Error: rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
File:                     oTaOi_yA9OpasJcW0lchGTYYKFE.mft (raw, json)
Hash identifier:          ObbO8prpV/Yc2jrQmSQmnu4EadjgLOvuQ8+aeceASm8=
Subject key identifier:   A9:07:77:54:80:0F:A2:42:44:06:99:90:02:DE:CA:93:83:D9:F9:56
Authority key identifier: A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51
Certificate issuer:       /CN=F362E39EAF/serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
Certificate serial:       0F4C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
Manifest number:          0F0B
Signing time:             Tue 27 Oct 2026 01:04:24 +0000
Manifest this update:     Tue 27 Oct 2026 01:04:23 +0000
Manifest next update:     Thu 29 Oct 2026 01:04:23 +0000
Files and hashes:         1: oTaOi_yA9OpasJcW0lchGTYYKFE.crl (hash: c48Yj0Xch8IIA89qry+hOTy0KGK/4NYSESHuUrsvqAA=)
                          2: 717250DC0B1F11F0979AD09D762E951A.roa (hash: EIY2uiwrUgRTGGH5CKTX60VMZhCwzhDQZwIzPuQyzLk=)
                          3: 1B68AA0C46C411F0AE592FF5DAE4EC9C.roa (hash: QPJ/pgy5MDLWjEUGppoWDCqEirKoVOtAK5W3WyI3dAw=)
                          4: 0A71212446C511F0B3816D7DDAE4EC9C.roa (hash: lv7fLpV1Z39qFrGvYE0On9CzDUQDfcH7arejVv2X+68=)
                          5: ADF5650846C511F0973FEB81DAE4EC9C.roa (hash: 7CYfsacbUXhjLqOsEIQOYe+QrprQCfUiJVwPCRh/kdM=)
                          6: 604112CC46C411F0BB8EB378DAE4EC9C.roa (hash: oScXiYHUFpyKfI5HMFQh9nsi/SHG0VE3rIhh+0Ip3Q0=)
                          7: A50DC96846C411F0942BA07ADAE4EC9C.roa (hash: sHNAOfb/q+PcCzpw6rvPqasqMwLSMx1FINw08PTtxic=)
                          8: 89672DF86D9011EEB83415874AD9E6FC.roa (hash: GCv1qnJWw7EowPAn9i0uz0mqCeC5AHRLSdr3MuuzS/U=)
                          9: 81BE337A46C511F0BFE7DC7FDAE4EC9C.roa (hash: pVcKVq48gEV8Go0LDZVguyDOkfFxzydQPYrOqsO5Mxs=)
                          10: 6023B6466D9011EEB59691864AD9E6FC.roa (hash: 8Vfkb/3Ajxlzq/FEl75zlD6gPZ0n60l+v2tc/Wmueqg=)
                          11: 3730DFCE0B1F11F08F24969D762E951A.roa (hash: M4evIqnQ83xbCnZoy0k3D9VPp29Fp6WHTYW6UjV2Hb8=)
                          12: 3FFE158246C411F0B4746278DAE4EC9C.roa (hash: JSi407PI78anMYfv+AOzcoeUknjbbweW9RVZYH6HG+Q=)
                          13: E931058846C411F0A1757E7BDAE4EC9C.roa (hash: EayQcb/gQt7YJ6Dhe3VUfGA8I0JKQX96b3m2dF4aJWU=)
                          14: E631424846C511F0802C0082DAE4EC9C.roa (hash: XDAB5XeuUP/8wavFXKpAQBTJhSuFwoK6JGeU6nezG7o=)
                          15: 4EA8246E46C511F089D87F7DDAE4EC9C.roa (hash: qjyPFtl59ffxyefqLmWJlRsBfN31sPgRtcOSrX+rkQE=)
                          16: 7A55532C46C311F0A855E5F0DAE4EC9C.roa (hash: rHdSgUS+SlwggCoWJZgjF6rhTUxpB3fhFGFetcNmcsE=)
