Error: rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
File:                     0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft (raw, json)
Hash identifier:          SysGQbbxQ0L5oF8zYu/fVCkKbBgfcK+49IQC41ImfcE=
Subject key identifier:   F0:26:AE:88:FC:65:1B:76:C0:EA:D3:EB:1A:2B:A9:1B:56:4A:18:2A
Authority key identifier: D1:54:AB:C2:A3:1E:0F:D6:03:D7:C7:05:CC:0F:95:DD:1A:9C:E2:08
Certificate issuer:       /CN=F36862C7AF/serialNumber=D154ABC2A31E0FD603D7C705CC0F95DD1A9CE208
Certificate serial:       07AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
Manifest number:          07A9
Signing time:             Sun 25 Oct 2026 02:18:04 +0000
Manifest this update:     Sun 25 Oct 2026 02:18:03 +0000
Manifest next update:     Tue 27 Oct 2026 02:18:03 +0000
Files and hashes:         1: 0VSrwqMeD9YD18cFzA-V3Rqc4gg.crl (hash: mT4k0Ud+zTGjzGXsRgaR2y0+EpKefnoNEGVTzGRGhvI=)
                          2: 1F32A9483B1211F0978FEFE8DAE4EC9C.roa (hash: nYabbDnuVLUJQTyxU+UCVZek8zipwMdBD3Ty9i13z2c=)
                          3: 9CCFAF803B0E11F086191DD3DAE4EC9C.roa (hash: LpuWWsVevaLsONGBPOWroSuUfwidPT8wZ+6qZPVLZQI=)
                          4: 3776CF063B0E11F0A24337D1DAE4EC9C.roa (hash: vrxsc5lhGcJj9xua4OQQhc/cmd7AwV6Wu5DNrt8ZzzA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36862C7AF, serialNumber=D154ABC2A31E0FD603D7C705CC0F95DD1A9CE208
        Validity
            Not Before: Oct 25 02:18:03 2026 GMT
            Not After : Oct 27 02:18:03 2026 GMT
        Subject: CN=6add66db-6951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:9b:61:d8:6b:2d:dd:77:24:f6:fe:4c:35:
                    24:33:3f:0b:5b:97:e0:48:59:17:b9:72:d1:00:57:
                    61:58:68:b4:a9:0e:ac:63:ad:b9:dc:12:a0:84:e0:
                    75:69:4c:05:dc:2c:8d:be:fd:eb:3e:56:9e:b3:73:
                    f7:af:57:8a:1e:5c:4f:51:8c:9d:20:2b:3c:d7:bc:
                    06:b9:b2:63:9b:96:90:05:01:b9:1a:20:37:28:d3:
                    c0:de:52:76:72:4a:ff:ec:4c:b3:d0:f1:86:b0:7f:
                    ca:8f:8c:24:88:0e:df:8c:a0:f2:f9:23:47:4f:ce:
                    80:f4:52:8e:d1:b3:02:f5:11:0d:af:97:d9:9a:be:
                    50:f8:d6:d9:24:6a:81:26:73:d6:cd:cd:97:d4:22:
                    80:1f:26:d1:30:44:4d:c5:84:24:be:a0:06:a0:ba:
                    a2:df:8f:55:fd:d7:c2:db:45:97:b7:2b:e2:0f:07:
                    cb:3c:74:f8:5f:cb:c7:4e:df:8a:e6:44:af:a5:2f:
                    45:c5:a2:f7:c9:54:36:43:15:b3:21:ed:ee:a7:94:
                    b5:06:69:0a:70:32:87:ba:80:63:2b:93:c3:54:02:
                    e0:93:10:9f:51:ed:94:25:79:e3:53:be:f1:d8:10:
                    a1:0a:69:ed:b3:a9:c0:3b:ef:3a:01:b2:d0:c6:73:
                    be:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:26:AE:88:FC:65:1B:76:C0:EA:D3:EB:1A:2B:A9:1B:56:4A:18:2A
