Error: rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
File:                     5VXdlA8xUBhdWRwtquKfKOrq9XU.mft (raw, json)
Hash identifier:          bzMwC2HoSac82mPB3na1yCgjC/JJd4e7dVrYH2svNGI=
Subject key identifier:   6C:01:28:35:2B:8D:79:7A:A3:BD:89:16:20:63:D1:20:70:05:F4:21
Authority key identifier: E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75
Certificate issuer:       /CN=F3651254AF/serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
Certificate serial:       0F47
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
Manifest number:          0F39
Signing time:             Wed 26 Aug 2026 01:00:56 +0000
Manifest this update:     Wed 26 Aug 2026 01:00:55 +0000
Manifest next update:     Fri 28 Aug 2026 01:00:55 +0000
Files and hashes:         1: 5VXdlA8xUBhdWRwtquKfKOrq9XU.crl (hash: riu1KVMC5ct8CvL0XW0L4sIwUCjArENu1qq5xsOb0gk=)
                          2: 6679CA665D8F11F1B99E3DDDCE1D38B0.roa (hash: vHvA5+wAtU3QNSpWi/AryTgMZzTm5r9z0oV1H9RPG64=)
                          3: 5F65470E5D9011F1B921FEE5CE1D38B0.roa (hash: 9Q0XmSuu1UaKSYQf/M8f2Ub3i6hPHGdh0SNSZM2N/cs=)
                          4: F51E9D565D8E11F1BF85BDDCCE1D38B0.roa (hash: Cq1X1pSuZq05T1uvF/WP9w2h8895z8HWN/Vt7STbcSg=)
                          5: 7D0D3AAC60A911F182B723B9CE1D38B0.roa (hash: SumW0WPjy0zEsZ0nPI58p9k65+uUSOjtjmGJyqmXNDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 01:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3911 (0xf47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651254AF, serialNumber=E555DD940F3150185D591C2DAAE29F28EAEAF575
        Validity
            Not Before: Aug 26 01:00:55 2026 GMT
            Not After : Aug 28 01:00:55 2026 GMT
        Subject: CN=6a8e3ac8-5a0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:ad:84:b7:40:92:eb:0c:d0:b6:6e:f1:53:
                    e9:c1:38:67:5d:50:04:f3:fc:c1:4e:dd:86:19:2c:
                    9e:d6:27:90:3c:03:08:d9:56:1a:87:f2:7f:ab:de:
                    ad:64:3f:fe:01:a1:bc:7c:14:7f:4d:9f:43:ae:27:
                    0b:af:4c:fa:5a:9e:f2:0b:f3:90:d8:44:91:36:2b:
                    0b:eb:5e:83:26:31:bc:08:06:f2:40:8a:35:3a:90:
                    a5:f8:13:15:f3:55:ba:77:19:56:c3:a7:a0:ae:f6:
                    8a:eb:20:d5:f7:62:f6:f3:b8:1c:14:67:f7:cc:67:
                    28:ab:4b:a4:cc:84:22:20:bf:3e:1a:b7:03:e2:cd:
                    68:f8:b7:db:43:40:ef:e8:19:1e:de:a8:e6:e5:13:
                    3d:c1:60:d2:8a:a7:94:9a:9c:cd:24:0e:42:1e:8c:
                    e2:c6:7a:4b:58:a5:e6:2c:e2:4e:0e:ab:e4:11:98:
                    57:59:63:a3:c3:78:4e:9c:e0:5e:c0:5f:3f:01:75:
                    1f:cb:f7:03:a3:dc:0e:48:de:7e:a8:79:82:81:e3:
                    bc:cb:76:10:eb:38:cc:20:ba:55:a1:35:f2:ed:2c:
                    d4:d5:5b:4f:70:6c:07:fd:49:2d:77:2d:a8:c1:ff:
                    ac:fa:dd:0b:dc:7e:d7:6b:3b:1a:ef:b0:cf:54:86:
                    7e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:01:28:35:2B:8D:79:7A:A3:BD:89:16:20:63:D1:20:70:05:F4:21