                          17: DACADA1046C311F086D2CAF2DAE4EC9C.roa (hash: cCmcwJlgiJprQTyGetPh+w7SGAOJEFqm9EdH0ShanAk=)
                          18: 0D7A512846C611F0B4EAD183DAE4EC9C.roa (hash: +ER0d9RIe4bpJeWakTcMzMs/D2X/K+RHUk8EHXUsSzI=)
                          19: B1D3717646C311F0BC7CC5F2DAE4EC9C.roa (hash: 9gcYwTjOWCFIZzi9rrNFrBl+xybAESXQxu1TkihsHTc=)
                          20: 2A6685A046C511F0B86F727DDAE4EC9C.roa (hash: HCT4XLH64I5ImsqzEiVDAlrxg3B90jJrq1xSnA/3dFo=)
                          21: FCB7B1FC46C311F0AF749CF4DAE4EC9C.roa (hash: bSmxkooizIHzzHtegnD2xMlI/oPcsLP2bS8+oceldxA=)
                          22: C3C3FC5646C411F0957A397BDAE4EC9C.roa (hash: 6TBdH95t3nXF10Bz+Ap697yfZQbWnupWY7c4A0SeikU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3916 (0xf4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E39EAF, serialNumber=A1368E8BFC80F4EA5AB09716D257211936182851
        Validity
            Not Before: Oct 27 01:04:23 2026 GMT
            Not After : Oct 29 01:04:23 2026 GMT
        Subject: CN=6adff898-2c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1f:f0:7f:ec:04:76:c7:a7:2f:7a:84:20:d3:
                    2b:67:92:b5:a8:d6:0b:3a:e1:3d:9e:b6:7a:52:0c:
                    81:d3:aa:69:98:c4:e1:55:a3:ea:f6:ed:3d:e5:57:
                    77:cd:b4:50:23:73:6a:51:e9:3f:64:85:92:f5:e2:
                    ff:32:01:09:b7:3f:b1:01:19:fa:87:e7:a1:d6:d9:
                    ac:ec:11:ec:6b:ba:c0:4e:7b:e9:53:02:ec:09:00:
                    22:d0:14:82:eb:de:6c:3e:f2:db:97:51:96:d4:02:
                    e3:67:58:31:54:11:09:ab:2d:2f:07:00:19:97:d8:
                    5c:e6:14:96:9b:db:2c:59:d2:a8:c0:e9:e9:1c:c1:
                    51:a3:fb:f6:64:80:5b:29:7a:e1:bc:f3:c0:f9:a1:
                    4c:f4:2f:07:a4:f8:bd:69:73:dc:81:38:17:e1:1f:
                    3a:9e:98:b5:29:b8:b2:74:2d:c1:6d:6d:e7:54:ed:
                    7c:63:f9:cb:c8:ef:62:2e:1d:37:ca:d8:e4:c0:ed:
                    86:0b:70:26:2d:9e:6a:26:5e:84:3b:e8:56:8c:39:
                    91:35:de:65:7e:88:42:8a:74:ba:bb:bb:aa:56:3c:
                    e4:1e:dc:76:c3:ce:35:fe:7f:07:bf:1c:3b:7f:47:
                    dd:b8:44:02:38:69:bb:31:14:e9:77:dd:e9:25:3b:
                    8e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:07:77:54:80:0F:A2:42:44:06:99:90:02:DE:CA:93:83:D9:F9:56
            X509v3 Authority Key Identifier:
                keyid:A1:36:8E:8B:FC:80:F4:EA:5A:B0:97:16:D2:57:21:19:36:18:28:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTaOi_yA9OpasJcW0lchGTYYKFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E39E/2001918480AB11E6A117AE63F8AEA228/oTaOi_yA9OpasJcW0lchGTYYKFE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:46:72:cc:87:65:83:a7:01:1d:40:f0:a0:af:e2:a1:94:ec:
         a2:db:42:57:b8:d1:ae:3b:0e:96:6a:01:ad:22:84:6b:ec:c9:
         a9:db:33:41:b7:e1:9f:7c:24:e8:ae:bc:41:27:ce:2e:52:5d:
         36:e9:93:93:20:0e:bc:66:f2:bf:e9:86:36:af:d3:f1:43:2b:
         8c:ff:a6:e7:ff:59:50:df:29:3b:96:a5:cc:95:97:e0:30:4e:
         6a:5f:61:13:bc:8b:c3:5e:ba:23:2b:a9:48:80:91:c3:63:c4:
         70:04:da:92:3b:96:fe:dd:b0:a9:d4:d2:29:06:21:2f:0c:77:
         9d:2e:7f:77:97:aa:94:b3:2d:7a:16:6b:5b:18:9a:a7:e8:34:
         ce:ec:8b:14:c9:6a:62:9c:32:db:ce:a4:c3:0e:6f:4a:b2:05:
         1f:e6:1a:88:61:59:b8:d3:fe:11:56:45:0e:3d:b3:c1:47:84:
         6d:a9:45:a7:c1:27:da:41:b4:49:73:a8:da:39:4e:17:5e:96:
         65:88:ee:b1:bd:23:17:88:df:c8:d4:ee:c9:22:9f:9e:22:1a:
         cd:25:2d:b6:0c:12:f7:6c:2a:a3:8e:c1:e6:bc:ff:b4:07:58:
         62:92:81:ae:fe:77:60:3d:27:b7:f6:c1:7a:c1:c2:72:13:41:
         9a:3b:2b:25
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD0wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkUzOUVBRjExMC8GA1UEBRMoQTEzNjhFOEJGQzgwRjRFQTVBQjA5NzE2RDI1NzIx
MTkzNjE4Mjg1MTAeFw0yNjEwMjcwMTA0MjNaFw0yNjEwMjkwMTA0MjNaMBgxFjAU
BgNVBAMTDTZhZGZmODk4LTJjOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKH/B/7AR2x6cveoQg0ytnkrWo1gs64T2etnpSDIHTqmmYxOFVo+r27T3l
V3fNtFAjc2pR6T9khZL14v8yAQm3P7EBGfqH56HW2azsEexrusBOe+lTAuwJACLQ
FILr3mw+8tuXUZbUAuNnWDFUEQmrLS8HABmX2FzmFJab2yxZ0qjA6ekcwVGj+/Zk
gFspeuG888D5oUz0Lwek+L1pc9yBOBfhHzqemLUpuLJ0LcFtbedU7Xxj+cvI72Iu
HTfK2OTA7YYLcCYtnmomXoQ76FaMOZE13mV+iEKKdLq7u6pWPOQe3HbDzjX+fwe/
HDt/R924RAI4absxFOl33eklO47bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqQd3
VIAPokJEBpmQAt7Kk4PZ+VYwHwYDVR0jBBgwFoAUoTaOi/yA9OpasJcW0lchGTYY
KFEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFMzlFLzIwMDE5MTg0ODBBQjExRTZBMTE3QUU2M0Y4QUVBMjI4L29UYU9p
X3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29UYU9pX3lBOU9wYXNKY1cwbGNoR1RZWUtGRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkUzOUUvMjAwMTkxODQ4MEFCMTFFNkExMTdBRTYzRjhB
RUEyMjgvb1RhT2lfeUE5T3Bhc0pjVzBsY2hHVFlZS0ZFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6RnLMh2WDpwEdQPCgr+KhlOyi20JX
uNGuOw6WagGtIoRr7Mmp2zNBt+GffCTorrxBJ84uUl026ZOTIA68ZvK/6YY2r9Px
QyuM/6bn/1lQ3yk7lqXMlZfgME5qX2ETvIvDXrojK6lIgJHDY8RwBNqSO5b+3bCp
1NIpBiEvDHedLn93l6qUsy16FmtbGJqn6DTO7IsUyWpinDLbzqTDDm9KsgUf5hqI
YVm40/4RVkUOPbPBR4RtqUWnwSfaQbRJc6jaOU4XXpZliO6xvSMXiN/I1O7JIp+e
IhrNJS22DBL3bCqjjsHmvP+0B1hikoGu/ndgPSe39sF6wcJyE0GaOysl
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:06:43 2026 by rpki-client