Error: rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
File:                     nWdNqh0x5rcSPGSUgdEU-pO97R8.mft (raw, json)
Hash identifier:          WH6sh1P/nIR5heSNRo29kbVuzpsnWc+7qK1ctSJjDhA=
Subject key identifier:   29:10:91:25:5E:2A:86:28:2C:A3:81:98:24:B5:F6:93:36:A9:22:EF
Authority key identifier: 9D:67:4D:AA:1D:31:E6:B7:12:3C:64:94:81:D1:14:FA:93:BD:ED:1F
Certificate issuer:       /CN=F36A05ABAF/serialNumber=9D674DAA1D31E6B7123C649481D114FA93BDED1F
Certificate serial:       07AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
Manifest number:          07AD
Signing time:             Sun 04 Oct 2026 02:14:17 +0000
Manifest this update:     Sun 04 Oct 2026 02:14:17 +0000
Manifest next update:     Tue 06 Oct 2026 02:14:17 +0000
Files and hashes:         1: nWdNqh0x5rcSPGSUgdEU-pO97R8.crl (hash: kqtD6vVR2W5F+0t5E2k1ePrSMzveej0AOg3pa7wFzno=)
                          2: 4E6BBD02DBF411EBBD1CB334F8AEA228.roa (hash: /m66F8lyHu8eSfVoSMkwDMFHVEqCkE2FHy0314I43Lc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 02:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A05ABAF, serialNumber=9D674DAA1D31E6B7123C649481D114FA93BDED1F
        Validity
            Not Before: Oct  4 02:14:17 2026 GMT
            Not After : Oct  6 02:14:17 2026 GMT
        Subject: CN=6ac1b679-29b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fa:1e:c1:6b:1a:ab:3d:99:d8:ee:13:90:44:
                    95:9f:5d:72:1c:68:41:c8:da:0f:7b:dc:1c:9f:47:
                    47:8b:f7:4f:73:a3:c6:d0:cc:9c:e4:ac:ca:c5:20:
                    c4:4c:00:e0:87:df:78:bc:f4:56:83:5b:2f:e1:45:
                    83:e8:be:51:e0:d2:4c:22:ab:83:2b:d0:31:6e:d7:
                    f3:44:cf:02:cf:1d:fc:b2:f8:ba:42:ad:c8:f9:79:
                    41:ec:9c:77:54:4c:e4:b5:6d:8d:a9:1b:05:ec:d8:
                    e0:31:eb:8d:2d:63:3a:2f:1c:59:ec:5c:36:3e:95:
                    d9:e7:96:ce:db:f8:31:88:71:2f:29:e8:3d:49:82:
                    ac:01:0d:ce:f8:d7:11:59:4e:1a:23:80:68:58:ac:
                    8c:24:d8:ff:bb:86:02:e7:fd:18:b3:a0:d2:c3:ca:
                    e5:00:ee:81:86:78:fa:5a:b3:34:91:48:3d:99:8c:
                    37:42:70:73:4b:07:83:48:06:ca:82:36:7f:5f:65:
                    be:bf:e9:8c:5f:24:30:53:09:30:e1:be:89:71:da:
                    bb:b7:ca:45:c6:9b:b9:d2:78:ff:8b:3c:58:b1:b8:
                    b2:b3:9d:8e:08:9e:55:49:0c:d9:17:2a:7c:ba:5a:
                    67:2c:6e:cc:25:81:97:2e:83:38:05:0c:e0:c9:66:
                    b1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:10:91:25:5E:2A:86:28:2C:A3:81:98:24:B5:F6:93:36:A9:22:EF
            X509v3 Authority Key Identifier:
