Error: rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
File:                     HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft (raw, json)
Hash identifier:          7beJxjdSrYDCVcfJRE/ESV0qLuc0EpuL4wERmgjH+6U=
Subject key identifier:   25:30:13:76:D5:37:EF:D9:1B:EF:59:E1:F0:E5:F2:68:10:26:F9:EA
Authority key identifier: 1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3
Certificate issuer:       /CN=F366BE85AR/serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
Certificate serial:       0295
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
Manifest number:          0294
Signing time:             Tue 27 Oct 2026 04:42:15 +0000
Manifest this update:     Tue 27 Oct 2026 04:42:15 +0000
Manifest next update:     Thu 29 Oct 2026 04:42:14 +0000
Files and hashes:         1: HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl (hash: hdfBo1TPdQRAsLXGH8YLOCeW8jdbBei3/l9ebrpR5DM=)
                          2: 7C21AA3ED29211EF86EA9485762E951A.roa (hash: 4sdnJ8RVycpCPlFVArT/uPl+lKxeM/KiQs7ThnHwqEM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                          rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AR, serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
        Validity
            Not Before: Oct 27 04:42:15 2026 GMT
            Not After : Oct 29 04:42:14 2026 GMT
        Subject: CN=6ae02ba7-f6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:7f:5b:11:2a:f7:fa:d0:b5:01:bf:0d:0a:
                    20:f3:4f:d4:fa:e0:f1:7b:ff:a1:15:c3:81:0f:be:
                    e3:2f:90:c8:a6:71:32:4f:77:43:98:6c:b9:6e:2c:
                    55:f3:09:50:bb:9f:73:d1:7d:da:e9:69:7d:47:bd:
                    c7:44:c8:59:85:05:56:0d:c8:2e:38:58:1e:52:79:
                    0b:1a:a3:cb:b7:ac:e6:2d:22:e5:78:8c:44:25:02:
                    90:d6:ae:6b:c6:9a:14:c4:91:72:6c:4c:85:8b:1d:
                    23:5b:88:fc:17:84:9e:03:00:c9:96:08:af:00:1a:
                    68:ff:27:d2:6d:ae:66:4f:3c:44:63:2b:b6:45:f3:
                    e1:82:e0:60:20:ee:15:60:7c:cd:f9:a1:cc:9f:ab:
                    a6:fe:92:3a:38:d6:66:d4:4f:f4:4a:ab:eb:a3:bc:
                    65:4f:e4:0e:46:4e:eb:97:e8:81:e4:fa:07:5e:90:
                    86:54:4a:5d:ac:7c:f5:46:f5:e5:58:e6:18:4e:10:
                    d9:26:76:d8:1c:c7:94:ad:28:02:bf:1b:da:2b:64:
                    5d:8d:ac:bc:68:9a:08:1c:bf:81:67:9f:fe:57:a8:
                    85:2a:56:36:3e:ff:50:7c:88:cd:86:33:98:fe:e3:
                    1b:82:31:5e:c6:d6:29:39:ab:53:98:7b:36:7e:53:
                    59:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:30:13:76:D5:37:EF:D9:1B:EF:59:E1:F0:E5:F2:68:10:26:F9:EA
