Error: rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
File:                     Wob5iKEjH4bJcjMShVh-z4ZL25A.mft (raw, json)
Hash identifier:          y2pbpxZWkFLS8y4cib/H1/FAVW0vkHnoW0PKXVa2gdE=
Subject key identifier:   F7:C8:38:17:17:17:7A:CC:41:77:D5:65:24:F1:2F:F0:F2:83:D1:42
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Certificate issuer:       /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial:       0A5D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
Manifest number:          0A54
Signing time:             Fri 04 Sep 2026 01:33:43 +0000
Manifest this update:     Fri 04 Sep 2026 01:33:43 +0000
Manifest next update:     Sun 06 Sep 2026 01:33:43 +0000
Files and hashes:         1: Wob5iKEjH4bJcjMShVh-z4ZL25A.crl (hash: wWBWeZmndLG1SkUSi12O32AgeB/T4h7VeoH82tppZ80=)
                          2: 22D54F2A873211F1A1DD25DBCE1D38B0.roa (hash: 6YJKt+6KEiWJEqvrJ2OOcpZGMxLBjGJJceHlPGGeI9A=)
                          3: CA99C59C873211F1921B7CDDCE1D38B0.roa (hash: J8mkXybFE9u2dG4g/6rMiX/R0vnwSK7ht7HLC5KmFUo=)
                          4: F7E20784873311F1B7E9E2E3CE1D38B0.roa (hash: z+CNLO3NbOZrGtfxZOkyGy0Et3xGLuxNkIJsF5sFrbs=)
                          5: 5F85225A873311F19C71D2DFCE1D38B0.roa (hash: FLClJViDm2ygpv43e3sB4wxskOHtddicfBdPxrJHMUo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 01:33:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2653 (0xa5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
        Validity
            Not Before: Sep  4 01:33:43 2026 GMT
            Not After : Sep  6 01:33:43 2026 GMT
        Subject: CN=6a9a1ff7-c7ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4e:1f:95:e6:84:fd:d4:9c:e6:8c:94:6c:cd:
                    c8:7d:f7:4e:05:29:6d:89:e5:78:b0:5b:74:36:1b:
                    10:cc:6c:04:5f:78:39:d2:55:cf:16:96:3c:93:d1:
                    24:0c:8b:75:f5:b1:2d:2b:81:e1:34:a0:1a:c0:2e:
                    55:e9:d7:d2:b5:da:64:35:a6:9a:f2:59:71:04:30:
                    80:e7:72:21:11:d2:dd:23:df:9a:a6:53:a4:0f:a0:
                    2f:f8:ef:a6:9f:37:73:77:6f:52:3a:55:26:46:20:
                    f4:72:e0:a0:ae:a8:fd:78:93:5c:3d:72:0d:12:8e:
                    29:20:09:4c:46:c3:3a:51:79:06:97:79:cf:76:2a:
                    bd:32:20:54:c1:e4:d7:53:63:f3:24:01:db:42:35:
                    34:91:c6:7d:61:54:c8:a5:1e:91:eb:63:ff:cd:70:
                    2e:ab:ea:c3:72:de:a7:62:47:09:52:69:ae:48:69:
                    b1:6e:2e:cb:29:59:e7:74:a5:33:2a:31:24:34:99:
                    b8:8d:25:69:e1:12:d2:f1:2c:7f:4a:b2:5b:be:9a:
                    a4:6f:64:11:6b:12:66:b3:f7:09:0a:6c:b7:a9:35:
                    04:1f:ec:66:a9:56:fb:89:b3:a6:cb:ce:4c:67:fa:
