Error: rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
File:                     Qp9woBorWSL-60vwyD1zxfV08l0.mft (raw, json)
Hash identifier:          TqjWk+x2H33Ripp8mkZ4kGEA8H0sblbykhNmO8LQues=
Subject key identifier:   CC:46:26:49:99:2C:71:F8:F9:57:8A:07:5D:A7:15:06:AC:34:78:E0
Authority key identifier: 42:9F:70:A0:1A:2B:59:22:FE:EB:4B:F0:C8:3D:73:C5:F5:74:F2:5D
Certificate issuer:       /CN=F36F8B97AF/serialNumber=429F70A01A2B5922FEEB4BF0C83D73C5F574F25D
Certificate serial:       0744
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qp9woBorWSL-60vwyD1zxfV08l0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
Manifest number:          0740
Signing time:             Sun 11 Oct 2026 02:30:05 +0000
Manifest this update:     Sun 11 Oct 2026 02:30:04 +0000
Manifest next update:     Tue 13 Oct 2026 02:30:04 +0000
Files and hashes:         1: Qp9woBorWSL-60vwyD1zxfV08l0.crl (hash: iA7XaZwmIqSGP8zDJN5Hu1ALl4YkkU5JgZtkL3GKZhg=)
                          2: FD4DB548A1BF11EFA39151A0762E951A.roa (hash: jNJWeITwxu0vczeduFKEplO/t2/G8EFVwbsdEOzx9y0=)
                          3: 5813D9640FB411F0A6B56DA0762E951A.roa (hash: 2Q+hoGwNUDdoOl21mzLdpEGQumgusRGF7qozk0hKNmw=)
                          4: BAA0E2DEA1B411EFA1EE2F5D762E951A.roa (hash: K1xKU9htAsSiqeoEzSyp58rJTSDbVeGSEYylDFoKes4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qp9woBorWSL-60vwyD1zxfV08l0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8B97AF, serialNumber=429F70A01A2B5922FEEB4BF0C83D73C5F574F25D
        Validity
            Not Before: Oct 11 02:30:04 2026 GMT
            Not After : Oct 13 02:30:04 2026 GMT
        Subject: CN=6acaf4ad-89c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8d:c8:53:00:1a:5a:bc:df:49:2c:5a:74:f4:
                    92:9c:f9:de:ec:10:aa:37:05:3e:2c:7d:17:99:b6:
                    a6:1b:23:d2:e4:99:2a:9f:fd:ae:a8:2d:2a:b5:a1:
                    f8:9b:49:6d:fd:a2:93:58:15:33:61:c7:06:e2:80:
                    16:26:ed:e4:a3:7f:d0:d0:df:e8:ce:23:51:5e:b7:
                    e0:cd:2f:fd:36:db:ac:f3:86:27:f3:18:de:84:ba:
                    e1:07:7d:80:77:37:d3:46:9e:69:0d:bb:59:5a:4e:
                    99:1a:6d:c3:2d:a8:1d:04:20:46:07:a7:4f:ff:58:
                    50:aa:da:4f:d0:37:1b:e9:48:25:d1:1e:b8:32:2d:
                    99:55:59:b2:e4:d3:e8:43:1c:8d:f9:d5:91:c5:c7:
                    c1:e6:9a:47:95:c7:07:5a:f9:26:a9:0d:33:2f:1f:
                    85:2a:dc:5e:b3:7f:7d:4c:53:65:7c:b0:1e:85:98:
                    c6:33:f9:fa:bd:d4:41:b2:87:18:f0:97:4a:b5:04:
                    27:55:77:89:09:96:5c:43:81:b9:09:f0:bc:ae:b2:
                    e9:f1:83:70:0f:7f:85:03:97:0c:25:ac:4d:7a:57:
                    4a:6c:1a:ee:4b:7b:23:09:00:29:ed:ce:2c:19:9a:
                    75:84:cb:8b:4e:16:71:ca:ae:52:ac:70:d7:57:7b:
                    04:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:46:26:49:99:2C:71:F8:F9:57:8A:07:5D:A7:15:06:AC:34:78:E0
