Error: rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
File:                     0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft (raw, json)
Hash identifier:          4YZaFupFExmtPyej++yXumAKGz6M6cZOALYEMAaEnOY=
Subject key identifier:   09:7E:BB:89:47:BB:6E:FF:89:7E:07:C8:88:BA:7C:61:F0:D0:83:F1
Authority key identifier: D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E
Certificate issuer:       /CN=F36C04EAAF/serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
Certificate serial:       013A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
Manifest number:          0139
Signing time:             Tue 22 Sep 2026 05:15:59 +0000
Manifest this update:     Tue 22 Sep 2026 05:15:58 +0000
Manifest next update:     Thu 24 Sep 2026 05:15:58 +0000
Files and hashes:         1: 0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl (hash: LdpsUAzFniE0lpa5hu7Pa4vruwqOoFQ5u0hZxVoJw84=)
                          2: B44DBBD6C4A011F0BB1FE885DAE4EC9C.roa (hash: 22n46w2qwRYfa/D7JhUZRieOUn/D6egNiKVqvc6gQks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C04EAAF, serialNumber=D1D9C32888F2CFA6D20A011893442E488FAB132E
        Validity
            Not Before: Sep 22 05:15:58 2026 GMT
            Not After : Sep 24 05:15:58 2026 GMT
        Subject: CN=6ab20f0f-f9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:10:02:b7:4b:fb:47:52:66:3d:4a:7d:9f:5b:
                    00:ed:4f:c1:0c:71:ee:af:27:bf:9d:4c:39:12:b8:
                    a6:4a:f4:70:57:79:08:ff:f1:00:aa:4c:22:17:13:
                    e1:5b:57:0d:bc:7e:b4:5c:db:32:3e:2a:a2:54:6e:
                    05:86:c9:d1:bf:e9:cb:e0:6e:61:dc:b7:85:77:3b:
                    8a:1c:4f:92:46:86:33:3f:03:0d:9f:d8:d4:c2:d0:
                    06:12:85:a0:b5:e8:ad:4d:32:62:3c:57:b5:d7:f5:
                    30:5d:fd:88:46:fb:0e:55:04:a5:36:ed:14:62:9c:
                    46:e8:eb:5f:ec:bd:82:21:fc:12:bf:35:c7:96:cf:
                    39:f8:29:48:c2:c9:03:2b:6a:c8:76:7a:85:5c:7c:
                    2f:83:17:7b:ac:07:fa:33:8c:c3:29:5c:49:82:30:
                    61:8d:b4:e6:02:b4:10:ca:50:10:9e:d6:89:75:aa:
                    e8:bd:6d:78:12:00:d0:fe:d1:e8:2d:a1:39:07:b4:
                    48:39:27:71:d9:b2:a7:f5:75:0c:c8:15:d2:65:32:
                    9e:5e:24:14:bf:cf:01:87:f8:18:b7:71:b5:8a:14:
                    a0:05:b0:63:04:57:8c:24:f4:43:56:5e:54:e7:f7:
                    b6:1e:d8:a8:62:2f:78:28:43:2f:93:58:19:2c:7e:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7E:BB:89:47:BB:6E:FF:89:7E:07:C8:88:BA:7C:61:F0:D0:83:F1
            X509v3 Authority Key Identifier:
