Error: rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
File:                     Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft (raw, json)
Hash identifier:          ZunyAMPUj9f7XUWRE7GjGwpXVFASo0Y1MG3gEX+0y1c=
Subject key identifier:   41:72:36:7C:23:73:D5:E4:47:CE:14:99:3E:90:8E:AA:62:61:32:75
Authority key identifier: 56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95
Certificate issuer:       /CN=F36D5C19AR/serialNumber=56EF7707F7CBB80D82AEAC605540FD6A3B313D95
Certificate serial:       0AD5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
Manifest number:          0AD2
Signing time:             Tue 13 Oct 2026 01:21:28 +0000
Manifest this update:     Tue 13 Oct 2026 01:21:27 +0000
Manifest next update:     Thu 15 Oct 2026 01:21:27 +0000
Files and hashes:         1: Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl (hash: aWDL1hcY4OlgmtRtxNI3lDaNYvjFZn0L39rulscmquw=)
                          2: 26F67BB07BAA11E9BE7E693EF8AEA228.roa (hash: DK8y/9PW04BeUw4LJYq44qLXk52z7s29lnBHY4Y4J/k=)
                          3: BB6580B2E42F11F0B9E5F794DAE4EC9C.roa (hash: zMTRRvx7Vr1SvqYss7swVvmr9SUDyECR2yzYAZr6eIg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
                          rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2773 (0xad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5C19AR, serialNumber=56EF7707F7CBB80D82AEAC605540FD6A3B313D95
        Validity
            Not Before: Oct 13 01:21:27 2026 GMT
            Not After : Oct 15 01:21:27 2026 GMT
        Subject: CN=6acd8798-4742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6c:bd:81:83:b7:a6:11:c1:d3:fb:40:b5:ea:
                    e2:68:8f:35:5c:bd:7d:9d:92:56:cd:09:57:bf:57:
                    eb:74:34:74:cb:fc:86:d7:f4:96:c5:f6:f0:d8:8e:
                    ba:3e:75:56:ad:f5:4f:c0:2d:76:fc:cf:2a:e8:c8:
                    1d:9c:c3:39:9c:84:ca:88:59:1f:08:b4:08:09:42:
                    83:c0:43:a1:a2:8b:5f:ab:c5:53:a0:b8:ed:0a:04:
                    cc:f6:cc:85:3b:03:d4:64:46:89:31:8b:27:aa:e0:
                    4e:34:6c:de:49:a0:42:ee:43:64:3e:71:0e:d9:32:
                    2b:d7:bc:36:03:0a:81:72:19:63:bd:3a:d1:fe:5a:
                    43:20:79:ab:46:45:e7:fc:ee:21:8e:8e:72:7d:25:
                    1d:42:28:4c:31:0a:c4:c8:49:78:36:1a:df:a8:65:
                    d1:b7:f1:5b:86:12:ea:84:19:a9:d4:8e:27:87:e7:
                    c4:5f:8e:66:ec:f0:5b:e3:af:38:d4:8b:d4:9f:cc:
                    fc:37:e8:f5:39:92:cf:7f:a4:70:4b:ed:c1:b5:28:
                    e2:b3:06:df:d2:b8:b0:23:22:6a:4d:46:5e:5e:e5:
                    c8:37:42:d2:3a:e7:83:45:03:59:13:4d:70:ec:dc:
                    0a:7a:53:1c:d4:68:b5:04:0a:47:e6:16:c4:ed:c3:
                    ad:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:72:36:7C:23:73:D5:E4:47:CE:14:99:3E:90:8E:AA:62:61:32:75
            X509v3 Authority Key Identifier:
                keyid:56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:40:3a:a2:fd:25:8a:18:e5:f2:27:a8:f1:3f:bc:fb:31:cc:
         c0:fe:bc:1e:81:35:54:c3:1a:fb:a6:1e:7b:ea:08:5c:81:f4:
         7e:88:df:6f:9f:ce:c5:3b:24:1a:d7:6f:bb:1b:f9:1f:01:e1:
         1c:14:e9:c6:55:eb:35:05:b3:9d:75:01:75:7e:97:e1:ba:92:
         b8:79:97:2e:1b:a1:9b:fb:d8:35:2a:ed:1a:be:72:cf:45:92:
         a3:be:d2:54:66:77:7a:eb:48:4b:a2:34:cd:73:fa:f8:bd:9f:
         d2:a1:f3:56:27:c3:ca:96:52:da:6f:7b:46:ce:c9:9b:da:65:
         30:76:83:34:f3:af:f0:6e:aa:f0:80:a7:e9:a3:da:63:86:b1:
         79:01:de:9e:79:9c:19:b2:56:1f:2d:45:3d:0a:15:27:01:93:
         08:a4:b5:ac:1e:c1:22:d9:6b:a5:76:7c:0f:41:66:d6:83:72:
         96:6c:87:11:b1:cf:dc:68:c4:b0:b6:95:46:18:ae:ca:be:5d:
         bd:4c:65:c8:76:dc:18:80:eb:b9:a4:04:5d:4f:7a:90:41:0d:
         76:9c:6d:e0:13:68:38:98:7b:ea:40:56:0d:13:f9:fe:87:74:
         b8:77:fb:53:6e:81:04:81:34:fa:34:64:f0:e7:c7:cf:c8:c3:
         a4:96:dc:c4
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDVDMTlBUjExMC8GA1UEBRMoNTZFRjc3MDdGN0NCQjgwRDgyQUVBQzYwNTU0MEZE
NkEzQjMxM0Q5NTAeFw0yNjEwMTMwMTIxMjdaFw0yNjEwMTUwMTIxMjdaMBgxFjAU
BgNVBAMTDTZhY2Q4Nzk4LTQ3NDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCybL2Bg7emEcHT+0C16uJojzVcvX2dklbNCVe/V+t0NHTL/IbX9JbF9vDY
jro+dVat9U/ALXb8zyroyB2cwzmchMqIWR8ItAgJQoPAQ6Gii1+rxVOguO0KBMz2
zIU7A9RkRokxiyeq4E40bN5JoELuQ2Q+cQ7ZMivXvDYDCoFyGWO9OtH+WkMgeatG
Ref87iGOjnJ9JR1CKEwxCsTISXg2Gt+oZdG38VuGEuqEGanUjieH58Rfjmbs8Fvj
rzjUi9SfzPw36PU5ks9/pHBL7cG1KOKzBt/SuLAjImpNRl5e5cg3QtI654NFA1kT
TXDs3Ap6UxzUaLUECkfmFsTtw627AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUQXI2
fCNz1eRHzhSZPpCOqmJhMnUwHwYDVR0jBBgwFoAUVu93B/fLuA2CrqxgVUD9ajsx
PZUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ1QzE5Lzg1NEVFM0VFN0JBNzExRTk5MDJDNjUzQ0Y4QUVBMjI4L1Z1OTNC
X2ZMdUEyQ3JxeGdWVUQ5YWpzeFBaVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1Z1OTNCX2ZMdUEyQ3JxeGdWVUQ5YWpzeFBaVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDVDMTkvODU0RUUzRUU3QkE3MTFFOTkwMkM2NTNDRjhBRUEy
MjgvVnU5M0JfZkx1QTJDcnF4Z1ZVRDlhanN4UFpVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDFQDqi/SWKGOXyJ6jxP7z7MczA/rwegTVU
wxr7ph576ghcgfR+iN9vn87FOyQa12+7G/kfAeEcFOnGVes1BbOddQF1fpfhupK4
eZcuG6Gb+9g1Ku0avnLPRZKjvtJUZnd660hLojTNc/r4vZ/SofNWJ8PKllLab3tG
zsmb2mUwdoM086/wbqrwgKfpo9pjhrF5Ad6eeZwZslYfLUU9ChUnAZMIpLWsHsEi
2WuldnwPQWbWg3KWbIcRsc/caMSwtpVGGK7Kvl29TGXIdtwYgOu5pARdT3qQQQ12
nG3gE2g4mHvqQFYNE/n+h3S4d/tTboEEgTT6NGTw58fPyMOkltzE
-----END CERTIFICATE-----
Generated at Tue Oct 13 21:14:28 2026 by rpki-client