            X509v3 Authority Key Identifier:
                keyid:D1:54:AB:C2:A3:1E:0F:D6:03:D7:C7:05:CC:0F:95:DD:1A:9C:E2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:d6:6d:99:51:25:61:cb:df:ed:6a:d6:fe:78:6c:45:4e:2e:
         e4:1a:bc:02:3c:8f:97:c8:2b:7b:d1:d4:d5:0c:82:e5:14:3c:
         e6:2b:34:a0:0b:f9:01:b4:a5:19:b9:e1:a1:0f:a2:75:b4:0c:
         0d:52:20:90:ce:ee:ca:f1:81:eb:50:c0:ee:3d:07:d8:ef:68:
         e9:05:dd:4f:fe:db:81:e4:9e:da:4b:d5:ae:60:3b:42:01:5f:
         35:97:f3:c7:b6:ec:61:b1:74:0e:27:7d:75:8b:82:30:75:69:
         82:17:14:3a:e8:51:a8:65:5c:03:0b:9d:10:f8:0c:af:fe:19:
         f4:4f:a6:fd:80:d3:7e:f4:78:1d:63:9a:23:2f:67:71:ca:ca:
         5b:ed:68:92:64:43:64:93:a3:dc:99:69:27:cd:f3:c1:37:08:
         a9:55:27:54:56:6f:f6:ed:81:35:4c:de:db:40:3f:22:50:81:
         1d:6d:3f:db:2f:74:fc:35:6f:18:8e:3b:a1:28:60:30:fb:55:
         dd:86:77:a3:fe:7c:27:80:6f:57:83:f7:b1:82:ea:5d:e6:af:
         c4:9c:ab:17:5c:bb:cc:ef:a6:32:cc:9b:bb:15:bb:57:53:b7:
         d8:75:eb:5f:d3:7e:51:63:04:c5:f8:e8:43:e9:63:c0:25:08:
         36:57:46:8a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB60wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODYyQzdBRjExMC8GA1UEBRMoRDE1NEFCQzJBMzFFMEZENjAzRDdDNzA1Q0MwRjk1
REQxQTlDRTIwODAeFw0yNjEwMjUwMjE4MDNaFw0yNjEwMjcwMjE4MDNaMBgxFjAU
BgNVBAMTDTZhZGQ2NmRiLTY5NTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRYZth2Gst3Xck9v5MNSQzPwtbl+BIWRe5ctEAV2FYaLSpDqxjrbncEqCE
4HVpTAXcLI2+/es+Vp6zc/evV4oeXE9RjJ0gKzzXvAa5smOblpAFAbkaIDco08De
UnZySv/sTLPQ8Yawf8qPjCSIDt+MoPL5I0dPzoD0Uo7RswL1EQ2vl9mavlD41tkk
aoEmc9bNzZfUIoAfJtEwRE3FhCS+oAaguqLfj1X918LbRZe3K+IPB8s8dPhfy8dO
34rmRK+lL0XFovfJVDZDFbMh7e6nlLUGaQpwMoe6gGMrk8NUAuCTEJ9R7ZQleeNT
vvHYEKEKae2zqcA77zoBstDGc77vAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8Cau
iPxlG3bA6tPrGiupG1ZKGCowHwYDVR0jBBgwFoAU0VSrwqMeD9YD18cFzA+V3Rqc
4ggwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg2MkM3LzUxRjJCQzQwRjBGNDExRUJCMTgyM0YzMEQ4QTAxNENFLzBWU3J3
cU1lRDlZRDE4Y0Z6QS1WM1JxYzRnZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBWU3J3cU1lRDlZRDE4Y0Z6QS1WM1JxYzRnZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODYyQzcvNTFGMkJDNDBGMEY0MTFFQkIxODIzRjMwRDhB
MDE0Q0UvMFZTcndxTWVEOVlEMThjRnpBLVYzUnFjNGdnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDO1m2ZUSVhy9/tatb+eGxFTi7kGrwC
PI+XyCt70dTVDILlFDzmKzSgC/kBtKUZueGhD6J1tAwNUiCQzu7K8YHrUMDuPQfY
72jpBd1P/tuB5J7aS9WuYDtCAV81l/PHtuxhsXQOJ311i4IwdWmCFxQ66FGoZVwD
C50Q+Ayv/hn0T6b9gNN+9HgdY5ojL2dxyspb7WiSZENkk6PcmWknzfPBNwipVSdU
Vm/27YE1TN7bQD8iUIEdbT/bL3T8NW8YjjuhKGAw+1Xdhnej/nwngG9Xg/exgupd
5q/EnKsXXLvM76YyzJu7FbtXU7fYdetf035RYwTF+OhD6WPAJQg2V0aK
-----END CERTIFICATE-----
Generated at Sun Oct 25 23:22:19 2026 by rpki-client