Error: rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
File:                     Y-C7azQzzV1xpCsBab2wHiDkVX8.mft (raw, json)
Hash identifier:          2IVlR6l1SCQT3n6BpUb6+vCdhv8BpEXQoa503koNEC0=
Subject key identifier:   18:E8:87:EA:EE:6A:31:A2:08:11:0C:67:5E:0C:C9:69:90:66:4A:8A
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Certificate issuer:       /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial:       0844
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
Manifest number:          0829
Signing time:             Tue 27 Oct 2026 02:05:51 +0000
Manifest this update:     Tue 27 Oct 2026 02:05:50 +0000
Manifest next update:     Thu 29 Oct 2026 02:05:50 +0000
Files and hashes:         1: Y-C7azQzzV1xpCsBab2wHiDkVX8.crl (hash: oeAiVPDsOnEU/EIxlqGKL3/EpRy2QkDc2GTYOQ1lcKs=)
                          2: 135920B0A27811F19D4416ACCE1D38B0.roa (hash: fmhmLXMYa8q81d6P+YONgMCa8MOES+3p9rjxKAsAxKE=)
                          3: 022F32CA9CCB11EFAAC38E52762E951A.roa (hash: rD0syBKiL7c261Mu8WhV/kxThDTjGQI8fG8xABHRfiA=)
                          4: BC030D72390311F18A96EAA2CE1D38B0.roa (hash: WYyd6Ed/wv8PPQDjgs5+xHAluyEuiQjLMAh/g0BWSQo=)
                          5: FCF5EF1CA27511F18A84231ECF1D38B0.roa (hash: d+sXQ3kLzvC3tMq7aiF8AqKw7el8W8Oo7Tg/AwfUeeA=)
                          6: 3E5CAEF89CCB11EF96936E54762E951A.roa (hash: NaL+5IqvHfzKEob4MeRapqEPczk8TUD17OZ5TfT8Nj0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 02:05:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2116 (0x844)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C18CAF, serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
        Validity
            Not Before: Oct 27 02:05:50 2026 GMT
            Not After : Oct 29 02:05:50 2026 GMT
        Subject: CN=6ae006ff-8359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:1c:98:9f:75:cc:a8:a6:4f:98:88:9c:63:
                    49:ff:43:0c:ee:07:fe:0d:b9:90:5d:6f:dd:af:6a:
                    24:84:7d:eb:88:a2:a7:bc:52:43:e3:39:63:2f:ec:
                    f4:9a:f3:ae:90:a2:40:3a:66:e4:f9:4c:85:cf:65:
                    60:ea:8c:92:0e:15:68:f7:c4:17:70:d6:cf:1f:bb:
                    67:3e:c1:7f:8c:40:df:db:02:69:46:9f:52:82:88:
                    0c:9c:00:0d:4e:fb:3a:ee:8d:94:63:dd:b7:a4:9c:
                    fd:14:ba:0d:75:20:d2:23:1d:e2:39:62:96:01:f8:
                    01:ac:7a:ba:60:e2:8b:d3:24:38:b1:e3:52:6f:0b:
                    76:98:df:14:ae:e2:8f:1f:68:c2:7c:24:d0:dc:f4:
                    e3:7b:1a:3d:45:ce:27:90:36:6e:88:47:f8:1f:9c:
                    82:09:3b:ff:96:92:c2:6d:b7:89:b5:09:ab:dc:c5:
                    4a:59:1c:c8:5d:61:3f:fe:62:38:6e:c3:fd:7b:32:
                    3b:9d:3d:84:fa:b1:db:03:d5:74:3a:34:50:89:46:
                    d8:75:5d:45:75:69:cc:9b:6a:d4:f8:36:96:0e:8b:
