Error: rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
File:                     LWxhNdlQPaoy1mWGoi7WGSlcar8.mft (raw, json)
Hash identifier:          a9UfpJ4/WvMwDEz3HFh/Y+6njCFux9Zm3laKCZn42gw=
Subject key identifier:   D4:CA:DB:9C:F4:16:51:B7:E6:FF:EE:4E:4A:4B:F7:F7:12:36:AA:D0
Authority key identifier: 2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF
Certificate issuer:       /CN=F367FE62AF/serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
Certificate serial:       07A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
Manifest number:          07A2
Signing time:             Mon 26 Oct 2026 02:19:24 +0000
Manifest this update:     Mon 26 Oct 2026 02:19:23 +0000
Manifest next update:     Wed 28 Oct 2026 02:19:23 +0000
Files and hashes:         1: LWxhNdlQPaoy1mWGoi7WGSlcar8.crl (hash: p0cN9zNTFYstOEhPArpuJSYc2GKsL70q04+/EA3l5jk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955 (0x7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FE62AF, serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
        Validity
            Not Before: Oct 26 02:19:23 2026 GMT
            Not After : Oct 28 02:19:23 2026 GMT
        Subject: CN=6adeb8ac-ba9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6a:e5:cc:d6:3c:65:09:2f:1b:c7:32:15:18:
                    11:d4:d3:f6:a5:34:56:45:46:21:fa:b3:79:e7:fd:
                    17:15:a0:17:02:27:81:12:c2:bc:42:cc:50:6e:54:
                    d1:29:5d:19:4b:36:b7:9d:3e:1d:e5:95:43:88:78:
                    b1:60:49:94:8f:62:a0:1a:e4:c0:43:f7:1c:18:59:
                    7f:1f:53:e7:5a:e9:6e:cd:6b:a3:9c:59:05:9b:f3:
                    ac:b7:08:ff:6e:97:65:67:30:5f:8e:e8:b3:e0:07:
                    ac:d7:78:02:f7:89:d3:38:8e:4f:16:b9:a0:a7:2b:
                    a8:de:8f:78:e2:b8:d8:db:e8:97:d2:65:ea:e3:cf:
                    33:96:bb:60:82:81:96:40:cb:3c:40:2f:a5:9a:2c:
                    cc:72:bf:48:5e:d4:59:56:00:37:be:ec:6d:f7:de:
                    79:3b:0e:df:ab:b8:56:59:1f:7e:74:be:80:0e:54:
                    5f:87:95:22:ce:11:0e:09:9b:dc:48:5c:c2:8c:ea:
                    a2:73:1d:b7:c0:0e:33:4a:71:9e:f8:44:57:42:73:
                    52:47:a6:40:5f:90:ea:31:b2:87:40:4d:0e:d9:2d:
                    1c:8c:54:3e:9d:56:5c:9d:b9:39:1a:f2:f3:48:56:
                    e6:9c:e4:63:a6:3b:a4:ba:ee:94:e1:ca:cf:dd:00:
                    53:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CA:DB:9C:F4:16:51:B7:E6:FF:EE:4E:4A:4B:F7:F7:12:36:AA:D0
            X509v3 Authority Key Identifier:
                keyid:2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ee:e7:12:6f:54:36:69:57:db:56:20:c2:e7:7c:d3:4d:f7:
         50:5c:0e:d0:85:b3:e2:61:92:07:f9:2b:e0:7b:61:59:a5:48:
         ac:47:07:fc:7f:c1:85:41:5c:5c:91:cd:a4:2c:e9:2b:32:b4:
         be:56:11:a8:f8:ed:61:23:ff:20:53:cf:a2:81:93:01:72:9a:
         99:70:18:bb:d2:89:cb:69:d0:da:48:22:2d:f8:3f:b7:36:5e:
         b2:8e:0b:4f:0e:0e:b2:f9:f1:5e:6d:6a:20:e1:92:97:71:57:
         a3:2d:1d:31:1a:bf:e0:0f:d7:81:9c:75:8a:a7:af:35:87:1d:
         c6:d2:e2:aa:a8:e0:7a:00:0b:2d:19:c7:b9:04:f9:01:17:e8:
         98:89:ac:b2:09:12:74:a4:26:ee:15:9b:ee:e1:5b:73:bc:b3:
         df:cf:3b:20:7f:7c:9a:1e:9e:f5:96:84:22:ce:32:1f:24:c0:
         a8:2c:5b:36:f0:8b:b2:17:ba:ce:b0:b4:da:26:b8:5e:1b:55:
         2c:d3:5d:22:2f:d9:f5:8d:55:00:85:3c:d8:08:35:9f:93:d9:
         0f:a3:64:5f:aa:f8:1e:e6:5f:6b:3e:dd:ef:f8:f0:d7:50:ad:
         44:a8:72:61:03:be:bc:9d:b8:c8:6e:08:0f:bd:77:3a:d2:7b:
         79:bb:75:ea
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB6MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0ZFNjJBRjExMC8GA1UEBRMoMkQ2QzYxMzVEOTUwM0RBQTMyRDY2NTg2QTIyRUQ2
MTkyOTVDNkFCRjAeFw0yNjEwMjYwMjE5MjNaFw0yNjEwMjgwMjE5MjNaMBgxFjAU
BgNVBAMTDTZhZGViOGFjLWJhOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvauXM1jxlCS8bxzIVGBHU0/alNFZFRiH6s3nn/RcVoBcCJ4ESwrxCzFBu
VNEpXRlLNredPh3llUOIeLFgSZSPYqAa5MBD9xwYWX8fU+da6W7Na6OcWQWb86y3
CP9ul2VnMF+O6LPgB6zXeAL3idM4jk8WuaCnK6jej3jiuNjb6JfSZerjzzOWu2CC
gZZAyzxAL6WaLMxyv0he1FlWADe+7G333nk7Dt+ruFZZH350voAOVF+HlSLOEQ4J
m9xIXMKM6qJzHbfADjNKcZ74RFdCc1JHpkBfkOoxsodATQ7ZLRyMVD6dVlyduTka
8vNIVuac5GOmO6S67pThys/dAFNLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1Mrb
nPQWUbfm/+5OSkv39xI2qtAwHwYDVR0jBBgwFoAULWxhNdlQPaoy1mWGoi7WGSlc
ar8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGRTYyL0ZFNUEzMDc4RjQ4NTExRUI5MjBBQzgzREQ4QTAxNENFL0xXeGhO
ZGxRUGFveTFtV0dvaTdXR1NsY2FyOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xXeGhOZGxRUGFveTFtV0dvaTdXR1NsY2FyOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0ZFNjIvRkU1QTMwNzhGNDg1MTFFQjkyMEFDODNERDhB
MDE0Q0UvTFd4aE5kbFFQYW95MW1XR29pN1dHU2xjYXI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCE7ucSb1Q2aVfbViDC53zTTfdQXA7Q
hbPiYZIH+Svge2FZpUisRwf8f8GFQVxckc2kLOkrMrS+VhGo+O1hI/8gU8+igZMB
cpqZcBi70onLadDaSCIt+D+3Nl6yjgtPDg6y+fFebWog4ZKXcVejLR0xGr/gD9eB
nHWKp681hx3G0uKqqOB6AAstGce5BPkBF+iYiayyCRJ0pCbuFZvu4VtzvLPfzzsg
f3yaHp71loQizjIfJMCoLFs28IuyF7rOsLTaJrheG1Us010iL9n1jVUAhTzYCDWf
k9kPo2Rfqvge5l9rPt3v+PDXUK1EqHJhA768nbjIbggPvXc60nt5u3Xq
-----END CERTIFICATE-----
Generated at Mon Oct 26 14:24:11 2026 by rpki-client