Error: rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.mft
File:                     fxYqUhFtJWz110Epd7jqik8sueM.mft (raw, json)
Hash identifier:          eWstuvlxB4xz3I5hieSWDrdoKOSIC4wVM4xstbC44PI=
Subject key identifier:   39:37:C2:10:3A:66:D4:14:5C:BC:94:D8:F9:53:50:47:28:AB:60:36
Authority key identifier: 7F:16:2A:52:11:6D:25:6C:F5:D7:41:29:77:B8:EA:8A:4F:2C:B9:E3
Certificate issuer:       /CN=F36F0163AR/serialNumber=7F162A52116D256CF5D7412977B8EA8A4F2CB9E3
Certificate serial:       0A27
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fxYqUhFtJWz110Epd7jqik8sueM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.mft
Manifest number:          0A26
Signing time:             Thu 15 Oct 2026 01:37:43 +0000
Manifest this update:     Thu 15 Oct 2026 01:37:43 +0000
Manifest next update:     Sat 17 Oct 2026 01:37:43 +0000
Files and hashes:         1: fxYqUhFtJWz110Epd7jqik8sueM.crl (hash: ogi3fSG6YsLwfA4uydMcbAjy0dNZPhYPTxJWx/srBkQ=)
                          2: A8193972FCA011E986735342F8AEA228.roa (hash: sPw5LOyY+Urz9KZ/d5LVGl7SkJuhJf6qwj5Bd4j3cp4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.mft
                          rsync://rpki.afrinic.net/repository/arin/fxYqUhFtJWz110Epd7jqik8sueM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2599 (0xa27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0163AR, serialNumber=7F162A52116D256CF5D7412977B8EA8A4F2CB9E3
        Validity
            Not Before: Oct 15 01:37:43 2026 GMT
            Not After : Oct 17 01:37:43 2026 GMT
        Subject: CN=6ad02e67-fdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f3:44:f2:88:63:9b:92:20:e8:bd:b4:e9:f4:
                    c2:ec:f2:fe:bb:4d:9c:df:0d:48:44:da:0d:b2:27:
                    2c:71:81:a1:83:70:14:54:2d:a7:61:f1:74:3e:ab:
                    b7:93:ad:5f:f4:38:d6:95:22:49:b8:69:f3:f5:43:
                    de:f6:4d:54:f3:4a:a9:50:2a:5a:61:c2:9e:af:47:
                    7c:43:1a:64:67:48:dc:c8:7a:64:59:17:0e:3e:ad:
                    62:c6:3c:b6:1e:28:5b:4c:cd:d6:60:47:93:e3:0c:
                    99:90:6b:06:8c:02:06:12:ae:3a:e5:34:c7:f2:08:
                    5b:85:bb:a3:0f:2c:b5:e2:7e:e0:40:0c:74:8f:19:
                    5e:11:b3:02:fd:bd:b1:7a:69:e7:e8:04:4f:a4:32:
                    a5:8a:e6:63:5c:50:29:d3:43:8c:6b:1e:fa:fb:46:
                    c0:c4:79:41:f1:f1:d5:91:e6:82:18:8e:03:bc:1d:
                    fb:d8:7a:46:d2:bb:67:ee:e4:c9:19:ec:fb:9f:46:
                    1e:65:6d:af:c1:ce:26:cd:2a:03:f2:47:ec:6a:b8:
                    d6:b7:38:2f:79:e1:5a:f4:7e:62:2c:12:89:01:61:
                    97:cc:22:6d:95:9c:e5:ef:35:2f:64:fc:28:ce:c2:
                    76:b0:e4:e4:0b:99:46:dc:d2:41:0d:4f:2d:0d:f8:
                    d1:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:37:C2:10:3A:66:D4:14:5C:BC:94:D8:F9:53:50:47:28:AB:60:36
            X509v3 Authority Key Identifier:
                keyid:7F:16:2A:52:11:6D:25:6C:F5:D7:41:29:77:B8:EA:8A:4F:2C:B9:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fxYqUhFtJWz110Epd7jqik8sueM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/9D9820A4FC9A11E9A58BD73DF8AEA228/fxYqUhFtJWz110Epd7jqik8sueM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:97:02:df:45:11:3d:34:d3:93:2a:a1:62:52:4b:ab:a1:
         57:d3:85:50:e5:9f:4c:0e:d3:cd:4d:e3:09:89:b6:0c:36:c1:
         e2:6b:3b:44:03:30:5c:b8:f6:03:5d:62:da:0e:ff:9b:43:c0:
         ed:17:5e:e1:63:07:e4:36:04:15:32:44:40:ba:7a:ed:0b:13:
         e1:71:b4:03:f5:73:88:dd:3a:68:9a:1a:5a:b5:da:50:a7:94:
         b0:72:c5:39:a7:b1:e1:af:fa:37:26:05:5e:3a:50:81:63:e2:
         5a:0c:a2:5d:8a:ba:65:29:8e:e5:e5:6d:3d:07:b5:5e:7b:a8:
         da:4f:3d:4a:da:b5:7b:23:42:b6:1f:8a:09:cc:8f:e9:c4:83:
         77:09:a5:d1:bf:4c:f0:c5:e0:cb:f4:a4:2d:2e:d7:25:88:43:
         df:4a:ca:24:13:46:d6:40:d5:89:22:fd:ad:43:b5:53:3e:7c:
         71:62:07:7d:d7:08:96:04:4a:d9:7d:d6:32:c6:34:8f:cc:44:
         aa:c0:4a:d8:4f:39:c4:da:c1:05:aa:a4:a0:43:12:a2:0f:96:
         5d:83:b4:0b:25:7c:c9:09:9e:3e:59:74:fa:32:2f:d3:20:50:
         b7:35:fe:72:e1:36:bc:1e:10:db:a8:b0:33:8f:1a:c6:d9:65:
         2c:68:c1:b0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCicwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjAxNjNBUjExMC8GA1UEBRMoN0YxNjJBNTIxMTZEMjU2Q0Y1RDc0MTI5NzdCOEVB
OEE0RjJDQjlFMzAeFw0yNjEwMTUwMTM3NDNaFw0yNjEwMTcwMTM3NDNaMBgxFjAU
BgNVBAMTDTZhZDAyZTY3LWZkYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDs80TyiGObkiDovbTp9MLs8v67TZzfDUhE2g2yJyxxgaGDcBRULadh8XQ+
q7eTrV/0ONaVIkm4afP1Q972TVTzSqlQKlphwp6vR3xDGmRnSNzIemRZFw4+rWLG
PLYeKFtMzdZgR5PjDJmQawaMAgYSrjrlNMfyCFuFu6MPLLXifuBADHSPGV4RswL9
vbF6aefoBE+kMqWK5mNcUCnTQ4xrHvr7RsDEeUHx8dWR5oIYjgO8HfvYekbSu2fu
5MkZ7PufRh5lba/BzibNKgPyR+xquNa3OC954Vr0fmIsEokBYZfMIm2VnOXvNS9k
/CjOwnaw5OQLmUbc0kENTy0N+NH9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUOTfC
EDpm1BRcvJTY+VNQRyirYDYwHwYDVR0jBBgwFoAUfxYqUhFtJWz110Epd7jqik8s
ueMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwMTYzLzlEOTgyMEE0RkM5QTExRTlBNThCRDczREY4QUVBMjI4L2Z4WXFV
aEZ0Sld6MTEwRXBkN2pxaWs4c3VlTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2Z4WXFVaEZ0Sld6MTEwRXBkN2pxaWs4c3VlTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjAxNjMvOUQ5ODIwQTRGQzlBMTFFOUE1OEJENzNERjhBRUEy
MjgvZnhZcVVoRnRKV3oxMTBFcGQ3anFpazhzdWVNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBEapcC30URPTTTkyqhYlJLq6FX04VQ5Z9M
DtPNTeMJibYMNsHiaztEAzBcuPYDXWLaDv+bQ8DtF17hYwfkNgQVMkRAunrtCxPh
cbQD9XOI3TpomhpatdpQp5SwcsU5p7Hhr/o3JgVeOlCBY+JaDKJdirplKY7l5W09
B7Vee6jaTz1K2rV7I0K2H4oJzI/pxIN3CaXRv0zwxeDL9KQtLtcliEPfSsokE0bW
QNWJIv2tQ7VTPnxxYgd91wiWBErZfdYyxjSPzESqwErYTznE2sEFqqSgQxKiD5Zd
g7QLJXzJCZ4+WXT6Mi/TIFC3Nf5y4Ta8HhDbqLAzjxrG2WUsaMGw
-----END CERTIFICATE-----
Generated at Thu Oct 15 08:23:16 2026 by rpki-client