Error: rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
File:                     dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft (raw, json)
Hash identifier:          5OlCbAA9IyXNfOQ8ejUXiNuUC0GqU0sq0nibkHYqVgY=
Subject key identifier:   77:7E:79:D3:B6:B1:91:D7:58:9E:2E:59:17:CF:FC:95:17:16:66:A1
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Certificate issuer:       /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial:       0205
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
Manifest number:          01FA
Signing time:             Mon 26 Oct 2026 05:00:12 +0000
Manifest this update:     Mon 26 Oct 2026 05:00:11 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:11 +0000
Files and hashes:         1: dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl (hash: UJKDGuVc5NKDdv/1xZo6p1n/nzX4eV/bM4oHHohQaCY=)
                          2: AEC64E0AB80511F0971756F5DAE4EC9C.roa (hash: ykyErqJ9jMFlHt469iZFdc3zrZTDRfcAk+IWnW9xqMk=)
                          3: F330454475E911F1912FD5ACCE1D38B0.roa (hash: qmUbYot1nqsMbckCpWdEzy35tfteUOIURjfNCFIfS94=)
                          4: CD1104AC75DA11F1BC9990D3CE1D38B0.roa (hash: Zg5RWEgoA8Ow+axhg3Kss4mDZWo7l8RiP49z0j1eexs=)
                          5: 836F78B075DA11F1A1AB81D1CE1D38B0.roa (hash: C/oJZAkfwxQNcxTSbWLPjl5Q16hiylcczMDjFaQmjNE=)
                          6: EE670342B42211F0993F858CDAE4EC9C.roa (hash: iVTP+qjlG2fos49aJPA63qSgM1CByci4d+Gh4O+20Ng=)
                          7: FED45DEE75EA11F18B33C1B3CE1D38B0.roa (hash: nKWlg2D4RIZBs3lHbtX+wqy5k+dvX6IDFHmk81XF7LE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
        Validity
            Not Before: Oct 26 05:00:11 2026 GMT
            Not After : Oct 28 05:00:11 2026 GMT
        Subject: CN=6adede5c-0839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cc:7c:95:f1:0f:2b:06:68:fb:da:42:86:e6:
                    97:b7:13:9f:4d:fc:03:8f:d8:f5:ce:51:be:23:d8:
                    6f:ca:aa:80:bf:b0:07:75:6a:43:4b:58:dc:3c:26:
                    e6:11:6e:db:c3:b5:1d:fe:fc:df:57:16:4f:72:8f:
                    16:e9:4a:67:22:e0:d0:b7:5a:59:a1:16:cb:a5:76:
                    4e:3b:30:cc:95:9d:4d:fe:3b:97:0b:92:ca:48:d8:
                    18:8b:db:21:2c:eb:e3:00:30:bb:b0:fe:f8:a7:b3:
                    70:9d:f5:d8:81:f2:f9:b5:96:21:90:cf:0d:3b:99:
                    19:6b:5e:16:c2:fe:08:1c:26:fc:f1:74:43:aa:80:
                    1e:cf:42:be:27:8d:cb:78:44:2b:43:28:59:61:b0:
                    2a:ad:55:99:42:f3:e9:68:29:6a:1c:c5:91:62:d1:
                    e4:17:77:49:8c:57:39:1b:c2:4c:44:2b:b0:12:be:
                    0a:fb:8a:39:df:46:c1:4d:c7:53:33:3b:c1:7f:02:
                    40:36:2e:b1:e5:53:76:e4:f5:b9:0c:02:df:d9:21:
                    c9:3b:f7:84:9d:96:25:97:e6:ab:9f:54:f4:74:af:
                    fe:64:8d:ec:a6:3a:48:27:38:bc:ee:bb:41:48:d4:
                    5b:cc:e6:b2:2c:2e:cb:b1:5c:67:85:b6:11:25:09:
                    92:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:7E:79:D3:B6:B1:91:D7:58:9E:2E:59:17:CF:FC:95:17:16:66:A1
            X509v3 Authority Key Identifier:
                keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:34:1f:ce:7c:55:3a:68:f9:45:61:b8:95:e7:72:32:28:12:
         67:1f:0a:ac:4b:77:ae:42:9c:3b:6b:26:cd:4e:82:74:77:fc:
         87:91:91:d0:ff:b4:4c:8e:30:ef:da:52:79:72:e5:bf:66:92:
         dc:50:96:bc:24:33:6d:42:b0:98:97:eb:b6:a7:3c:df:b5:3b:
         eb:6a:64:c2:14:bb:81:09:c7:55:5b:bc:9a:07:6a:f0:2c:0e:
         8c:9f:b7:eb:27:88:35:92:fd:59:f0:c5:43:0e:63:88:88:fd:
         29:d4:66:26:9f:49:77:3b:01:19:e2:59:4c:97:2b:55:1f:32:
         82:2e:21:ed:fb:01:1a:7c:a1:c7:4e:05:68:b3:5b:3c:69:75:
         de:de:1c:6a:f7:f9:e0:08:41:2f:b1:cd:27:db:18:dc:32:5a:
         39:b0:a6:3d:99:db:19:d3:cc:2f:57:65:58:a2:9d:21:5a:ca:
         f2:9d:b9:7a:07:46:8c:1f:fc:3a:2f:66:7c:f3:ae:53:60:9c:
         6c:04:c3:56:c1:e4:a9:7f:ac:d7:db:4e:7c:a9:d1:13:d4:37:
         47:1e:5c:ed:fd:eb:a9:46:b4:44:a1:8e:79:ad:78:15:de:cf:
         9d:ba:bf:c3:12:22:e0:bb:33:c4:73:fa:b0:7a:b5:cf:28:ea:
         56:5d:63:36
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzYxMzRBRjExMC8GA1UEBRMoNzRCMDNCOEZEOEY1M0JFRjQ4ODdCNzg2OThGOUVD
QUIxQjFGNjlCMDAeFw0yNjEwMjYwNTAwMTFaFw0yNjEwMjgwNTAwMTFaMBgxFjAU
BgNVBAMTDTZhZGVkZTVjLTA4MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPzHyV8Q8rBmj72kKG5pe3E59N/AOP2PXOUb4j2G/KqoC/sAd1akNLWNw8
JuYRbtvDtR3+/N9XFk9yjxbpSmci4NC3WlmhFsuldk47MMyVnU3+O5cLkspI2BiL
2yEs6+MAMLuw/vins3Cd9diB8vm1liGQzw07mRlrXhbC/ggcJvzxdEOqgB7PQr4n
jct4RCtDKFlhsCqtVZlC8+loKWocxZFi0eQXd0mMVzkbwkxEK7ASvgr7ijnfRsFN
x1MzO8F/AkA2LrHlU3bk9bkMAt/ZIck794SdliWX5qufVPR0r/5kjeymOkgnOLzu
u0FI1FvM5rIsLsuxXGeFthElCZItAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUd355
07axkddYni5ZF8/8lRcWZqEwHwYDVR0jBBgwFoAUdLA7j9j1O+9Ih7eGmPnsqxsf
abAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2MTM0LzMzNjJDMUFBNTY3RTExRjBCMDE0RjlERURBRTRFQzlDL2RMQTdq
OWoxTy05SWg3ZUdtUG5zcXhzZmFiQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2RMQTdqOWoxTy05SWg3ZUdtUG5zcXhzZmFiQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzYxMzQvMzM2MkMxQUE1NjdFMTFGMEIwMTRGOURFREFF
NEVDOUMvZExBN2o5ajFPLTlJaDdlR21QbnNxeHNmYWJBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARNB/OfFU6aPlFYbiV53IyKBJnHwqs
S3euQpw7aybNToJ0d/yHkZHQ/7RMjjDv2lJ5cuW/ZpLcUJa8JDNtQrCYl+u2pzzf
tTvramTCFLuBCcdVW7yaB2rwLA6Mn7frJ4g1kv1Z8MVDDmOIiP0p1GYmn0l3OwEZ
4llMlytVHzKCLiHt+wEafKHHTgVos1s8aXXe3hxq9/ngCEEvsc0n2xjcMlo5sKY9
mdsZ08wvV2VYop0hWsrynbl6B0aMH/w6L2Z8865TYJxsBMNWweSpf6zX2058qdET
1DdHHlzt/eupRrREoY55rXgV3s+dur/DEiLguzPEc/qwerXPKOpWXWM2
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:56:58 2026 by rpki-client