Error: rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
File:                     GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft (raw, json)
Hash identifier:          Z7fFYaYVp1Dr7tuxmV6NhEXDpBrJMoRFMRgj9eHr9HM=
Subject key identifier:   3E:51:07:73:EE:73:18:2E:1A:C9:8C:4B:41:9C:03:53:7B:1A:B5:A3
Authority key identifier: 19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67
Certificate issuer:       /CN=F368356FAF/serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
Certificate serial:       01D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
Manifest number:          01D4
Signing time:             Sun 25 Oct 2026 05:01:28 +0000
Manifest this update:     Sun 25 Oct 2026 05:01:27 +0000
Manifest next update:     Tue 27 Oct 2026 05:01:27 +0000
Files and hashes:         1: GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl (hash: 6TjUotpV99eaNXcXqTFUvtudXKUmtZ6bnELQNHZj6O0=)
                          2: 61967A0C923911F0857614F5DAE4EC9C.roa (hash: h6/xO+quTrTm7TNgBK9CG+HuCWB11SsyjPcjW6WV3ek=)
                          3: 0CC81814923911F083357CF4DAE4EC9C.roa (hash: LITlLq2aIhVUihUn1BaRczfpAUpOW0iot4DV3wIc2Aw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 471 (0x1d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368356FAF, serialNumber=19E5BB02BA8803B2B13C888EC61A19E86DCD5A67
        Validity
            Not Before: Oct 25 05:01:27 2026 GMT
            Not After : Oct 27 05:01:27 2026 GMT
        Subject: CN=6add8d28-ca42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:6e:82:3d:9a:14:5f:1a:f7:5f:86:31:90:
                    7b:9f:ae:58:d3:94:03:dc:1a:a0:7d:e0:d4:fe:cc:
                    e2:f4:6e:8b:08:b1:d5:45:9e:ed:d7:95:a4:da:97:
                    6c:ea:ce:23:68:ab:db:28:7d:eb:cb:e4:73:0d:41:
                    6c:89:54:3a:a2:2c:68:c6:1e:a7:49:ed:43:4a:dc:
                    3a:1c:9e:76:ed:6b:d6:21:aa:bc:37:de:76:ff:e7:
                    37:86:80:d3:9c:87:3f:4b:eb:46:98:b3:42:fe:f1:
                    26:55:f5:ef:14:ed:3f:01:8f:4b:f1:db:44:e9:d4:
                    2f:b5:ae:6b:50:16:ad:c8:34:7e:e8:fb:21:4a:2d:
                    13:78:6c:63:86:38:7e:73:c8:84:e6:94:2e:1b:9a:
                    5e:67:1d:42:fa:aa:a1:b2:b4:c2:25:4b:9f:c8:6b:
                    d4:a4:34:53:7b:18:b1:b2:e3:dd:1b:61:0d:c9:6f:
                    d8:53:52:ec:e1:c6:dd:f6:7b:97:4f:ba:12:32:13:
                    95:e7:21:26:8a:38:c9:12:fb:47:d3:37:26:b3:99:
                    46:54:a7:86:cd:d1:33:94:50:53:46:64:e0:1d:1f:
                    22:8d:75:af:20:a6:37:b2:60:d5:53:ec:aa:84:e0:
                    eb:be:b9:82:24:d1:ca:72:ac:86:26:3b:a3:11:aa:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:51:07:73:EE:73:18:2E:1A:C9:8C:4B:41:9C:03:53:7B:1A:B5:A3
            X509v3 Authority Key Identifier:
                keyid:19:E5:BB:02:BA:88:03:B2:B1:3C:88:8E:C6:1A:19:E8:6D:CD:5A:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368356F/D1DFA91C66E411F0B2126192DAE4EC9C/GeW7ArqIA7KxPIiOxhoZ6G3NWmc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:75:3e:b2:21:a3:53:2d:c7:c4:96:8b:22:11:5f:77:3c:07:
         3e:ad:e9:2e:60:c0:be:73:18:f4:74:a1:f2:af:82:43:d1:26:
         74:8c:b1:b2:93:4c:6e:63:4e:00:3e:f8:a5:e0:0c:02:1f:5e:
         70:55:f5:98:99:be:c9:af:5c:9c:95:e7:b8:8c:35:cf:e1:d7:
         f9:61:b1:b0:b8:a7:05:74:b7:8f:74:91:6f:9c:05:bb:d3:4e:
         ca:bc:8b:3d:54:cf:b3:0e:99:d8:01:e5:bd:62:23:fc:7d:88:
         44:76:74:10:5b:6d:98:7a:0a:af:e4:e5:ac:87:63:83:fb:81:
         fa:7c:08:4b:c0:01:13:8d:5e:f5:d5:65:b1:7a:a1:ca:99:9d:
         5b:28:64:bd:af:f3:74:22:73:80:4b:ea:4f:5b:c9:db:50:45:
         e1:41:5e:ec:0c:1e:7d:28:5c:89:58:83:1e:c8:4d:5c:cb:13:
         a4:60:04:3a:9e:a6:52:ac:6a:fa:1c:37:83:37:bf:66:e5:f9:
         6f:0a:5a:2c:f1:30:b0:2b:96:24:a7:0e:cf:5b:da:80:7f:26:
         90:9e:4f:bc:2a:e8:4a:94:50:11:25:30:02:da:ae:45:54:93:
         2b:ad:23:99:38:80:fe:1c:a1:63:c4:db:21:3f:da:16:e0:d9:
         d0:9d:89:d3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODM1NkZBRjExMC8GA1UEBRMoMTlFNUJCMDJCQTg4MDNCMkIxM0M4ODhFQzYxQTE5
RTg2RENENUE2NzAeFw0yNjEwMjUwNTAxMjdaFw0yNjEwMjcwNTAxMjdaMBgxFjAU
BgNVBAMTDTZhZGQ4ZDI4LWNhNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKy26CPZoUXxr3X4YxkHufrljTlAPcGqB94NT+zOL0bosIsdVFnu3XlaTa
l2zqziNoq9sofevL5HMNQWyJVDqiLGjGHqdJ7UNK3Docnnbta9Yhqrw33nb/5zeG
gNOchz9L60aYs0L+8SZV9e8U7T8Bj0vx20Tp1C+1rmtQFq3INH7o+yFKLRN4bGOG
OH5zyITmlC4bml5nHUL6qqGytMIlS5/Ia9SkNFN7GLGy490bYQ3Jb9hTUuzhxt32
e5dPuhIyE5XnISaKOMkS+0fTNyazmUZUp4bN0TOUUFNGZOAdHyKNda8gpjeyYNVT
7KqE4Ou+uYIk0cpyrIYmO6MRquYjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPlEH
c+5zGC4ayYxLQZwDU3sataMwHwYDVR0jBBgwFoAUGeW7ArqIA7KxPIiOxhoZ6G3N
WmcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjgzNTZGL0QxREZBOTFDNjZFNDExRjBCMjEyNjE5MkRBRTRFQzlDL0dlVzdB
cnFJQTdLeFBJaU94aG9aNkczTldtYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dlVzdBcnFJQTdLeFBJaU94aG9aNkczTldtYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODM1NkYvRDFERkE5MUM2NkU0MTFGMEIyMTI2MTkyREFF
NEVDOUMvR2VXN0FycUlBN0t4UElpT3hob1o2RzNOV21jLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXdT6yIaNTLcfElosiEV93PAc+reku
YMC+cxj0dKHyr4JD0SZ0jLGyk0xuY04APvil4AwCH15wVfWYmb7Jr1yclee4jDXP
4df5YbGwuKcFdLePdJFvnAW7007KvIs9VM+zDpnYAeW9YiP8fYhEdnQQW22Yegqv
5OWsh2OD+4H6fAhLwAETjV711WWxeqHKmZ1bKGS9r/N0InOAS+pPW8nbUEXhQV7s
DB59KFyJWIMeyE1cyxOkYAQ6nqZSrGr6HDeDN79m5flvClos8TCwK5Ykpw7PW9qA
fyaQnk+8KuhKlFARJTAC2q5FVJMrrSOZOID+HKFjxNshP9oW4NnQnYnT
-----END CERTIFICATE-----
Generated at Sun Oct 25 18:02:28 2026 by rpki-client