Error: rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
File:                     79LD3jroxM6ee5PJ99RbqS6xTow.mft (raw, json)
Hash identifier:          qyJiFv6xUXDIRqqoMJ3h7XwWtckfBFb5Wu5vNU6Snr0=
Subject key identifier:   61:D1:EF:86:48:92:E8:AD:AF:7D:C9:81:A3:3A:C3:2C:95:4C:59:DC
Authority key identifier: EF:D2:C3:DE:3A:E8:C4:CE:9E:7B:93:C9:F7:D4:5B:A9:2E:B1:4E:8C
Certificate issuer:       /CN=F3676EF0AF/serialNumber=EFD2C3DE3AE8C4CE9E7B93C9F7D45BA92EB14E8C
Certificate serial:       031D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
Manifest number:          031C
Signing time:             Sat 24 Oct 2026 04:28:27 +0000
Manifest this update:     Sat 24 Oct 2026 04:28:26 +0000
Manifest next update:     Mon 26 Oct 2026 04:28:26 +0000
Files and hashes:         1: 79LD3jroxM6ee5PJ99RbqS6xTow.crl (hash: tKy+arL3Dku9XE1nbV3sfqrxh39IYlB57gTCIQ61LnI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
                          rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 797 (0x31d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AF, serialNumber=EFD2C3DE3AE8C4CE9E7B93C9F7D45BA92EB14E8C
        Validity
            Not Before: Oct 24 04:28:26 2026 GMT
            Not After : Oct 26 04:28:26 2026 GMT
        Subject: CN=6adc33eb-301e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:00:5c:9a:83:56:f5:9a:a3:ab:c4:6a:56:
                    ae:56:fa:34:76:34:dd:df:26:86:82:7f:6a:72:b2:
                    a0:b0:b8:1a:89:1c:5f:8c:b5:4d:8c:ef:77:e5:88:
                    58:9c:ff:21:a3:ac:ab:d1:e8:42:be:f3:14:89:c3:
                    a0:6b:78:db:60:92:ff:90:e7:41:4a:49:77:3c:5e:
                    65:e1:97:50:11:04:8a:05:04:b5:af:3e:ed:65:e6:
                    c1:35:d8:76:c9:f3:b9:e6:e7:e3:eb:b9:53:be:87:
                    5b:12:59:b6:15:52:a9:c3:87:81:01:0d:82:1e:67:
                    c5:49:87:a4:a8:a3:9e:73:d2:5c:55:4a:e1:d7:ca:
                    70:9b:7b:c9:92:5e:80:09:8d:d9:90:b1:d8:1e:a6:
                    17:af:4e:2a:ab:47:58:44:ef:95:49:14:39:f5:5d:
                    f2:6a:60:69:14:53:13:24:be:d8:33:ba:84:1e:1f:
                    83:0d:3e:b6:8c:33:bf:e2:7e:3b:61:29:7c:63:b9:
                    fb:89:fa:37:08:6a:dd:95:7a:dd:04:4d:c0:d4:73:
                    68:26:ec:19:1c:c5:1a:11:0d:ec:2e:ff:7c:6e:65:
                    67:43:02:df:77:21:f1:a0:7b:6d:71:b9:1c:88:8d:
                    3a:8c:04:47:f7:93:47:6f:f6:41:1e:7d:5a:e1:fe:
                    aa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D1:EF:86:48:92:E8:AD:AF:7D:C9:81:A3:3A:C3:2C:95:4C:59:DC
            X509v3 Authority Key Identifier:
                keyid:EF:D2:C3:DE:3A:E8:C4:CE:9E:7B:93:C9:F7:D4:5B:A9:2E:B1:4E:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/79LD3jroxM6ee5PJ99RbqS6xTow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/6E8128646AAA11EF9DAC8CA5762E951A/79LD3jroxM6ee5PJ99RbqS6xTow.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:8a:a3:92:16:97:cc:1b:9e:64:78:f3:24:d1:3b:1e:31:33:
         cc:e1:b7:e1:51:bc:f6:51:93:e9:df:35:86:8f:df:9a:b9:b0:
         d1:7c:e2:d7:e5:3f:e9:ce:97:03:1b:23:f9:5d:0a:40:4f:ae:
         6c:f7:98:16:8b:20:f6:e0:7d:e4:73:10:31:5c:4f:28:51:98:
         f2:c1:16:b6:0c:b7:86:74:95:b3:ac:e3:e2:ff:0f:3b:0e:25:
         30:90:51:99:71:03:dd:7c:70:05:18:59:28:07:76:cd:8f:f2:
         af:cb:0a:aa:1b:c6:b1:01:4f:95:06:e0:c2:24:e1:7d:4c:5b:
         09:be:a6:70:98:3a:a3:58:90:65:87:ab:43:46:b7:de:d0:90:
         ff:9f:a5:b8:5a:9b:74:5d:65:27:64:f7:d9:7d:25:4f:8d:9c:
         95:a7:44:73:8f:4f:7b:ff:82:04:fc:3e:11:61:f0:c4:1c:ac:
         44:b9:2a:04:31:be:16:df:e9:62:26:fd:27:31:47:91:8e:40:
         7d:02:ad:97:33:5f:18:e9:c4:f0:38:23:e6:2d:db:ad:23:53:
         ff:46:9e:b1:c7:5b:64:92:9c:fa:08:d2:d7:bc:62:61:c4:a1:
         7e:61:c4:3e:71:61:da:96:03:08:94:fd:2a:f3:99:51:f0:2d:
         bd:a3:59:12
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAx0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzZFRjBBRjExMC8GA1UEBRMoRUZEMkMzREUzQUU4QzRDRTlFN0I5M0M5RjdENDVC
QTkyRUIxNEU4QzAeFw0yNjEwMjQwNDI4MjZaFw0yNjEwMjYwNDI4MjZaMBgxFjAU
BgNVBAMTDTZhZGMzM2ViLTMwMWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+fABcmoNW9Zqjq8RqVq5W+jR2NN3fJoaCf2pysqCwuBqJHF+MtU2M73fl
iFic/yGjrKvR6EK+8xSJw6BreNtgkv+Q50FKSXc8XmXhl1ARBIoFBLWvPu1l5sE1
2HbJ87nm5+PruVO+h1sSWbYVUqnDh4EBDYIeZ8VJh6Soo55z0lxVSuHXynCbe8mS
XoAJjdmQsdgephevTiqrR1hE75VJFDn1XfJqYGkUUxMkvtgzuoQeH4MNPraMM7/i
fjthKXxjufuJ+jcIat2Vet0ETcDUc2gm7BkcxRoRDewu/3xuZWdDAt93IfGge21x
uRyIjTqMBEf3k0dv9kEefVrh/qr7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYdHv
hkiS6K2vfcmBozrDLJVMWdwwHwYDVR0jBBgwFoAU79LD3jroxM6ee5PJ99RbqS6x
TowwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2RUYwLzZFODEyODY0NkFBQTExRUY5REFDOENBNTc2MkU5NTFBLzc5TEQz
anJveE02ZWU1UEo5OVJicVM2eFRvdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzc5TEQzanJveE02ZWU1UEo5OVJicVM2eFRvdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzZFRjAvNkU4MTI4NjQ2QUFBMTFFRjlEQUM4Q0E1NzYy
RTk1MUEvNzlMRDNqcm94TTZlZTVQSjk5UmJxUzZ4VG93Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBWiqOSFpfMG55kePMk0TseMTPM4bfh
Ubz2UZPp3zWGj9+aubDRfOLX5T/pzpcDGyP5XQpAT65s95gWiyD24H3kcxAxXE8o
UZjywRa2DLeGdJWzrOPi/w87DiUwkFGZcQPdfHAFGFkoB3bNj/KvywqqG8axAU+V
BuDCJOF9TFsJvqZwmDqjWJBlh6tDRrfe0JD/n6W4Wpt0XWUnZPfZfSVPjZyVp0Rz
j097/4IE/D4RYfDEHKxEuSoEMb4W3+liJv0nMUeRjkB9Aq2XM18Y6cTwOCPmLdut
I1P/Rp6xx1tkkpz6CNLXvGJhxKF+YcQ+cWHalgMIlP0q85lR8C29o1kS
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:17:22 2026 by rpki-client