Error: rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
File:                     -Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft (raw, json)
Hash identifier:          Kf7LODjp1OQJ439c/BCnGYRBBWAvFwiaiRhX2M4waQc=
Subject key identifier:   BC:26:95:D0:AC:5A:54:0C:CC:B1:3D:64:19:90:D4:2C:79:D3:A2:1F
Authority key identifier: F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF
Certificate issuer:       /CN=F36EA516AF/serialNumber=F976B5DDD4BD37D0AFF4F6763176D2E4C6351CEF
Certificate serial:       0227
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
Manifest number:          0226
Signing time:             Sat 03 Oct 2026 04:49:01 +0000
Manifest this update:     Sat 03 Oct 2026 04:49:01 +0000
Manifest next update:     Mon 05 Oct 2026 04:49:01 +0000
Files and hashes:         1: -Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl (hash: OJtrXU5r0DZ0sIaStxydNLwU6lX2/cU3PB2HKCHkEgc=)
                          2: 046CE482147711F0B01A890E6EB8BCC6.roa (hash: 1Ni3jdhyCUqGSNwJUD1MnDgs72urkU8YdE/yCBxVta0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EA516AF, serialNumber=F976B5DDD4BD37D0AFF4F6763176D2E4C6351CEF
        Validity
            Not Before: Oct  3 04:49:01 2026 GMT
            Not After : Oct  5 04:49:01 2026 GMT
        Subject: CN=6ac0893d-2d8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ad:6b:ef:86:4f:88:f9:51:25:78:a3:52:b2:
                    3f:5d:9f:b2:66:32:be:65:17:dc:cb:d1:5a:93:c1:
                    57:e5:9c:52:14:81:e1:0c:27:b7:c8:d6:e9:1c:4e:
                    a5:ab:4e:2d:05:a1:c3:53:bd:3e:b2:2b:b6:49:4e:
                    18:be:a1:04:4e:44:20:15:85:10:6c:b9:8d:e8:65:
                    a2:6c:2d:eb:b5:cf:f9:26:05:28:cf:19:e2:ba:39:
                    04:88:37:3c:8f:af:31:95:d8:bd:fd:83:1d:14:4c:
                    14:e7:0b:e6:ad:6a:a2:09:e2:21:7e:6a:b5:54:16:
                    35:f8:07:79:8e:93:b4:29:ef:5b:f1:5c:8f:6e:11:
                    38:0d:82:81:0e:d9:1c:5b:a9:22:f2:8b:10:56:0d:
                    e4:89:8b:29:9e:bd:a6:f0:fd:d0:a7:a5:94:66:d0:
                    a6:08:af:df:7c:92:ec:1b:8c:53:4a:a8:8f:3c:9d:
                    da:c7:6d:e6:fe:6c:84:d0:63:7a:0f:3a:1b:64:05:
                    e6:87:33:53:a3:44:dd:05:9a:70:11:53:0c:09:df:
                    49:5f:a3:2a:ce:9a:ff:be:c7:c4:d7:93:d1:5b:00:
                    bd:49:67:42:b8:ff:80:6f:e9:73:c9:3d:96:7b:67:
                    72:00:1e:3a:56:7f:49:a9:a0:42:a9:66:77:5b:f5:
                    8d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:26:95:D0:AC:5A:54:0C:CC:B1:3D:64:19:90:D4:2C:79:D3:A2:1F
            X509v3 Authority Key Identifier:
