Error: rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
File:                     v9wvL9xcp90IakuaxSzjvdvFqXc.mft (raw, json)
Hash identifier:          7nytE7PDbReFkI71TCvDQKuJ+iKaI2FafguXiXnx/0Q=
Subject key identifier:   F4:43:A9:C6:4A:C7:37:B6:1D:19:37:34:1B:5A:FE:23:D9:E6:B0:68
Authority key identifier: BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77
Certificate issuer:       /CN=F364AE1CAF/serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
Certificate serial:       053B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
Manifest number:          0533
Signing time:             Sun 25 Oct 2026 03:24:45 +0000
Manifest this update:     Sun 25 Oct 2026 03:24:44 +0000
Manifest next update:     Tue 27 Oct 2026 03:24:44 +0000
Files and hashes:         1: v9wvL9xcp90IakuaxSzjvdvFqXc.crl (hash: QMcmNMWio+iboVBGCthrcO24MVWzdqkHbhe9tKKm94Y=)
                          2: C0EC0090938311EF98A16646762E951A.roa (hash: GzasKaBmXrrJLN1LqVLOfWaseyvdqtkdIgndwB98alM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE1CAF, serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
        Validity
            Not Before: Oct 25 03:24:44 2026 GMT
            Not After : Oct 27 03:24:44 2026 GMT
        Subject: CN=6add767d-edcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:9c:aa:6b:b9:78:b0:70:b1:38:e9:ca:a8:
                    3b:52:cc:31:83:ee:b7:de:fc:2d:79:63:01:eb:ff:
                    ba:72:a8:8e:93:69:35:15:af:67:00:b0:03:41:59:
                    ee:12:47:a6:69:ad:a9:7a:1f:b6:7b:d6:7c:c9:af:
                    83:b9:45:c2:b7:73:e9:cf:61:e6:fd:cd:bb:2a:59:
                    3c:da:21:54:54:9b:f1:b0:9f:34:4c:be:ce:15:f8:
                    f4:c7:8d:c8:4d:a7:d6:29:bc:41:cb:e2:7e:9b:0d:
                    73:b0:16:c6:71:50:45:39:2b:2f:c1:16:18:2a:2a:
                    16:05:66:f4:dd:6d:7d:bd:26:bb:8c:54:cf:5d:e1:
                    a0:0f:11:c1:32:36:41:ad:8e:e1:1a:c5:bf:4f:fe:
                    44:5a:44:a6:a9:28:24:63:c7:73:f1:a4:7e:54:6f:
                    4b:50:d4:b1:5e:c4:e0:ed:b2:89:4c:aa:71:1d:52:
                    8a:1c:3d:29:57:67:3c:25:b3:66:69:67:1b:bc:9c:
                    fc:b8:ea:aa:9b:eb:29:3a:24:26:1b:0b:75:84:44:
                    af:6f:bd:db:b3:0d:36:df:13:3c:9f:d0:4a:94:36:
                    0a:d3:bb:12:e9:18:81:b7:3c:5c:c8:39:56:8e:f6:
                    41:68:8c:01:09:4e:8f:f2:43:61:3b:4a:ca:78:76:
                    2c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:43:A9:C6:4A:C7:37:B6:1D:19:37:34:1B:5A:FE:23:D9:E6:B0:68
            X509v3 Authority Key Identifier:
                keyid:BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:02:48:16:98:63:8b:88:98:65:69:4b:4f:a3:0a:b9:11:b2:
         52:25:9e:9b:b2:0a:2e:0a:ee:32:6b:61:b4:7e:81:78:fe:09:
         90:41:4a:2d:07:27:80:96:38:17:fc:85:dd:72:c4:72:10:fc:
         35:42:3a:49:ed:b1:8f:3d:51:77:18:dc:3b:0d:8d:5a:f2:32:
         b2:fe:ff:1d:82:c9:57:f4:07:9d:b8:9c:71:87:c7:98:12:62:
         a4:64:a6:3d:bf:fc:06:78:a1:c7:a4:22:09:f3:6a:ae:6d:f1:
         e6:68:da:db:c5:51:be:60:ea:76:70:56:ee:c0:4b:c4:2a:e4:
         d0:fd:50:5d:d1:f1:c6:f4:b2:43:78:7a:d1:af:e8:cd:55:01:
         9b:fe:95:3c:54:e3:6a:b7:15:3e:92:24:aa:eb:30:a9:f6:0e:
         54:2f:6a:1b:16:b9:1f:81:68:ec:14:6b:b7:3a:64:5d:2e:f4:
         a3:d5:8e:f4:79:11:7f:7b:ae:df:0f:1d:92:f9:fc:d3:c4:eb:
         6f:e7:38:3f:89:b3:67:b2:b1:c7:de:08:f6:5b:08:d4:47:63:
         3e:19:15:8f:38:b3:d0:4f:28:54:f0:58:bd:97:92:49:4e:7f:
         5f:e5:41:e6:56:24:fd:de:5c:aa:4e:ca:2a:95:6b:99:d5:ea:
         1d:ba:26:95
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBTswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEFFMUNBRjExMC8GA1UEBRMoQkZEQzJGMkZEQzVDQTdERDA4NkE0QjlBQzUyQ0Uz
QkREQkM1QTk3NzAeFw0yNjEwMjUwMzI0NDRaFw0yNjEwMjcwMzI0NDRaMBgxFjAU
BgNVBAMTDTZhZGQ3NjdkLWVkY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKGJyqa7l4sHCxOOnKqDtSzDGD7rfe/C15YwHr/7pyqI6TaTUVr2cAsANB
We4SR6Zpral6H7Z71nzJr4O5RcK3c+nPYeb9zbsqWTzaIVRUm/GwnzRMvs4V+PTH
jchNp9YpvEHL4n6bDXOwFsZxUEU5Ky/BFhgqKhYFZvTdbX29JruMVM9d4aAPEcEy
NkGtjuEaxb9P/kRaRKapKCRjx3PxpH5Ub0tQ1LFexODtsolMqnEdUoocPSlXZzwl
s2ZpZxu8nPy46qqb6yk6JCYbC3WERK9vvduzDTbfEzyf0EqUNgrTuxLpGIG3PFzI
OVaO9kFojAEJTo/yQ2E7Ssp4diyxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9EOp
xkrHN7YdGTc0G1r+I9nmsGgwHwYDVR0jBBgwFoAUv9wvL9xcp90IakuaxSzjvdvF
qXcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRBRTFDLzIzQUM5M0RFRTM0RjExRUQ5RkFDQjA5RDJGNkQ4QzFEL3Y5d3ZM
OXhjcDkwSWFrdWF4U3pqdmR2RnFYYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3Y5d3ZMOXhjcDkwSWFrdWF4U3pqdmR2RnFYYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEFFMUMvMjNBQzkzREVFMzRGMTFFRDlGQUNCMDlEMkY2
RDhDMUQvdjl3dkw5eGNwOTBJYWt1YXhTemp2ZHZGcVhjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQAkgWmGOLiJhlaUtPowq5EbJSJZ6b
sgouCu4ya2G0foF4/gmQQUotByeAljgX/IXdcsRyEPw1QjpJ7bGPPVF3GNw7DY1a
8jKy/v8dgslX9AeduJxxh8eYEmKkZKY9v/wGeKHHpCIJ82qubfHmaNrbxVG+YOp2
cFbuwEvEKuTQ/VBd0fHG9LJDeHrRr+jNVQGb/pU8VONqtxU+kiSq6zCp9g5UL2ob
FrkfgWjsFGu3OmRdLvSj1Y70eRF/e67fDx2S+fzTxOtv5zg/ibNnsrHH3gj2WwjU
R2M+GRWPOLPQTyhU8Fi9l5JJTn9f5UHmViT93lyqTsoqlWuZ1eoduiaV
-----END CERTIFICATE-----
Generated at Sun Oct 25 14:16:53 2026 by rpki-client