Error: rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
File:                     uX3EYJnNUPzymdpegrAFZGmExPM.mft (raw, json)
Hash identifier:          NAn8NXtz35KGHBtKFGrRXw+4MXwxdIRx4tCKmgEy83I=
Subject key identifier:   C2:62:D5:EF:AE:20:37:6E:48:30:E7:3B:F1:3D:83:4D:B1:38:A1:4B
Authority key identifier: B9:7D:C4:60:99:CD:50:FC:F2:99:DA:5E:82:B0:05:64:69:84:C4:F3
Certificate issuer:       /CN=F362C7E9AR/serialNumber=B97DC46099CD50FCF299DA5E82B005646984C4F3
Certificate serial:       0A30
Authority info access:    rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
Manifest number:          0A2A
Signing time:             Fri 11 Sep 2026 01:37:54 +0000
Manifest this update:     Fri 11 Sep 2026 01:37:53 +0000
Manifest next update:     Sun 13 Sep 2026 01:37:53 +0000
Files and hashes:         1: uX3EYJnNUPzymdpegrAFZGmExPM.crl (hash: 95oM4vMmtSA9DCzFoofURT6aSCQF87rrAjkop6VxPiI=)
                          2: DB5FF4881C5611F18A871384DAE4EC9C.roa (hash: kkOMtAohgLfz+qkesL09UxzK9jTRPmNkDxZd658iCYs=)
                          3: 77EDD0961C5611F194102C82DAE4EC9C.roa (hash: yb13uKqvOaUhwTpukxMYPaYtf0MpRvzLLQNXovaDCao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
                          rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2608 (0xa30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C7E9AR, serialNumber=B97DC46099CD50FCF299DA5E82B005646984C4F3
        Validity
            Not Before: Sep 11 01:37:53 2026 GMT
            Not After : Sep 13 01:37:53 2026 GMT
        Subject: CN=6aa35b72-b2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ae:c7:93:d9:ec:fb:6c:50:bd:29:9e:6c:4f:
                    ea:2a:91:0e:0b:ca:a8:f2:0b:a5:f7:3a:16:3b:58:
                    f7:1a:14:46:c2:9a:45:de:6b:58:99:2a:7d:13:58:
                    87:e8:7e:f1:79:4c:b7:6f:04:e8:e9:86:bd:6a:c8:
                    1f:ba:c4:69:18:00:e9:ec:25:05:e2:56:a2:76:96:
                    10:f3:cc:83:c1:7a:2b:de:f1:85:b2:53:39:87:03:
                    a1:c6:2a:38:7c:fe:77:63:d9:4a:e8:27:10:53:20:
                    a2:80:da:99:ba:f9:2d:5b:c9:49:79:54:e4:bc:36:
                    6a:a8:27:b7:86:68:32:ca:1f:73:d4:cf:10:28:67:
                    44:0e:b0:86:da:3e:9b:f0:4f:a3:82:09:47:2d:3c:
                    6a:10:d2:77:31:e9:c7:84:15:f7:d0:cd:b6:69:f1:
                    79:bd:31:8d:92:58:05:af:58:43:e4:a5:45:77:cc:
                    40:3f:60:07:49:52:ad:63:95:ab:81:a3:b9:c7:7d:
                    6f:82:e1:a6:80:f7:63:b3:41:09:69:e9:48:c6:44:
                    a9:c0:6a:f3:39:b5:e2:e1:1e:0d:48:40:57:8d:84:
                    f7:62:98:9a:ef:97:04:e7:bb:6f:97:42:6b:a9:2f:
                    63:17:4d:7a:d6:ff:1e:21:32:0c:72:7a:26:6f:b8:
                    0d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:62:D5:EF:AE:20:37:6E:48:30:E7:3B:F1:3D:83:4D:B1:38:A1:4B
