Error: rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
File:                     VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft (raw, json)
Hash identifier:          E2QAKHtYU84bNHEclT3cTiEXU3KBCQ4ZTmMfgOYc1sY=
Subject key identifier:   E7:4F:7E:1A:F4:7E:FA:CC:EC:56:E8:78:DF:DF:BD:2E:3F:8A:EF:DB
Authority key identifier: 55:DB:CB:58:86:75:06:F7:A1:3E:09:7E:3D:35:9A:DD:62:70:B1:75
Certificate issuer:       /CN=F3623AE4AR/serialNumber=55DBCB58867506F7A13E097E3D359ADD6270B175
Certificate serial:       02C2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
Manifest number:          02C1
Signing time:             Thu 29 Oct 2026 04:40:07 +0000
Manifest this update:     Thu 29 Oct 2026 04:40:06 +0000
Manifest next update:     Sat 31 Oct 2026 04:40:06 +0000
Files and hashes:         1: VdvLWIZ1BvehPgl-PTWa3WJwsXU.crl (hash: iVEdSIPK06MVZb1JMz9rWwesKxrNHtDjSHJaYdE5jP8=)
                          2: 0938C110B27111EFB0304D44762E951A.roa (hash: ay75fj6Xo/K8dMqIw1e1aVOA92l5Vt1QYzAgQ5lPJF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
                          rsync://rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623AE4AR, serialNumber=55DBCB58867506F7A13E097E3D359ADD6270B175
        Validity
            Not Before: Oct 29 04:40:06 2026 GMT
            Not After : Oct 31 04:40:06 2026 GMT
        Subject: CN=6ae2ce27-44f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:7f:4f:69:26:0a:66:92:bb:ad:56:1d:e8:
                    0d:99:7b:ff:e1:80:07:53:03:02:10:5a:55:0a:ec:
                    f6:b9:8e:ce:65:e5:40:5a:cd:69:56:ce:77:35:0e:
                    87:46:19:a6:9f:03:85:fa:82:b8:1f:ce:d3:a7:47:
                    b0:0c:99:8e:67:a4:e4:b8:e5:ac:d0:68:bd:a5:ef:
                    e1:a6:e1:7e:e8:f1:1d:4a:80:4c:ca:96:bd:75:36:
                    2e:0b:1e:1b:4a:60:57:f4:df:a7:90:43:ff:70:b1:
                    2e:31:dd:02:fb:56:d6:f2:15:00:5d:4b:63:6e:5b:
                    68:1b:60:fe:e5:ac:db:6b:2c:ef:f8:b2:56:eb:87:
                    37:71:93:fc:ca:f9:04:ce:f2:47:5f:b1:40:91:f8:
                    06:5c:28:90:6c:59:a9:fd:6f:3b:b6:84:4e:bb:4c:
                    9f:08:0d:c6:52:c2:aa:de:31:e2:5c:eb:1a:ac:a7:
                    9b:38:b5:40:61:0b:81:38:66:9c:4b:b8:66:e2:d1:
                    86:5c:84:14:86:0c:42:2c:27:4f:f2:bd:54:17:b5:
                    e9:8f:bc:31:80:2e:83:4a:53:d9:c1:12:b7:84:10:
                    f6:a2:6c:ed:60:5f:54:c5:d5:e8:2d:93:f4:fc:d8:
                    1d:04:3b:9f:ac:52:d0:3d:0c:ba:98:ab:9f:46:d4:
                    7c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4F:7E:1A:F4:7E:FA:CC:EC:56:E8:78:DF:DF:BD:2E:3F:8A:EF:DB
