Error: rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
File:                     XozUASYISPXWb0DSj9l3F6nw8mo.mft (raw, json)
Hash identifier:          pq2Dfjm99EB/wWeiMvk5E0qwS1ZhBFZf9kxY7E9VcQM=
Subject key identifier:   67:57:12:0B:00:B7:30:EA:AF:E8:9D:6E:98:C1:F7:96:61:4D:10:37
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Certificate issuer:       /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial:       054F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
Manifest number:          054E
Signing time:             Tue 22 Sep 2026 03:13:46 +0000
Manifest this update:     Tue 22 Sep 2026 03:13:45 +0000
Manifest next update:     Thu 24 Sep 2026 03:13:45 +0000
Files and hashes:         1: XozUASYISPXWb0DSj9l3F6nw8mo.crl (hash: rY8r8G3CP7ecbbroZGQD4BWBhwssF7X3p1H7GSualWo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                          rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AR, serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
        Validity
            Not Before: Sep 22 03:13:45 2026 GMT
            Not After : Sep 24 03:13:45 2026 GMT
        Subject: CN=6ab1f26a-db7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d2:82:8d:5a:20:21:d3:eb:8e:5a:1a:22:ea:
                    ab:b8:b6:30:88:ed:4d:5d:20:30:11:01:8b:8a:be:
                    83:6d:81:06:7c:a8:8a:97:e4:e3:d7:9c:cb:23:74:
                    f2:78:83:45:8f:d3:a8:d9:75:fe:89:69:b0:cd:15:
                    09:b8:a0:06:e1:01:ac:88:a0:e7:6c:91:ba:31:5e:
                    fd:d1:e9:56:23:cb:01:c3:f2:cf:7e:7d:2d:0d:0b:
                    b5:3f:6c:4b:d1:d4:f9:71:90:8c:db:56:14:52:c5:
                    75:19:cb:e0:9a:59:5b:cb:73:f5:9a:ae:94:b1:2b:
                    d3:bd:48:55:7f:87:67:45:1b:a6:77:94:6c:fa:9f:
                    56:02:ba:5b:ce:86:3e:4b:d3:2e:c7:62:c2:81:22:
                    16:8c:b0:a0:9a:db:45:6d:50:33:3c:e8:5e:dd:b4:
                    a3:01:ff:b0:0d:af:52:55:e8:1e:eb:93:1e:a3:08:
                    c8:7c:d9:66:36:3a:74:a3:77:ad:ac:d4:3c:6b:43:
                    33:2b:b7:ca:d7:ce:d5:b6:72:3e:1c:e8:46:a8:82:
                    06:ce:e7:7d:84:21:e1:ca:21:80:0f:cb:2d:e2:97:
                    5c:f4:d3:4a:09:42:a6:55:90:f1:5e:e8:e5:a7:bb:
                    1e:87:85:d7:13:58:d1:46:e4:e7:f1:e8:0f:b4:26:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:57:12:0B:00:B7:30:EA:AF:E8:9D:6E:98:C1:F7:96:61:4D:10:37
            X509v3 Authority Key Identifier:
                keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e5:f9:49:5b:c0:26:a1:49:58:6f:a3:a5:38:be:49:fa:57:
         5b:7e:48:80:e2:08:94:9d:b8:a1:73:29:30:12:5c:53:f2:73:
         a0:f3:17:2d:e5:74:f3:b3:1b:1d:36:95:29:6a:69:a9:eb:2c:
         2b:af:88:22:d7:dd:6a:83:32:ed:07:1f:5c:f8:f6:eb:43:b6:
         40:1d:c3:53:9c:e9:4f:0d:64:75:e2:81:07:05:fa:91:14:5e:
         5c:6c:c8:ce:e9:93:bb:3b:b6:63:ab:08:0a:7a:e3:7c:42:e8:
         47:c7:1d:bd:78:83:6a:ec:42:4b:06:9b:47:4e:e2:5d:a6:bf:
         f5:81:c9:a1:ac:60:24:2b:38:d9:90:eb:ca:33:b2:1d:06:5b:
         ec:f1:a7:1d:89:07:68:62:15:69:20:b5:50:5e:41:3d:59:39:
         7a:b0:91:13:64:a8:bc:08:84:d5:90:cf:15:73:39:74:cc:6b:
         58:a6:12:ad:31:01:28:9a:f3:6c:99:61:26:23:ed:f1:bb:73:
         74:59:14:29:45:18:d2:63:80:fc:24:2b:0e:62:b7:44:e0:97:
         49:b0:c2:7b:db:36:9c:7e:8e:ca:92:65:2d:2d:da:13:4b:c5:
         dc:42:76:f9:77:66:04:22:62:b2:14:ec:5d:ca:28:b6:65:e0:
         74:75:fb:be
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBU8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhEMzBBUjExMC8GA1UEBRMoNUU4Q0Q0MDEyNjA4NDhGNUQ2NkY0MEQyOEZEOTc3
MTdBOUYwRjI2QTAeFw0yNjA5MjIwMzEzNDVaFw0yNjA5MjQwMzEzNDVaMBgxFjAU
BgNVBAMTDTZhYjFmMjZhLWRiN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDY0oKNWiAh0+uOWhoi6qu4tjCI7U1dIDARAYuKvoNtgQZ8qIqX5OPXnMsj
dPJ4g0WP06jZdf6JabDNFQm4oAbhAayIoOdskboxXv3R6VYjywHD8s9+fS0NC7U/
bEvR1PlxkIzbVhRSxXUZy+CaWVvLc/WarpSxK9O9SFV/h2dFG6Z3lGz6n1YCulvO
hj5L0y7HYsKBIhaMsKCa20VtUDM86F7dtKMB/7ANr1JV6B7rkx6jCMh82WY2OnSj
d62s1DxrQzMrt8rXztW2cj4c6EaoggbO532EIeHKIYAPyy3il1z000oJQqZVkPFe
6OWnux6HhdcTWNFG5Ofx6A+0Ji0PAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUZ1cS
CwC3MOqv6J1umMH3lmFNEDcwHwYDVR0jBBgwFoAUXozUASYISPXWb0DSj9l3F6nw
8mowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4RDMwLzNFQTY5NkFDQTZCMDExRURCOTAxRDQ5Q0YxMjIyNDY4L1hvelVB
U1lJU1BYV2IwRFNqOWwzRjZudzhtby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hvelVBU1lJU1BYV2IwRFNqOWwzRjZudzhtby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RDhEMzAvM0VBNjk2QUNBNkIwMTFFREI5MDFENDlDRjEyMjI0
NjgvWG96VUFTWUlTUFhXYjBEU2o5bDNGNm53OG1vLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCv5flJW8AmoUlYb6OlOL5J+ldbfkiA4giU
nbihcykwElxT8nOg8xct5XTzsxsdNpUpammp6ywrr4gi191qgzLtBx9c+PbrQ7ZA
HcNTnOlPDWR14oEHBfqRFF5cbMjO6ZO7O7ZjqwgKeuN8QuhHxx29eINq7EJLBptH
TuJdpr/1gcmhrGAkKzjZkOvKM7IdBlvs8acdiQdoYhVpILVQXkE9WTl6sJETZKi8
CITVkM8Vczl0zGtYphKtMQEomvNsmWEmI+3xu3N0WRQpRRjSY4D8JCsOYrdE4JdJ
sMJ72zacfo7KkmUtLdoTS8XcQnb5d2YEImKyFOxdyii2ZeB0dfu+
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:56:49 2026 by rpki-client