                keyid:D1:D9:C3:28:88:F2:CF:A6:D2:0A:01:18:93:44:2E:48:8F:AB:13:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0dnDKIjyz6bSCgEYk0QuSI-rEy4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C04EA/32396F8EC49E11F087F92A78DAE4EC9C/0dnDKIjyz6bSCgEYk0QuSI-rEy4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5a:6b:bf:04:c9:61:30:6e:d1:c0:d4:ef:97:bd:8d:fc:ec:
         a0:84:0e:cd:81:ea:74:a2:72:e3:e1:66:ea:18:76:19:ed:6f:
         a6:7e:09:09:18:9c:fc:12:97:a1:00:99:dd:65:05:7f:4b:9f:
         7c:c6:0b:d2:e4:01:9b:70:57:fe:2f:0b:40:1b:1a:bd:a2:6a:
         6c:05:4e:b0:f0:d5:8e:0a:91:7b:49:75:90:26:ae:bb:87:a9:
         36:d6:fc:39:e7:7c:7a:31:3f:a9:c8:1e:59:27:4a:ab:09:a7:
         20:48:b2:f5:a5:6d:92:2b:94:ee:84:f4:a8:20:bd:74:cf:84:
         26:0f:91:bf:d5:61:b1:ea:50:4b:2e:7f:c3:1f:ea:54:4c:d2:
         75:67:5d:4c:dd:77:ed:71:69:e1:be:aa:50:5c:85:6d:f0:41:
         43:68:99:79:c4:a0:32:12:f8:ef:e6:d3:51:70:22:8f:45:42:
         7c:e5:38:e1:b2:be:48:45:a6:a1:23:29:52:75:80:b0:85:86:
         78:82:11:d8:d7:c5:ab:6f:20:18:31:2e:7a:94:4f:0f:5b:83:
         f3:75:d2:58:e6:71:80:1a:aa:f1:37:ee:66:f9:04:d6:b2:aa:
         bd:d0:9f:f1:22:04:c2:23:10:8d:82:77:f3:b1:9a:67:2e:cb:
         fa:f4:4f:46
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzA0RUFBRjExMC8GA1UEBRMoRDFEOUMzMjg4OEYyQ0ZBNkQyMEEwMTE4OTM0NDJF
NDg4RkFCMTMyRTAeFw0yNjA5MjIwNTE1NThaFw0yNjA5MjQwNTE1NThaMBgxFjAU
BgNVBAMTDTZhYjIwZjBmLWY5ZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQEAK3S/tHUmY9Sn2fWwDtT8EMce6vJ7+dTDkSuKZK9HBXeQj/8QCqTCIX
E+FbVw28frRc2zI+KqJUbgWGydG/6cvgbmHct4V3O4ocT5JGhjM/Aw2f2NTC0AYS
haC16K1NMmI8V7XX9TBd/YhG+w5VBKU27RRinEbo61/svYIh/BK/NceWzzn4KUjC
yQMrash2eoVcfC+DF3usB/ozjMMpXEmCMGGNtOYCtBDKUBCe1ol1qui9bXgSAND+
0egtoTkHtEg5J3HZsqf1dQzIFdJlMp5eJBS/zwGH+Bi3cbWKFKAFsGMEV4wk9ENW
XlTn97Ye2KhiL3goQy+TWBksfhCrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCX67
iUe7bv+JfgfIiLp8YfDQg/EwHwYDVR0jBBgwFoAU0dnDKIjyz6bSCgEYk0QuSI+r
Ey4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMwNEVBLzMyMzk2RjhFQzQ5RTExRjA4N0Y5MkE3OERBRTRFQzlDLzBkbkRL
SWp5ejZiU0NnRVlrMFF1U0ktckV5NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBkbkRLSWp5ejZiU0NnRVlrMFF1U0ktckV5NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzA0RUEvMzIzOTZGOEVDNDlFMTFGMDg3RjkyQTc4REFF
NEVDOUMvMGRuREtJanl6NmJTQ2dFWWswUXVTSS1yRXk0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcWmu/BMlhMG7RwNTvl72N/OyghA7N
gep0onLj4WbqGHYZ7W+mfgkJGJz8EpehAJndZQV/S598xgvS5AGbcFf+LwtAGxq9
ompsBU6w8NWOCpF7SXWQJq67h6k21vw553x6MT+pyB5ZJ0qrCacgSLL1pW2SK5Tu
hPSoIL10z4QmD5G/1WGx6lBLLn/DH+pUTNJ1Z11M3XftcWnhvqpQXIVt8EFDaJl5
xKAyEvjv5tNRcCKPRUJ85Tjhsr5IRaahIylSdYCwhYZ4ghHY18WrbyAYMS56lE8P
W4PzddJY5nGAGqrxN+5m+QTWsqq90J/xIgTCIxCNgnfzsZpnLsv69E9G
-----END CERTIFICATE-----
Generated at Tue Sep 22 16:03:05 2026 by rpki-client