Error: rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          enofbKEiPvVLsADF19qFsdJ7fT6vud73FLAGx+x64Uc=
Subject key identifier:   28:A3:FE:3D:B5:33:8A:AB:9A:2C:9A:B2:BB:73:87:51:99:1C:51:FA
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       0AC9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          0AC4
Signing time:             Thu 10 Sep 2026 01:19:29 +0000
Manifest this update:     Thu 10 Sep 2026 01:19:28 +0000
Manifest next update:     Sat 12 Sep 2026 01:19:28 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: f0AHkLjELs6HB+9gKBgoOPPBR8t4ET5p0J4L7MG0du4=)
                          2: 2080E9B0188C11F1AB23ECE6DAE4EC9C.roa (hash: 7+2h/hAR0ZH797eWYPIRfzQR4D387dc0Npd3o5pHyjg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2761 (0xac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Sep 10 01:19:28 2026 GMT
            Not After : Sep 12 01:19:28 2026 GMT
        Subject: CN=6aa205a1-97cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bf:fb:d7:4f:30:b1:0c:3f:87:7d:47:af:83:
                    3c:6b:65:3f:04:3f:83:ed:d6:d7:5c:7b:09:dd:89:
                    c9:6d:de:16:e4:01:c5:38:2a:38:97:1d:44:60:0a:
                    e1:a0:19:c0:f6:bb:ba:4d:17:ea:6f:13:54:45:b7:
                    0b:b4:26:45:d7:fe:03:e5:63:ce:d6:f4:c5:e2:c9:
                    29:de:d1:21:d7:75:c6:1e:fd:42:8b:59:d4:17:b7:
                    c2:0b:e1:3b:9d:df:b0:43:16:e5:7a:82:48:32:46:
                    7f:1e:97:8e:03:5f:db:ac:cc:e4:04:df:e5:f7:76:
                    eb:f6:10:c1:8a:67:f3:93:ce:a6:fd:17:0f:79:bd:
                    d0:2b:f3:87:43:c3:8e:e7:af:d4:c4:60:7e:1d:d3:
                    3e:b5:74:d0:52:d8:7b:98:aa:94:ef:35:a1:51:3f:
                    e9:d6:36:44:48:f4:b6:5e:2d:2d:9d:8f:2f:75:61:
                    68:fe:60:ab:82:e4:f9:66:c9:bb:e8:09:cf:bf:d2:
                    ea:a3:6d:54:b1:3a:76:99:0c:5c:f5:2b:76:79:1e:
                    d9:5d:b8:95:1f:6e:63:a6:b5:1d:85:db:7d:3c:eb:
                    90:50:1e:98:82:ef:08:ac:a9:4c:c6:bd:1f:26:1c:
                    a4:b5:8f:1f:c7:ea:67:22:7d:7c:89:26:a2:97:2d:
                    41:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A3:FE:3D:B5:33:8A:AB:9A:2C:9A:B2:BB:73:87:51:99:1C:51:FA
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8a:9d:91:ac:01:e6:d9:91:a1:1a:a0:aa:32:2b:33:fc:92:
         98:fa:5b:6d:6d:9f:8f:04:5f:96:50:bb:c2:c5:ff:79:d7:09:
         a1:42:e2:77:96:1a:15:74:95:09:bf:49:2f:0c:1a:6c:4a:5d:
         ba:dd:9b:2f:2c:8e:97:7a:bc:b3:45:b4:5d:f6:e0:92:ab:cb:
         c4:69:31:24:59:f7:72:3f:05:47:72:9e:b5:8c:e1:16:b5:15:
         1d:75:93:1d:04:10:7d:07:56:7a:7c:fb:db:ed:d8:94:47:b1:
         44:59:d4:99:d3:09:4b:76:ea:82:69:bf:ed:a8:5a:58:cc:0b:
         e0:a9:ca:e0:46:d8:a5:30:87:cc:9f:c3:bd:e0:24:d9:6d:47:
         e4:2e:86:40:e7:a3:e2:1f:6c:71:f3:29:ba:4b:94:30:de:0b:
         5a:7b:bb:ea:7d:03:4b:26:26:38:c5:2d:a2:66:13:ed:12:62:
         62:1a:a8:94:72:f5:d6:7c:7f:24:82:88:47:28:63:3b:47:7d:
         52:b9:0d:c0:86:30:32:06:3a:80:e7:fc:66:f5:00:8f:6d:f4:
         e2:19:cb:7d:dd:86:24:c4:f5:fb:2b:ad:13:49:d5:7f:c9:8b:
         e0:05:70:c5:ff:0d:14:e1:df:69:0c:89:1c:c5:4f:56:0d:da:
         82:5d:5b:0c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCskwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0YyNkRSSTExMC8GA1UEBRMoOUQ4N0IzMTE3QUExQkQ3ODI4QjdERDQ2NEQ3MzA3
NkJBRThEQ0M5NjAeFw0yNjA5MTAwMTE5MjhaFw0yNjA5MTIwMTE5MjhaMBgxFjAU
BgNVBAMTDTZhYTIwNWExLTk3Y2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQv/vXTzCxDD+HfUevgzxrZT8EP4Pt1tdcewndiclt3hbkAcU4KjiXHURg
CuGgGcD2u7pNF+pvE1RFtwu0JkXX/gPlY87W9MXiySne0SHXdcYe/UKLWdQXt8IL
4Tud37BDFuV6gkgyRn8el44DX9uszOQE3+X3duv2EMGKZ/OTzqb9Fw95vdAr84dD
w47nr9TEYH4d0z61dNBS2HuYqpTvNaFRP+nWNkRI9LZeLS2djy91YWj+YKuC5Plm
ybvoCc+/0uqjbVSxOnaZDFz1K3Z5HtlduJUfbmOmtR2F230865BQHpiC7wisqUzG
vR8mHKS1jx/H6mcifXyJJqKXLUGbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUKKP+
PbUziquaLJqyu3OHUZkcUfowHwYDVR0jBBgwFoAUnYezEXqhvXgot91GTXMHa66N
zJYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMjZELzNGNDA0MUZDNzBCOTExRTlBN0YyNUQzRkY4QUVBMjI4L25ZZXpF
WHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZZXpFWHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0YyNkQvM0Y0MDQxRkM3MEI5MTFFOUE3RjI1RDNGRjhBRUEy
MjgvblllekVYcWh2WGdvdDkxR1RYTUhhNjZOekpZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBiip2RrAHm2ZGhGqCqMisz/JKY+lttbZ+P
BF+WULvCxf951wmhQuJ3lhoVdJUJv0kvDBpsSl263ZsvLI6XeryzRbRd9uCSq8vE
aTEkWfdyPwVHcp61jOEWtRUddZMdBBB9B1Z6fPvb7diUR7FEWdSZ0wlLduqCab/t
qFpYzAvgqcrgRtilMIfMn8O94CTZbUfkLoZA56PiH2xx8ym6S5Qw3gtae7vqfQNL
JiY4xS2iZhPtEmJiGqiUcvXWfH8kgohHKGM7R31SuQ3AhjAyBjqA5/xm9QCPbfTi
Gct93YYkxPX7K60TSdV/yYvgBXDF/w0U4d9pDIkcxU9WDdqCXVsM
-----END CERTIFICATE-----
Generated at Thu Sep 10 12:29:52 2026 by rpki-client