZ9QJw140.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B9A81/0B27C0F2F1A111EEA48FB64C775412E6/2WACNlD1TrS44dw0q9RZ9QJw140.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:49:cd:63:70:e5:b8:0d:3d:f0:fd:4e:85:b1:3c:a4:47:cc:
         3a:eb:b2:84:72:8a:b1:b1:a6:f2:c5:ba:6a:a6:90:81:30:64:
         1c:30:d9:4a:87:9c:8b:15:d8:7d:ff:83:80:3b:c6:03:cd:a1:
         a4:5e:2f:b2:67:5d:61:60:ea:34:48:40:e0:05:7c:ae:1b:03:
         0a:ac:97:bc:cb:14:8b:30:5f:6c:ac:ab:de:02:1d:84:f2:8d:
         12:d7:d9:6e:68:36:fd:e0:a3:10:1e:4f:9e:27:e7:f7:a9:6f:
         7d:f4:ea:49:6e:33:c9:35:3b:8f:f3:8d:80:4c:6d:51:76:eb:
         b7:45:89:d6:87:b0:bd:21:6e:90:58:3d:cf:32:c8:d2:92:d1:
         3a:2f:ab:22:20:0e:8a:c1:78:28:7e:91:52:bc:84:9c:71:56:
         0c:34:bf:3f:d9:90:9a:c4:bd:91:1e:38:b7:02:c7:89:76:29:
         f8:1f:55:d4:cf:cf:4b:b6:3a:bc:e4:89:38:a4:08:34:2d:bf:
         b6:6d:d4:d4:2f:90:79:6f:27:64:62:83:f7:a6:99:e4:3a:87:
         e4:bc:b1:a0:9c:ee:34:fe:5a:d0:84:66:9a:b3:0f:6a:62:5f:
         f5:8a:52:67:eb:3a:86:b5:25:ef:18:9a:95:d6:a3:36:24:61:
         5f:ac:ca:97
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA5cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjlBODFBRjExMC8GA1UEBRMoRDk2MDAyMzY1MEY1NEVCNEI4RTFEQzM0QUJENDU5
RjUwMjcwRDc4RDAeFw0yNjA5MjAwNDA3MDJaFw0yNjA5MjIwNDA3MDJaMBgxFjAU
BgNVBAMTDTZhYWY1YmU3LTY5MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC24NS9xM67ooWtk7Irp8hgvQhllt0ww9KI45s95KDehX4HXw6Br1icKCHy
g4uI3cBtGSg4tIfBoY2nUC6oz6Lsm8eQ9BblxHwH7UeX2P1of9oVrfpLwnZnx/2i
7Zx1WymxaagD0N2GgWWdQDKW6MewOUuT9ElKIOG5RIV934twVpgN4RIrK0h+UfVp
BmiuNP10UQEPp4+BFe9hWwZx8dIdi/otZ5moO2ISPq9aKRTOLE9QaOjcTa5NuCWv
QIVbpUSkrZq+lU+kbtfn3pmERHgLRvfuY/5E9S9NiIrZJriDvMFliSSx897OxmuO
q/kbo/XQpCt/z5qJeeSx4wLm9jkjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuLHZ
m5nwoMbcjsQcISFupYu2R0AwHwYDVR0jBBgwFoAU2WACNlD1TrS44dw0q9RZ9QJw
140wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5QTgxLzBCMjdDMEYyRjFBMTExRUVBNDhGQjY0Qzc3NTQxMkU2LzJXQUNO
bEQxVHJTNDRkdzBxOVJaOVFKdzE0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJXQUNObEQxVHJTNDRkdzBxOVJaOVFKdzE0MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjlBODEvMEIyN0MwRjJGMUExMTFFRUE0OEZCNjRDNzc1
NDEyRTYvMldBQ05sRDFUclM0NGR3MHE5Ulo5UUp3MTQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC9Sc1jcOW4DT3w/U6FsTykR8w667KE
coqxsabyxbpqppCBMGQcMNlKh5yLFdh9/4OAO8YDzaGkXi+yZ11hYOo0SEDgBXyu
GwMKrJe8yxSLMF9srKveAh2E8o0S19luaDb94KMQHk+eJ+f3qW999OpJbjPJNTuP
842ATG1Rduu3RYnWh7C9IW6QWD3PMsjSktE6L6siIA6KwXgofpFSvISccVYMNL8/
2ZCaxL2RHji3AseJdin4H1XUz89Ltjq85Ik4pAg0Lb+2bdTUL5B5bydkYoP3ppnk
OofkvLGgnO40/lrQhGaasw9qYl/1ilJn6zqGtSXvGJqV1qM2JGFfrMqX
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:32 2026 by rpki-client