Error: rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
File:                     5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft (raw, json)
Hash identifier:          rOM5t0TMx51M4kHmizzWrfeS5BMP0Cz313CJEOHpLaU=
Subject key identifier:   EF:B9:7A:3E:CB:28:68:9D:06:F1:47:82:75:A8:A3:54:D7:40:B0:C1
Authority key identifier: E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24
Certificate issuer:       /CN=F3695083AF/serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
Certificate serial:       0311
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
Manifest number:          030C
Signing time:             Mon 26 Oct 2026 04:36:27 +0000
Manifest this update:     Mon 26 Oct 2026 04:36:27 +0000
Manifest next update:     Wed 28 Oct 2026 04:36:27 +0000
Files and hashes:         1: 5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl (hash: iTKOwQb57IL/CKq9K/irFQbfzg+ZmxYlqYRALNjCeYQ=)
                          2: 38A77FC2AB6311F0B45696BFDAE4EC9C.roa (hash: LBPNAWAAVOPpk8TQQA7s5/xN6Mn1ttafqGNGLr5LoZY=)
                          3: 23D8DB56F78311F0BA13BBE1DAE4EC9C.roa (hash: RiaEDImgDKuhgGwAhXll6hcFon0UmnVQwiXDGntrwvQ=)
                          4: 74DC1AE2C46511EF85B5237D762E951A.roa (hash: CJ5E2+hEe+/wSXFMNEijdHv/KTZ0Hf60OfkqPWnXEi4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695083AF, serialNumber=E5103ED119E6479BB036B7C3F48DCC9E62C17424
        Validity
            Not Before: Oct 26 04:36:27 2026 GMT
            Not After : Oct 28 04:36:27 2026 GMT
        Subject: CN=6aded8cb-bc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:41:94:d6:73:e1:f1:23:0c:f1:22:78:83:44:
                    24:18:06:3d:75:f1:b9:55:2c:a0:c6:88:05:e6:ff:
                    0e:89:7e:8b:8a:07:07:f5:46:c8:2a:51:ed:d1:c7:
                    68:99:51:f5:f7:22:64:53:87:1f:66:97:a7:15:de:
                    77:f6:0b:4d:1b:de:fe:58:2c:43:42:0f:a7:e6:28:
                    6a:46:91:cf:0a:8d:9e:a4:3d:2a:7f:fc:ce:02:00:
                    29:80:c9:69:cd:8d:91:ad:31:c9:93:78:8b:44:79:
                    55:71:ff:c1:e3:2c:88:ab:f4:7e:6f:27:85:9c:79:
                    69:93:6f:bc:24:6d:7f:50:77:9c:f9:bb:6f:64:21:
                    d1:a3:a2:ac:87:f9:14:be:26:71:c4:1a:b3:a2:66:
                    5e:dc:1e:fc:50:64:27:29:46:30:6f:6d:08:14:8d:
                    c0:ef:53:96:82:52:91:f3:cd:04:52:e2:f9:1b:66:
                    21:02:37:d1:ad:31:df:6c:49:2e:97:d2:fa:fc:82:
                    fe:f6:2b:d9:6e:de:c1:87:f4:96:df:96:7b:c0:35:
                    8f:97:d5:5b:03:67:79:7d:1a:cb:9e:43:67:a0:b0:
                    28:f7:45:d7:77:33:f3:ba:a7:e0:42:b3:9a:16:bd:
                    e8:45:f7:3d:9d:86:ca:bb:b0:08:e3:6e:bf:36:66:
                    73:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B9:7A:3E:CB:28:68:9D:06:F1:47:82:75:A8:A3:54:D7:40:B0:C1