                    cd:e7:a5:14:d7:76:79:18:17:82:c6:11:14:72:10:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C8:38:17:17:17:7A:CC:41:77:D5:65:24:F1:2F:F0:F2:83:D1:42
            X509v3 Authority Key Identifier:
                keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f5:e2:55:12:ae:74:ce:e2:60:18:b3:17:8c:3f:20:22:96:
         69:84:a2:c2:f3:36:ad:84:23:5d:93:21:30:01:87:f9:22:85:
         73:25:89:29:41:ad:57:82:57:b9:02:e7:95:5d:98:99:0c:fe:
         67:3a:a1:1d:47:ae:58:b3:80:6f:4c:08:8a:e2:69:c9:e9:31:
         3e:4d:8b:1b:b2:e4:f0:11:93:78:5b:84:68:ee:cf:4b:41:03:
         36:33:8f:72:62:03:6e:3c:e1:46:15:0c:6a:41:75:d4:36:ee:
         28:49:da:4d:2f:33:16:59:2a:fd:7c:e7:34:59:fd:61:c2:87:
         35:da:4c:33:64:ed:7b:72:31:e5:6c:b0:77:c2:ae:2e:89:f2:
         59:2b:d1:6f:5c:a8:94:5d:98:2f:93:eb:d8:4b:f9:f6:0e:6c:
         74:83:b0:25:26:43:8a:c2:4a:6b:6c:b3:7f:3a:b3:ec:12:78:
         09:fa:9c:1a:27:d1:3e:6c:dd:f4:fd:be:c0:9d:b5:0b:93:e9:
         d2:03:75:e9:9f:6d:ca:70:3b:57:59:84:ef:ad:79:12:3c:d2:
         1e:09:64:13:f4:a9:64:9f:aa:dd:52:58:f3:59:56:e6:5c:e9:
         af:92:19:c7:9c:b8:fc:53:4b:c7:91:2e:38:80:c7:8d:32:34:
         bb:fb:2c:6b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCl0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExM0ZBRjExMC8GA1UEBRMoNUE4NkY5ODhBMTIzMUY4NkM5NzIzMzEyODU1ODdF
Q0Y4NjRCREI5MDAeFw0yNjA5MDQwMTMzNDNaFw0yNjA5MDYwMTMzNDNaMBgxFjAU
BgNVBAMTDTZhOWExZmY3LWM3ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDTh+V5oT91JzmjJRszch9904FKW2J5XiwW3Q2GxDMbARfeDnSVc8WljyT
0SQMi3X1sS0rgeE0oBrALlXp19K12mQ1ppryWXEEMIDnciER0t0j35qmU6QPoC/4
76afN3N3b1I6VSZGIPRy4KCuqP14k1w9cg0SjikgCUxGwzpReQaXec92Kr0yIFTB
5NdTY/MkAdtCNTSRxn1hVMilHpHrY//NcC6r6sNy3qdiRwlSaa5IabFuLsspWed0
pTMqMSQ0mbiNJWnhEtLxLH9Kslu+mqRvZBFrEmaz9wkKbLepNQQf7GapVvuJs6bL
zkxn+s3npRTXdnkYF4LGERRyEJ77AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU98g4
FxcXesxBd9VlJPEv8PKD0UIwHwYDVR0jBBgwFoAUWob5iKEjH4bJcjMShVh+z4ZL
25AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTNGL0NEREJDNEM4QzRENzExRTk4QTA3NjMyNUY4QUVBMjI4L1dvYjVp
S0VqSDRiSmNqTVNoVmgtejRaTDI1QS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dvYjVpS0VqSDRiSmNqTVNoVmgtejRaTDI1QS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkExM0YvQ0REQkM0QzhDNEQ3MTFFOThBMDc2MzI1RjhB
RUEyMjgvV29iNWlLRWpINGJKY2pNU2hWaC16NFpMMjVBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAN9eJVEq50zuJgGLMXjD8gIpZphKLC
8zathCNdkyEwAYf5IoVzJYkpQa1Xgle5AueVXZiZDP5nOqEdR65Ys4BvTAiK4mnJ
6TE+TYsbsuTwEZN4W4Ro7s9LQQM2M49yYgNuPOFGFQxqQXXUNu4oSdpNLzMWWSr9
fOc0Wf1hwoc12kwzZO17cjHlbLB3wq4uifJZK9FvXKiUXZgvk+vYS/n2Dmx0g7Al
JkOKwkprbLN/OrPsEngJ+pwaJ9E+bN30/b7AnbULk+nSA3Xpn23KcDtXWYTvrXkS
PNIeCWQT9Klkn6rdUljzWVbmXOmvkhnHnLj8U0vHkS44gMeNMjS7+yxr
-----END CERTIFICATE-----
Generated at Sat Sep 5 03:34:09 2026 by rpki-client