            X509v3 Authority Key Identifier:
                keyid:55:DB:CB:58:86:75:06:F7:A1:3E:09:7E:3D:35:9A:DD:62:70:B1:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:d2:90:f7:b6:26:47:cf:bd:83:71:4b:35:c1:6e:8c:e6:
         6e:bd:07:f3:34:45:bf:7c:59:80:ab:aa:41:24:25:82:1a:90:
         11:97:7d:68:74:53:f1:ae:9e:79:5e:d4:fc:e6:9c:0b:da:7f:
         42:65:5e:15:52:9d:20:e1:44:89:84:5b:fa:78:9d:2f:81:02:
         45:9b:a2:49:6b:a4:b5:fa:1e:98:b4:df:ea:22:95:d4:2e:92:
         38:2b:3b:24:57:66:ca:6a:ce:0e:9c:80:9e:7f:43:ea:e4:37:
         d3:c6:d4:14:33:97:a6:27:cf:0f:07:94:d4:f5:8b:24:6c:28:
         0c:5c:d7:59:d2:11:74:46:f0:eb:a6:80:7c:ae:6b:34:99:61:
         b5:aa:87:6f:fd:db:6b:cb:00:fc:0c:57:30:fb:ae:a9:01:78:
         52:39:8e:a1:05:67:22:4c:cf:34:70:c4:0e:57:fe:f2:f7:8f:
         88:66:6e:37:fd:19:8a:3a:0b:4e:3b:4f:28:6e:d6:10:ef:62:
         f0:7a:02:67:6e:ac:df:dc:99:08:87:dd:5c:a5:4d:69:1d:71:
         b9:79:2c:12:17:4b:94:c8:7a:e7:80:05:f5:54:4f:f2:f7:0b:
         fd:76:a9:05:a3:44:58:60:cf:3b:cb:8a:9d:4a:6f:1c:2e:99:
         b1:16:58:81
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjNBRTRBUjExMC8GA1UEBRMoNTVEQkNCNTg4Njc1MDZGN0ExM0UwOTdFM0QzNTlB
REQ2MjcwQjE3NTAeFw0yNjEwMjkwNDQwMDZaFw0yNjEwMzEwNDQwMDZaMBgxFjAU
BgNVBAMTDTZhZTJjZTI3LTQ0ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCign9PaSYKZpK7rVYd6A2Ze//hgAdTAwIQWlUK7Pa5js5l5UBazWlWznc1
DodGGaafA4X6grgfztOnR7AMmY5npOS45azQaL2l7+Gm4X7o8R1KgEzKlr11Ni4L
HhtKYFf036eQQ/9wsS4x3QL7VtbyFQBdS2NuW2gbYP7lrNtrLO/4slbrhzdxk/zK
+QTO8kdfsUCR+AZcKJBsWan9bzu2hE67TJ8IDcZSwqreMeJc6xqsp5s4tUBhC4E4
ZpxLuGbi0YZchBSGDEIsJ0/yvVQXtemPvDGALoNKU9nBEreEEPaibO1gX1TF1egt
k/T82B0EO5+sUtA9DLqYq59G1HznAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU509+
GvR++szsVuh439+9Lj+K79swHwYDVR0jBBgwFoAUVdvLWIZ1BvehPgl+PTWa3WJw
sXUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIzQUU0L0RDNzc2MzJBQjI3MDExRUY5MUYyMkY0Mjc2MkU5NTFBL1ZkdkxX
SVoxQnZlaFBnbC1QVFdhM1dKd3NYVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1ZkdkxXSVoxQnZlaFBnbC1QVFdhM1dKd3NYVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjNBRTQvREM3NzYzMkFCMjcwMTFFRjkxRjIyRjQyNzYyRTk1
MUEvVmR2TFdJWjFCdmVoUGdsLVBUV2EzV0p3c1hVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC7d9KQ97YmR8+9g3FLNcFujOZuvQfzNEW/
fFmAq6pBJCWCGpARl31odFPxrp55XtT85pwL2n9CZV4VUp0g4USJhFv6eJ0vgQJF
m6JJa6S1+h6YtN/qIpXULpI4KzskV2bKas4OnICef0Pq5DfTxtQUM5emJ88PB5TU
9YskbCgMXNdZ0hF0RvDrpoB8rms0mWG1qodv/dtrywD8DFcw+66pAXhSOY6hBWci
TM80cMQOV/7y94+IZm43/RmKOgtOO08obtYQ72LwegJnbqzf3JkIh91cpU1pHXG5
eSwSF0uUyHrngAX1VE/y9wv9dqkFo0RYYM87y4qdSm8cLpmxFliB
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:56:58 2026 by rpki-client