Error: rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
File:                     JPTjVN3eyJE4I7D5JAelNKvz-YI.mft (raw, json)
Hash identifier:          bYSEir5wh4W26DS5zknXzhFPqxnXeqJxT56kY9xB4jY=
Subject key identifier:   D3:FF:8F:16:29:02:38:7A:0E:FF:7A:BE:BC:82:3F:AD:2C:3A:AF:05
Authority key identifier: 24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82
Certificate issuer:       /CN=F361E497AF/serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
Certificate serial:       0665
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
Manifest number:          065D
Signing time:             Sun 25 Oct 2026 02:49:23 +0000
Manifest this update:     Sun 25 Oct 2026 02:49:22 +0000
Manifest next update:     Tue 27 Oct 2026 02:49:22 +0000
Files and hashes:         1: JPTjVN3eyJE4I7D5JAelNKvz-YI.crl (hash: aAG8DekpirtpQJVZUizrRMwnchFDbufBAeNLRX+0WgQ=)
                          2: 557664C6194311F1B11A7BD2DAE4EC9C.roa (hash: yplmAdthFwqQebNAnAE5zqAIX5/+jQBgiU7HKJRSzR0=)
                          3: 965BF5A6194211F18E533FCEDAE4EC9C.roa (hash: W9iQ9DD/t+SP2leOlzqvnE8SvkIPORkC0rbjeQakpwg=)
                          4: 3909DF84194311F1967206D1DAE4EC9C.roa (hash: LHcL0cV+KONw4V1xSlrim2xW+5USwBAGMby3PnPtDBY=)
                          5: 19A88EA6194311F185CD9ACEDAE4EC9C.roa (hash: iT/wmFfprlQBX8zJwKiHwKKBJB8V5gDATvMI5LFFEYU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E497AF, serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
        Validity
            Not Before: Oct 25 02:49:22 2026 GMT
            Not After : Oct 27 02:49:22 2026 GMT
        Subject: CN=6add6e33-ae18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fa:4d:2a:82:53:8a:68:6e:fe:9f:ff:6a:d7:
                    a4:03:03:1f:1b:41:a9:a8:70:de:75:de:94:0f:e7:
                    c2:ba:3b:bf:68:8b:09:cc:aa:ac:4f:0d:e1:d5:96:
                    1e:28:39:20:77:b2:8a:9c:dc:d6:56:e4:75:b5:f3:
                    68:66:21:45:b5:b6:bd:93:ea:a7:1d:00:83:ba:f7:
                    8e:8c:e6:6c:51:25:fd:dd:46:5c:d1:7d:57:90:86:
                    c6:d1:79:59:f9:20:c5:0c:0a:22:ae:4a:c6:9e:66:
                    ba:5d:ec:34:e9:5d:48:15:b4:1d:7f:bd:87:ed:ad:
                    b6:50:bd:97:49:69:e9:59:45:63:0f:5e:d6:fb:5f:
                    ab:12:59:47:29:8e:08:e0:aa:e3:00:2f:ed:91:0f:
                    3b:2e:ad:43:6e:9b:de:9b:cd:ba:d1:35:17:4b:58:
                    c3:cf:6e:32:e2:67:ba:8f:fc:c2:74:94:8e:4e:ea:
                    5a:0b:98:8a:76:56:48:93:31:3b:5d:96:18:91:3a:
                    cf:76:34:63:63:96:e4:64:ef:bd:97:ab:a3:02:bf:
                    c0:35:4a:27:d5:d8:be:ef:be:0b:1c:91:97:c0:87:
                    0c:d1:4b:83:5d:23:e5:61:80:34:c6:01:8e:b8:bd:
                    e9:9d:16:fe:c4:e6:10:1a:23:91:d7:9b:b2:d2:aa:
                    ce:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FF:8F:16:29:02:38:7A:0E:FF:7A:BE:BC:82:3F:AD:2C:3A:AF:05
            X509v3 Authority Key Identifier:
                keyid:24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:a7:d0:61:96:06:91:35:26:5a:28:8d:94:01:0d:f0:42:e8:
         35:e7:76:d3:c2:c6:f3:8a:56:af:40:ff:fb:ae:2d:b7:28:c4:
         67:05:18:12:6a:72:c9:0c:13:ac:07:13:48:31:87:68:8e:f4:
         aa:42:bd:2f:4e:38:69:b4:65:da:3f:9c:dd:53:cc:45:fb:95:
         76:23:71:87:48:36:7e:d9:92:57:a2:56:fa:dd:dc:a4:3e:b6:
         f0:ad:7e:5a:07:9f:ae:f3:f7:1f:5f:74:1e:c2:59:20:f6:e9:
         fa:0c:70:e5:5d:fe:0e:eb:9d:bb:2d:77:c8:c5:d9:91:dc:2a:
         58:33:ed:c1:0b:3a:5d:d8:8e:35:a1:09:e6:fd:ab:1e:78:60:
         66:ab:45:7b:27:be:46:34:20:2f:37:93:ad:f6:3b:b7:c9:b1:
         f6:21:db:f0:e9:95:ff:32:62:a9:ff:2d:c4:4a:f3:8e:db:52:
         0b:06:97:27:88:61:9e:28:83:6d:d6:3e:0d:6e:08:c6:de:bb:
         01:30:32:7e:0f:9a:01:23:c7:c0:20:0e:1f:d7:2e:26:d4:79:
         aa:8b:80:9c:83:64:81:47:81:c7:5e:7a:7f:2f:53:9e:57:1a:
         13:d7:de:43:14:6e:ed:bc:83:0a:1d:fd:fb:a9:7b:d4:bf:4f:
         79:b1:55:ac
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBmUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUU0OTdBRjExMC8GA1UEBRMoMjRGNEUzNTRERERFQzg5MTM4MjNCMEY5MjQwN0E1
MzRBQkYzRjk4MjAeFw0yNjEwMjUwMjQ5MjJaFw0yNjEwMjcwMjQ5MjJaMBgxFjAU
BgNVBAMTDTZhZGQ2ZTMzLWFlMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC++k0qglOKaG7+n/9q16QDAx8bQamocN513pQP58K6O79oiwnMqqxPDeHV
lh4oOSB3soqc3NZW5HW182hmIUW1tr2T6qcdAIO6946M5mxRJf3dRlzRfVeQhsbR
eVn5IMUMCiKuSsaeZrpd7DTpXUgVtB1/vYftrbZQvZdJaelZRWMPXtb7X6sSWUcp
jgjgquMAL+2RDzsurUNum96bzbrRNRdLWMPPbjLiZ7qP/MJ0lI5O6loLmIp2VkiT
MTtdlhiROs92NGNjluRk772Xq6MCv8A1SifV2L7vvgsckZfAhwzRS4NdI+VhgDTG
AY64vemdFv7E5hAaI5HXm7LSqs6FAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0/+P
FikCOHoO/3q+vII/rSw6rwUwHwYDVR0jBBgwFoAUJPTjVN3eyJE4I7D5JAelNKvz
+YIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFFNDk3LzcwODE3NkFBRjkzMjExRUM4OERCNjQ4Q0YxMjIyNDY4L0pQVGpW
TjNleUpFNEk3RDVKQWVsTkt2ei1ZSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pQVGpWTjNleUpFNEk3RDVKQWVsTkt2ei1ZSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUU0OTcvNzA4MTc2QUFGOTMyMTFFQzg4REI2NDhDRjEy
MjI0NjgvSlBUalZOM2V5SkU0STdENUpBZWxOS3Z6LVlJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCfp9BhlgaRNSZaKI2UAQ3wQug153bT
wsbzilavQP/7ri23KMRnBRgSanLJDBOsBxNIMYdojvSqQr0vTjhptGXaP5zdU8xF
+5V2I3GHSDZ+2ZJXolb63dykPrbwrX5aB5+u8/cfX3Qewlkg9un6DHDlXf4O6527
LXfIxdmR3CpYM+3BCzpd2I41oQnm/aseeGBmq0V7J75GNCAvN5Ot9ju3ybH2Idvw
6ZX/MmKp/y3ESvOO21ILBpcniGGeKINt1j4NbgjG3rsBMDJ+D5oBI8fAIA4f1y4m
1Hmqi4Ccg2SBR4HHXnp/L1OeVxoT195DFG7tvIMKHf37qXvUv095sVWs
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:34:01 2026 by rpki-client