Error: rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File:                     vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier:          BZVdGmd9rBGEtDsS+N6QhdiOdylgpM8sWGL4BD791Ww=
Subject key identifier:   97:AF:68:EF:BB:8D:91:F1:08:C3:F1:17:B8:68:52:3C:66:CE:9F:30
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer:       /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial:       04B8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number:          04B8
Signing time:             Mon 26 Oct 2026 03:37:22 +0000
Manifest this update:     Mon 26 Oct 2026 03:37:21 +0000
Manifest next update:     Wed 28 Oct 2026 03:37:21 +0000
Files and hashes:         1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: 955PSvPfEVyO6yTBXz9FRWxNdM6k+pOlM/dFfaXaRaQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:37:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
        Validity
            Not Before: Oct 26 03:37:21 2026 GMT
            Not After : Oct 28 03:37:21 2026 GMT
        Subject: CN=6adecaf2-7394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a1:03:25:05:6a:61:8b:ff:dc:ed:52:a9:82:
                    e3:80:38:4f:ad:33:34:6d:69:8d:0f:05:99:61:89:
                    c9:07:75:02:47:ce:ac:98:9f:99:02:7e:65:d3:2e:
                    0c:21:18:f0:c5:76:4a:28:44:a7:32:a4:08:52:9f:
                    5e:89:e5:63:c4:09:ca:10:16:11:d6:51:64:22:ec:
                    d8:cb:ba:8d:e1:b0:c4:30:87:b1:4e:cb:08:4c:89:
                    9a:95:16:db:d4:1b:b6:41:ea:ec:60:d5:8d:25:a7:
                    13:55:ba:35:a6:6a:2f:38:cc:ac:fd:30:03:ea:ed:
                    9b:fd:4e:e8:51:2d:d5:ec:fd:98:88:b5:e1:cc:4f:
                    c4:f1:05:45:7c:3e:d0:a3:89:57:5e:b1:3a:2a:49:
                    f6:56:ec:2e:e2:70:25:ab:b8:4a:4f:cc:83:3e:8c:
                    ca:b4:6f:38:8f:b2:42:53:82:36:0b:d2:76:81:7a:
                    46:82:00:45:af:e5:14:30:11:18:1c:89:68:57:06:
                    b6:65:91:ab:b6:61:b2:ca:5e:92:35:f0:70:c0:45:
                    e2:32:29:ed:e9:8b:1a:4f:db:8a:b6:a5:e1:25:eb:
                    1b:51:c2:ca:18:a7:5c:e7:92:c5:db:83:7f:a3:1f:
                    82:e3:c9:1c:6c:59:ec:d0:d3:4e:35:e7:59:eb:42:
                    7a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AF:68:EF:BB:8D:91:F1:08:C3:F1:17:B8:68:52:3C:66:CE:9F:30
            X509v3 Authority Key Identifier:
                keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:45:57:23:f4:4f:b1:6b:a5:ae:5a:f5:a6:fe:24:8f:ae:d6:
         9e:f3:32:bf:70:2b:1f:a0:87:d9:7a:43:cd:49:32:28:b3:59:
         04:e8:6f:7b:26:93:76:fc:fd:50:e2:2a:58:17:c6:ef:de:b5:
         ad:33:e9:0f:a1:95:b3:f1:86:b0:46:a4:94:7f:0e:78:5b:92:
         63:6d:32:5a:c8:a5:a9:6c:81:84:32:7c:c7:8c:84:86:e5:94:
         70:1a:f8:dd:75:bd:24:17:fc:29:d8:d2:aa:89:2d:e8:16:f0:
         84:86:be:a8:15:bd:f8:d1:ef:48:4d:1b:fb:a1:dd:82:d2:05:
         5a:d1:19:b7:c6:44:76:e6:59:e3:6b:38:ef:72:98:57:6f:4f:
         59:ba:8e:38:7c:40:d6:17:18:3e:1d:d0:e8:00:bc:4d:24:43:
         c9:ab:c8:b3:52:15:96:3d:d0:98:8a:c9:e8:57:c8:3d:8a:2c:
         8d:2c:30:b5:8c:65:2f:88:aa:30:02:41:41:14:40:0f:8c:3b:
         b7:87:2f:42:e7:58:7d:f3:c0:37:7f:dc:4c:e0:d7:c3:aa:54:
         2a:f4:94:4c:e2:b3:9e:29:64:d3:d6:47:37:2c:74:6f:00:ea:
         ef:55:04:a3:57:4f:8c:c8:29:2f:6e:ef:82:3b:c7:cf:59:a4:
         21:f8:03:bf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUIzN0RBRjExMC8GA1UEBRMoQkVERTM3QkJERjZCQkRDN0EyMzIyQTVGMDkwRjgw
RUI3MTFGMDY3OTAeFw0yNjEwMjYwMzM3MjFaFw0yNjEwMjgwMzM3MjFaMBgxFjAU
BgNVBAMTDTZhZGVjYWYyLTczOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDoQMlBWphi//c7VKpguOAOE+tMzRtaY0PBZlhickHdQJHzqyYn5kCfmXT
LgwhGPDFdkooRKcypAhSn16J5WPECcoQFhHWUWQi7NjLuo3hsMQwh7FOywhMiZqV
FtvUG7ZB6uxg1Y0lpxNVujWmai84zKz9MAPq7Zv9TuhRLdXs/ZiIteHMT8TxBUV8
PtCjiVdesToqSfZW7C7icCWruEpPzIM+jMq0bziPskJTgjYL0naBekaCAEWv5RQw
ERgciWhXBrZlkau2YbLKXpI18HDAReIyKe3pixpP24q2peEl6xtRwsoYp1znksXb
g3+jH4LjyRxsWezQ004151nrQnohAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUl69o
77uNkfEIw/EXuGhSPGbOnzAwHwYDVR0jBBgwFoAUvt43u99rvceiMipfCQ+A63Ef
BnkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCMzdELzM1Q0M1MUQ4MzA1RTExRUU4RjA0NUY4NDRBRDlFNkZDL3Z0NDN1
OTlydmNlaU1pcGZDUS1BNjNFZkJuay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3Z0NDN1OTlydmNlaU1pcGZDUS1BNjNFZkJuay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUIzN0QvMzVDQzUxRDgzMDVFMTFFRThGMDQ1Rjg0NEFE
OUU2RkMvdnQ0M3U5OXJ2Y2VpTWlwZkNRLUE2M0VmQm5rLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAURVcj9E+xa6WuWvWm/iSPrtae8zK/
cCsfoIfZekPNSTIos1kE6G97JpN2/P1Q4ipYF8bv3rWtM+kPoZWz8YawRqSUfw54
W5JjbTJayKWpbIGEMnzHjISG5ZRwGvjddb0kF/wp2NKqiS3oFvCEhr6oFb340e9I
TRv7od2C0gVa0Rm3xkR25lnjazjvcphXb09Zuo44fEDWFxg+HdDoALxNJEPJq8iz
UhWWPdCYisnoV8g9iiyNLDC1jGUviKowAkFBFEAPjDu3hy9C51h988A3f9xM4NfD
qlQq9JRM4rOeKWTT1kc3LHRvAOrvVQSjV0+MyCkvbu+CO8fPWaQh+AO/
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:47:43 2026 by rpki-client