Error: rpki.afrinic.net/repository/member_repository/F368FB9C/8EA540B276EE11EF9332B99C762E951A/ViWwLldBSR1NMXllWjLun4RYgr0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368FB9C/8EA540B276EE11EF9332B99C762E951A/ViWwLldBSR1NMXllWjLun4RYgr0.mft
File:                     ViWwLldBSR1NMXllWjLun4RYgr0.mft (raw, json)
Hash identifier:          +KiSkSdyykAPvplamvHTfI4ngplXpgCMP5XY7sRN5zw=
Subject key identifier:   5D:96:62:02:C3:5A:B7:9E:19:89:93:32:F3:36:21:35:3D:32:90:A4
Authority key identifier: 56:25:B0:2E:57:41:49:1D:4D:31:79:65:5A:32:EE:9F:84:58:82:BD
Certificate issuer:       /CN=F368FB9CAF/serialNumber=5625B02E5741491D4D3179655A32EE9F845882BD
Certificate serial:       030C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ViWwLldBSR1NMXllWjLun4RYgr0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368FB9C/8EA540B276EE11EF9332B99C762E951A/ViWwLldBSR1NMXllWjLun4RYgr0.mft
Manifest number:          030B
Signing time:             Sat 24 Oct 2026 04:32:54 +0000
Manifest this update:     Sat 24 Oct 2026 04:32:54 +0000
Manifest next update:     Mon 26 Oct 2026 04:32:54 +0000
Files and hashes:         1: ViWwLldBSR1NMXllWjLun4RYgr0.crl (hash: KyPisdsH8BGcNE4BMBEzH6AiZEWtNGRawpTT65dybcM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368FB9C/8EA540B276EE11EF9332B99C762E951A/ViWwLldBSR1NMXllWjLun4RYgr0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368FB9C/8EA540B276EE11EF9332B99C762E951A/ViWwLldBSR1NMXllWjLun4RYgr0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ViWwLldBSR1NMXllWjLun4RYgr0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 780 (0x30c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368FB9CAF, serialNumber=5625B02E5741491D4D3179655A32EE9F845882BD
        Validity
            Not Before: Oct 24 04:32:54 2026 GMT
            Not After : Oct 26 04:32:54 2026 GMT
        Subject: CN=6adc34f6-7dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:41:ff:ae:47:07:81:ce:91:8c:11:12:25:
                    ff:d2:03:79:3f:d8:bb:fc:70:9e:60:61:cc:65:97:
                    15:02:58:d7:12:40:0c:63:f2:9b:a5:19:b1:63:28:
                    0a:ee:b7:2d:b0:f1:bf:7d:ca:fd:3f:7d:07:95:0d:
                    bc:46:e9:e7:fe:cd:0c:e8:47:1d:25:a3:1a:f7:c3:
                    fb:73:01:98:bb:74:7e:09:ce:c3:3e:25:b6:74:6a:
                    11:44:0c:1a:23:51:38:1c:6b:6f:bc:e1:0a:87:38:
                    e2:63:c9:b9:1b:63:db:1a:9d:8a:3f:f1:48:1a:c9:
                    1a:11:95:67:ad:f2:d0:66:3d:2f:16:a4:34:84:9a:
                    24:c6:3d:a1:a8:c9:d9:a1:77:be:91:f3:02:b9:4b:
                    73:3e:5b:55:0d:e8:6f:16:3c:bd:24:0a:62:6b:a1:
                    3a:f0:47:1a:a2:27:15:b5:ac:1a:12:f6:54:2e:33:
                    c5:4a:86:c8:b7:2b:68:3e:be:58:8a:f3:82:bc:5e:
                    55:51:68:be:fe:5f:13:43:de:84:35:6d:02:bf:63:
                    99:b4:61:44:1e:f4:dc:80:ab:d0:23:71:0e:ec:9a:
                    1f:1f:2c:27:d0:39:ec:3e:12:b2:15:a3:90:ba:03:
                    b8:95:ca:83:6b:b5:b7:d4:08:9a:6c:fb:86:93:8d:
                    44:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:96:62:02:C3:5A:B7:9E:19:89:93:32:F3:36:21:35:3D:32:90:A4
