Error: rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
File:                     fzc4orKLb6wO4WjazaECCZH2Xv8.mft (raw, json)
Hash identifier:          IbrKJTZII+G83Xg+pKqPS1Mkri9oI53IWPhzaEhYONU=
Subject key identifier:   63:D4:B1:70:A3:99:B4:F1:0A:E4:B2:CD:0C:BE:68:93:B4:AC:00:24
Authority key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
Certificate issuer:       /CN=F36CAD03AF/serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Certificate serial:       04C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
Manifest number:          04B9
Signing time:             Sun 27 Sep 2026 03:35:05 +0000
Manifest this update:     Sun 27 Sep 2026 03:35:04 +0000
Manifest next update:     Tue 29 Sep 2026 03:35:04 +0000
Files and hashes:         1: fzc4orKLb6wO4WjazaECCZH2Xv8.crl (hash: i0fHGuVmPAjlgjo2jc7Mcr2rpGmdejkvVgbLiG/GUZA=)
                          2: 5201D7B49AA211F0847D9CEFDAE4EC9C.roa (hash: vv3TG7X10dkDewJJBWp8gsrO41Ats4FLyzxkghQmX3s=)
                          3: 2A2938409AA211F0AC8E98EDDAE4EC9C.roa (hash: qOE+EV84QYKmUD93zBU7aMqugV0LjUqZj/XSzGnEmpw=)
                          4: FB21D3049AA111F0A09833EDDAE4EC9C.roa (hash: 2qR4wjqNuC0TKOwbykEt6Pca7LKb2L8DNkEqc+08Jrw=)
                          5: AFDCE496DD6A11EFB91A764C762E951A.roa (hash: LUqMxb0MwGP6MZT9i0MH7OuuoSQyIJFrnjoWDAeBNXw=)
                          6: 5101379C1F4311EE8FC7B9634AD9E6FC.roa (hash: 9vRfRWcOnYof6Mu0ENqhdmmo04buF4ccumW7t2r2a0A=)
                          7: 85AD2BD69AA211F0A03B72F1DAE4EC9C.roa (hash: kobMuaQNgwzOY1HkqprMAm4bLPBawaJ7hSf0Z9cXUEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1217 (0x4c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAD03AF, serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
        Validity
            Not Before: Sep 27 03:35:04 2026 GMT
            Not After : Sep 29 03:35:04 2026 GMT
        Subject: CN=6ab88ee9-7e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e0:c3:b8:ce:e3:e9:35:0d:51:29:ae:d1:f0:
                    87:04:e0:6f:7c:ea:8e:6f:91:9a:48:52:b7:73:6c:
                    26:4e:79:af:3d:76:3b:26:1c:70:63:8d:20:34:c4:
                    6d:81:ed:78:34:c3:08:ea:49:d0:fb:11:38:84:6c:
                    fd:58:84:a4:c4:7b:db:9a:e2:14:e1:40:a8:cb:87:
                    0d:02:b5:0d:f6:6b:dd:11:eb:91:18:3a:25:d5:dd:
                    d7:59:c1:2a:39:82:d8:ef:b2:df:96:4d:0a:c6:62:
                    65:e7:67:72:89:fe:81:ae:0e:05:42:5b:24:04:ef:
                    7c:37:5b:f2:79:5f:b0:70:e4:c6:0b:19:2f:b8:d5:
                    d1:a1:a9:6a:3e:3d:24:d5:2a:d5:28:d3:fd:99:4f:
                    7e:55:d5:d3:51:16:3b:ac:6e:dc:4b:09:4c:61:16:
                    5f:db:54:64:50:26:e8:59:87:fd:06:c7:2e:b3:f1:
                    44:0a:b2:ce:29:d0:0f:bc:dc:cb:7d:24:a3:07:39:
                    6a:b6:d7:3e:7b:0a:3f:a9:6b:72:f0:c6:1d:da:5f:
                    9e:b0:11:63:9b:b0:b5:77:c9:6f:38:cf:87:5e:5c:
                    de:99:c1:09:66:72:9d:45:1e:72:8f:56:23:61:c1:
                    af:d6:c0:ee:11:e7:40:81:d8:df:d8:ce:ed:a1:b1:
                    8e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D4:B1:70:A3:99:B4:F1:0A:E4:B2:CD:0C:BE:68:93:B4:AC:00:24
            X509v3 Authority Key Identifier:
                keyid:7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e9:2f:7d:07:55:fc:53:91:b8:46:10:a6:25:f8:1d:fc:81:
         95:99:00:1d:c3:35:69:98:43:9e:b4:3a:bd:95:ce:37:a1:4a:
         df:16:e2:ec:6c:0c:39:c0:2b:4e:09:39:9d:4d:e1:7c:4e:17:
         05:a8:23:94:49:16:24:98:1a:01:14:3b:7b:35:21:1d:1e:35:
         70:dc:ed:2d:a8:de:08:c2:4e:a1:7f:ea:a1:51:ee:68:40:3f:
         64:e8:59:fb:64:62:89:0c:fc:8d:b0:e2:a9:d8:48:74:50:f0:
         e3:f6:56:96:03:37:af:7c:de:f1:1c:ce:97:3e:91:79:2f:79:
         4c:0d:6c:af:25:d4:a4:e9:a4:15:2b:7a:8b:1c:c7:72:a4:86:
         48:3a:e3:84:4b:b0:13:c3:dc:a8:f9:b8:26:8f:1d:f7:7d:46:
         50:86:bd:ce:a4:77:7d:72:1b:ca:fd:90:9a:1d:82:f0:eb:b3:
         ae:20:57:e7:66:42:ba:b8:1a:9e:8a:f0:29:5a:32:ec:05:9f:
         06:64:61:e2:a8:a5:b5:8e:74:8c:95:48:7d:3d:2c:6b:82:78:
         0f:00:8c:92:e4:e9:31:b5:bc:45:5a:92:9c:9f:88:3f:4f:b2:
         98:16:ff:d1:c3:ae:07:38:51:d3:82:83:5a:dc:cb:3a:c4:9f:
         b5:e5:d9:33
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBMEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0FEMDNBRjExMC8GA1UEBRMoN0YzNzM4QTJCMjhCNkZBQzBFRTE2OERBQ0RBMTAy
MDk5MUY2NUVGRjAeFw0yNjA5MjcwMzM1MDRaFw0yNjA5MjkwMzM1MDRaMBgxFjAU
BgNVBAMTDTZhYjg4ZWU5LTdlMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCn4MO4zuPpNQ1RKa7R8IcE4G986o5vkZpIUrdzbCZOea89djsmHHBjjSA0
xG2B7Xg0wwjqSdD7ETiEbP1YhKTEe9ua4hThQKjLhw0CtQ32a90R65EYOiXV3ddZ
wSo5gtjvst+WTQrGYmXnZ3KJ/oGuDgVCWyQE73w3W/J5X7Bw5MYLGS+41dGhqWo+
PSTVKtUo0/2ZT35V1dNRFjusbtxLCUxhFl/bVGRQJuhZh/0Gxy6z8UQKss4p0A+8
3Mt9JKMHOWq21z57Cj+pa3Lwxh3aX56wEWObsLV3yW84z4deXN6ZwQlmcp1FHnKP
ViNhwa/WwO4R50CB2N/Yzu2hsY7tAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUY9Sx
cKOZtPEK5LLNDL5ok7SsACQwHwYDVR0jBBgwFoAUfzc4orKLb6wO4WjazaECCZH2
Xv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNBRDAzLzkwQ0Y5Q0NBMUY0MjExRUVCMTgxODQ2MTRBRDlFNkZDL2Z6YzRv
cktMYjZ3TzRXamF6YUVDQ1pIMlh2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2Z6YzRvcktMYjZ3TzRXamF6YUVDQ1pIMlh2OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0FEMDMvOTBDRjlDQ0ExRjQyMTFFRUIxODE4NDYxNEFE
OUU2RkMvZnpjNG9yS0xiNndPNFdqYXphRUNDWkgyWHY4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBN6S99B1X8U5G4RhCmJfgd/IGVmQAd
wzVpmEOetDq9lc43oUrfFuLsbAw5wCtOCTmdTeF8ThcFqCOUSRYkmBoBFDt7NSEd
HjVw3O0tqN4Iwk6hf+qhUe5oQD9k6Fn7ZGKJDPyNsOKp2Eh0UPDj9laWAzevfN7x
HM6XPpF5L3lMDWyvJdSk6aQVK3qLHMdypIZIOuOES7ATw9yo+bgmjx33fUZQhr3O
pHd9chvK/ZCaHYLw67OuIFfnZkK6uBqeivApWjLsBZ8GZGHiqKW1jnSMlUh9PSxr
gngPAIyS5OkxtbxFWpKcn4g/T7KYFv/Rw64HOFHTgoNa3Ms6xJ+15dkz
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:41:55 2026 by rpki-client