                    74:4f:66:6a:b0:0d:e9:14:af:ff:e6:ba:50:d2:88:
                    05:13:dd:f2:b0:5a:e3:91:51:39:0d:86:6a:b7:76:
                    66:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E8:87:EA:EE:6A:31:A2:08:11:0C:67:5E:0C:C9:69:90:66:4A:8A
            X509v3 Authority Key Identifier:
                keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:74:78:3e:1c:c1:cc:ef:56:34:91:ca:f6:ce:1c:35:52:fe:
         a4:f2:3b:9b:5b:79:3f:66:24:a2:f1:d3:ab:b5:c2:73:3b:02:
         3a:18:e0:87:4b:fc:12:bb:a8:5e:8f:9c:42:1c:ca:08:7a:60:
         61:8f:bd:d4:d3:bc:f9:ee:1d:51:8c:14:9e:21:87:30:11:fa:
         f6:f5:7d:66:b6:15:67:f8:0f:c5:67:0f:3b:74:30:16:54:42:
         b0:93:3f:88:02:16:10:8f:be:3f:23:26:3a:78:e8:01:ac:df:
         84:0d:5e:41:05:51:dd:0f:8a:e6:6a:bc:7d:15:9c:ff:e0:3d:
         ff:5d:1d:db:58:46:ef:04:96:f3:c1:49:07:4f:bc:cc:55:0b:
         5d:af:54:63:32:47:5e:05:c3:e0:03:cb:30:4c:8c:f1:cf:4a:
         ec:f4:d8:d5:3e:d7:f1:a9:7a:ff:b8:64:0a:d6:5f:94:8b:21:
         5d:2b:17:1c:9c:29:e8:a5:d4:61:9a:c2:80:0f:31:5a:59:7a:
         74:6e:74:0d:b9:33:3a:cf:9c:08:d0:84:aa:f2:a0:31:5b:76:
         34:8a:52:01:cc:e1:8c:26:c2:4d:2c:ff:41:0b:aa:19:60:65:
         e0:07:52:4f:07:92:ca:de:b6:8e:26:6e:c1:37:b0:2d:a2:11:
         75:2c:27:aa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCEQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkMxOENBRjExMC8GA1UEBRMoNjNFMEJCNkIzNDMzQ0Q1RDcxQTQyQjAxNjlCREIw
MUUyMEU0NTU3RjAeFw0yNjEwMjcwMjA1NTBaFw0yNjEwMjkwMjA1NTBaMBgxFjAU
BgNVBAMTDTZhZTAwNmZmLTgzNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLJhyYn3XMqKZPmIicY0n/QwzuB/4NuZBdb92vaiSEfeuIoqe8UkPjOWMv
7PSa866QokA6ZuT5TIXPZWDqjJIOFWj3xBdw1s8fu2c+wX+MQN/bAmlGn1KCiAyc
AA1O+zrujZRj3beknP0Uug11INIjHeI5YpYB+AGserpg4ovTJDix41JvC3aY3xSu
4o8faMJ8JNDc9ON7Gj1FzieQNm6IR/gfnIIJO/+WksJtt4m1CavcxUpZHMhdYT/+
Yjhuw/17MjudPYT6sdsD1XQ6NFCJRth1XUV1acybatT4NpYOi3RPZmqwDekUr//m
ulDSiAUT3fKwWuORUTkNhmq3dmaBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGOiH
6u5qMaIIEQxnXgzJaZBmSoowHwYDVR0jBBgwFoAUY+C7azQzzV1xpCsBab2wHiDk
VX8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4QUVBMjI4L1ktQzdh
elF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ktQzdhelF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkMxOEMvNDU4ODMyOTBBQkQxMTFFQkIxQTY3MTVFRjhB
RUEyMjgvWS1DN2F6UXp6VjF4cENzQmFiMndIaURrVlg4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTdHg+HMHM71Y0kcr2zhw1Uv6k8jub
W3k/ZiSi8dOrtcJzOwI6GOCHS/wSu6hej5xCHMoIemBhj73U07z57h1RjBSeIYcw
Efr29X1mthVn+A/FZw87dDAWVEKwkz+IAhYQj74/IyY6eOgBrN+EDV5BBVHdD4rm
arx9FZz/4D3/XR3bWEbvBJbzwUkHT7zMVQtdr1RjMkdeBcPgA8swTIzxz0rs9NjV
PtfxqXr/uGQK1l+UiyFdKxccnCnopdRhmsKADzFaWXp0bnQNuTM6z5wI0ISq8qAx
W3Y0ilIBzOGMJsJNLP9BC6oZYGXgB1JPB5LK3raOJm7BN7AtohF1LCeq
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:23:28 2026 by rpki-client