Error: rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File:                     7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier:          5qL6aAgKZNfeM6Hom+/TRNh9GveZmXQ/X4lfcvpROQI=
Subject key identifier:   1D:BF:3A:E8:F0:0E:CD:13:D1:7C:05:57:AC:41:56:83:4E:86:7B:A7
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       0749
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number:          0743
Signing time:             Fri 25 Sep 2026 02:29:52 +0000
Manifest this update:     Fri 25 Sep 2026 02:29:52 +0000
Manifest next update:     Sun 27 Sep 2026 02:29:52 +0000
Files and hashes:         1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: LAkg3x5S+/xrnF7xFpjmnHnvXprUkSzzirGLofWEeYs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1865 (0x749)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Sep 25 02:29:52 2026 GMT
            Not After : Sep 27 02:29:52 2026 GMT
        Subject: CN=6ab5dca0-f923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f6:59:64:39:9b:77:89:ce:dc:17:8f:4a:4a:
                    a4:6c:a1:81:ab:6b:6e:13:5b:d3:00:cd:13:03:74:
                    01:7f:13:7d:52:17:f7:54:0b:3c:df:11:57:d7:dd:
                    0c:45:b9:f4:3b:b2:fd:23:44:a8:85:e6:6e:c0:68:
                    7f:b3:1a:72:37:c4:75:d9:34:55:f8:30:3d:60:dd:
                    46:74:65:1e:65:ae:e4:d5:02:20:53:3e:83:aa:9e:
                    f4:ba:31:60:14:71:c0:56:67:2d:fd:06:13:c9:7f:
                    96:7f:26:58:c3:8c:44:64:05:38:e7:1d:2f:9a:c7:
                    fd:32:c1:55:72:1a:2a:55:08:0b:dc:c1:f9:28:a8:
                    36:ee:ef:b8:01:f8:4c:71:31:eb:00:5e:de:65:84:
                    d1:29:b7:1a:25:08:16:09:16:6e:7b:84:d3:c2:a4:
                    ae:dc:05:b5:24:61:2f:0c:b0:f8:8f:a2:af:bb:5f:
                    ba:25:21:5f:d7:e7:ac:1a:cd:c2:2f:34:34:ad:22:
                    ee:33:55:5b:ba:57:2d:68:81:69:04:43:8b:84:f5:
                    b7:16:dd:db:e9:d8:16:e8:66:22:dc:37:95:21:a8:
                    8f:99:82:60:94:b4:3a:69:61:24:05:37:87:5c:0b:
                    8d:df:12:69:9b:96:76:82:e0:39:b2:70:6e:ad:bf:
                    b0:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BF:3A:E8:F0:0E:CD:13:D1:7C:05:57:AC:41:56:83:4E:86:7B:A7
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ad:94:d1:f3:a9:36:df:6e:64:49:57:65:26:f3:b2:7a:56:
         9a:75:d1:c5:5c:cc:32:78:d7:b5:00:9e:d1:d7:28:0c:38:8d:
         42:6c:03:41:43:3a:6f:94:e6:d2:36:33:e9:2c:23:cc:7f:1a:
         6a:11:da:e8:77:c2:61:50:93:83:81:de:36:38:7a:59:e8:4b:
         bd:7d:77:f9:23:5d:3a:3a:ba:a0:29:8b:f7:a8:3b:2b:e9:89:
         8f:6e:55:c7:d9:cd:1e:a8:3d:15:fc:03:b6:72:6b:61:d5:ae:
         68:0d:aa:ea:f9:61:e2:da:99:4e:3c:c1:3d:39:92:d9:1c:cf:
         95:7b:dd:eb:2a:54:10:69:88:e8:c7:f1:b9:bf:19:95:4d:aa:
         7e:1e:10:da:0d:64:00:68:0a:f2:ab:3e:f4:d9:df:bc:cc:97:
         ff:87:a4:f6:74:5c:8d:71:17:14:24:5d:57:85:56:4a:18:05:
         96:53:e6:20:07:7a:42:53:de:b7:13:7f:8f:9c:78:46:29:c7:
         b1:a4:1e:90:61:c4:4b:50:e2:2e:c4:e5:52:f2:d2:d8:f5:68:
         87:dc:04:d2:c3:ed:4f:09:77:2a:95:84:39:ce:c6:bc:91:86:
         a8:91:6d:37:f0:28:24:7c:7a:08:9c:49:4c:b2:b8:62:e7:e6:
         a6:8a:b2:63
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB0kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ5N0NBUjExMC8GA1UEBRMoRUZGNDA2MUYzNTU3MkU2QkZBMUMyNEJCMjM2OEZD
RkUyRUFFNjA1QTAeFw0yNjA5MjUwMjI5NTJaFw0yNjA5MjcwMjI5NTJaMBgxFjAU
BgNVBAMTDTZhYjVkY2EwLWY5MjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDb9llkOZt3ic7cF49KSqRsoYGra24TW9MAzRMDdAF/E31SF/dUCzzfEVfX
3QxFufQ7sv0jRKiF5m7AaH+zGnI3xHXZNFX4MD1g3UZ0ZR5lruTVAiBTPoOqnvS6
MWAUccBWZy39BhPJf5Z/JljDjERkBTjnHS+ax/0ywVVyGipVCAvcwfkoqDbu77gB
+ExxMesAXt5lhNEptxolCBYJFm57hNPCpK7cBbUkYS8MsPiPoq+7X7olIV/X56wa
zcIvNDStIu4zVVu6Vy1ogWkEQ4uE9bcW3dvp2BboZiLcN5UhqI+ZgmCUtDppYSQF
N4dcC43fEmmblnaC4DmycG6tv7CdAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUHb86
6PAOzRPRfAVXrEFWg06Ge6cwHwYDVR0jBBgwFoAU7/QGHzVXLmv6HCS7I2j8/i6u
YFowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJEOTdDL0U0MjRBRTJBMkQ5NDExRUM5NzJDQTE0NUQ4QTAxNENFLzdfUUdI
elZYTG12NkhDUzdJMmo4X2k2dVlGby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzdfUUdIelZYTG12NkhDUzdJMmo4X2k2dVlGby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QkQ5N0MvRTQyNEFFMkEyRDk0MTFFQzk3MkNBMTQ1RDhBMDE0
Q0UvN19RR0h6VlhMbXY2SENTN0kyajhfaTZ1WUZvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBbrZTR86k2325kSVdlJvOyelaaddHFXMwy
eNe1AJ7R1ygMOI1CbANBQzpvlObSNjPpLCPMfxpqEdrod8JhUJODgd42OHpZ6Eu9
fXf5I106OrqgKYv3qDsr6YmPblXH2c0eqD0V/AO2cmth1a5oDarq+WHi2plOPME9
OZLZHM+Ve93rKlQQaYjox/G5vxmVTap+HhDaDWQAaAryqz702d+8zJf/h6T2dFyN
cRcUJF1XhVZKGAWWU+YgB3pCU963E3+PnHhGKcexpB6QYcRLUOIuxOVS8tLY9WiH
3ATSw+1PCXcqlYQ5zsa8kYaokW038CgkfHoInElMsrhi5+amirJj
-----END CERTIFICATE-----
Generated at Fri Sep 25 09:56:10 2026 by rpki-client