Error: rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft
File:                     awzWxO1x4Omxb2jpd6u1HcouckQ.mft (raw, json)
Hash identifier:          X85P2UjuxRP/muoVjVqRK9iYbUhr670EqWT4o4VwyU8=
Subject key identifier:   57:F8:21:8F:5C:11:73:1C:EC:8B:B6:31:C9:00:F1:E2:06:94:70:C7
Authority key identifier: 6B:0C:D6:C4:ED:71:E0:E9:B1:6F:68:E9:77:AB:B5:1D:CA:2E:72:44
Certificate issuer:       /CN=F36CA008AF/serialNumber=6B0CD6C4ED71E0E9B16F68E977ABB51DCA2E7244
Certificate serial:       6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/awzWxO1x4Omxb2jpd6u1HcouckQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft
Manifest number:          6C
Signing time:             Wed 14 Oct 2026 05:41:34 +0000
Manifest this update:     Wed 14 Oct 2026 05:41:33 +0000
Manifest next update:     Fri 16 Oct 2026 05:41:33 +0000
Files and hashes:         1: awzWxO1x4Omxb2jpd6u1HcouckQ.crl (hash: +ta1c/mHTWYmYDz+5XfNlCf5YC6CQ/6YObvVbgKj4Xk=)
                          2: ED2048C6748A11F1996AF7CFCE1D38B0.roa (hash: XHzjG9WZBS9B1G67SDvbgwEXROLuYT7arslMt8w5z7Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/awzWxO1x4Omxb2jpd6u1HcouckQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 05:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA008AF, serialNumber=6B0CD6C4ED71E0E9B16F68E977ABB51DCA2E7244
        Validity
            Not Before: Oct 14 05:41:33 2026 GMT
            Not After : Oct 16 05:41:33 2026 GMT
        Subject: CN=6acf160e-0b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:28:5f:4e:c3:12:b8:cc:cf:0e:47:3b:6e:
                    b0:73:92:7c:9c:3b:2d:5f:7c:6e:bb:17:d4:e4:b5:
                    a4:aa:d7:89:7c:4d:da:88:d5:b2:29:df:50:cf:64:
                    db:39:78:c7:76:aa:f8:54:fd:ba:83:e3:bb:ab:34:
                    03:c1:35:ef:21:8a:9a:bc:ff:eb:07:a9:64:36:dc:
                    b1:dd:c7:fc:6c:ca:e3:b0:11:4e:4d:ab:45:bd:00:
                    a0:cd:59:b9:b2:44:4e:ef:67:88:14:3b:cd:6f:e9:
                    3c:76:e8:a8:91:b3:58:49:0d:f4:86:66:89:2f:46:
                    cc:3b:34:2b:06:b5:41:e6:03:d3:c1:9b:e0:22:0d:
                    a3:7f:9d:1c:f1:a6:47:aa:e1:b4:31:a8:68:0c:cb:
                    15:fa:6a:99:e9:20:22:51:82:90:51:6c:7c:28:1a:
                    a0:cd:6d:a0:a5:54:1b:c6:40:4c:a3:0f:39:f0:66:
                    c9:62:7b:47:3e:c3:40:b2:f7:9f:eb:dc:fa:23:20:
                    6f:a6:ca:41:6b:ff:3f:04:4c:ad:74:56:b3:e1:c4:
                    7e:bb:70:bf:12:aa:a9:4b:3e:80:66:af:80:c6:47:
                    bf:b6:97:5b:c6:d0:bf:57:b0:04:76:a2:87:0b:9c:
                    5d:a2:9f:a8:a2:ae:e2:4f:dd:f2:97:11:41:f9:0c:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F8:21:8F:5C:11:73:1C:EC:8B:B6:31:C9:00:F1:E2:06:94:70:C7
            X509v3 Authority Key Identifier:
                keyid:6B:0C:D6:C4:ED:71:E0:E9:B1:6F:68:E9:77:AB:B5:1D:CA:2E:72:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/awzWxO1x4Omxb2jpd6u1HcouckQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA008/A5285632748811F189B109C2CE1D38B0/awzWxO1x4Omxb2jpd6u1HcouckQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:33:c4:78:cd:9a:32:34:26:ca:82:8d:1d:26:59:a7:94:f8:
         c7:64:46:b1:f7:f9:62:3c:e7:91:54:d0:20:49:aa:fd:85:22:
         9e:72:fa:54:96:9f:33:64:b8:27:3f:dc:00:20:b5:64:30:1b:
         7f:cb:72:46:df:f5:24:50:f8:4c:5f:aa:ad:f5:3f:c4:55:23:
         a1:c2:17:6d:62:c2:c6:12:bf:17:b1:42:c8:ff:f0:58:48:89:
         3e:6f:94:09:c6:ea:0d:38:7b:a1:7e:1c:b4:28:2c:6e:bc:14:
         73:9b:27:78:ec:f5:06:e8:5e:dc:a2:06:05:c9:92:29:ee:69:
         ee:48:60:51:f0:6b:27:2c:56:7d:7a:f4:c3:6f:45:9a:40:ee:
         db:0c:24:c4:48:75:1e:a4:f8:62:33:80:5b:c0:78:3d:b9:c8:
         3a:63:41:85:f6:d5:43:c4:2f:92:8e:d1:05:1e:7d:c3:c5:bc:
         5b:fe:20:21:1b:2c:cd:25:e1:37:91:1f:6c:fe:aa:da:8c:45:
         13:4a:cd:a3:85:d2:ab:a0:b6:cc:2f:dc:61:33:84:27:8c:cc:
         42:42:f4:a9:ff:62:99:d7:d0:e6:ef:c1:75:4f:89:fe:a6:e0:
         cf:83:1b:87:d3:fe:15:ab:78:fb:f9:71:68:e6:cc:90:b2:90:
         b3:d2:bf:84
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBbTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
QTAwOEFGMTEwLwYDVQQFEyg2QjBDRDZDNEVENzFFMEU5QjE2RjY4RTk3N0FCQjUx
RENBMkU3MjQ0MB4XDTI2MTAxNDA1NDEzM1oXDTI2MTAxNjA1NDEzM1owGDEWMBQG
A1UEAxMNNmFjZjE2MGUtMGI0YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKrqKF9OwxK4zM8ORztusHOSfJw7LV98brsX1OS1pKrXiXxN2ojVsinfUM9k
2zl4x3aq+FT9uoPju6s0A8E17yGKmrz/6wepZDbcsd3H/GzK47ARTk2rRb0AoM1Z
ubJETu9niBQ7zW/pPHboqJGzWEkN9IZmiS9GzDs0Kwa1QeYD08Gb4CINo3+dHPGm
R6rhtDGoaAzLFfpqmekgIlGCkFFsfCgaoM1toKVUG8ZATKMPOfBmyWJ7Rz7DQLL3
n+vc+iMgb6bKQWv/PwRMrXRWs+HEfrtwvxKqqUs+gGavgMZHv7aXW8bQv1ewBHai
hwucXaKfqKKu4k/d8pcRQfkMo/ECAwEAAaOCArgwggK0MB0GA1UdDgQWBBRX+CGP
XBFzHOyLtjHJAPHiBpRwxzAfBgNVHSMEGDAWgBRrDNbE7XHg6bFvaOl3q7Udyi5y
RDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Q0EwMDgvQTUyODU2MzI3NDg4MTFGMTg5QjEwOUMyQ0UxRDM4QjAvYXd6V3hP
MXg0T214YjJqcGQ2dTFIY291Y2tRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYXd6V3hPMXg0T214YjJqcGQ2dTFIY291Y2tRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDQTAwOC9BNTI4NTYzMjc0ODgxMUYxODlCMTA5QzJDRTFE
MzhCMC9hd3pXeE8xeDRPbXhiMmpwZDZ1MUhjb3Vja1EubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAK0zxHjNmjI0JsqCjR0mWaeU+MdkRrH3
+WI855FU0CBJqv2FIp5y+lSWnzNkuCc/3AAgtWQwG3/Lckbf9SRQ+Exfqq31P8RV
I6HCF21iwsYSvxexQsj/8FhIiT5vlAnG6g04e6F+HLQoLG68FHObJ3js9QboXtyi
BgXJkinuae5IYFHwaycsVn169MNvRZpA7tsMJMRIdR6k+GIzgFvAeD25yDpjQYX2
1UPEL5KO0QUefcPFvFv+ICEbLM0l4TeRH2z+qtqMRRNKzaOF0qugtswv3GEzhCeM
zEJC9Kn/YpnX0ObvwXVPif6m4M+DG4fT/hWrePv5cWjmzJCykLPSv4Q=
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:41:30 2026 by rpki-client