Error: rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
File:                     VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft (raw, json)
Hash identifier:          FZYkJZjsqy0TWpCuTaDtse1zSpSGyQ8PGmUEMJOuTHw=
Subject key identifier:   12:43:30:E2:60:BA:1F:6E:6F:D2:EA:11:68:2E:42:E8:95:5C:D5:3A
Authority key identifier: 56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
Certificate issuer:       /CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Certificate serial:       0568
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
Manifest number:          055F
Signing time:             Sat 19 Sep 2026 07:30:28 +0000
Manifest this update:     Sat 19 Sep 2026 07:30:27 +0000
Manifest next update:     Mon 21 Sep 2026 07:30:27 +0000
Files and hashes:         1: VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl (hash: WjfoCktiVhxVOo0U++Z/NoSyYjpPMf88w/WRgJTVE+I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1384 (0x568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D0C5AF, serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
        Validity
            Not Before: Sep 19 07:30:27 2026 GMT
            Not After : Sep 21 07:30:27 2026 GMT
        Subject: CN=6aae3a14-02d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:cf:68:94:fd:1b:16:3d:2a:eb:b5:6c:48:
                    99:ad:74:30:39:fc:3c:cb:67:90:67:58:d0:bd:65:
                    e9:39:a6:42:6f:46:fd:ca:3f:fa:3e:42:ba:ef:4e:
                    81:38:3c:78:3c:08:93:90:b0:76:7f:78:13:ef:ba:
                    78:03:d2:79:a5:6c:d0:5f:fb:2e:f7:65:97:08:35:
                    14:f9:3d:96:af:56:6a:e3:bf:d3:60:c5:fb:39:e0:
                    10:db:e7:75:56:71:ec:ed:5e:7b:e4:fb:f4:fb:3a:
                    74:52:f9:f5:c0:04:ed:48:aa:a7:5a:ef:c7:d3:94:
                    ad:22:cc:e3:72:dc:22:bf:c9:dc:94:77:78:ad:06:
                    43:06:9d:d7:e6:13:ae:e3:42:b8:21:28:c6:0f:f8:
                    2a:49:68:88:db:88:56:23:45:09:d3:64:81:3d:97:
                    15:48:ba:c2:ca:c6:ee:71:eb:08:79:ef:2f:5f:2f:
                    ea:26:fd:08:da:8f:e7:0f:ab:d7:84:94:42:d1:ae:
                    9d:64:6d:0a:a7:45:74:2e:45:bf:1b:f3:e6:5f:1a:
                    5a:96:25:0c:93:86:18:16:d5:01:e7:ef:ad:79:a1:
                    a0:78:dd:86:f3:c3:68:57:f5:77:1a:7a:98:4e:e7:
                    99:6e:09:a1:dd:51:18:96:5a:7f:f6:e8:d3:13:2b:
                    c5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:43:30:E2:60:BA:1F:6E:6F:D2:EA:11:68:2E:42:E8:95:5C:D5:3A
            X509v3 Authority Key Identifier:
                keyid:56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:a8:7d:c3:28:4a:b2:da:e0:ab:af:83:9c:12:92:e0:0a:46:
         dd:48:b2:0c:f2:78:07:12:9e:a9:e0:05:6e:21:4d:66:72:4d:
         63:7a:ec:43:30:c6:75:28:a6:63:c2:2a:89:28:a2:81:8e:10:
         4f:74:20:3b:f4:67:6c:c9:9c:ee:4e:d0:d2:ff:de:f3:72:2e:
         27:01:eb:df:15:d0:72:c0:ec:6f:53:ed:3d:22:f1:4d:19:cc:
         0a:a0:f3:10:43:1f:df:91:cd:de:a0:ca:38:f5:60:02:6a:8f:
         64:83:ba:c1:1d:43:ad:01:b4:74:fa:f5:3e:8c:e0:a7:4d:bf:
         9e:a6:43:9e:fc:7f:a1:73:95:13:21:a5:dc:2a:69:bf:bb:c2:
         93:00:25:42:1d:d8:fc:fd:ae:e7:9b:cd:d2:b3:85:7a:6f:01:
         f2:93:e8:92:cd:da:32:75:0f:12:fb:a8:9a:ed:ad:99:7c:1e:
         1a:7d:0b:9d:6e:58:89:10:c0:be:a9:17:c9:bc:a0:a2:1c:ff:
         b3:2f:b8:4e:40:0f:72:be:bf:cb:d1:e6:30:86:11:83:1c:e0:
         4b:50:76:dd:f7:40:81:65:3e:96:a9:ba:52:3a:f6:02:df:24:
         2c:5d:3d:50:22:91:74:26:75:e4:71:a4:2d:70:99:eb:51:9a:
         b4:84:cf:8a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBWgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0QwQzVBRjExMC8GA1UEBRMoNTY5MjQ1RURGOEVGNTNERDI1RTAwOTVBMTI0ODVC
MTcwRjEwRUMzRTAeFw0yNjA5MTkwNzMwMjdaFw0yNjA5MjEwNzMwMjdaMBgxFjAU
BgNVBAMTDTZhYWUzYTE0LTAyZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+Ss9olP0bFj0q67VsSJmtdDA5/DzLZ5BnWNC9Zek5pkJvRv3KP/o+Qrrv
ToE4PHg8CJOQsHZ/eBPvungD0nmlbNBf+y73ZZcINRT5PZavVmrjv9Ngxfs54BDb
53VWceztXnvk+/T7OnRS+fXABO1Iqqda78fTlK0izONy3CK/ydyUd3itBkMGndfm
E67jQrghKMYP+CpJaIjbiFYjRQnTZIE9lxVIusLKxu5x6wh57y9fL+om/Qjaj+cP
q9eElELRrp1kbQqnRXQuRb8b8+ZfGlqWJQyThhgW1QHn7615oaB43Ybzw2hX9Xca
ephO55luCaHdURiWWn/26NMTK8WzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEkMw
4mC6H25v0uoRaC5C6JVc1TowHwYDVR0jBBgwFoAUVpJF7fjvU90l4AlaEkhbFw8Q
7D4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdEMEM1LzI5RTM4MUFFQTQ4OTExRUQ4MTY5MUU4N0YxMjIyNDY4L1ZwSkY3
Zmp2VTkwbDRBbGFFa2hiRnc4UTdENC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ZwSkY3Zmp2VTkwbDRBbGFFa2hiRnc4UTdENC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0QwQzUvMjlFMzgxQUVBNDg5MTFFRDgxNjkxRTg3RjEy
MjI0NjgvVnBKRjdmanZVOTBsNEFsYUVraGJGdzhRN0Q0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBFqH3DKEqy2uCrr4OcEpLgCkbdSLIM
8ngHEp6p4AVuIU1mck1jeuxDMMZ1KKZjwiqJKKKBjhBPdCA79GdsyZzuTtDS/97z
ci4nAevfFdBywOxvU+09IvFNGcwKoPMQQx/fkc3eoMo49WACao9kg7rBHUOtAbR0
+vU+jOCnTb+epkOe/H+hc5UTIaXcKmm/u8KTACVCHdj8/a7nm83Ss4V6bwHyk+iS
zdoydQ8S+6ia7a2ZfB4afQudbliJEMC+qRfJvKCiHP+zL7hOQA9yvr/L0eYwhhGD
HOBLUHbd90CBZT6WqbpSOvYC3yQsXT1QIpF0JnXkcaQtcJnrUZq0hM+K
-----END CERTIFICATE-----
Generated at Sat Sep 19 12:40:50 2026 by rpki-client