Error: rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
File:                     n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft (raw, json)
Hash identifier:          LVzpyZvU8P8lpf18rN3Q+O5WeQtYF5wupbinXtnbXpQ=
Subject key identifier:   0D:DF:51:E3:20:AD:BB:C9:E2:CB:E4:83:A9:26:48:2F:6D:B0:24:2B
Authority key identifier: 9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF
Certificate issuer:       /CN=F36D8C86AF/serialNumber=9F5CC64293687905BAB4758C985DC7683F105AFF
Certificate serial:       05DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
Manifest number:          05DC
Signing time:             Sat 10 Oct 2026 03:02:06 +0000
Manifest this update:     Sat 10 Oct 2026 03:02:05 +0000
Manifest next update:     Mon 12 Oct 2026 03:02:05 +0000
Files and hashes:         1: n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl (hash: LoOGPxdOaW5+4vFanCTYjgOZFNWrc0qTJAg9L9Xlwe4=)
                          2: 5F394800ED8011F0BA1885ECDAE4EC9C.roa (hash: AN0a4viEzkefol2AMF5qYI0mcmmtbwhn/gUSt6q32ao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1502 (0x5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8C86AF, serialNumber=9F5CC64293687905BAB4758C985DC7683F105AFF
        Validity
            Not Before: Oct 10 03:02:05 2026 GMT
            Not After : Oct 12 03:02:05 2026 GMT
        Subject: CN=6ac9aaad-05a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f0:36:00:9f:a3:ad:72:77:97:d6:54:4f:c3:
                    72:05:46:af:e0:75:04:fb:45:8d:6e:5e:45:5d:a9:
                    22:07:71:c8:55:4f:90:fe:7c:f6:e1:5f:36:9a:45:
                    15:3c:46:e6:97:41:87:5b:06:57:25:70:8d:2b:2c:
                    13:c1:1c:fe:a4:02:51:b8:31:8c:45:e5:c0:c5:27:
                    f3:7b:7e:e9:36:6f:ad:ce:01:b9:7f:d3:77:61:66:
                    11:ea:77:95:1e:bb:08:69:88:9f:f5:69:7a:66:52:
                    eb:08:28:4d:f6:2d:c1:22:65:7f:c0:e7:d6:34:72:
                    28:cb:2a:07:d8:a4:d9:0d:b9:13:9d:92:9c:69:9c:
                    cf:28:9e:35:69:e8:8d:84:44:4c:6b:12:02:7e:81:
                    ac:37:3e:ab:c6:a0:fc:05:c2:62:3e:1b:f1:05:50:
                    e4:37:9c:06:67:75:b9:c7:0d:07:87:ea:56:c8:f2:
                    8c:e3:40:03:2c:3d:1d:74:6e:8f:81:96:f1:9f:18:
                    c9:78:97:7d:50:08:72:14:8c:52:7f:2b:2a:1d:2f:
                    b5:e9:e3:23:d5:59:9e:fd:bc:30:0f:a8:dd:9a:2c:
                    11:82:9c:06:51:c3:33:41:5f:2e:c1:d4:54:c2:bc:
                    8c:68:89:28:2d:4b:e7:99:1c:a6:a2:d4:dc:e1:59:
                    cb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:DF:51:E3:20:AD:BB:C9:E2:CB:E4:83:A9:26:48:2F:6D:B0:24:2B
            X509v3 Authority Key Identifier:
                keyid:9F:5C:C6:42:93:68:79:05:BA:B4:75:8C:98:5D:C7:68:3F:10:5A:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/n1zGQpNoeQW6tHWMmF3HaD8QWv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8C86/5682F6524A7211ED90B9E0B8F1222468/n1zGQpNoeQW6tHWMmF3HaD8QWv8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:39:e4:7c:2c:b2:73:63:cd:ee:9f:44:60:38:dc:a0:49:3c:
         a7:a9:a5:ee:c0:fb:d1:0b:e6:9c:b7:59:75:b1:f5:9a:c9:17:
         60:51:81:55:6b:63:af:0f:94:d2:0b:0c:5d:98:e8:d0:5e:df:
         26:cb:c8:4a:6c:6f:c5:2a:10:95:f9:4b:fa:a3:a6:d5:0d:bc:
         5a:8b:03:70:ba:38:3a:28:c8:0f:55:46:d8:6f:53:b1:a4:b7:
         b4:4b:35:21:5b:32:1d:e4:11:6d:69:3d:ca:41:d4:74:6b:6d:
         aa:1f:4b:24:eb:1e:59:ac:0c:40:fd:b8:0a:09:5a:20:3b:fa:
         06:eb:1e:b6:bc:bf:04:a8:76:95:a2:68:81:2a:be:28:a3:78:
         72:c4:34:99:50:61:60:4a:f2:0a:7c:ad:e7:15:99:ba:d7:3f:
         cd:61:8c:80:2a:20:81:40:6c:8d:1d:85:db:e2:64:da:88:69:
         f8:c0:3e:ec:3d:3e:af:f9:80:05:07:53:2e:5e:dd:d5:56:52:
         c6:2a:8f:a4:f9:67:ca:5f:f4:59:f8:ea:81:4d:f1:9b:3b:87:
         fb:4f:a3:c5:77:69:2d:00:39:db:94:13:5c:0d:eb:88:ef:de:
         d7:e1:60:85:fa:d0:3b:12:c8:b3:52:54:d4:e4:7b:e8:af:e9:
         30:6e:59:f0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBd4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhDODZBRjExMC8GA1UEBRMoOUY1Q0M2NDI5MzY4NzkwNUJBQjQ3NThDOTg1REM3
NjgzRjEwNUFGRjAeFw0yNjEwMTAwMzAyMDVaFw0yNjEwMTIwMzAyMDVaMBgxFjAU
BgNVBAMTDTZhYzlhYWFkLTA1YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDn8DYAn6OtcneX1lRPw3IFRq/gdQT7RY1uXkVdqSIHcchVT5D+fPbhXzaa
RRU8RuaXQYdbBlclcI0rLBPBHP6kAlG4MYxF5cDFJ/N7fuk2b63OAbl/03dhZhHq
d5UeuwhpiJ/1aXpmUusIKE32LcEiZX/A59Y0cijLKgfYpNkNuROdkpxpnM8onjVp
6I2ERExrEgJ+gaw3PqvGoPwFwmI+G/EFUOQ3nAZndbnHDQeH6lbI8ozjQAMsPR10
bo+BlvGfGMl4l31QCHIUjFJ/KyodL7Xp4yPVWZ79vDAPqN2aLBGCnAZRwzNBXy7B
1FTCvIxoiSgtS+eZHKai1NzhWcu5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDd9R
4yCtu8niy+SDqSZIL22wJCswHwYDVR0jBBgwFoAUn1zGQpNoeQW6tHWMmF3HaD8Q
Wv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4Qzg2LzU2ODJGNjUyNEE3MjExRUQ5MEI5RTBCOEYxMjIyNDY4L24xekdR
cE5vZVFXNnRIV01tRjNIYUQ4UVd2OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL24xekdRcE5vZVFXNnRIV01tRjNIYUQ4UVd2OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDhDODYvNTY4MkY2NTI0QTcyMTFFRDkwQjlFMEI4RjEy
MjI0NjgvbjF6R1FwTm9lUVc2dEhXTW1GM0hhRDhRV3Y4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADOeR8LLJzY83un0RgONygSTynqaXu
wPvRC+act1l1sfWayRdgUYFVa2OvD5TSCwxdmOjQXt8my8hKbG/FKhCV+Uv6o6bV
DbxaiwNwujg6KMgPVUbYb1OxpLe0SzUhWzId5BFtaT3KQdR0a22qH0sk6x5ZrAxA
/bgKCVogO/oG6x62vL8EqHaVomiBKr4oo3hyxDSZUGFgSvIKfK3nFZm61z/NYYyA
KiCBQGyNHYXb4mTaiGn4wD7sPT6v+YAFB1MuXt3VVlLGKo+k+WfKX/RZ+OqBTfGb
O4f7T6PFd2ktADnblBNcDeuI797X4WCF+tA7EsizUlTU5Hvor+kwblnw
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:18:06 2026 by rpki-client