Error: rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
File:                     Upl4cSNfYM1xWncQ_9bi6kyI0po.mft (raw, json)
Hash identifier:          luti+4HiAN7rErptR/frmZ6rpcMwTu+hNHZ1XH4OwvU=
Subject key identifier:   1A:92:60:E6:38:0E:1E:FB:43:29:A7:B0:FD:AA:92:B2:50:9D:2E:FC
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Certificate issuer:       /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial:       066A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
Manifest number:          065D
Signing time:             Mon 21 Sep 2026 02:45:14 +0000
Manifest this update:     Mon 21 Sep 2026 02:45:13 +0000
Manifest next update:     Wed 23 Sep 2026 02:45:13 +0000
Files and hashes:         1: Upl4cSNfYM1xWncQ_9bi6kyI0po.crl (hash: RLP/I49RZW0to9OlHqe9ajqwheW0lhPsfELmPkbP3tc=)
                          2: B20CCB9E797911F1826E3FBFCE1D38B0.roa (hash: jFtBWD8b4/pcM12zi7gI3mC1xmb0s5cfDLKXIlCYkhg=)
                          3: 0960CA42BA3211F0A0CE52AFDAE4EC9C.roa (hash: /hSkccke2QwuiXgH6leYqgSqL0lMDfWuf3RDrn5+nSY=)
                          4: E6E760728BFD11F1BDE9D0A1CE1D38B0.roa (hash: Lra5L5tTGpW913Q+gWlmHX0eWlkSz0Num4hTY/9IHRg=)
                          5: 498039F28BFE11F1AEC9F8A5CE1D38B0.roa (hash: 4/w31jgZKaDe5nOxHUMZ2QljXJcUdfkoVW7DzGpwi9I=)
                          6: 72295C0E8BFD11F18CEA8BA1CE1D38B0.roa (hash: SRCUuBI/JjzAV7yK6yEAaPy+LUAUUyg5gCuWR+kBW74=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1642 (0x66a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
        Validity
            Not Before: Sep 21 02:45:13 2026 GMT
            Not After : Sep 23 02:45:13 2026 GMT
        Subject: CN=6ab09a3a-05d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8f:41:c3:73:57:6c:7a:e5:0c:3a:2c:fe:2c:
                    91:5e:14:63:7a:d5:2e:cd:cf:23:c9:df:2e:87:3c:
                    e0:3d:c1:27:5d:9c:25:f3:b6:b3:ba:c8:78:87:cf:
                    4a:b7:af:9e:a8:6b:df:48:9e:8f:8c:eb:de:f5:1e:
                    76:80:83:38:6e:30:b4:c2:3d:28:7c:61:5d:45:48:
                    00:f6:bb:70:50:10:bd:6b:46:e1:70:66:06:04:8e:
                    12:bb:e6:66:af:11:cd:cf:2b:7a:a2:cd:79:c2:9c:
                    d4:01:35:7e:36:af:d6:2c:a0:58:8b:82:ff:d4:b9:
                    b2:4b:77:c0:e4:ce:d4:aa:ff:f7:9e:12:8a:88:51:
                    db:65:97:81:e1:46:14:c2:45:47:b3:a9:99:e4:aa:
                    9d:4f:f7:3f:a4:1f:f4:57:19:f5:28:fa:44:24:61:
                    f7:09:bf:14:39:0f:37:7c:a1:7a:3a:19:a5:23:9b:
                    01:ef:53:77:f6:ab:7c:0e:93:34:fa:96:98:b5:21:
                    9e:02:da:b2:20:57:fe:fe:56:19:a6:93:7c:ff:34:
                    2a:12:f2:fa:d4:a7:c3:b1:eb:8b:bc:ec:48:04:0e:
                    c6:b8:22:28:80:90:b6:ff:8c:cf:aa:91:76:de:69:
                    df:fa:fa:74:48:46:71:7c:4f:3b:67:7a:95:e0:ba:
                    ec:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:92:60:E6:38:0E:1E:FB:43:29:A7:B0:FD:AA:92:B2:50:9D:2E:FC
            X509v3 Authority Key Identifier:
                keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:63:a1:b5:4e:f4:8f:d0:62:2a:d9:d0:d7:6b:85:9c:48:1c:
         89:a9:91:a6:c8:6f:0f:9d:db:ce:fd:cf:da:f9:44:88:32:7c:
         ee:bb:ab:8c:5f:be:39:25:30:6d:f1:85:67:d8:2a:bd:64:00:
         e0:55:4c:b2:07:db:80:6c:37:6f:07:38:ee:89:f1:89:82:70:
         29:82:47:6a:66:fc:2a:01:7c:62:a3:d6:12:87:6d:21:95:7c:
         40:f6:19:3d:be:9d:fd:ae:53:6d:bc:b4:7b:2c:e9:5f:dd:85:
         29:71:3d:c6:62:b6:c7:ac:4d:a2:79:e1:49:77:53:d3:f6:e7:
         5e:09:8f:05:75:5e:43:8f:6a:63:ef:9d:13:72:7a:6b:b4:0d:
         f9:f5:b0:0f:d1:8e:e2:bf:be:f2:80:3c:1a:e5:ef:85:63:10:
         2b:9c:42:dd:e5:e4:6c:8b:cd:94:d3:1a:75:cf:f4:5f:3c:c1:
         56:3c:b2:86:17:04:00:56:15:af:38:2c:0d:1c:1b:66:58:0b:
         9d:6d:fb:78:85:cb:22:48:5a:73:3f:19:7d:06:8e:7f:fc:01:
         f0:9d:c9:74:4c:a2:44:a2:ad:b4:97:cb:51:ee:d8:77:91:6b:
         be:ca:70:f1:40:95:b6:e2:1c:6f:7e:22:56:3b:59:be:34:50:
         f9:05:60:13
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBmowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjdGMjFBRjExMC8GA1UEBRMoNTI5OTc4NzEyMzVGNjBDRDcxNUE3NzEwRkZENkUy
RUE0Qzg4RDI5QTAeFw0yNjA5MjEwMjQ1MTNaFw0yNjA5MjMwMjQ1MTNaMBgxFjAU
BgNVBAMTDTZhYjA5YTNhLTA1ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCj0HDc1dseuUMOiz+LJFeFGN61S7NzyPJ3y6HPOA9wSddnCXztrO6yHiH
z0q3r56oa99Ino+M6971HnaAgzhuMLTCPSh8YV1FSAD2u3BQEL1rRuFwZgYEjhK7
5mavEc3PK3qizXnCnNQBNX42r9YsoFiLgv/UubJLd8DkztSq//eeEoqIUdtll4Hh
RhTCRUezqZnkqp1P9z+kH/RXGfUo+kQkYfcJvxQ5Dzd8oXo6GaUjmwHvU3f2q3wO
kzT6lpi1IZ4C2rIgV/7+Vhmmk3z/NCoS8vrUp8Ox64u87EgEDsa4IiiAkLb/jM+q
kXbead/6+nRIRnF8TztnepXguuxPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGpJg
5jgOHvtDKaew/aqSslCdLvwwHwYDVR0jBBgwFoAUUpl4cSNfYM1xWncQ/9bi6kyI
0powDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY3RjIxLzM1NUQ3MzdFRTcwMDExRUM5Qzg0RDdCOUYxMjIyNDY4L1VwbDRj
U05mWU0xeFduY1FfOWJpNmt5STBwby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1VwbDRjU05mWU0xeFduY1FfOWJpNmt5STBwby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjdGMjEvMzU1RDczN0VFNzAwMTFFQzlDODREN0I5RjEy
MjI0NjgvVXBsNGNTTmZZTTF4V25jUV85Ymk2a3lJMHBvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfY6G1TvSP0GIq2dDXa4WcSByJqZGm
yG8PndvO/c/a+USIMnzuu6uMX745JTBt8YVn2Cq9ZADgVUyyB9uAbDdvBzjuifGJ
gnApgkdqZvwqAXxio9YSh20hlXxA9hk9vp39rlNtvLR7LOlf3YUpcT3GYrbHrE2i
eeFJd1PT9udeCY8FdV5Dj2pj750TcnprtA359bAP0Y7iv77ygDwa5e+FYxArnELd
5eRsi82U0xp1z/RfPMFWPLKGFwQAVhWvOCwNHBtmWAudbft4hcsiSFpzPxl9Bo5/
/AHwncl0TKJEoq20l8tR7th3kWu+ynDxQJW24hxvfiJWO1m+NFD5BWAT
-----END CERTIFICATE-----
Generated at Mon Sep 21 14:58:40 2026 by rpki-client