Error: rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
File:                     Go8PdPo6YC9H_Ow2uLP3niHzABg.mft (raw, json)
Hash identifier:          BDgEKVrOZbHQIP/L+CiZfU4nr0mtPjc0aWx063Re+HQ=
Subject key identifier:   D7:83:C0:33:ED:89:30:A6:D0:B3:65:DE:E6:4D:13:31:17:4C:6B:34
Authority key identifier: 1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18
Certificate issuer:       /CN=F3656177AR/serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
Certificate serial:       0E69
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
Manifest number:          242A
Signing time:             Mon 26 Oct 2026 01:05:41 +0000
Manifest this update:     Mon 26 Oct 2026 01:05:40 +0000
Manifest next update:     Wed 28 Oct 2026 01:05:40 +0000
Files and hashes:         1: Go8PdPo6YC9H_Ow2uLP3niHzABg.crl (hash: 8qFgmGI3QMu2u/olH0VzZTClPY+8GODMoZ8Bo8dIEIM=)
                          2: B0CB3182C8C611E9B220F755F8AEA228.roa (hash: gqrU/z6iXLRtLiCnHFZa0s+2uBK1Ct+5G7ihg1BeuL0=)
                          3: 0E3B72CCC8C811E98D790458F8AEA228.roa (hash: itr9OUnzmKbdqppKMzcknLB4lBw9Ah9MK/Fp31d00b0=)
                          4: B6DAAC5EC8C811E9B566A258F8AEA228.roa (hash: Y4yGjlwVyROuEGeowY33dWqLnQRQW/byvC0cJpLJ8EA=)
                          5: 361323CCC8C711E9B652C156F8AEA228.roa (hash: ZDrsLI1RWkFdQohl1nTyw5JGa4/mTeCrLl2gQVNYxnU=)
                          6: 146302C4C8C711E984B79356F8AEA228.roa (hash: DdSuiwT/ngk7JQ1+7xZSJqCpSkRWy7BhZniM1rPy9e8=)
                          7: E73F0D38C8C611E98A095B56F8AEA228.roa (hash: B5Em/KidBogdtiGbZ1QNgeUY8m5bNBKn2AeQxhe44fA=)
                          8: 66123256C8C811E99A726E58F8AEA228.roa (hash: u5cowoJMX4Hxd12oQmnhhFSMAoh12QYhoXjiZuk5pKI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
                          rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3689 (0xe69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AR, serialNumber=1A8F0F74FA3A602F47FCEC36B8B3F79E21F30018
        Validity
            Not Before: Oct 26 01:05:40 2026 GMT
            Not After : Oct 28 01:05:40 2026 GMT
        Subject: CN=6adea764-d786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:33:95:0f:6d:59:c9:b7:43:1f:95:59:0c:f8:
                    44:a2:b7:9d:e6:19:09:40:24:80:5b:a0:e7:eb:52:
                    c5:dc:64:6e:35:1a:3b:7c:39:69:ee:7b:4a:a8:62:
                    94:b3:4b:1a:c2:f1:ea:ec:b6:7a:f4:9f:3a:1c:b6:
                    ab:c6:c0:e8:ea:aa:d8:a3:ba:69:33:5d:de:66:b9:
                    83:1b:18:3b:dc:89:fe:a1:4c:6f:ef:68:bc:18:5a:
                    9e:b5:b7:44:06:57:31:cc:6c:39:55:ff:f9:07:bb:
                    3b:4b:18:63:d4:65:d5:60:67:03:18:79:15:6e:a7:
                    95:0b:5d:65:cb:3a:18:cb:c2:3a:23:a1:37:8f:59:
                    3e:a9:44:e3:e7:ef:81:bb:03:3f:4d:85:ca:ba:96:
                    b6:1a:5d:11:1a:b5:58:96:41:4b:7c:4d:54:08:83:
                    ea:9f:6f:4c:7a:cf:fc:74:90:8a:f5:45:27:65:dd:
                    7e:53:a2:8e:65:fb:b6:bb:b2:72:73:ac:11:a2:8c:
                    f9:d1:ab:bd:e7:44:33:cd:65:c3:66:36:39:4d:00:
                    30:fc:ee:a0:b6:37:49:eb:97:ad:e4:52:89:cd:56:
