Error: rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
File:                     RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft (raw, json)
Hash identifier:          eKhMQcQ6ntHcaGMALueaI/7aUTavsPYEiBsxEXTT8/8=
Subject key identifier:   ED:61:8C:BC:23:07:74:75:37:CE:59:7F:42:00:5B:52:5A:B5:3D:4A
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Certificate issuer:       /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial:       0312
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
Manifest number:          030B
Signing time:             Mon 26 Oct 2026 04:35:15 +0000
Manifest this update:     Mon 26 Oct 2026 04:35:14 +0000
Manifest next update:     Wed 28 Oct 2026 04:35:14 +0000
Files and hashes:         1: RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl (hash: LMdz3q92DfIC2uKGvk0vkbpxDyWGwHpkx8VMNDnL4wM=)
                          2: 5AA874664AD011F1A8AEEBD0CE1D38B0.roa (hash: RXIzo69umpuvsAlFMvqSVsB1Psb5JOFRD36LwToymak=)
                          3: DAF72AF6FB0511F0937243EFDAE4EC9C.roa (hash: xagpnItyhctkTvDzffDMRA8DAPhk4/gHbOx7gcUFdps=)
                          4: 16F0B1F24AD011F1B52B47CDCE1D38B0.roa (hash: m9dFLgi2NB6CDBYXzQrHi3ysmmIgFLX3po9q+oQkHdM=)
                          5: A97C3F504AD011F1BE6F54D1CE1D38B0.roa (hash: chlbzEdLSH7pwdvxJS0cCBl8R8+IFiUzyZpFklWO+JY=)
                          6: 891AA3144AD011F1A5F406D1CE1D38B0.roa (hash: R5VazyGMM/yIbU9SGaoSbNz2YQwMP47fvbl1HozxYLg=)
                          7: 3115BA58AC9A11EFBB666976762E951A.roa (hash: bHbD7weS2dip8Z+GiQXd9+abXSVFw+tU7+Gs29hWT0o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AFECAF, serialNumber=46466D356ACB19519D64CD829BED403D042004EC
        Validity
            Not Before: Oct 26 04:35:14 2026 GMT
            Not After : Oct 28 04:35:14 2026 GMT
        Subject: CN=6aded883-d740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:72:50:8b:1a:c5:7d:e7:8c:1f:d6:29:b4:52:
                    40:b1:f5:2d:be:b8:f7:57:30:90:d4:1f:8b:99:29:
                    a4:91:8f:64:de:e7:10:e8:58:ed:b8:ad:40:21:0d:
                    89:f2:a1:32:2a:fc:f8:69:f0:31:9f:02:75:19:a2:
                    a4:3f:e4:80:8e:ce:9a:27:e8:09:e6:db:ee:73:09:
                    ea:7c:62:e3:5a:e2:25:e4:9c:03:44:dc:4e:17:9b:
                    69:cf:60:1f:56:c6:3b:c9:14:36:eb:fa:9f:03:ba:
                    c1:1a:05:32:9a:fd:b2:a2:12:15:33:d3:f2:12:2f:
                    d5:bc:6e:a7:95:2b:02:a5:a4:34:2b:5a:3f:4d:bd:
                    7c:37:c3:04:db:9d:10:b2:46:7d:81:95:2a:36:08:
                    ca:9e:43:d7:ae:4d:00:ac:8a:5d:e0:79:38:c2:e6:
                    82:f8:9e:59:e8:5a:4e:3f:6b:ba:41:fa:b3:d7:17:
                    da:ab:4b:99:14:6d:1c:d8:db:6f:a2:28:05:8a:05:
                    0e:7a:45:21:02:c0:33:5a:87:0d:b5:27:b2:46:26:
                    54:7a:4c:cb:4d:f1:40:dd:78:b2:8f:ee:96:71:4c:
                    89:0e:5d:fc:79:3c:6c:64:43:fc:6f:8f:1a:6b:fe:
                    c4:7a:c6:0e:93:fe:51:fb:25:fb:f3:11:6d:07:5c:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:61:8C:BC:23:07:74:75:37:CE:59:7F:42:00:5B:52:5A:B5:3D:4A
            X509v3 Authority Key Identifier:
                keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:61:5a:e3:ad:0c:91:d6:a9:ff:35:f5:44:b6:5a:bf:dd:d9:
         d6:d6:3a:36:40:89:14:4a:6e:9d:43:9d:72:0e:b3:d5:b6:24:
         e4:2f:3d:08:84:1a:58:34:7a:59:b6:58:83:82:0c:0e:34:3e:
         6c:da:50:9a:40:60:4f:df:6b:53:86:e8:ab:5c:33:fb:49:d3:
         a9:0d:4d:66:a5:07:1b:5d:a6:40:36:ab:94:31:bb:d6:38:e5:
         2e:29:4f:ab:df:0f:c3:c0:03:72:c5:76:3e:11:9a:95:61:62:
         c8:cd:01:91:bb:4c:a3:5c:aa:e3:35:d0:71:6a:a2:a8:e0:9a:
         79:ab:01:2f:6b:9c:3d:95:eb:15:d7:9b:c6:e8:d6:ef:e1:ff:
         b2:e3:6b:10:11:da:32:d9:de:74:ea:2d:c0:ad:d5:42:9d:fa:
         90:99:e8:c5:ea:18:27:09:3a:7e:b8:89:b4:d9:34:ff:76:fb:
         c6:29:46:b1:08:e1:1e:a5:76:35:a3:99:7b:d1:2f:a3:9f:27:
         8b:4d:5a:4e:96:a5:8e:2f:1d:0f:80:66:c5:53:71:7f:71:84:
         b5:59:bb:95:6a:07:30:d2:6c:f0:72:67:e4:18:9a:63:b5:f9:
         5a:55:67:6a:59:45:d5:92:83:b5:58:77:c1:6c:a3:c5:6a:1b:
         89:e4:23:62
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEFGRUNBRjExMC8GA1UEBRMoNDY0NjZEMzU2QUNCMTk1MTlENjRDRDgyOUJFRDQw
M0QwNDIwMDRFQzAeFw0yNjEwMjYwNDM1MTRaFw0yNjEwMjgwNDM1MTRaMBgxFjAU
BgNVBAMTDTZhZGVkODgzLWQ3NDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6clCLGsV954wf1im0UkCx9S2+uPdXMJDUH4uZKaSRj2Te5xDoWO24rUAh
DYnyoTIq/Php8DGfAnUZoqQ/5ICOzpon6Anm2+5zCep8YuNa4iXknANE3E4Xm2nP
YB9WxjvJFDbr+p8DusEaBTKa/bKiEhUz0/ISL9W8bqeVKwKlpDQrWj9NvXw3wwTb
nRCyRn2BlSo2CMqeQ9euTQCsil3geTjC5oL4nlnoWk4/a7pB+rPXF9qrS5kUbRzY
22+iKAWKBQ56RSECwDNahw21J7JGJlR6TMtN8UDdeLKP7pZxTIkOXfx5PGxkQ/xv
jxpr/sR6xg6T/lH7JfvzEW0HXNjdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7WGM
vCMHdHU3zll/QgBbUlq1PUowHwYDVR0jBBgwFoAURkZtNWrLGVGdZM2Cm+1APQQg
BOwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRBRkVDL0MxQ0NGRTM2ODBGNzExRUZBQ0M5MDhBQTc2MkU5NTFBL1JrWnRO
V3JMR1ZHZFpNMkNtLTFBUFFRZ0JPdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JrWnROV3JMR1ZHZFpNMkNtLTFBUFFRZ0JPdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEFGRUMvQzFDQ0ZFMzY4MEY3MTFFRkFDQzkwOEFBNzYy
RTk1MUEvUmtadE5XckxHVkdkWk0yQ20tMUFQUVFnQk93Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6YVrjrQyR1qn/NfVEtlq/3dnW1jo2
QIkUSm6dQ51yDrPVtiTkLz0IhBpYNHpZtliDggwOND5s2lCaQGBP32tThuirXDP7
SdOpDU1mpQcbXaZANquUMbvWOOUuKU+r3w/DwANyxXY+EZqVYWLIzQGRu0yjXKrj
NdBxaqKo4Jp5qwEva5w9lesV15vG6Nbv4f+y42sQEdoy2d506i3ArdVCnfqQmejF
6hgnCTp+uIm02TT/dvvGKUaxCOEepXY1o5l70S+jnyeLTVpOlqWOLx0PgGbFU3F/
cYS1WbuVagcw0mzwcmfkGJpjtflaVWdqWUXVkoO1WHfBbKPFahuJ5CNi
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:45:45 2026 by rpki-client