            X509v3 Authority Key Identifier:
                keyid:1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:f1:41:da:58:e6:8d:17:85:68:9f:d7:06:a4:a1:86:07:1d:
         c8:9f:68:2a:22:e1:69:97:ed:c1:6f:f3:35:06:cb:35:34:00:
         a0:32:5b:c6:e9:67:50:9b:df:6f:f1:9e:fb:15:dd:62:33:98:
         25:ec:85:78:0e:0e:25:b1:19:8a:0a:ad:7b:3e:46:4b:04:a7:
         9c:3f:4d:4f:80:9b:bd:0d:5f:5d:fd:e8:b2:4d:e9:05:64:8f:
         05:d4:ab:48:35:4e:40:e4:68:a4:04:10:55:48:e5:d8:9b:05:
         e5:e8:fa:32:4a:8d:33:d1:f2:2c:32:b3:99:77:e6:b6:5e:a0:
         e3:fc:3e:ad:2a:b8:fb:71:c5:66:49:34:93:48:90:e7:91:43:
         ce:75:18:77:d4:a2:eb:ab:fc:c3:cc:05:9a:92:87:4a:4c:06:
         71:d1:b1:fe:34:71:e1:91:0f:db:c0:cb:d8:46:eb:32:ac:c7:
         59:d7:05:0d:fb:fd:85:4b:74:34:47:11:17:d1:80:1f:fd:92:
         d2:c8:cb:b7:23:ae:06:3f:b8:72:11:7b:57:43:06:e5:0d:ed:
         59:ad:b0:10:e6:ef:f6:ff:80:59:cb:00:3d:a5:88:32:31:41:
         9f:98:00:b2:c1:c8:7f:d9:cc:34:fa:01:bf:27:07:ec:c3:6e:
         7c:70:df:0c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICApUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkJFODVBUjExMC8GA1UEBRMoMUUwNTIyREUzQ0RBRjY4REM3QTc4NTczNDNEMjND
NTJFMjM3QjVBMzAeFw0yNjEwMjcwNDQyMTVaFw0yNjEwMjkwNDQyMTRaMBgxFjAU
BgNVBAMTDTZhZTAyYmE3LWY2ZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIgn9bESr3+tC1Ab8NCiDzT9T64PF7/6EVw4EPvuMvkMimcTJPd0OYbLlu
LFXzCVC7n3PRfdrpaX1HvcdEyFmFBVYNyC44WB5SeQsao8u3rOYtIuV4jEQlApDW
rmvGmhTEkXJsTIWLHSNbiPwXhJ4DAMmWCK8AGmj/J9JtrmZPPERjK7ZF8+GC4GAg
7hVgfM35ocyfq6b+kjo41mbUT/RKq+ujvGVP5A5GTuuX6IHk+gdekIZUSl2sfPVG
9eVY5hhOENkmdtgcx5StKAK/G9orZF2NrLxomggcv4Fnn/5XqIUqVjY+/1B8iM2G
M5j+4xuCMV7G1ik5q1OYezZ+U1nZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUJTAT
dtU379kb71nh8OXyaBAm+eowHwYDVR0jBBgwFoAUHgUi3jza9o3Hp4VzQ9I8UuI3
taMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCRTg1LzREQ0RCREI0RDI5MDExRUZCOTIxQUY3ODc2MkU5NTFBL0hnVWkz
anphOW8zSHA0VnpROUk4VXVJM3RhTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0hnVWkzanphOW8zSHA0VnpROUk4VXVJM3RhTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NkJFODUvNERDREJEQjREMjkwMTFFRkI5MjFBRjc4NzYyRTk1
MUEvSGdVaTNqemE5bzNIcDRWelE5SThVdUkzdGFNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBG8UHaWOaNF4Von9cGpKGGBx3In2gqIuFp
l+3Bb/M1Bss1NACgMlvG6WdQm99v8Z77Fd1iM5gl7IV4Dg4lsRmKCq17PkZLBKec
P01PgJu9DV9d/eiyTekFZI8F1KtINU5A5GikBBBVSOXYmwXl6PoySo0z0fIsMrOZ
d+a2XqDj/D6tKrj7ccVmSTSTSJDnkUPOdRh31KLrq/zDzAWakodKTAZx0bH+NHHh
kQ/bwMvYRusyrMdZ1wUN+/2FS3Q0RxEX0YAf/ZLSyMu3I64GP7hyEXtXQwblDe1Z
rbAQ5u/2/4BZywA9pYgyMUGfmACywch/2cw0+gG/Jwfsw258cN8M
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:17:06 2026 by rpki-client