            X509v3 Authority Key Identifier:
                keyid:42:9F:70:A0:1A:2B:59:22:FE:EB:4B:F0:C8:3D:73:C5:F5:74:F2:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qp9woBorWSL-60vwyD1zxfV08l0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8B97/E559EB4C370411EC9F5EF526D8A014CE/Qp9woBorWSL-60vwyD1zxfV08l0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:9c:ea:13:f8:ba:f5:b6:7c:e7:7e:71:91:d5:01:e9:92:0d:
         26:16:80:d9:f1:94:6e:e3:f8:4f:c4:5d:3c:33:4c:39:17:ef:
         f5:8a:ce:2c:54:8c:88:51:9a:c7:50:74:93:b4:51:dc:76:86:
         fc:64:37:e5:cf:0b:67:fc:bc:78:58:d1:89:5e:2a:02:e3:58:
         28:32:7c:f7:b2:26:49:83:53:b9:49:78:3f:d9:89:61:d0:ea:
         94:06:33:a8:77:3f:b8:89:3c:a4:29:19:ef:81:79:37:04:b9:
         f2:ec:6f:1c:91:13:5f:50:5f:e9:66:71:77:1b:98:de:3e:64:
         8e:c5:b6:75:8a:74:af:81:e3:6c:57:35:3d:2e:ad:ef:34:c0:
         3c:aa:68:e9:c0:a8:38:e5:da:1a:05:8a:a8:40:cb:61:dd:40:
         d1:32:d1:99:61:b7:75:37:d9:a3:42:68:67:18:17:2e:d1:49:
         e2:e7:a6:73:36:23:3f:3e:7d:ed:bb:c3:6b:ed:52:b2:54:21:
         90:66:40:99:49:26:93:9b:ef:1e:1a:f2:f7:d4:47:2c:60:e0:
         09:56:54:f3:36:e3:09:6e:78:43:b9:3a:f4:19:ef:4b:16:1d:
         56:f8:53:8d:fa:7e:af:4b:ee:a2:ff:12:3f:89:90:d6:21:0e:
         64:5f:0c:05
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB0QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhCOTdBRjExMC8GA1UEBRMoNDI5RjcwQTAxQTJCNTkyMkZFRUI0QkYwQzgzRDcz
QzVGNTc0RjI1RDAeFw0yNjEwMTEwMjMwMDRaFw0yNjEwMTMwMjMwMDRaMBgxFjAU
BgNVBAMTDTZhY2FmNGFkLTg5YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrjchTABpavN9JLFp09JKc+d7sEKo3BT4sfReZtqYbI9LkmSqf/a6oLSq1
ofibSW39opNYFTNhxwbigBYm7eSjf9DQ3+jOI1Fet+DNL/0226zzhifzGN6EuuEH
fYB3N9NGnmkNu1laTpkabcMtqB0EIEYHp0//WFCq2k/QNxvpSCXRHrgyLZlVWbLk
0+hDHI351ZHFx8HmmkeVxwda+SapDTMvH4Uq3F6zf31MU2V8sB6FmMYz+fq91EGy
hxjwl0q1BCdVd4kJllxDgbkJ8Lyusunxg3APf4UDlwwlrE16V0psGu5LeyMJACnt
ziwZmnWEy4tOFnHKrlKscNdXewSRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzEYm
SZkscfj5V4oHXacVBqw0eOAwHwYDVR0jBBgwFoAUQp9woBorWSL+60vwyD1zxfV0
8l0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4Qjk3L0U1NTlFQjRDMzcwNDExRUM5RjVFRjUyNkQ4QTAxNENFL1FwOXdv
Qm9yV1NMLTYwdnd5RDF6eGZWMDhsMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FwOXdvQm9yV1NMLTYwdnd5RDF6eGZWMDhsMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjhCOTcvRTU1OUVCNEMzNzA0MTFFQzlGNUVGNTI2RDhB
MDE0Q0UvUXA5d29Cb3JXU0wtNjB2d3lEMXp4ZlYwOGwwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAknOoT+Lr1tnznfnGR1QHpkg0mFoDZ
8ZRu4/hPxF08M0w5F+/1is4sVIyIUZrHUHSTtFHcdob8ZDflzwtn/Lx4WNGJXioC
41goMnz3siZJg1O5SXg/2Ylh0OqUBjOodz+4iTykKRnvgXk3BLny7G8ckRNfUF/p
ZnF3G5jePmSOxbZ1inSvgeNsVzU9Lq3vNMA8qmjpwKg45doaBYqoQMth3UDRMtGZ
Ybd1N9mjQmhnGBcu0Uni56ZzNiM/Pn3tu8Nr7VKyVCGQZkCZSSaTm+8eGvL31Ecs
YOAJVlTzNuMJbnhDuTr0Ge9LFh1W+FON+n6vS+6i/xI/iZDWIQ5kXwwF
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:25:33 2026 by rpki-client