                keyid:F9:76:B5:DD:D4:BD:37:D0:AF:F4:F6:76:31:76:D2:E4:C6:35:1C:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EA516/1B90D444147611F0BD77CF096EB8BCC6/-Xa13dS9N9Cv9PZ2MXbS5MY1HO8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:33:95:72:88:56:fb:a0:8f:47:ce:77:19:7f:b8:8a:1f:
         cc:89:b7:e2:1d:38:f1:9b:95:c2:6b:7c:9f:55:5d:e7:a3:dd:
         20:c9:f4:18:7a:ec:86:0a:af:a9:35:07:a0:a0:85:61:09:92:
         7d:74:d4:39:a7:8d:d5:41:53:59:92:67:25:c8:55:9c:d0:1d:
         b6:4b:04:d7:d1:6a:28:bc:aa:3c:0e:53:79:64:79:45:d4:67:
         c2:24:46:10:f2:b1:5d:03:dc:ff:08:cb:ef:be:e1:36:b2:80:
         21:8a:cc:81:a0:a2:5f:f4:5e:9b:9a:a7:89:1b:c4:9d:25:d7:
         36:fb:ca:c3:73:e8:24:0e:c0:2c:9c:23:79:7e:e4:43:5a:6b:
         08:1f:8d:7d:7c:53:0f:0a:60:9e:3f:3e:62:ad:e7:fb:21:95:
         9c:07:93:9f:fc:48:37:03:fa:28:75:ee:db:6a:d2:00:06:e2:
         78:09:f6:c6:a8:ce:8a:99:a5:9b:99:e7:65:58:2a:20:31:40:
         68:bd:85:62:44:50:1a:8a:ef:d2:ce:07:08:09:ca:51:e8:b0:
         a8:b7:ae:03:ca:1c:de:e9:33:69:41:53:98:8b:36:42:b1:58:
         13:cb:8c:fa:be:dc:4a:7a:28:4d:9d:08:88:28:c6:01:91:c4:
         a4:da:ed:5c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAicwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUE1MTZBRjExMC8GA1UEBRMoRjk3NkI1RERENEJEMzdEMEFGRjRGNjc2MzE3NkQy
RTRDNjM1MUNFRjAeFw0yNjEwMDMwNDQ5MDFaFw0yNjEwMDUwNDQ5MDFaMBgxFjAU
BgNVBAMTDTZhYzA4OTNkLTJkOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1rWvvhk+I+VEleKNSsj9dn7JmMr5lF9zL0VqTwVflnFIUgeEMJ7fI1ukc
TqWrTi0FocNTvT6yK7ZJThi+oQRORCAVhRBsuY3oZaJsLeu1z/kmBSjPGeK6OQSI
NzyPrzGV2L39gx0UTBTnC+ataqIJ4iF+arVUFjX4B3mOk7Qp71vxXI9uETgNgoEO
2RxbqSLyixBWDeSJiymevabw/dCnpZRm0KYIr998kuwbjFNKqI88ndrHbeb+bITQ
Y3oPOhtkBeaHM1OjRN0FmnARUwwJ30lfoyrOmv++x8TXk9FbAL1JZ0K4/4Bv6XPJ
PZZ7Z3IAHjpWf0mpoEKpZndb9Y2RAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvCaV
0KxaVAzMsT1kGZDULHnToh8wHwYDVR0jBBgwFoAU+Xa13dS9N9Cv9PZ2MXbS5MY1
HO8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVBNTE2LzFCOTBENDQ0MTQ3NjExRjBCRDc3Q0YwOTZFQjhCQ0M2Ly1YYTEz
ZFM5TjlDdjlQWjJNWGJTNU1ZMUhPOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1YYTEzZFM5TjlDdjlQWjJNWGJTNU1ZMUhPOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUE1MTYvMUI5MEQ0NDQxNDc2MTFGMEJENzdDRjA5NkVC
OEJDQzYvLVhhMTNkUzlOOUN2OVBaMk1YYlM1TVkxSE84Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVTTOVcohW+6CPR853GX+4ih/Mibfi
HTjxm5XCa3yfVV3no90gyfQYeuyGCq+pNQegoIVhCZJ9dNQ5p43VQVNZkmclyFWc
0B22SwTX0WoovKo8DlN5ZHlF1GfCJEYQ8rFdA9z/CMvvvuE2soAhisyBoKJf9F6b
mqeJG8SdJdc2+8rDc+gkDsAsnCN5fuRDWmsIH419fFMPCmCePz5iref7IZWcB5Of
/Eg3A/oode7batIABuJ4CfbGqM6KmaWbmedlWCogMUBovYViRFAaiu/SzgcICcpR
6LCot64Dyhze6TNpQVOYizZCsVgTy4z6vtxKeihNnQiIKMYBkcSk2u1c
-----END CERTIFICATE-----
Generated at Sat Oct 3 20:07:35 2026 by rpki-client