            X509v3 Authority Key Identifier:
                keyid:B9:7D:C4:60:99:CD:50:FC:F2:99:DA:5E:82:B0:05:64:69:84:C4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:eb:ce:f7:6c:84:9f:8f:0e:8a:9b:d6:8d:99:7f:1b:b8:b4:
         66:b1:18:2e:57:d0:a6:3c:fe:8d:a6:80:61:82:21:12:65:65:
         b9:74:bc:8f:7c:68:52:a2:4f:6c:5d:6a:ad:76:d1:0e:d8:fd:
         90:16:0e:18:45:1f:65:0c:d7:bb:e9:a7:f6:cc:99:9f:c1:71:
         80:d7:b4:b7:aa:2b:eb:52:26:fd:e4:c1:ad:c6:13:d9:8e:99:
         61:88:71:80:4b:e3:c8:e6:76:cd:1d:94:e0:8a:33:4f:e5:fb:
         80:86:2e:cb:b0:7e:7b:78:63:68:b4:38:39:da:ed:70:f3:84:
         da:b0:e0:48:e1:ef:87:5e:13:74:7e:12:8a:d1:16:29:cf:a1:
         05:68:30:cf:d0:1c:5d:c2:a0:c5:17:d3:43:50:2d:96:f7:9c:
         50:a4:f8:a0:f8:ed:47:3c:ec:1b:ed:fe:c3:b9:56:d7:98:75:
         37:52:98:1d:d5:27:67:d9:ff:6a:4a:7e:0f:2b:95:bc:72:3c:
         6b:14:e0:df:f3:0c:94:17:c0:7e:2d:a1:bb:23:9a:f5:20:d8:
         bd:8c:cf:a4:a2:49:96:ee:8c:43:56:33:d7:fb:64:31:a3:28:
         c6:f1:51:af:85:7b:67:f9:d2:a0:38:3e:10:fb:f1:f7:ee:9b:
         8c:5e:8a:fd
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCjAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkM3RTlBUjExMC8GA1UEBRMoQjk3REM0NjA5OUNENTBGQ0YyOTlEQTVFODJCMDA1
NjQ2OTg0QzRGMzAeFw0yNjA5MTEwMTM3NTNaFw0yNjA5MTMwMTM3NTNaMBgxFjAU
BgNVBAMTDTZhYTM1YjcyLWIyZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSrseT2ez7bFC9KZ5sT+oqkQ4LyqjyC6X3OhY7WPcaFEbCmkXea1iZKn0T
WIfofvF5TLdvBOjphr1qyB+6xGkYAOnsJQXiVqJ2lhDzzIPBeive8YWyUzmHA6HG
Kjh8/ndj2UroJxBTIKKA2pm6+S1byUl5VOS8NmqoJ7eGaDLKH3PUzxAoZ0QOsIba
PpvwT6OCCUctPGoQ0ncx6ceEFffQzbZp8Xm9MY2SWAWvWEPkpUV3zEA/YAdJUq1j
lauBo7nHfW+C4aaA92OzQQlp6UjGRKnAavM5teLhHg1IQFeNhPdimJrvlwTnu2+X
QmupL2MXTXrW/x4hMgxyeiZvuA3JAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUwmLV
764gN25IMOc78T2DTbE4oUswHwYDVR0jBBgwFoAUuX3EYJnNUPzymdpegrAFZGmE
xPMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJDN0U5LzA4RjA3QzE0RThEOTExRTk4NTE1Qzc0MEY4QUVBMjI4L3VYM0VZ
Sm5OVVB6eW1kcGVnckFGWkdtRXhQTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3VYM0VZSm5OVVB6eW1kcGVnckFGWkdtRXhQTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkM3RTkvMDhGMDdDMTRFOEQ5MTFFOTg1MTVDNzQwRjhBRUEy
MjgvdVgzRVlKbk5VUHp5bWRwZWdyQUZaR21FeFBNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC46873bISfjw6Km9aNmX8buLRmsRguV9Cm
PP6NpoBhgiESZWW5dLyPfGhSok9sXWqtdtEO2P2QFg4YRR9lDNe76af2zJmfwXGA
17S3qivrUib95MGtxhPZjplhiHGAS+PI5nbNHZTgijNP5fuAhi7LsH57eGNotDg5
2u1w84TasOBI4e+HXhN0fhKK0RYpz6EFaDDP0BxdwqDFF9NDUC2W95xQpPig+O1H
POwb7f7DuVbXmHU3Upgd1Sdn2f9qSn4PK5W8cjxrFODf8wyUF8B+LaG7I5r1INi9
jM+kokmW7oxDVjPX+2QxoyjG8VGvhXtn+dKgOD4Q+/H37puMXor9
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:46 2026 by rpki-client