Error: rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          7uk8WT1d7oBOhKdb+RXpo47D20JJBBe+rgX5tZiOPVM=
Subject key identifier:   79:59:ED:0B:04:38:B1:20:EB:0A:0E:F1:55:E6:CC:34:D8:AE:0D:89
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       056D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          0569
Signing time:             Fri 11 Sep 2026 03:07:54 +0000
Manifest this update:     Fri 11 Sep 2026 03:07:53 +0000
Manifest next update:     Sun 13 Sep 2026 03:07:53 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: 6VoL+OcXaTRV8IwZ7susjGJz8gD8aHQ6na0AKFhkTJk=)
                          2: C2145D3E8D7611F19180D9A4CE1D38B0.roa (hash: V/VBmgwF523cWFsoJg1xtw+zTBRqg7p5L16jWC/SF8U=)
                          3: 2BCE620636E811F0AFEF58D4DAE4EC9C.roa (hash: P7lmUgIS9Hm4lWbQ/Ee8DkBKFNBVl2htZZLdVzqMPOo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 03:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: Sep 11 03:07:53 2026 GMT
            Not After : Sep 13 03:07:53 2026 GMT
        Subject: CN=6aa3708a-8d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a9:50:4a:fc:fa:88:58:3d:1a:5a:6c:6c:bc:
                    df:32:44:bf:17:03:6a:fc:82:95:fa:3a:5c:81:ae:
                    4c:24:db:c1:a8:c6:2a:7c:dc:25:8b:78:aa:9b:49:
                    13:82:79:ea:a4:f3:8f:b1:31:7e:0d:7b:19:7b:d8:
                    4d:7f:12:64:3c:a4:f9:b3:58:8a:f1:fc:db:16:b2:
                    91:37:68:77:ab:06:69:f1:96:58:f8:c1:ea:05:69:
                    e8:83:94:1a:0a:5b:e6:ad:4b:b0:96:75:45:7d:8d:
                    e2:75:21:3c:3e:18:62:18:50:ea:fc:93:29:8d:82:
                    32:6a:fb:71:01:05:fe:6c:52:b4:50:1f:74:e7:75:
                    30:3e:da:45:a8:49:97:b5:e4:67:8b:9a:51:86:e9:
                    40:c0:89:26:e5:15:d3:bc:3e:85:87:2c:64:7c:f2:
                    a4:0e:af:28:97:7c:43:5c:2d:5f:6d:bf:dc:11:e1:
                    ef:6d:28:09:34:be:ad:82:1b:e5:61:26:68:fc:5e:
                    29:a2:39:33:94:5f:21:d3:bf:14:dd:37:11:88:3e:
                    6d:14:d5:53:53:bd:c9:bc:87:36:9a:95:8b:9c:9f:
                    72:47:a1:5a:b7:b2:b1:b7:16:2a:11:bc:98:e5:95:
                    c2:83:7d:6a:16:8d:ae:cc:c6:be:de:6a:d9:07:c9:
                    bd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:59:ED:0B:04:38:B1:20:EB:0A:0E:F1:55:E6:CC:34:D8:AE:0D:89
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:d1:3b:66:7e:5b:33:e4:99:97:64:ba:26:bc:ce:d7:7c:3c:
         0a:0c:61:77:3e:4b:b6:75:1e:7e:e6:f4:30:f6:0e:47:de:fc:
         39:4d:c6:e7:be:06:9f:90:20:21:02:c8:28:3d:fb:cf:a3:a5:
         bb:dc:36:09:4e:a1:73:54:0a:1c:c9:f3:5b:59:ec:ac:d5:8e:
         f4:b9:8b:1f:31:ec:84:6c:20:57:f4:f1:0b:8d:47:3e:89:c5:
         83:88:96:0b:92:4a:93:e9:2d:d7:b7:7f:b0:89:de:76:76:2a:
         81:17:a9:e2:43:f8:17:ef:5b:cf:df:d4:a3:81:43:ef:79:fb:
         ff:52:a1:48:0f:3a:c6:4d:82:f1:f8:0b:09:0d:81:60:44:82:
         08:57:d8:98:0a:9e:11:75:9e:ae:17:97:71:d1:0e:8e:a4:62:
         05:31:3d:17:b8:6a:47:ff:c4:4e:b2:75:11:e8:41:d1:d3:ca:
         bc:2e:ff:a3:a6:d2:b0:06:63:47:d6:8a:8e:5e:7d:6c:98:71:
         50:0b:d3:c0:1c:a5:87:63:85:21:82:93:ad:7b:b3:7f:01:28:
         4d:14:72:93:bf:da:57:99:b7:e1:c8:37:0d:5a:a0:13:71:db:
         2c:13:5c:d0:ec:03:f1:66:36:ec:ca:96:f6:bf:61:0e:36:d6:
         ee:65:6c:c8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBW0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjJEQUJBRjExMC8GA1UEBRMoNUNBMzg5RkI4MDUxRDI0MTJCQTVERjgwMUQ4OUIy
Q0FDRTU3MjU5QzAeFw0yNjA5MTEwMzA3NTNaFw0yNjA5MTMwMzA3NTNaMBgxFjAU
BgNVBAMTDTZhYTM3MDhhLThkMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdqVBK/PqIWD0aWmxsvN8yRL8XA2r8gpX6OlyBrkwk28Goxip83CWLeKqb
SROCeeqk84+xMX4Nexl72E1/EmQ8pPmzWIrx/NsWspE3aHerBmnxllj4weoFaeiD
lBoKW+atS7CWdUV9jeJ1ITw+GGIYUOr8kymNgjJq+3EBBf5sUrRQH3TndTA+2kWo
SZe15GeLmlGG6UDAiSblFdO8PoWHLGR88qQOryiXfENcLV9tv9wR4e9tKAk0vq2C
G+VhJmj8XimiOTOUXyHTvxTdNxGIPm0U1VNTvcm8hzaalYucn3JHoVq3srG3FioR
vJjllcKDfWoWja7Mxr7eatkHyb2LAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeVnt
CwQ4sSDrCg7xVebMNNiuDYkwHwYDVR0jBBgwFoAUXKOJ+4BR0kErpd+AHYmyys5X
JZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyREFCLzA0OEY4ODEwOEYzMjExRURCMEVFRjFCN0YxMjIyNDY4L1hLT0ot
NEJSMGtFcnBkLUFIWW15eXM1WEpady5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hLT0otNEJSMGtFcnBkLUFIWW15eXM1WEpady5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjJEQUIvMDQ4Rjg4MTA4RjMyMTFFREIwRUVGMUI3RjEy
MjI0NjgvWEtPSi00QlIwa0VycGQtQUhZbXl5czVYSlp3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDi0Ttmflsz5JmXZLomvM7XfDwKDGF3
Pku2dR5+5vQw9g5H3vw5TcbnvgafkCAhAsgoPfvPo6W73DYJTqFzVAocyfNbWeys
1Y70uYsfMeyEbCBX9PELjUc+icWDiJYLkkqT6S3Xt3+wid52diqBF6niQ/gX71vP
39SjgUPvefv/UqFIDzrGTYLx+AsJDYFgRIIIV9iYCp4RdZ6uF5dx0Q6OpGIFMT0X
uGpH/8ROsnUR6EHR08q8Lv+jptKwBmNH1oqOXn1smHFQC9PAHKWHY4UhgpOte7N/
AShNFHKTv9pXmbfhyDcNWqATcdssE1zQ7APxZjbsypb2v2EONtbuZWzI
-----END CERTIFICATE-----
Generated at Fri Sep 11 16:30:10 2026 by rpki-client