Error: rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
File:                     pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json)
Hash identifier:          2UPW3zaonixMrLpjAcPogb/wa7++kpn7Yp/gDPeME3I=
Subject key identifier:   61:6D:8E:46:59:F9:99:56:12:54:65:74:55:1B:CA:73:1D:F6:62:5E
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Certificate issuer:       /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial:       03CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
Manifest number:          03B2
Signing time:             Sun 20 Sep 2026 04:06:50 +0000
Manifest this update:     Sun 20 Sep 2026 04:06:50 +0000
Manifest next update:     Tue 22 Sep 2026 04:06:50 +0000
Files and hashes:         1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: iPDsTOaDuaKjIwvjdT3bfkbvBlakwBS+yquT8Loz5xM=)
                          2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=)
                          3: 13B429E4A82B11F08C7A96A4DAE4EC9C.roa (hash: KYrcNRS9qGwFheXL1jyE5bvgElaJoQSziRbqOSDolOc=)
                          4: 34152306A2FC11F187B2C4D6CE1D38B0.roa (hash: L01OTzrX3QXgBOxOq9ygtuOFpcX4ssn+k1klJk+Qt0U=)
                          5: 284E09F2A09A11F19A2665E5CE1D38B0.roa (hash: u4s7W4AeX+9w69pBqCY0XiznrH9hxmJdxR9Yz6cFOgw=)
                          6: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=)
                          7: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=)
                          8: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=)
                          9: 3D55216081AE11F19AE998BECE1D38B0.roa (hash: tEb4cIz3DQXZxgjEItHyqv4eB8KzPNyX/c919+r53Mw=)
                          10: F6FBFB8E745D11F0BF6D9BD0DAE4EC9C.roa (hash: /YM80rpuDV3whpYSjJG05E1etVVfPSD6PQbBs+HcexM=)
                          11: E09561B85EE111F1A566E6D1CE1D38B0.roa (hash: TIZi3tWlJaC0A2I3Tmcgez2CRqE9zMNpFFToSyX14bA=)
                          12: 4D9876F65EE211F1A6C850D2CE1D38B0.roa (hash: h+9oIW6kC0vNgF4yIkhDZ/ikr8H7uXQtpONqwGk32N4=)
                          13: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=)
                          14: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=)
                          15: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=)
                          16: 85158DEA815A11F1B3416CAECE1D38B0.roa (hash: 85eyGHwM0jbpgdjYqk4rzN/rwaRGR253BARYQ7rwefk=)
                          17: 46D951EEBB1511F0A9D258C2DAE4EC9C.roa (hash: 3T0iCVJnMl4lV9aDTA0q3pEQKQ32TVj85JAiwnswBVc=)
                          18: 80E7A5D28D4411F19F1A6EDBCE1D38B0.roa (hash: mInSDggQH3pxrqeQ7YDV3qxSrqmn8wfRlQ+MMfGbcSc=)
                          19: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=)
                          20: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=)
                          21: 1F57366AAD9E11F0834ED8B4DAE4EC9C.roa (hash: Zr7KgVk21J1guGSwDPBmYm/QDl0oDd0+ZlvGGCwRB7s=)
                          22: 7ABC7650641E11F19351D3B4CE1D38B0.roa (hash: vU0h95lDgAxSIzbpmav0a02fs24DfcjVOpzDPENILEU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 973 (0x3cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
        Validity
            Not Before: Sep 20 04:06:50 2026 GMT
            Not After : Sep 22 04:06:50 2026 GMT
        Subject: CN=6aaf5bda-813d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:70:a3:18:a7:fe:e7:38:1a:d0:a4:5f:36:ed:
                    58:47:f7:19:16:73:70:fa:85:71:74:6b:39:83:0b:
                    bc:f3:5d:53:d1:0f:23:df:d6:bd:03:42:b1:62:4c:
                    9c:b2:24:26:7c:c8:3a:54:02:ea:de:f2:a3:6f:e2:
                    69:ff:d1:8e:60:24:96:b0:73:e1:92:6d:b0:84:c3:
                    39:e2:ec:24:e6:b5:b6:f5:f3:7a:10:16:02:6d:a7:
                    38:5f:48:a6:81:fa:22:0c:5f:19:a2:e1:65:d4:6d:
                    ea:a7:be:f0:80:a6:e7:c0:88:78:45:de:8a:50:92:
                    e5:4b:03:07:c3:72:3e:bb:dd:3d:26:01:e6:38:de:
                    f5:96:8e:02:c9:57:e0:16:04:3f:22:fb:79:de:4e:
                    2d:45:a5:23:b8:30:96:73:d0:34:7d:74:25:4b:ae:
                    76:a6:1d:bf:a4:bc:56:65:29:ac:cc:d2:47:a1:d1:
                    d3:4b:d9:5c:e9:25:b5:2f:94:d5:b3:41:26:ed:93:
                    3d:90:00:6e:d2:d9:b5:8d:ab:30:03:e0:69:1e:06:
                    10:a3:f2:16:4f:42:27:04:b5:f3:d5:4a:e3:a5:50:
                    82:3d:73:f1:53:fd:26:c0:7d:20:d4:c7:34:a8:82:
                    85:5d:58:a4:9d:19:b9:99:93:d1:76:44:c1:69:64:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6D:8E:46:59:F9:99:56:12:54:65:74:55:1B:CA:73:1D:F6:62:5E
            X509v3 Authority Key Identifier:
                keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:bf:c1:eb:5c:6d:0b:16:8e:67:d9:2a:af:61:3a:e6:c1:5c:
         f0:8c:de:32:cf:64:43:bd:d1:0a:35:36:56:a2:8a:c9:80:0f:
         d6:91:75:20:f7:bd:5e:ca:5c:27:76:4b:4f:d2:2e:58:34:1c:
         c7:33:e0:5c:50:bf:72:f9:8b:60:66:86:97:01:3e:5c:39:96:
         7d:01:fd:aa:a4:c6:1f:52:82:e2:18:ee:87:4c:26:e6:c5:a0:
         b3:a9:ee:ef:4b:5a:fa:b7:ad:7e:1b:4e:9a:6e:71:96:f3:c3:
         20:a2:a9:31:52:98:f0:c2:b2:b7:89:b6:1e:e6:2f:da:c6:9b:
         73:29:fd:33:1b:8d:ef:1b:7a:4c:a1:1f:85:4c:d8:46:09:6b:
         d7:0d:42:a3:29:66:c3:86:16:25:03:a7:56:70:12:c9:2e:bc:
         8e:7b:4c:30:2e:e9:0f:a6:76:6b:b8:fc:c6:24:65:d1:ee:d5:
         8c:76:c6:ea:de:8f:2d:1d:13:d5:32:51:90:23:58:85:b9:fb:
         04:b0:05:4b:a5:c4:33:73:32:38:eb:1a:63:90:73:ca:65:90:
         e8:a4:82:b7:ee:1c:35:be:dd:93:4b:b9:e9:da:83:30:9a:89:
         bb:4c:47:bf:01:f4:65:45:99:85:1f:df:fa:9b:cb:ca:db:34:
         0d:60:18:55
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA80wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0IxQkVBRjExMC8GA1UEBRMoQTVGMEEyQkI4Qjc5RURENkQzN0MwNzdBREZFQTA4
MjUxNEMwNDIwRjAeFw0yNjA5MjAwNDA2NTBaFw0yNjA5MjIwNDA2NTBaMBgxFjAU
BgNVBAMTDTZhYWY1YmRhLTgxM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+cKMYp/7nOBrQpF827VhH9xkWc3D6hXF0azmDC7zzXVPRDyPf1r0DQrFi
TJyyJCZ8yDpUAure8qNv4mn/0Y5gJJawc+GSbbCEwzni7CTmtbb183oQFgJtpzhf
SKaB+iIMXxmi4WXUbeqnvvCApufAiHhF3opQkuVLAwfDcj673T0mAeY43vWWjgLJ
V+AWBD8i+3neTi1FpSO4MJZz0DR9dCVLrnamHb+kvFZlKazM0keh0dNL2VzpJbUv
lNWzQSbtkz2QAG7S2bWNqzAD4GkeBhCj8hZPQicEtfPVSuOlUII9c/FT/SbAfSDU
xzSogoVdWKSdGbmZk9F2RMFpZPCtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYW2O
Rln5mVYSVGV0VRvKcx32Yl4wHwYDVR0jBBgwFoAUpfCiu4t57dbTfAd63+oIJRTA
Qg8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNCMUJFL0YzMjI4RTg2RjBFRTExRUVBM0JFMEY1ODc3NTQxMkU2L3BmQ2l1
NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BmQ2l1NHQ1N2RiVGZBZDYzLW9JSlJUQVFnOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0IxQkUvRjMyMjhFODZGMEVFMTFFRUEzQkUwRjU4Nzc1
NDEyRTYvcGZDaXU0dDU3ZGJUZkFkNjMtb0lKUlRBUWc4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLv8HrXG0LFo5n2SqvYTrmwVzwjN4y
z2RDvdEKNTZWoorJgA/WkXUg971eylwndktP0i5YNBzHM+BcUL9y+YtgZoaXAT5c
OZZ9Af2qpMYfUoLiGO6HTCbmxaCzqe7vS1r6t61+G06abnGW88MgoqkxUpjwwrK3
ibYe5i/axptzKf0zG43vG3pMoR+FTNhGCWvXDUKjKWbDhhYlA6dWcBLJLryOe0ww
LukPpnZruPzGJGXR7tWMdsbq3o8tHRPVMlGQI1iFufsEsAVLpcQzczI46xpjkHPK
ZZDopIK37hw1vt2TS7np2oMwmom7TEe/AfRlRZmFH9/6m8vK2zQNYBhV
-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:06 2026 by rpki-client