            X509v3 Authority Key Identifier:
                keyid:56:25:B0:2E:57:41:49:1D:4D:31:79:65:5A:32:EE:9F:84:58:82:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368FB9C/8EA540B276EE11EF9332B99C762E951A/ViWwLldBSR1NMXllWjLun4RYgr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ViWwLldBSR1NMXllWjLun4RYgr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368FB9C/8EA540B276EE11EF9332B99C762E951A/ViWwLldBSR1NMXllWjLun4RYgr0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:48:ce:e3:11:76:5b:c6:ca:81:58:2b:f8:bf:f6:35:05:5e:
         53:40:cc:39:8d:20:02:ec:6c:59:eb:5b:5a:67:fc:bf:15:c1:
         50:ec:76:1c:c9:17:5f:6c:e4:16:39:8f:c9:23:04:cf:94:86:
         39:29:3e:db:41:79:32:98:e3:5d:ca:23:4e:5c:b4:ae:63:5d:
         24:00:db:d8:20:16:aa:6f:28:2a:2b:33:ac:d9:c7:d5:51:00:
         91:aa:d8:6d:58:7f:2f:38:31:6c:b0:22:0d:6f:46:08:b5:5e:
         0c:08:52:59:8d:3c:fb:e7:a8:b3:64:73:fa:33:85:49:4a:61:
         8b:94:89:14:05:36:6b:c6:f1:ac:18:0b:b8:40:be:70:6e:bd:
         71:0d:f7:98:98:11:f7:06:a6:75:fc:c6:53:c6:bb:73:67:43:
         b8:7c:4d:0f:72:b6:42:79:27:65:82:8b:66:aa:03:b1:75:aa:
         07:3d:00:b1:4c:df:94:18:fe:f5:41:21:65:a3:5c:a8:c3:2e:
         25:df:97:11:31:6c:6b:bf:ae:9f:78:fa:bc:e3:7d:7a:0d:22:
         b5:8c:5c:5c:d7:19:75:a2:53:12:7e:6e:3c:60:b7:ac:e3:52:
         b4:f0:46:53:a2:da:08:48:f0:82:c1:ff:cf:eb:c5:9b:23:da:
         00:59:54:ab
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAwwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEZCOUNBRjExMC8GA1UEBRMoNTYyNUIwMkU1NzQxNDkxRDREMzE3OTY1NUEzMkVF
OUY4NDU4ODJCRDAeFw0yNjEwMjQwNDMyNTRaFw0yNjEwMjYwNDMyNTRaMBgxFjAU
BgNVBAMTDTZhZGMzNGY2LTdkZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5aUH/rkcHgc6RjBESJf/SA3k/2Lv8cJ5gYcxllxUCWNcSQAxj8pulGbFj
KAruty2w8b99yv0/fQeVDbxG6ef+zQzoRx0loxr3w/tzAZi7dH4JzsM+JbZ0ahFE
DBojUTgca2+84QqHOOJjybkbY9sanYo/8UgayRoRlWet8tBmPS8WpDSEmiTGPaGo
ydmhd76R8wK5S3M+W1UN6G8WPL0kCmJroTrwRxqiJxW1rBoS9lQuM8VKhsi3K2g+
vliK84K8XlVRaL7+XxND3oQ1bQK/Y5m0YUQe9NyAq9AjcQ7smh8fLCfQOew+ErIV
o5C6A7iVyoNrtbfUCJps+4aTjUQLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXZZi
AsNat54ZiZMy8zYhNT0ykKQwHwYDVR0jBBgwFoAUViWwLldBSR1NMXllWjLun4RY
gr0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGQjlDLzhFQTU0MEIyNzZFRTExRUY5MzMyQjk5Qzc2MkU5NTFBL1ZpV3dM
bGRCU1IxTk1YbGxXakx1bjRSWWdyMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ZpV3dMbGRCU1IxTk1YbGxXakx1bjRSWWdyMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OEZCOUMvOEVBNTQwQjI3NkVFMTFFRjkzMzJCOTlDNzYy
RTk1MUEvVmlXd0xsZEJTUjFOTVhsbFdqTHVuNFJZZ3IwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAaSM7jEXZbxsqBWCv4v/Y1BV5TQMw5
jSAC7GxZ61taZ/y/FcFQ7HYcyRdfbOQWOY/JIwTPlIY5KT7bQXkymONdyiNOXLSu
Y10kANvYIBaqbygqKzOs2cfVUQCRqthtWH8vODFssCINb0YItV4MCFJZjTz756iz
ZHP6M4VJSmGLlIkUBTZrxvGsGAu4QL5wbr1xDfeYmBH3BqZ1/MZTxrtzZ0O4fE0P
crZCeSdlgotmqgOxdaoHPQCxTN+UGP71QSFlo1yowy4l35cRMWxrv66fePq84316
DSK1jFxc1xl1olMSfm48YLes41K08EZTotoISPCCwf/P68WbI9oAWVSr
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:19:24 2026 by rpki-client