Error: rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File:                     X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier:          63OU2KQGrFU1xtNitypZ9eWRq7nsRUfxkKwWvKfY9Qc=
Subject key identifier:   9F:B6:AF:F0:B0:F8:FE:B1:DE:31:02:01:4F:CF:1E:73:F4:6C:0F:C8
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       0606
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number:          0602
Signing time:             Fri 09 Oct 2026 02:55:48 +0000
Manifest this update:     Fri 09 Oct 2026 02:55:47 +0000
Manifest next update:     Sun 11 Oct 2026 02:55:47 +0000
Files and hashes:         1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: DAclO/OjV4osSxr+6Wmj08SUDP/PGupRtgRxO37Fotg=)
                          2: ED6720888A4D11F18B3C7BD3CE1D38B0.roa (hash: fy03gYHL7JTAVtW+hjgr7RCIr18BTRSjeQ/qFlmp6EA=)
                          3: 9727295C8A4D11F1AF7D2AD1CE1D38B0.roa (hash: gnUznLVBJQoJLLODckjNn7stwWgqRcBoFzmwFmu5Uy8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 02:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1542 (0x606)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF, serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: Oct  9 02:55:47 2026 GMT
            Not After : Oct 11 02:55:47 2026 GMT
        Subject: CN=6ac857b4-dd3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:a5:b9:09:07:11:2f:93:f7:4f:9f:d4:e4:
                    d7:8a:5c:d8:37:05:1a:f2:35:a6:b5:1a:0b:f8:c9:
                    39:b9:00:ec:4c:7d:e7:cb:4e:c7:7b:a9:4a:11:10:
                    15:5f:f3:c2:e4:35:88:d6:b4:a0:c2:0f:c0:c8:c3:
                    6f:f2:d5:81:1a:01:3f:9c:c9:01:9f:7a:64:93:58:
                    1f:68:c8:42:3d:9a:e9:f0:43:65:6a:b5:73:0d:f9:
                    e8:2c:81:f4:00:2c:ce:66:fb:1e:ee:ce:26:9a:d3:
                    75:8c:60:90:b6:d1:00:04:8d:66:ab:75:e6:f4:49:
                    59:0d:d9:61:96:59:f6:f1:04:ed:61:7e:2a:d6:8d:
                    97:9f:00:ab:a8:00:db:c8:ee:37:a5:6f:ef:97:c3:
                    cd:12:d9:8d:c9:d1:f5:ee:a8:46:1a:64:26:4f:fa:
                    60:1e:83:ce:fd:d8:1d:7c:3e:2f:f6:86:a4:6c:61:
                    44:52:07:80:f2:9f:35:f5:78:7a:4c:15:09:60:8b:
                    79:99:04:94:0a:47:14:13:2a:0e:d7:93:2e:96:fa:
                    58:74:f1:54:f3:55:13:5a:2e:cd:8f:fc:81:78:3e:
                    88:18:a8:96:87:f2:9a:d7:0c:70:21:27:c7:83:bf:
                    39:07:e4:b7:c7:82:8c:af:34:82:08:7d:0e:7e:30:
                    ef:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B6:AF:F0:B0:F8:FE:B1:DE:31:02:01:4F:CF:1E:73:F4:6C:0F:C8