                    50:5a:78:fc:0b:d2:1f:32:89:ce:56:1d:48:0f:5e:
                    46:e9:a9:e5:fd:d5:8f:56:fb:bf:9f:13:b6:f8:ba:
                    3d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:83:C0:33:ED:89:30:A6:D0:B3:65:DE:E6:4D:13:31:17:4C:6B:34
            X509v3 Authority Key Identifier:
                keyid:1A:8F:0F:74:FA:3A:60:2F:47:FC:EC:36:B8:B3:F7:9E:21:F3:00:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Go8PdPo6YC9H_Ow2uLP3niHzABg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/C2857264C85811E6A8EE465FF8AEA228/Go8PdPo6YC9H_Ow2uLP3niHzABg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:87:55:bb:d7:c3:82:61:7a:dc:3c:ee:b1:40:f7:2a:10:41:
         0a:2b:39:7e:37:2d:23:7f:20:5d:6c:33:00:73:f4:7e:24:66:
         2d:b9:18:b6:78:a9:41:6f:f7:ff:cc:b9:b4:c3:81:d1:17:dd:
         30:88:0e:ca:0b:3a:69:e0:00:4c:d0:8c:59:0c:a5:7d:52:66:
         87:8f:55:18:e3:ec:d2:75:0b:1f:c4:3f:9b:3d:39:b6:aa:08:
         b4:8c:0f:c7:fa:e8:83:5e:63:29:7b:29:33:44:10:54:98:13:
         5d:88:24:e7:b0:9d:03:42:d6:93:14:b2:d4:95:16:56:27:81:
         59:da:32:cd:53:ee:e8:d8:ff:a0:d2:4a:25:b4:77:2f:7b:3a:
         23:50:f7:e8:b3:a7:1b:4a:43:4a:7f:d0:14:d0:62:e8:fc:e7:
         d7:3a:f6:41:fd:2e:a5:0a:68:0e:2d:3f:69:26:02:1c:fe:62:
         64:1f:11:67:62:f2:f9:e9:a1:80:cb:5b:a4:50:ee:e3:99:e3:
         b4:a7:9d:c3:b6:bf:86:c0:7f:c8:10:31:dd:21:95:5f:10:80:
         fd:5b:47:b8:8d:61:1a:bb:13:64:1a:db:40:cb:48:a2:5e:23:
         89:f2:ff:40:bb:c9:bd:55:17:e3:60:8c:58:d9:a2:57:05:c9:
         89:0d:c1:c8
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDmkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTYxNzdBUjExMC8GA1UEBRMoMUE4RjBGNzRGQTNBNjAyRjQ3RkNFQzM2QjhCM0Y3
OUUyMUYzMDAxODAeFw0yNjEwMjYwMTA1NDBaFw0yNjEwMjgwMTA1NDBaMBgxFjAU
BgNVBAMTDTZhZGVhNzY0LWQ3ODYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPM5UPbVnJt0MflVkM+ESit53mGQlAJIBboOfrUsXcZG41Gjt8OWnue0qo
YpSzSxrC8erstnr0nzoctqvGwOjqqtijumkzXd5muYMbGDvcif6hTG/vaLwYWp61
t0QGVzHMbDlV//kHuztLGGPUZdVgZwMYeRVup5ULXWXLOhjLwjojoTePWT6pROPn
74G7Az9Nhcq6lrYaXREatViWQUt8TVQIg+qfb0x6z/x0kIr1RSdl3X5Too5l+7a7
snJzrBGijPnRq73nRDPNZcNmNjlNADD87qC2N0nrl63kUonNVlBaePwL0h8yic5W
HUgPXkbpqeX91Y9W+7+fE7b4uj3bAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU14PA
M+2JMKbQs2Xe5k0TMRdMazQwHwYDVR0jBBgwFoAUGo8PdPo6YC9H/Ow2uLP3niHz
ABgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2MTc3L0MyODU3MjY0Qzg1ODExRTZBOEVFNDY1RkY4QUVBMjI4L0dvOFBk
UG82WUM5SF9PdzJ1TFAzbmlIekFCZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0dvOFBkUG82WUM5SF9PdzJ1TFAzbmlIekFCZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTYxNzcvQzI4NTcyNjRDODU4MTFFNkE4RUU0NjVGRjhBRUEy
MjgvR284UGRQbzZZQzlIX093MnVMUDNuaUh6QUJnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB2h1W718OCYXrcPO6xQPcqEEEKKzl+Ny0j
fyBdbDMAc/R+JGYtuRi2eKlBb/f/zLm0w4HRF90wiA7KCzpp4ABM0IxZDKV9UmaH
j1UY4+zSdQsfxD+bPTm2qgi0jA/H+uiDXmMpeykzRBBUmBNdiCTnsJ0DQtaTFLLU
lRZWJ4FZ2jLNU+7o2P+g0koltHcvezojUPfos6cbSkNKf9AU0GLo/OfXOvZB/S6l
CmgOLT9pJgIc/mJkHxFnYvL56aGAy1ukUO7jmeO0p53Dtr+GwH/IEDHdIZVfEID9
W0e4jWEauxNkGttAy0iiXiOJ8v9Au8m9VRfjYIxY2aJXBcmJDcHI
-----END CERTIFICATE-----
Generated at Mon Oct 26 11:14:15 2026 by rpki-client