            X509v3 Authority Key Identifier:
                keyid:E5:55:DD:94:0F:31:50:18:5D:59:1C:2D:AA:E2:9F:28:EA:EA:F5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5VXdlA8xUBhdWRwtquKfKOrq9XU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/A1B323EE033511E6A6751974F8AEA228/5VXdlA8xUBhdWRwtquKfKOrq9XU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:15:04:51:c5:67:e4:f1:e8:71:49:9b:5a:40:f4:55:2e:a6:
         70:a6:42:44:f1:d0:19:0f:33:18:dd:7a:53:63:cc:ce:e7:d3:
         e7:95:b0:9b:40:07:56:44:3d:61:d1:a0:7d:d0:7c:92:d3:69:
         7b:88:76:ef:20:27:b4:fd:ea:54:f6:f5:f1:f6:fe:f7:61:fc:
         7d:41:0b:98:83:b8:d9:73:61:fa:c1:22:88:4a:86:24:81:ef:
         fb:ad:92:7a:20:ba:dc:2e:78:f0:b1:be:1f:04:27:eb:1d:d2:
         22:dc:a4:4c:90:5e:a5:d2:39:94:a8:52:63:2d:7c:03:3d:dd:
         80:ab:32:3d:49:2c:74:88:a3:07:26:31:60:9f:f9:75:ab:5f:
         de:2d:c9:b5:eb:4a:e4:a0:6c:04:3e:d3:e2:97:4c:aa:a6:73:
         81:30:ff:d5:f8:7b:9c:6a:bb:91:16:b5:03:8a:bd:71:2f:aa:
         84:70:e2:e6:9a:44:5e:b6:5d:77:12:da:d9:45:e1:d4:ec:f2:
         f4:e4:90:c3:4f:c4:f2:5d:ff:9d:e1:eb:90:94:2c:bd:f2:00:
         2c:d4:c2:80:f8:8b:1d:33:c7:47:f9:97:c7:b9:66:f2:46:cb:
         f3:16:ff:18:a9:60:fd:b6:9f:ce:94:8f:8b:7d:39:24:08:72:
         54:24:6c:4f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD0cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTEyNTRBRjExMC8GA1UEBRMoRTU1NUREOTQwRjMxNTAxODVENTkxQzJEQUFFMjlG
MjhFQUVBRjU3NTAeFw0yNjA4MjYwMTAwNTVaFw0yNjA4MjgwMTAwNTVaMBgxFjAU
BgNVBAMTDTZhOGUzYWM4LTVhMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCpSq2Et0CS6wzQtm7xU+nBOGddUATz/MFO3YYZLJ7WJ5A8AwjZVhqH8n+r
3q1kP/4Bobx8FH9Nn0OuJwuvTPpanvIL85DYRJE2KwvrXoMmMbwIBvJAijU6kKX4
ExXzVbp3GVbDp6Cu9orrINX3YvbzuBwUZ/fMZyirS6TMhCIgvz4atwPizWj4t9tD
QO/oGR7eqOblEz3BYNKKp5SanM0kDkIejOLGektYpeYs4k4Oq+QRmFdZY6PDeE6c
4F7AXz8BdR/L9wOj3A5I3n6oeYKB47zLdhDrOMwgulWhNfLtLNTVW09wbAf9SS13
LajB/6z63QvcftdrOxrvsM9Uhn6HAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbAEo
NSuNeXqjvYkWIGPRIHAF9CEwHwYDVR0jBBgwFoAU5VXdlA8xUBhdWRwtquKfKOrq
9XUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUxMjU0L0ExQjMyM0VFMDMzNTExRTZBNjc1MTk3NEY4QUVBMjI4LzVWWGRs
QTh4VUJoZFdSd3RxdUtmS09ycTlYVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVWWGRsQTh4VUJoZFdSd3RxdUtmS09ycTlYVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTEyNTQvQTFCMzIzRUUwMzM1MTFFNkE2NzUxOTc0RjhB
RUEyMjgvNVZYZGxBOHhVQmhkV1J3dHF1S2ZLT3JxOVhVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYFQRRxWfk8ehxSZtaQPRVLqZwpkJE
8dAZDzMY3XpTY8zO59PnlbCbQAdWRD1h0aB90HyS02l7iHbvICe0/epU9vXx9v73
Yfx9QQuYg7jZc2H6wSKISoYkge/7rZJ6ILrcLnjwsb4fBCfrHdIi3KRMkF6l0jmU
qFJjLXwDPd2AqzI9SSx0iKMHJjFgn/l1q1/eLcm160rkoGwEPtPil0yqpnOBMP/V
+HucaruRFrUDir1xL6qEcOLmmkRetl13EtrZReHU7PL05JDDT8TyXf+d4euQlCy9
8gAs1MKA+IsdM8dH+ZfHuWbyRsvzFv8YqWD9tp/OlI+LfTkkCHJUJGxP
-----END CERTIFICATE-----
Generated at Wed Aug 26 18:58:33 2026 by rpki-client