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:09:aa:b8:02:91:56:04:ee:76:82:97:42:a0:01:bb:90:52:
         fb:08:d1:53:00:72:61:f4:9a:e9:d4:34:e2:45:42:be:02:df:
         fa:af:4a:7a:36:80:4b:94:a4:f1:27:6f:65:59:dc:95:8f:e8:
         70:06:d5:a2:a9:c6:51:c5:e2:12:64:84:0e:27:fd:95:aa:0b:
         5f:a3:45:23:33:2b:1e:8a:a7:90:37:b5:43:d9:e4:79:88:d6:
         0f:d0:4f:64:63:3f:94:3a:be:75:fb:fb:7e:b6:08:7f:c3:bb:
         09:e3:d7:56:3b:b8:b3:e6:18:3c:12:a2:cc:03:ef:90:d5:e2:
         f4:d1:48:07:35:9e:90:57:11:bf:73:3b:f1:ab:67:ff:48:03:
         c0:92:87:0c:5e:69:92:cf:de:4d:96:37:e5:d7:29:11:64:7c:
         af:ef:67:7c:b6:84:66:55:70:53:51:ae:79:f0:d3:5e:41:17:
         a7:46:5a:2e:ee:17:4d:7e:0d:08:dc:63:ce:ca:80:d0:ea:ac:
         bc:10:06:58:21:04:b2:89:2b:f9:80:b6:15:8f:18:33:fe:84:
         f3:32:a4:75:b5:e6:d8:27:34:b8:fb:c9:26:09:ca:ca:54:1f:
         23:fc:5e:8d:ca:c9:4b:84:a6:3c:b0:43:9c:89:3b:3f:60:a8:
         71:8a:18:7c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBgYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUM2MzJBRjExMC8GA1UEBRMoNUY2QjM0MTIxNjYyM0Q4NUE3NEYyQ0U4QTVFMjlC
NUVFQUNGQTI1MzAeFw0yNjEwMDkwMjU1NDdaFw0yNjEwMTEwMjU1NDdaMBgxFjAU
BgNVBAMTDTZhYzg1N2I0LWRkM2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwkaW5CQcRL5P3T5/U5NeKXNg3BRryNaa1Ggv4yTm5AOxMfefLTsd7qUoR
EBVf88LkNYjWtKDCD8DIw2/y1YEaAT+cyQGfemSTWB9oyEI9munwQ2VqtXMN+egs
gfQALM5m+x7uziaa03WMYJC20QAEjWardeb0SVkN2WGWWfbxBO1hfirWjZefAKuo
ANvI7jelb++Xw80S2Y3J0fXuqEYaZCZP+mAeg8792B18Pi/2hqRsYURSB4DynzX1
eHpMFQlgi3mZBJQKRxQTKg7Xky6W+lh08VTzVRNaLs2P/IF4PogYqJaH8prXDHAh
J8eDvzkH5LfHgoyvNIIIfQ5+MO9nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUn7av
8LD4/rHeMQIBT88ec/RsD8gwHwYDVR0jBBgwFoAUX2s0EhZiPYWnTyzopeKbXurP
olMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlDNjMyLzM2NEM0RkY4MkU5NTExRURBNjU5QkI3REYxMjIyNDY4L1gyczBF
aFppUFlXblR5em9wZUtiWHVyUG9sTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1gyczBFaFppUFlXblR5em9wZUtiWHVyUG9sTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUM2MzIvMzY0QzRGRjgyRTk1MTFFREE2NTlCQjdERjEy
MjI0NjgvWDJzMEVoWmlQWVduVHl6b3BlS2JYdXJQb2xNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrCaq4ApFWBO52gpdCoAG7kFL7CNFT
AHJh9Jrp1DTiRUK+At/6r0p6NoBLlKTxJ29lWdyVj+hwBtWiqcZRxeISZIQOJ/2V
qgtfo0UjMyseiqeQN7VD2eR5iNYP0E9kYz+UOr51+/t+tgh/w7sJ49dWO7iz5hg8
EqLMA++Q1eL00UgHNZ6QVxG/czvxq2f/SAPAkocMXmmSz95Nljfl1ykRZHyv72d8
toRmVXBTUa558NNeQRenRlou7hdNfg0I3GPOyoDQ6qy8EAZYIQSyiSv5gLYVjxgz
/oTzMqR1tebYJzS4+8kmCcrKVB8j/F6NyslLhKY8sEOciTs/YKhxihh8
-----END CERTIFICATE-----
Generated at Fri Oct 9 17:56:49 2026 by rpki-client