Error: rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
File:                     HN9pXb8nTSxpriwAwuTuF8mGqe0.mft (raw, json)
Hash identifier:          dVI0yyQQgZFCj0awfDfEQQX2fOoCkaHuhiLbzN4D52A=
Subject key identifier:   98:5B:D8:BF:21:43:65:F5:DE:FA:8D:A4:FB:2D:C6:54:CF:DD:A7:A3
Authority key identifier: 1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED
Certificate issuer:       /CN=F3615533AF/serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
Certificate serial:       0349
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
Manifest number:          0346
Signing time:             Thu 10 Sep 2026 04:13:51 +0000
Manifest this update:     Thu 10 Sep 2026 04:13:50 +0000
Manifest next update:     Sat 12 Sep 2026 04:13:50 +0000
Files and hashes:         1: HN9pXb8nTSxpriwAwuTuF8mGqe0.crl (hash: fBx5pIS4HqQF6lYRT7vsz7Q6unM2nMsWUcmG1wv/E8U=)
                          2: 3F026DEC295911EF85667FFF7CDC24C2.roa (hash: UJYsWwlxlQmHxfZyQVF2D+4Hav01PXVdMWO+z82CBbg=)
                          3: 08F6F89E295911EFAEB4ADFB7CDC24C2.roa (hash: ISQZsHLWpfTcF1N56rrCqt5O7oqCjXKgBNZGt9pf+XI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 04:13:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841 (0x349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615533AF, serialNumber=1CDF695DBF274D2C69AE2C00C2E4EE17C986A9ED
        Validity
            Not Before: Sep 10 04:13:50 2026 GMT
            Not After : Sep 12 04:13:50 2026 GMT
        Subject: CN=6aa22e7f-dd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:32:88:a5:e8:00:49:3e:37:46:ed:bc:24:04:
                    bc:c3:85:74:32:5b:05:13:bf:85:12:66:63:62:29:
                    9d:1b:76:2b:2a:02:3a:a4:df:e7:5c:c6:69:7c:f4:
                    8e:f9:51:2b:c8:73:e3:7e:b3:03:3b:97:a9:dc:c3:
                    2c:9c:9b:f5:1c:74:37:7c:5f:c6:09:19:90:b4:b8:
                    66:49:bc:cb:93:d5:bb:2b:05:57:bd:d0:2c:72:c6:
                    0a:c6:87:93:19:a2:82:fb:60:1f:ee:99:d1:30:b7:
                    bc:7e:d5:cd:6f:e3:54:06:6d:fb:98:20:b8:fc:b0:
                    78:d7:4a:6f:71:e7:10:00:da:96:3f:0e:63:67:71:
                    5d:b1:99:95:c9:3c:f0:5c:d7:a6:f2:0e:df:3b:c0:
                    4b:93:49:ed:32:95:f1:49:61:b2:d4:93:7a:f9:ea:
                    d4:24:ec:18:e0:10:77:dc:ed:e0:5d:ff:80:de:53:
                    3f:79:c1:52:68:83:5a:40:f7:f2:14:7e:a4:17:ea:
                    f2:a4:25:e5:81:31:f9:f4:1b:54:70:f1:06:0c:57:
                    79:8e:0a:e9:9a:1f:c9:f9:04:fe:6b:8c:2f:af:26:
                    ef:7e:f2:a8:1e:cf:0b:72:90:92:a4:c5:45:78:b0:
                    ea:70:23:1e:a5:57:54:1b:f5:00:74:26:12:c7:c4:
                    9d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5B:D8:BF:21:43:65:F5:DE:FA:8D:A4:FB:2D:C6:54:CF:DD:A7:A3
            X509v3 Authority Key Identifier:
                keyid:1C:DF:69:5D:BF:27:4D:2C:69:AE:2C:00:C2:E4:EE:17:C9:86:A9:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HN9pXb8nTSxpriwAwuTuF8mGqe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615533/D80AFE5C295711EFA79717F67CDC24C2/HN9pXb8nTSxpriwAwuTuF8mGqe0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:41:97:5c:9b:fe:33:a6:7a:3b:b0:0b:e1:89:5c:6a:0d:62:
         cd:b1:d3:56:56:4b:1f:c4:d0:50:e4:fe:22:41:cf:b3:a1:20:
         3d:5a:3e:91:d1:a2:c1:13:1b:48:19:2d:4b:12:bd:1e:4a:5a:
         39:8d:0e:13:03:d9:77:eb:d2:a1:b9:68:b4:7d:8b:3a:f3:6b:
         3e:79:8d:83:70:2a:27:77:f1:c1:73:17:43:7c:70:40:be:b1:
         17:cd:bf:b2:01:0d:ba:43:ed:9b:01:f3:ce:f7:e1:3a:32:dd:
         43:11:67:33:05:d7:fc:20:f5:92:cd:e3:0b:90:41:e2:be:da:
         58:36:bd:26:90:7e:5d:ad:38:11:90:11:13:67:c4:fc:8d:df:
         55:85:a2:a2:6e:ea:62:95:a3:9c:dc:97:d1:f4:98:9b:e2:64:
         7b:02:ae:6d:04:23:a6:dc:cf:17:67:7a:f8:94:9c:0b:41:37:
         02:61:0f:6f:6b:a8:45:75:5a:35:60:f9:03:1c:52:de:9b:51:
         87:ee:dd:d4:24:fb:7a:82:e1:f5:e5:ec:15:17:66:99:78:4d:
         08:e8:d9:e7:38:4e:f7:d7:4d:be:a8:a9:d4:5b:4e:33:af:5f:
         9a:e2:01:3b:a2:47:cc:a9:d8:55:79:96:39:78:ac:2c:da:70:
         3f:ac:0d:66
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTU1MzNBRjExMC8GA1UEBRMoMUNERjY5NURCRjI3NEQyQzY5QUUyQzAwQzJFNEVF
MTdDOTg2QTlFRDAeFw0yNjA5MTAwNDEzNTBaFw0yNjA5MTIwNDEzNTBaMBgxFjAU
BgNVBAMTDTZhYTIyZTdmLWRkNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKMoil6ABJPjdG7bwkBLzDhXQyWwUTv4USZmNiKZ0bdisqAjqk3+dcxml8
9I75USvIc+N+swM7l6ncwyycm/UcdDd8X8YJGZC0uGZJvMuT1bsrBVe90CxyxgrG
h5MZooL7YB/umdEwt7x+1c1v41QGbfuYILj8sHjXSm9x5xAA2pY/DmNncV2xmZXJ
PPBc16byDt87wEuTSe0ylfFJYbLUk3r56tQk7BjgEHfc7eBd/4DeUz95wVJog1pA
9/IUfqQX6vKkJeWBMfn0G1Rw8QYMV3mOCumaH8n5BP5rjC+vJu9+8qgezwtykJKk
xUV4sOpwIx6lV1Qb9QB0JhLHxJ0/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmFvY
vyFDZfXe+o2k+y3GVM/dp6MwHwYDVR0jBBgwFoAUHN9pXb8nTSxpriwAwuTuF8mG
qe0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1NTMzL0Q4MEFGRTVDMjk1NzExRUZBNzk3MTdGNjdDREMyNEMyL0hOOXBY
YjhuVFN4cHJpd0F3dVR1RjhtR3FlMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hOOXBYYjhuVFN4cHJpd0F3dVR1RjhtR3FlMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTU1MzMvRDgwQUZFNUMyOTU3MTFFRkE3OTcxN0Y2N0NE
QzI0QzIvSE45cFhiOG5UU3hwcml3QXd1VHVGOG1HcWUwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAdQZdcm/4zpno7sAvhiVxqDWLNsdNW
VksfxNBQ5P4iQc+zoSA9Wj6R0aLBExtIGS1LEr0eSlo5jQ4TA9l369KhuWi0fYs6
82s+eY2DcCond/HBcxdDfHBAvrEXzb+yAQ26Q+2bAfPO9+E6Mt1DEWczBdf8IPWS
zeMLkEHivtpYNr0mkH5drTgRkBETZ8T8jd9VhaKibupilaOc3JfR9Jib4mR7Aq5t
BCOm3M8XZ3r4lJwLQTcCYQ9va6hFdVo1YPkDHFLem1GH7t3UJPt6guH15ewVF2aZ
eE0I6NnnOE73102+qKnUW04zr1+a4gE7okfMqdhVeZY5eKws2nA/rA1m
-----END CERTIFICATE-----
Generated at Fri Sep 11 04:32:29 2026 by rpki-client