            X509v3 Authority Key Identifier:
                keyid:E5:10:3E:D1:19:E6:47:9B:B0:36:B7:C3:F4:8D:CC:9E:62:C1:74:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695083/0FA41C6E862211EF8FCBD758762E951A/5RA-0RnmR5uwNrfD9I3MnmLBdCQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:10:0a:d7:36:d5:77:a0:6e:b3:de:45:5b:e4:0a:36:ca:f3:
         f1:44:58:ae:91:e9:56:52:49:f9:35:28:52:6e:76:64:1b:57:
         77:97:de:36:bf:ce:29:7c:c3:2d:5f:2b:ed:3e:77:db:f1:8e:
         d9:d3:c7:5a:ef:df:c1:bd:9f:85:36:4e:91:5a:2e:30:b2:95:
         fa:51:20:f8:f1:b1:71:c0:a7:b1:d9:b3:97:dc:60:73:88:90:
         5a:89:9e:f9:1d:db:da:8d:9e:1e:67:4b:2e:96:87:18:ab:7d:
         52:a3:05:ef:74:ad:54:cd:c8:2b:cd:c8:bf:11:d0:a2:7a:5d:
         fb:9a:84:8b:99:31:39:64:47:83:06:ae:12:e8:e0:65:78:1a:
         2c:e0:7d:2f:81:85:03:3b:3e:cb:5a:0c:28:3f:60:a1:ae:73:
         b1:e1:47:61:b8:5a:db:df:78:aa:e6:94:66:94:9e:6b:7c:08:
         d1:5a:b2:1d:67:9c:22:72:3c:02:f2:03:f8:cd:b7:0f:b5:6f:
         bb:22:9d:da:d4:6b:b1:34:57:c1:02:88:4d:9d:77:9e:19:cc:
         a4:f5:0b:e1:7e:8b:f5:3b:67:fc:a2:89:35:d9:7f:f1:e4:e1:
         c2:13:9c:5f:1f:3d:1f:32:29:c4:6b:d7:51:76:19:9c:7e:40:
         2c:10:ff:4f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAxEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTUwODNBRjExMC8GA1UEBRMoRTUxMDNFRDExOUU2NDc5QkIwMzZCN0MzRjQ4REND
OUU2MkMxNzQyNDAeFw0yNjEwMjYwNDM2MjdaFw0yNjEwMjgwNDM2MjdaMBgxFjAU
BgNVBAMTDTZhZGVkOGNiLWJjMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtQZTWc+HxIwzxIniDRCQYBj118blVLKDGiAXm/w6JfouKBwf1RsgqUe3R
x2iZUfX3ImRThx9ml6cV3nf2C00b3v5YLENCD6fmKGpGkc8KjZ6kPSp//M4CACmA
yWnNjZGtMcmTeItEeVVx/8HjLIir9H5vJ4WceWmTb7wkbX9Qd5z5u29kIdGjoqyH
+RS+JnHEGrOiZl7cHvxQZCcpRjBvbQgUjcDvU5aCUpHzzQRS4vkbZiECN9GtMd9s
SS6X0vr8gv72K9lu3sGH9JbflnvANY+X1VsDZ3l9GsueQ2egsCj3Rdd3M/O6p+BC
s5oWvehF9z2dhsq7sAjjbr82ZnPtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU77l6
PssoaJ0G8UeCdaijVNdAsMEwHwYDVR0jBBgwFoAU5RA+0RnmR5uwNrfD9I3MnmLB
dCQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1MDgzLzBGQTQxQzZFODYyMjExRUY4RkNCRDc1ODc2MkU5NTFBLzVSQS0w
Um5tUjV1d05yZkQ5STNNbm1MQmRDUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVSQS0wUm5tUjV1d05yZkQ5STNNbm1MQmRDUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTUwODMvMEZBNDFDNkU4NjIyMTFFRjhGQ0JENzU4NzYy
RTk1MUEvNVJBLTBSbm1SNXV3TnJmRDlJM01ubUxCZENRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA4EArXNtV3oG6z3kVb5Ao2yvPxRFiu
kelWUkn5NShSbnZkG1d3l942v84pfMMtXyvtPnfb8Y7Z08da79/BvZ+FNk6RWi4w
spX6USD48bFxwKex2bOX3GBziJBaiZ75HdvajZ4eZ0sulocYq31SowXvdK1Uzcgr
zci/EdCiel37moSLmTE5ZEeDBq4S6OBleBos4H0vgYUDOz7LWgwoP2ChrnOx4Udh
uFrb33iq5pRmlJ5rfAjRWrIdZ5wicjwC8gP4zbcPtW+7Ip3a1GuxNFfBAohNnXee
Gcyk9Qvhfov1O2f8ook12X/x5OHCE5xfHz0fMinEa9dRdhmcfkAsEP9P
-----END CERTIFICATE-----
Generated at Mon Oct 26 07:28:23 2026 by rpki-client