Error: rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
File:                     YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft (raw, json)
Hash identifier:          TNcncbRRvdv2pTNlagp57aPb0+K+9LrF8zvKuDhYiEs=
Subject key identifier:   0D:B7:15:09:26:50:8D:8C:4C:29:DF:F6:21:D8:FD:04:50:61:A5:F9
Authority key identifier: 60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC
Certificate issuer:       /CN=F36426B7AF/serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
Certificate serial:       0223
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
Manifest number:          0221
Signing time:             Wed 28 Oct 2026 04:51:29 +0000
Manifest this update:     Wed 28 Oct 2026 04:51:28 +0000
Manifest next update:     Fri 30 Oct 2026 04:51:28 +0000
Files and hashes:         1: YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl (hash: AazN8kqOU5GPGUOKUvw0JH4CHj8MSls3VHIhv3bQyKs=)
                          2: B4A0F8A6520711F1BF72BDA6CE1D38B0.roa (hash: oRF4h5IZqjsI7CIR7BIVA64gPDt3TUtVrtZGjoTOFL8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36426B7AF, serialNumber=606F5AB880BF259D4DCB66A061E153ECC8ED56BC
        Validity
            Not Before: Oct 28 04:51:28 2026 GMT
            Not After : Oct 30 04:51:28 2026 GMT
        Subject: CN=6ae17f51-0572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:93:a6:77:78:6a:8f:3a:de:9a:19:2f:ab:
                    9f:b6:85:b4:4d:f1:9e:3d:3b:d3:82:ad:03:bd:bd:
                    56:cf:7a:13:1f:10:89:73:a7:0f:53:f3:53:97:f2:
                    95:d7:51:82:b1:b3:d9:bb:99:58:b0:6c:e1:c8:95:
                    43:cd:73:5a:d3:cd:4e:74:5b:2f:4f:0e:09:0d:9e:
                    bc:42:a3:44:0f:37:a5:ac:21:d8:7f:11:22:75:74:
                    98:f8:ad:ef:44:00:93:6d:f9:9c:f3:e5:c3:60:ab:
                    ef:3d:82:42:42:71:06:4a:a9:f0:f0:11:90:53:33:
                    20:eb:7c:3f:59:c7:a3:7b:e9:e5:ce:ed:8e:d5:53:
                    25:0a:c1:80:88:51:bd:cc:28:94:42:32:66:e3:59:
                    db:cb:10:76:1d:9b:61:d3:46:ed:f6:d8:ac:5f:2e:
                    58:e7:20:73:4c:df:ef:f5:7d:51:ea:7a:6e:41:74:
                    dc:ca:b2:ec:10:0b:16:e7:53:90:c5:4f:ed:42:6a:
                    64:90:14:81:5b:25:e0:b2:9d:ac:5e:22:55:0b:86:
                    3f:85:8f:f0:39:fa:c5:cf:de:69:27:99:61:2c:07:
                    d4:cd:22:e3:b4:eb:6f:cc:04:ea:2c:0c:48:87:cc:
                    83:2e:3e:e5:34:41:66:4a:12:18:48:0e:86:8c:e0:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:15:09:26:50:8D:8C:4C:29:DF:F6:21:D8:FD:04:50:61:A5:F9
            X509v3 Authority Key Identifier:
                keyid:60:6F:5A:B8:80:BF:25:9D:4D:CB:66:A0:61:E1:53:EC:C8:ED:56:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YG9auIC_JZ1Ny2agYeFT7MjtVrw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36426B7/862E8F282FBD11F0B637FFE1DAE4EC9C/YG9auIC_JZ1Ny2agYeFT7MjtVrw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:90:18:67:65:1e:46:f0:24:cb:8a:4b:f3:b2:82:57:a2:d0:
         aa:7e:ce:74:8b:4b:67:64:86:9d:cc:dc:0e:bc:41:e0:57:af:
         33:1b:84:d2:d0:ff:78:be:26:36:75:d5:b1:21:ec:fc:01:27:
         78:b6:25:84:1c:44:1e:48:e7:1a:91:40:c4:15:ba:3c:4d:7a:
         a3:9e:6c:8d:cc:28:54:4b:a1:86:9d:da:84:76:c9:b1:11:8c:
         ef:a3:c8:7f:ad:6f:0e:5e:2f:f7:75:8d:ba:39:c4:40:ef:d7:
         f2:6d:a6:c5:44:29:4d:bc:3a:49:85:24:6f:5f:f2:ed:c2:56:
         e7:81:91:74:83:38:e4:1d:23:c8:e5:dc:4d:bb:89:f8:81:a7:
         31:53:c7:38:94:6f:3c:74:9f:34:ac:bf:04:fd:76:a7:b8:16:
         a4:dc:77:82:46:78:0b:97:10:c5:6a:0b:5b:dc:06:d8:ed:77:
         ae:a6:23:07:bf:c7:20:c7:b6:03:38:fe:91:53:73:80:fd:6e:
         23:93:de:4a:4f:7e:4e:66:85:bf:2b:13:43:3b:07:96:39:8a:
         1a:85:21:12:da:7a:cb:1d:74:09:a2:5f:30:48:37:e5:ae:25:
         27:dd:08:89:e5:a8:34:64:19:9f:ce:30:7b:fe:c1:2e:ff:74:
         1c:b4:61:60
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAiMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDI2QjdBRjExMC8GA1UEBRMoNjA2RjVBQjg4MEJGMjU5RDREQ0I2NkEwNjFFMTUz
RUNDOEVENTZCQzAeFw0yNjEwMjgwNDUxMjhaFw0yNjEwMzAwNDUxMjhaMBgxFjAU
BgNVBAMTDTZhZTE3ZjUxLTA1NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC73pOmd3hqjzremhkvq5+2hbRN8Z49O9OCrQO9vVbPehMfEIlzpw9T81OX
8pXXUYKxs9m7mViwbOHIlUPNc1rTzU50Wy9PDgkNnrxCo0QPN6WsIdh/ESJ1dJj4
re9EAJNt+Zzz5cNgq+89gkJCcQZKqfDwEZBTMyDrfD9Zx6N76eXO7Y7VUyUKwYCI
Ub3MKJRCMmbjWdvLEHYdm2HTRu322KxfLljnIHNM3+/1fVHqem5BdNzKsuwQCxbn
U5DFT+1CamSQFIFbJeCynaxeIlULhj+Fj/A5+sXP3mknmWEsB9TNIuO062/MBOos
DEiHzIMuPuU0QWZKEhhIDoaM4DsRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDbcV
CSZQjYxMKd/2Idj9BFBhpfkwHwYDVR0jBBgwFoAUYG9auIC/JZ1Ny2agYeFT7Mjt
VrwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyNkI3Lzg2MkU4RjI4MkZCRDExRjBCNjM3RkZFMURBRTRFQzlDL1lHOWF1
SUNfSloxTnkyYWdZZUZUN01qdFZydy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1lHOWF1SUNfSloxTnkyYWdZZUZUN01qdFZydy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDI2QjcvODYyRThGMjgyRkJEMTFGMEI2MzdGRkUxREFF
NEVDOUMvWUc5YXVJQ19KWjFOeTJhZ1llRlQ3TWp0VnJ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfkBhnZR5G8CTLikvzsoJXotCqfs50
i0tnZIadzNwOvEHgV68zG4TS0P94viY2ddWxIez8ASd4tiWEHEQeSOcakUDEFbo8
TXqjnmyNzChUS6GGndqEdsmxEYzvo8h/rW8OXi/3dY26OcRA79fybabFRClNvDpJ
hSRvX/LtwlbngZF0gzjkHSPI5dxNu4n4gacxU8c4lG88dJ80rL8E/XanuBak3HeC
RngLlxDFagtb3AbY7XeupiMHv8cgx7YDOP6RU3OA/W4jk95KT35OZoW/KxNDOweW
OYoahSES2nrLHXQJol8wSDflriUn3QiJ5ag0ZBmfzjB7/sEu/3QctGFg
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:11:46 2026 by rpki-client