Error: rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
File:                     -g_6yHvTgP7bhzcer63RaQsq2C4.mft (raw, json)
Hash identifier:          Ev5Nop2mhllql2X9W/tiB5XqPXIlFtRZ058qiH2mHoQ=
Subject key identifier:   E9:28:9F:E6:F5:E6:41:6E:61:5D:AB:CF:E7:F0:DC:7F:0F:BC:26:B1
Authority key identifier: FA:0F:FA:C8:7B:D3:80:FE:DB:87:37:1E:AF:AD:D1:69:0B:2A:D8:2E
Certificate issuer:       /CN=F363F154AF/serialNumber=FA0FFAC87BD380FEDB87371EAFADD1690B2AD82E
Certificate serial:       01D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-g_6yHvTgP7bhzcer63RaQsq2C4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
Manifest number:          01D5
Signing time:             Fri 23 Oct 2026 05:01:41 +0000
Manifest this update:     Fri 23 Oct 2026 05:01:40 +0000
Manifest next update:     Sun 25 Oct 2026 05:01:40 +0000
Files and hashes:         1: -g_6yHvTgP7bhzcer63RaQsq2C4.crl (hash: SvE+TeUoSeDY+WJoP4mo0nN3HBnOs04vozX+U1M2sIw=)
                          2: 57B051BC632111F087023D8CDAE4EC9C.roa (hash: l8pJclCAwgGqv0y5xnIc9EyuBUpnbxxdsHPfPUfesL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-g_6yHvTgP7bhzcer63RaQsq2C4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 05:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363F154AF, serialNumber=FA0FFAC87BD380FEDB87371EAFADD1690B2AD82E
        Validity
            Not Before: Oct 23 05:01:40 2026 GMT
            Not After : Oct 25 05:01:40 2026 GMT
        Subject: CN=6adaea34-cd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:27:1a:27:86:08:20:81:85:f6:7b:be:08:
                    66:ea:ac:a4:8b:7e:1e:be:eb:40:cf:61:68:76:12:
                    0d:82:99:0a:e6:a9:71:06:01:f0:75:c1:dc:99:9c:
                    87:f3:b9:ee:42:15:c3:c2:2e:56:17:dd:86:86:51:
                    71:80:fa:2f:07:86:f7:e4:6e:ee:68:ac:9e:a8:a7:
                    e5:02:2f:17:06:aa:6b:3b:7a:fc:a0:ad:44:ce:8f:
                    54:36:43:70:7c:24:cb:08:b3:61:37:65:56:62:65:
                    bf:bf:74:74:0a:02:30:b7:c5:53:21:c7:47:cd:f0:
                    13:3c:33:95:af:79:88:79:9a:84:35:42:f1:73:0f:
                    77:79:34:5f:fe:9b:bd:7a:d8:b3:9c:d9:21:fe:67:
                    69:43:44:b0:77:57:8e:b3:b0:bb:24:c0:85:ea:ac:
                    11:92:b6:12:b8:46:a5:4e:71:81:a5:fc:f4:59:f3:
                    6b:cf:c1:56:d6:45:db:06:d0:a6:bb:a8:0c:e2:ae:
                    82:f9:48:13:07:2b:a3:e3:b3:5b:d6:70:2c:31:c9:
                    e5:45:fe:23:ca:dc:12:2c:fb:4e:89:d2:40:44:90:
                    7e:af:7d:fb:fd:dc:c2:54:cd:9f:4a:90:9e:59:5e:
                    1f:c9:15:e2:83:2f:22:2f:f7:78:68:06:b8:ed:60:
                    78:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:28:9F:E6:F5:E6:41:6E:61:5D:AB:CF:E7:F0:DC:7F:0F:BC:26:B1
            X509v3 Authority Key Identifier:
                keyid:FA:0F:FA:C8:7B:D3:80:FE:DB:87:37:1E:AF:AD:D1:69:0B:2A:D8:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-g_6yHvTgP7bhzcer63RaQsq2C4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F154/5B6403CC632011F08846FF83DAE4EC9C/-g_6yHvTgP7bhzcer63RaQsq2C4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:fc:80:ef:06:99:e2:31:61:72:0f:20:7f:d6:29:26:0f:6c:
         c4:83:bd:5a:2d:14:2d:7b:68:39:33:11:69:31:d1:a5:70:32:
         7e:96:48:e6:c4:04:7c:5c:4e:80:1d:86:9b:04:10:dd:0d:67:
         78:85:f7:8f:1c:ca:5a:c6:ce:cd:8a:90:b5:9e:32:1c:8e:00:
         05:27:6c:16:92:0a:f1:4c:1c:cf:3d:9d:dd:f6:9f:ae:61:17:
         8f:b6:86:b7:a4:72:d0:e9:7b:d7:16:3b:dc:46:9c:9c:37:54:
         89:cb:39:62:2c:b5:28:40:69:e5:2f:6b:6d:c9:d7:58:13:de:
         b3:c7:4c:61:83:3c:ca:46:43:33:ea:10:d6:ab:c1:18:32:90:
         0d:71:73:d1:43:2b:7d:9f:18:26:ea:2f:9c:3c:cd:26:63:b6:
         76:94:47:cc:d8:12:39:4b:e6:b3:e5:d0:ac:43:6c:f7:44:67:
         69:ee:e4:5f:45:06:14:f8:02:94:ab:35:65:f2:aa:56:a8:c8:
         68:a6:29:c6:4a:80:dd:af:f7:c4:02:5b:32:e4:25:97:5d:bd:
         83:92:3c:00:eb:69:67:22:9e:82:8a:fa:45:15:5f:af:3e:a7:
         30:97:31:62:9e:be:bc:18:f7:29:80:c5:a4:62:92:b0:55:13:
         89:4a:e9:2a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0YxNTRBRjExMC8GA1UEBRMoRkEwRkZBQzg3QkQzODBGRURCODczNzFFQUZBREQx
NjkwQjJBRDgyRTAeFw0yNjEwMjMwNTAxNDBaFw0yNjEwMjUwNTAxNDBaMBgxFjAU
BgNVBAMTDTZhZGFlYTM0LWNkNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXNCcaJ4YIIIGF9nu+CGbqrKSLfh6+60DPYWh2Eg2CmQrmqXEGAfB1wdyZ
nIfzue5CFcPCLlYX3YaGUXGA+i8Hhvfkbu5orJ6op+UCLxcGqms7evygrUTOj1Q2
Q3B8JMsIs2E3ZVZiZb+/dHQKAjC3xVMhx0fN8BM8M5WveYh5moQ1QvFzD3d5NF/+
m7162LOc2SH+Z2lDRLB3V46zsLskwIXqrBGSthK4RqVOcYGl/PRZ82vPwVbWRdsG
0Ka7qAziroL5SBMHK6Pjs1vWcCwxyeVF/iPK3BIs+06J0kBEkH6vffv93MJUzZ9K
kJ5ZXh/JFeKDLyIv93hoBrjtYHjPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6Sif
5vXmQW5hXavP5/Dcfw+8JrEwHwYDVR0jBBgwFoAU+g/6yHvTgP7bhzcer63RaQsq
2C4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNGMTU0LzVCNjQwM0NDNjMyMDExRjA4ODQ2RkY4M0RBRTRFQzlDLy1nXzZ5
SHZUZ1A3Ymh6Y2VyNjNSYVFzcTJDNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLy1nXzZ5SHZUZ1A3Ymh6Y2VyNjNSYVFzcTJDNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0YxNTQvNUI2NDAzQ0M2MzIwMTFGMDg4NDZGRjgzREFF
NEVDOUMvLWdfNnlIdlRnUDdiaHpjZXI2M1JhUXNxMkM0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCg/IDvBpniMWFyDyB/1ikmD2zEg71a
LRQte2g5MxFpMdGlcDJ+lkjmxAR8XE6AHYabBBDdDWd4hfePHMpaxs7NipC1njIc
jgAFJ2wWkgrxTBzPPZ3d9p+uYRePtoa3pHLQ6XvXFjvcRpycN1SJyzliLLUoQGnl
L2ttyddYE96zx0xhgzzKRkMz6hDWq8EYMpANcXPRQyt9nxgm6i+cPM0mY7Z2lEfM
2BI5S+az5dCsQ2z3RGdp7uRfRQYU+AKUqzVl8qpWqMhopinGSoDdr/fEAlsy5CWX
Xb2DkjwA62lnIp6CivpFFV+vPqcwlzFinr68GPcpgMWkYpKwVROJSukq
-----END CERTIFICATE-----
Generated at Sat Oct 24 05:28:58 2026 by rpki-client