Error: rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
File:                     9XSxa6hq2W4A3trNY0H5qCTqR6c.mft (raw, json)
Hash identifier:          djuUF5zXHQeeJ9rRtXziZsdbI7WHd3AM/L9745F0jBw=
Subject key identifier:   C2:D1:0E:6D:4F:30:FB:53:A1:33:52:83:9B:E7:CF:C2:63:CE:B0:D8
Authority key identifier: F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7
Certificate issuer:       /CN=F369E9B3AF/serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
Certificate serial:       0354
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
Manifest number:          034D
Signing time:             Thu 29 Oct 2026 04:22:27 +0000
Manifest this update:     Thu 29 Oct 2026 04:22:26 +0000
Manifest next update:     Sat 31 Oct 2026 04:22:26 +0000
Files and hashes:         1: 9XSxa6hq2W4A3trNY0H5qCTqR6c.crl (hash: XmA8tXJ3tEoLIa9/kUH3dMGHXF4w59QZAncVGYb6JPI=)
                          2: AEEDAD061A0711F192AA088FDAE4EC9C.roa (hash: JNwZ7kUtB4FzpUgaJAkRzngvDEP1d2+9HLGp6xBl/AI=)
                          3: 8036BCAE2A7F11F19DD1749ADAE4EC9C.roa (hash: Br53n/pGReLNyDpsiSvYoijagBzl59OaUoRNTDvz4ms=)
                          4: F0AE3C30F8F411F0BD60DAC7DAE4EC9C.roa (hash: w6gvWanr3TgG7meRgmSObxkcZzrvD0UBJOndkTrbcL0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E9B3AF, serialNumber=F574B16BA86AD96E00DEDACD6341F9A824EA47A7
        Validity
            Not Before: Oct 29 04:22:26 2026 GMT
            Not After : Oct 31 04:22:26 2026 GMT
        Subject: CN=6ae2ca03-a12a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:9c:3a:a5:06:b1:72:f1:bb:76:08:22:06:
                    83:14:b3:c7:54:fe:74:bf:3a:01:7a:72:76:f3:01:
                    90:b0:26:ef:d0:36:8b:13:95:e2:6d:68:ea:41:7e:
                    1c:92:37:81:9f:5e:9a:f8:0b:05:81:8d:78:be:8e:
                    9b:d0:74:ea:25:b6:33:4c:b9:1c:a5:32:74:dc:3f:
                    8b:84:b6:82:37:38:3d:e3:be:62:80:ce:35:0d:47:
                    5c:67:bf:d7:4e:54:5a:7a:b7:97:2f:06:01:c6:f8:
                    56:99:9c:31:cd:b1:d7:66:af:74:8f:f5:11:31:1a:
                    6c:69:9f:8f:25:05:ac:bf:71:af:e9:7e:d8:19:6a:
                    a1:2a:fc:3d:ba:1c:b0:31:a2:ad:6a:74:32:18:da:
                    0a:d8:28:57:46:a8:ec:e8:53:e1:a4:ab:43:1d:32:
                    18:d5:1a:88:ad:4d:01:1d:90:26:50:59:2b:77:02:
                    b4:68:45:bd:22:46:0e:60:e2:e7:1b:c5:08:58:07:
                    7f:ce:4e:e7:23:49:2f:8d:0d:43:85:cc:fa:e9:02:
                    94:0e:48:1a:91:b5:64:46:56:41:0b:6b:5f:8f:63:
                    78:6d:f4:a4:35:57:3c:1b:d5:cf:54:ce:5a:03:a8:
                    f5:e2:ac:1c:e3:30:73:cf:6f:cf:8a:31:fd:ab:cd:
                    39:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D1:0E:6D:4F:30:FB:53:A1:33:52:83:9B:E7:CF:C2:63:CE:B0:D8
            X509v3 Authority Key Identifier:
                keyid:F5:74:B1:6B:A8:6A:D9:6E:00:DE:DA:CD:63:41:F9:A8:24:EA:47:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9XSxa6hq2W4A3trNY0H5qCTqR6c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E9B3/EE40A58A558C11EFAFCCFBA0762E951A/9XSxa6hq2W4A3trNY0H5qCTqR6c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:e6:ea:b4:34:8b:e4:84:d8:46:66:ae:41:1d:b2:50:b0:7d:
         48:37:a8:b5:2e:4d:a3:9a:87:2b:e5:3b:55:a6:e3:04:fb:d2:
         72:f8:b9:82:b3:13:dc:60:4a:fc:a8:bd:d5:d9:85:14:7d:20:
         b5:4f:56:03:b9:aa:1d:6b:96:74:a3:13:20:0c:86:07:74:cf:
         96:a8:87:f2:67:71:ab:1d:52:4f:13:4d:97:e3:04:70:ac:de:
         95:d7:57:4e:e0:e2:32:8a:0d:35:df:4a:9c:77:34:fa:3e:2e:
         b4:03:aa:71:0b:1c:3f:40:60:1f:cc:e8:23:5b:7f:db:d5:1a:
         14:f7:89:48:21:f5:f1:55:83:1e:35:ea:ec:08:7d:aa:fb:88:
         cd:2d:52:2b:87:aa:b1:3c:06:46:69:b6:83:5b:51:c5:c5:64:
         b7:50:c3:4e:9d:e1:4a:35:78:fb:50:cc:4c:a9:fe:d7:ae:d3:
         21:b2:11:de:68:ca:22:cf:45:6e:09:42:34:4b:1c:9b:db:61:
         cf:3f:16:73:2c:62:e1:cd:0b:30:6b:b2:c0:cf:7e:6c:ee:e6:
         dc:d3:06:da:49:e6:5c:41:d7:f4:b2:ca:44:fa:16:f6:91:aa:
         7e:70:bb:62:d7:fc:13:50:93:b2:7a:c8:0d:c0:36:31:8a:dd:
         8e:11:74:7d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUU5QjNBRjExMC8GA1UEBRMoRjU3NEIxNkJBODZBRDk2RTAwREVEQUNENjM0MUY5
QTgyNEVBNDdBNzAeFw0yNjEwMjkwNDIyMjZaFw0yNjEwMzEwNDIyMjZaMBgxFjAU
BgNVBAMTDTZhZTJjYTAzLWExMmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4Fpw6pQaxcvG7dggiBoMUs8dU/nS/OgF6cnbzAZCwJu/QNosTleJtaOpB
fhySN4GfXpr4CwWBjXi+jpvQdOoltjNMuRylMnTcP4uEtoI3OD3jvmKAzjUNR1xn
v9dOVFp6t5cvBgHG+FaZnDHNsddmr3SP9RExGmxpn48lBay/ca/pftgZaqEq/D26
HLAxoq1qdDIY2grYKFdGqOzoU+Gkq0MdMhjVGoitTQEdkCZQWSt3ArRoRb0iRg5g
4ucbxQhYB3/OTucjSS+NDUOFzPrpApQOSBqRtWRGVkELa1+PY3ht9KQ1Vzwb1c9U
zloDqPXirBzjMHPPb8+KMf2rzTnHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwtEO
bU8w+1OhM1KDm+fPwmPOsNgwHwYDVR0jBBgwFoAU9XSxa6hq2W4A3trNY0H5qCTq
R6cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlFOUIzL0VFNDBBNThBNTU4QzExRUZBRkNDRkJBMDc2MkU5NTFBLzlYU3hh
NmhxMlc0QTN0ck5ZMEg1cUNUcVI2Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlYU3hhNmhxMlc0QTN0ck5ZMEg1cUNUcVI2Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUU5QjMvRUU0MEE1OEE1NThDMTFFRkFGQ0NGQkEwNzYy
RTk1MUEvOVhTeGE2aHEyVzRBM3RyTlkwSDVxQ1RxUjZjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBx5uq0NIvkhNhGZq5BHbJQsH1IN6i1
Lk2jmocr5TtVpuME+9Jy+LmCsxPcYEr8qL3V2YUUfSC1T1YDuaoda5Z0oxMgDIYH
dM+WqIfyZ3GrHVJPE02X4wRwrN6V11dO4OIyig0130qcdzT6Pi60A6pxCxw/QGAf
zOgjW3/b1RoU94lIIfXxVYMeNersCH2q+4jNLVIrh6qxPAZGabaDW1HFxWS3UMNO
neFKNXj7UMxMqf7XrtMhshHeaMoiz0VuCUI0Sxyb22HPPxZzLGLhzQswa7LAz35s
7ubc0wbaSeZcQdf0sspE+hb2kap+cLti1/wTUJOyesgNwDYxit2OEXR9
-----END CERTIFICATE-----
Generated at Thu Oct 29 11:01:50 2026 by rpki-client