                keyid:9D:67:4D:AA:1D:31:E6:B7:12:3C:64:94:81:D1:14:FA:93:BD:ED:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:9f:18:79:a7:e7:c7:2f:b5:07:69:6f:3f:a3:0c:a8:fb:1b:
         e6:a3:40:cd:76:62:d2:c4:4d:43:ad:6e:90:72:d3:ca:44:87:
         53:16:b3:01:47:61:80:02:bf:f0:24:3f:c2:20:c5:ec:6e:b2:
         ba:be:54:59:3c:28:e1:41:4d:b8:d1:79:87:5c:cf:24:48:f4:
         e5:73:94:ea:a9:64:d8:8f:ed:0e:7f:51:7a:de:b2:dd:03:6a:
         73:af:dd:9a:a6:ff:02:c8:8c:04:f1:e1:4e:3e:d8:05:cd:ac:
         f3:16:e7:e8:c3:57:42:87:2e:16:1c:2e:f4:da:53:a4:8d:a7:
         03:f5:62:80:57:27:82:92:e9:2c:e8:5c:ba:4a:6b:fb:34:36:
         3f:9a:47:4b:19:e3:30:9c:d5:e8:e3:42:af:07:d5:73:25:bc:
         0b:c0:b6:1f:d4:8f:6c:6a:5d:d0:97:b6:82:c6:6d:c0:0f:5d:
         27:e0:b0:8f:d4:44:ed:a2:6a:d7:2e:1b:75:2b:6c:22:e4:bf:
         af:bc:44:0d:05:ba:0d:aa:77:cf:97:73:a3:14:62:16:f7:30:
         1b:e1:57:28:0e:3e:96:62:22:c7:3b:f5:7f:0f:06:0a:8d:6f:
         85:9e:70:e9:27:de:ec:9f:69:72:3c:9c:ae:a9:97:dc:5e:d5:
         7e:52:df:70
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB64wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTA1QUJBRjExMC8GA1UEBRMoOUQ2NzREQUExRDMxRTZCNzEyM0M2NDk0ODFEMTE0
RkE5M0JERUQxRjAeFw0yNjEwMDQwMjE0MTdaFw0yNjEwMDYwMjE0MTdaMBgxFjAU
BgNVBAMTDTZhYzFiNjc5LTI5YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCz+h7BaxqrPZnY7hOQRJWfXXIcaEHI2g973ByfR0eL909zo8bQzJzkrMrF
IMRMAOCH33i89FaDWy/hRYPovlHg0kwiq4Mr0DFu1/NEzwLPHfyy+LpCrcj5eUHs
nHdUTOS1bY2pGwXs2OAx640tYzovHFnsXDY+ldnnls7b+DGIcS8p6D1JgqwBDc74
1xFZThojgGhYrIwk2P+7hgLn/RizoNLDyuUA7oGGePpaszSRSD2ZjDdCcHNLB4NI
BsqCNn9fZb6/6YxfJDBTCTDhvolx2ru3ykXGm7nSeP+LPFixuLKznY4InlVJDNkX
Kny6WmcsbswlgZcugzgFDODJZrHfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKRCR
JV4qhigso4GYJLX2kzapIu8wHwYDVR0jBBgwFoAUnWdNqh0x5rcSPGSUgdEU+pO9
7R8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEwNUFCLzk4MDE1RjM2REJGMzExRUJBRTZGQUQzM0Y4QUVBMjI4L25XZE5x
aDB4NXJjU1BHU1VnZEVVLXBPOTdSOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25XZE5xaDB4NXJjU1BHU1VnZEVVLXBPOTdSOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTA1QUIvOTgwMTVGMzZEQkYzMTFFQkFFNkZBRDMzRjhB
RUEyMjgvbldkTnFoMHg1cmNTUEdTVWdkRVUtcE85N1I4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCKnxh5p+fHL7UHaW8/owyo+xvmo0DN
dmLSxE1DrW6QctPKRIdTFrMBR2GAAr/wJD/CIMXsbrK6vlRZPCjhQU240XmHXM8k
SPTlc5TqqWTYj+0Of1F63rLdA2pzr92apv8CyIwE8eFOPtgFzazzFufow1dChy4W
HC702lOkjacD9WKAVyeCkuks6Fy6Smv7NDY/mkdLGeMwnNXo40KvB9VzJbwLwLYf
1I9sal3Ql7aCxm3AD10n4LCP1ETtomrXLht1K2wi5L+vvEQNBboNqnfPl3OjFGIW
9zAb4VcoDj6WYiLHO/V/DwYKjW+FnnDpJ97sn2lyPJyuqZfcXtV+Ut9w
-----END CERTIFICATE-----
Generated at Sun Oct 4 11:47:31 2026 by rpki-client