Error: rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
File:                     Filoib_wMb9_3nNn4t7pPLAIAoM.mft (raw, json)
Hash identifier:          eyasgjF/sK5CJaDWiRxz0X/Gn8NWAuu8z7uSKqDtRXs=
Subject key identifier:   78:78:F9:B4:80:00:F1:93:D5:79:86:2F:B7:37:70:31:98:51:F7:D8
Authority key identifier: 16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83
Certificate issuer:       /CN=F36505B2AF/serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
Certificate serial:       035A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
Manifest number:          034B
Signing time:             Sat 12 Sep 2026 04:15:54 +0000
Manifest this update:     Sat 12 Sep 2026 04:15:53 +0000
Manifest next update:     Mon 14 Sep 2026 04:15:53 +0000
Files and hashes:         1: Filoib_wMb9_3nNn4t7pPLAIAoM.crl (hash: S6zMuxXTaptSUugBnWEPS7WpVVTMdjfxyaUfLBGhM3o=)
                          2: BDEC29CA919B11F1AD7E43C3CE1D38B0.roa (hash: orjJ8rJ6sip9ETuYXH/EqMDUWi0EVMZEH1jhy65ixEA=)
                          3: 5AC4BF74032511F1929BD2EDDAE4EC9C.roa (hash: Mr+VNN9Z11W7VCtSCEh7NwS5SxBn5tdF3qqSe50Nvo0=)
                          4: C7D794A2833111F0BA372F98DAE4EC9C.roa (hash: 10t3J3G0W//+SuAl6SEkRsS4xMprNtVls3DmnWSADos=)
                          5: 8FC2BDBE057A11F18F7783C4DAE4EC9C.roa (hash: AQrOFPjFaqguMhUl4BS2Zhq/YyRQNkfhZPPG0wTy2FY=)
                          6: 328118D26ED211F1A7E0B60BCF1D38B0.roa (hash: mpYwvFPIIwGBad6LgXffGJB90JE3h4W8XaZN6Yka/Yc=)
                          7: B4706624834911F0B13243B3DAE4EC9C.roa (hash: bO4CRsQGJ9Fo2uTsOo+M4VqSaZfI6VGKrX/RQl3alaE=)
                          8: 3554EEB2347311EFA6FFD08D762E951A.roa (hash: STwhEyl7QlJqy2GwaPGbVHQtRVU/mUCXwrdIoazOpVI=)
                          9: E4AD7D32057A11F1AA15C6C4DAE4EC9C.roa (hash: 2aR11taDJSSgD4ZfkhbtNmSyzLyHvlisHe10lCn519E=)
                          10: A7FC5510032811F1B2192182DAE4EC9C.roa (hash: wGkWjE/BfFbXziwaAAoO4iCbMSLXd6CDbuL/jS67JKY=)
                          11: 6B2C5254032611F1872E2AF2DAE4EC9C.roa (hash: gSEOHsrvDJwVLm0ZAjOxsE19xm6ZGQzPUV5PhKX5T5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Sep 2026 00:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36505B2AF, serialNumber=16296889BFF031BF7FDE7367E2DEE93CB0080283
        Validity
            Not Before: Sep 12 04:15:53 2026 GMT
            Not After : Sep 14 04:15:53 2026 GMT
        Subject: CN=6aa4d1fa-e338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:d5:7c:58:0d:74:67:d4:8b:11:c1:1c:24:
                    60:a8:a0:f0:62:5f:87:21:45:ef:ce:85:e7:1a:d3:
                    93:51:49:f0:18:1c:f2:3b:6e:af:89:79:9a:e6:ab:
                    ff:7f:30:e1:2c:20:96:47:d3:70:82:80:ca:51:bd:
                    fc:96:0f:5c:b3:a5:07:f6:76:f2:7d:af:65:fc:2a:
                    d6:5c:48:5d:2c:16:3e:4a:1a:0f:13:47:b2:c8:bb:
                    8c:23:9f:93:b1:e3:34:b8:8d:84:18:af:59:ae:0b:
                    56:a2:80:ff:29:d7:73:49:77:65:8f:89:f4:72:63:
                    28:88:27:c6:86:e0:d2:1e:46:76:41:3b:c8:d3:cd:
                    52:93:c0:4a:95:95:aa:f3:25:4f:52:df:c7:bb:71:
                    f3:c1:38:a8:ba:65:e9:c6:34:12:25:f8:c8:03:68:
                    52:b5:f2:5c:b8:43:78:09:b9:e5:33:d2:46:c1:3a:
                    5e:bd:0d:a8:a1:bf:8e:8c:3a:4b:21:9d:21:02:87:
                    b9:37:71:7f:fe:33:1e:8f:10:a8:b9:b1:b7:36:ff:
                    7a:dd:8c:bf:6e:99:0a:3f:94:68:d4:ce:d9:e2:f7:
                    88:73:1f:aa:af:14:6b:2d:47:68:28:16:91:ee:93:
                    1e:03:5d:95:4f:51:c0:75:8c:21:4d:a3:4f:8b:e3:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:78:F9:B4:80:00:F1:93:D5:79:86:2F:B7:37:70:31:98:51:F7:D8
            X509v3 Authority Key Identifier:
                keyid:16:29:68:89:BF:F0:31:BF:7F:DE:73:67:E2:DE:E9:3C:B0:08:02:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Filoib_wMb9_3nNn4t7pPLAIAoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36505B2/541804E4347111EF9A875180762E951A/Filoib_wMb9_3nNn4t7pPLAIAoM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c2:49:28:d4:0b:ba:a6:4f:db:66:4e:4a:19:ba:fd:10:50:
         38:f3:58:42:08:15:d2:a6:6f:87:86:b3:39:df:c4:ba:1f:e3:
         74:a4:25:5f:ee:f0:b6:c6:67:b4:c5:c0:22:5f:1e:50:47:92:
         97:bc:67:e9:2c:eb:dd:b7:85:c1:3a:0e:63:fd:8e:26:46:e2:
         41:65:28:ee:e8:c4:90:95:32:7f:27:7e:f5:32:4d:2f:4d:3f:
         85:6c:1c:63:b4:c1:bb:43:b8:85:0b:96:fb:ab:95:25:0c:7e:
         f0:ba:30:ff:08:24:34:b1:69:6a:51:49:b8:db:0f:6e:01:16:
         c6:c7:61:ba:31:dc:e3:6f:3d:82:00:d9:65:6c:f3:26:3c:61:
         05:74:0c:ec:55:da:91:46:e7:61:c1:75:06:1b:44:bb:04:15:
         fa:f7:30:53:f6:bc:13:30:59:d8:5d:fb:32:65:b4:4b:56:67:
         94:8f:b2:e4:df:f6:b9:66:94:66:de:49:24:2f:8d:cf:46:e0:
         fa:e7:17:64:23:05:a3:8f:50:bb:8c:65:64:c6:41:e5:b2:72:
         2c:f1:0e:35:0e:c3:1e:9f:12:be:b3:8f:4d:c6:09:09:d3:c7:
         28:c0:52:d8:95:b7:40:29:d6:86:04:63:bc:2f:a9:39:73:c8:
         19:de:7d:4e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA1owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA1QjJBRjExMC8GA1UEBRMoMTYyOTY4ODlCRkYwMzFCRjdGREU3MzY3RTJERUU5
M0NCMDA4MDI4MzAeFw0yNjA5MTIwNDE1NTNaFw0yNjA5MTQwNDE1NTNaMBgxFjAU
BgNVBAMTDTZhYTRkMWZhLWUzMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCj5tV8WA10Z9SLEcEcJGCooPBiX4chRe/Oheca05NRSfAYHPI7bq+JeZrm
q/9/MOEsIJZH03CCgMpRvfyWD1yzpQf2dvJ9r2X8KtZcSF0sFj5KGg8TR7LIu4wj
n5Ox4zS4jYQYr1muC1aigP8p13NJd2WPifRyYyiIJ8aG4NIeRnZBO8jTzVKTwEqV
larzJU9S38e7cfPBOKi6ZenGNBIl+MgDaFK18ly4Q3gJueUz0kbBOl69Daihv46M
OkshnSECh7k3cX/+Mx6PEKi5sbc2/3rdjL9umQo/lGjUztni94hzH6qvFGstR2go
FpHukx4DXZVPUcB1jCFNo0+L44mNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeHj5
tIAA8ZPVeYYvtzdwMZhR99gwHwYDVR0jBBgwFoAUFiloib/wMb9/3nNn4t7pPLAI
AoMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNUIyLzU0MTgwNEU0MzQ3MTExRUY5QTg3NTE4MDc2MkU5NTFBL0ZpbG9p
Yl93TWI5XzNuTm40dDdwUExBSUFvTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZpbG9pYl93TWI5XzNuTm40dDdwUExBSUFvTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTA1QjIvNTQxODA0RTQzNDcxMTFFRjlBODc1MTgwNzYy
RTk1MUEvRmlsb2liX3dNYjlfM25ObjR0N3BQTEFJQW9NLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARwkko1Au6pk/bZk5KGbr9EFA481hC
CBXSpm+HhrM538S6H+N0pCVf7vC2xme0xcAiXx5QR5KXvGfpLOvdt4XBOg5j/Y4m
RuJBZSju6MSQlTJ/J371Mk0vTT+FbBxjtMG7Q7iFC5b7q5UlDH7wujD/CCQ0sWlq
UUm42w9uARbGx2G6Mdzjbz2CANllbPMmPGEFdAzsVdqRRudhwXUGG0S7BBX69zBT
9rwTMFnYXfsyZbRLVmeUj7Lk3/a5ZpRm3kkkL43PRuD65xdkIwWjj1C7jGVkxkHl
snIs8Q41DsMenxK+s49NxgkJ08cowFLYlbdAKdaGBGO8L6k5c8gZ3n1O
-----END CERTIFICATE-----
Generated at Sat Sep 12 10:23:15 2026 by rpki-client