Error: rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          hs4kYgzGS7SnC1+6uflhh5notWD+2nI7QQYnmHq7/mY=
Subject key identifier:   89:86:5A:C0:F2:53:3B:2C:18:39:F0:C3:58:DA:F3:C1:BE:0F:A0:88
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       0350
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          034B
Signing time:             Sun 11 Oct 2026 04:19:33 +0000
Manifest this update:     Sun 11 Oct 2026 04:19:33 +0000
Manifest next update:     Tue 13 Oct 2026 04:19:33 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: o2f4Prs5pIwuH312hgCu8oAiOzUNhYSJqZB64qAcoco=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
                          3: 8AE0C950CC5211F08901D0F0DAE4EC9C.roa (hash: p6vdnsJDN6upI5W/Ww4HUUN2q0hJo9P4coEtR26YSjc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 848 (0x350)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Oct 11 04:19:33 2026 GMT
            Not After : Oct 13 04:19:33 2026 GMT
        Subject: CN=6acb0e55-27c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b4:57:2c:2d:dd:f2:62:43:04:54:1a:84:cc:
                    06:39:57:46:ff:0c:dd:01:2c:9a:9d:dd:bb:20:39:
                    d5:e5:cc:4e:bc:a3:8a:4e:eb:ca:7f:0f:a0:49:16:
                    4c:a9:31:bd:a7:ed:c8:87:37:b3:7f:01:2f:e5:19:
                    ec:75:ff:36:18:5f:8d:e8:3a:be:2d:87:e4:86:43:
                    ad:89:11:6a:54:43:42:3f:55:a6:df:2c:7e:29:45:
                    ff:73:7d:f8:c0:cf:f0:2d:e2:a2:b2:59:9c:42:f6:
                    35:32:f7:0c:7e:f9:e9:bc:fa:e2:17:b4:8c:03:e5:
                    8a:79:c0:dd:6b:50:9c:76:62:c2:60:e6:b3:f1:7a:
                    ce:97:33:7d:ec:12:ce:bc:84:e8:03:c2:79:37:38:
                    12:32:19:c6:fe:e8:2d:f6:c5:80:d7:4c:8a:ab:c1:
                    4d:3c:59:62:94:06:96:b9:17:fa:ff:d2:60:db:4a:
                    2c:87:e9:4a:f0:42:bd:42:ab:7c:43:65:67:aa:64:
                    5d:f3:bc:e3:c4:27:10:f2:33:fc:e2:55:5f:47:5c:
                    86:b3:2c:b5:b3:86:c6:53:54:f1:5c:11:84:3a:7f:
                    1c:3c:a7:6d:6e:76:92:7c:d9:d2:fb:78:73:1b:95:
                    c8:a4:35:8f:43:38:3b:6d:39:c9:5d:e9:8c:34:6a:
                    c7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:86:5A:C0:F2:53:3B:2C:18:39:F0:C3:58:DA:F3:C1:BE:0F:A0:88
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:f4:24:38:a4:17:74:14:09:87:f7:4c:41:93:ae:2a:ad:63:
         52:cf:bd:de:bf:c3:8a:42:b4:93:e3:d6:12:a1:b9:7f:f1:bd:
         75:cd:9d:a9:34:6c:cb:68:86:a9:85:30:9a:fd:34:46:7d:27:
         11:10:eb:d0:47:5b:7c:44:59:d8:9c:ac:e0:00:d3:a6:ba:a9:
         92:0e:0d:f9:22:26:86:fb:3a:91:fc:9a:2f:f1:16:fe:97:cb:
         f3:db:74:4c:8b:d6:4b:65:0a:6e:36:5d:76:37:5a:c9:99:e5:
         eb:ce:5c:fb:f0:a1:eb:3e:8e:9e:32:d5:30:73:04:b5:64:e1:
         fd:f6:51:88:62:13:61:6f:70:35:2d:e5:34:de:a3:c6:29:50:
         6e:a0:f6:df:18:a2:ac:3f:e0:6b:0e:0c:eb:fe:fb:b6:67:85:
         3b:2c:dd:8b:83:1d:cd:6c:b4:be:79:e5:17:6b:59:09:a5:8b:
         17:35:cf:36:e2:e5:7d:bf:92:67:c7:7d:7f:5f:75:be:c5:56:
         e9:f4:30:85:d7:cd:6a:fc:08:f2:79:cb:10:4c:5c:f3:8b:91:
         f2:bb:10:a5:93:f6:f0:78:45:e4:81:aa:d5:7d:b2:6d:23:60:
         2a:78:44:99:4d:dc:59:f2:b4:5b:6b:b1:02:e9:93:39:a6:10:
         54:9f:4f:38
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA1AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTZCNzdBRjExMC8GA1UEBRMoRjVERkY2NEEzOUQ4MDA3MDQ0RDc2NzFDQkNBQUEx
RTE2MTU3NDVBMDAeFw0yNjEwMTEwNDE5MzNaFw0yNjEwMTMwNDE5MzNaMBgxFjAU
BgNVBAMTDTZhY2IwZTU1LTI3YzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCXtFcsLd3yYkMEVBqEzAY5V0b/DN0BLJqd3bsgOdXlzE68o4pO68p/D6BJ
FkypMb2n7ciHN7N/AS/lGex1/zYYX43oOr4th+SGQ62JEWpUQ0I/VabfLH4pRf9z
ffjAz/At4qKyWZxC9jUy9wx++em8+uIXtIwD5Yp5wN1rUJx2YsJg5rPxes6XM33s
Es68hOgDwnk3OBIyGcb+6C32xYDXTIqrwU08WWKUBpa5F/r/0mDbSiyH6UrwQr1C
q3xDZWeqZF3zvOPEJxDyM/ziVV9HXIazLLWzhsZTVPFcEYQ6fxw8p21udpJ82dL7
eHMblcikNY9DODttOcld6Yw0ascFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiYZa
wPJTOywYOfDDWNrzwb4PoIgwHwYDVR0jBBgwFoAU9d/2SjnYAHBE12ccvKqh4WFX
RaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2Qjc3LzNDRkZBMzgwNDJDQjExRUY4QjlBMzdBRTc2MkU5NTFBLzlkXzJT
am5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlkXzJTam5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTZCNzcvM0NGRkEzODA0MkNCMTFFRjhCOUEzN0FFNzYy
RTk1MUEvOWRfMlNqbllBSEJFMTJjY3ZLcWg0V0ZYUmFBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL9CQ4pBd0FAmH90xBk64qrWNSz73e
v8OKQrST49YSobl/8b11zZ2pNGzLaIaphTCa/TRGfScREOvQR1t8RFnYnKzgANOm
uqmSDg35IiaG+zqR/Jov8Rb+l8vz23RMi9ZLZQpuNl12N1rJmeXrzlz78KHrPo6e
MtUwcwS1ZOH99lGIYhNhb3A1LeU03qPGKVBuoPbfGKKsP+BrDgzr/vu2Z4U7LN2L
gx3NbLS+eeUXa1kJpYsXNc824uV9v5Jnx31/X3W+xVbp9DCF181q/AjyecsQTFzz
i5HyuxClk/bweEXkgarVfbJtI2AqeESZTdxZ8rRba7EC6ZM5phBUn084
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:18:43 2026 by rpki-client