Error: rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
File:                     gvHGYRo6FGfbPXikpf7VCgilexM.mft (raw, json)
Hash identifier:          eYtAXnYVE0kZPui/yz/24DT7ArGTJct8rVVFhWSPNQY=
Subject key identifier:   92:9A:72:F6:1A:FA:7C:1D:26:DA:BA:6A:ED:2F:3C:33:93:F5:1D:CE
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       08A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
Manifest number:          0849
Signing time:             Fri 02 Oct 2026 02:17:58 +0000
Manifest this update:     Fri 02 Oct 2026 02:17:57 +0000
Manifest next update:     Sun 04 Oct 2026 02:17:57 +0000
Files and hashes:         1: gvHGYRo6FGfbPXikpf7VCgilexM.crl (hash: JiOlbFtvSI/B6RqtUUEmlLZCiIekGtiHxFi5pTpqQ/U=)
                          2: 364CE70A334211F1BC84101ECF1D38B0.roa (hash: SzY0M69wl8kbhZdJv0mbrKWF59ghGQkBzNtNqRXdeks=)
                          3: EE287DA62D1811F1BD0A6C7ADAE4EC9C.roa (hash: pdJON2oLaF8IedNpv4LxRG7g+R9Qeyi4W75wQ52QQ1c=)
                          4: 3D4622F431BE11F1B0952483DAE4EC9C.roa (hash: 9codvlAei9UqHKLAiSqHgXThiO5HpMqG0grwQ1kO/0k=)
                          5: 478AB26031BF11F1A6BDDD88DAE4EC9C.roa (hash: Lv1cV1DETQTGDmZ6WDynxJ207w7/5uQQidy8jh7V8yI=)
                          6: DFA7A342B04911F187D1F3DFCE1D38B0.roa (hash: EQXjr+GeRZbv3c4OcOdL9TP+7SybAubMWSm6gSx0/6s=)
                          7: E76F4CF831C611F190C479B3DAE4EC9C.roa (hash: faD0G33rEe95uhhlPweEbpanRsZcsjWv3e68sG62k44=)
                          8: 77D3E0C6333C11F1805420FDCE1D38B0.roa (hash: YU4iJ8s6p9raAZL7JWDoAn+gjmxoRUJUec2K/33AiEA=)
                          9: 91EA49D8333B11F1B22EFDF6CE1D38B0.roa (hash: Leg6xrK4VU4HGI0NvQ1v004esZ1TDt8++lioLjxNeuE=)
                          10: 8DB94274288211F1A74615F3DAE4EC9C.roa (hash: B0UVviCFUnADjgeCgBwbY+DmzXyTTHx6vlKGunTI9IM=)
                          11: AC275DBC631B11F1A22A1419CF1D38B0.roa (hash: xoGazta3G0QJLsgZ7iZuJsXZt3X8rgvX9PE2KdUCQaM=)
                          12: C2372772334111F18BB80E1ACF1D38B0.roa (hash: Gwi4ueCCvJZIEZsnyEOTtAlQafyA/I+7H+Prmzi5eP8=)
                          13: EB475FF031C111F1A71AC296DAE4EC9C.roa (hash: Y9/MUITjWqXrHS2rgjPQqYV3XME+v0umVdBOKsh062M=)
                          14: 12E03A6431CC11F19A97B0CEDAE4EC9C.roa (hash: lFjlkbuuShNgq6PRvQFC/93Tiq0B/QhMlHkqwc1W/u4=)
                          15: EF98E58A333B11F19E91FDF8CE1D38B0.roa (hash: ag2v5reb+zDo0vsvEh1NsL0zM4GQBnL1uS0jIXx6S14=)
                          16: 74D18C2231CD11F1A17488D6DAE4EC9C.roa (hash: Ox6dJbpLiRALf6E85u1k7Yfr6Od7UQqYMnIso8XRqBo=)
                          17: 9C892C2631CC11F1A1108ED2DAE4EC9C.roa (hash: QnqI3tvcewW1sAf9rxjG6hGUqhmFIswnl1mqgcxGm5k=)
                          18: 9DB6F4F831C111F183F9D694DAE4EC9C.roa (hash: QcMFrNwLjMz1DFo2YDIDBDhUUpqBoNq1P1d/q0F+85M=)
                          19: 95AD80F831CE11F1B34C2DDEDAE4EC9C.roa (hash: 7GSszHcBSLoAhRcmrcuX+aOLze2LfqETieE1ohOZlfA=)
                          20: 653646CC2D1811F1BF3D1FF5DAE4EC9C.roa (hash: u3IUn4tj5zxayKjv7Mj9uwx0wbWiOsgT9S4T/OJURIU=)
                          21: 5C5FD9AC31C611F19419AEAFDAE4EC9C.roa (hash: Vfi3YXIFXtroc+xlvW/NnuJNGpVT1vqCm7HLYJu9x5o=)
                          22: 9B8752862DBB11F189ED3DB1DAE4EC9C.roa (hash: 5W62VXfhv8h4fla6dJXbBmlFhR3DzFBJKL2EWMvoUbg=)
                          23: E27323D22DCF11F1AA18CAA5DAE4EC9C.roa (hash: 4BxkClyTNHcRQAjTgzhuIwOnw53YqhmtdQmVdBzKibE=)
                          24: A662608285F011F1B19268A4CE1D38B0.roa (hash: UMIy7Die2cFrodGJSjrF5fxQ8Z0dpn4wV5XE1qmScCk=)
                          25: C54D1BE2333C11F1B6BD59FDCE1D38B0.roa (hash: p6RZ8QJpgz3xEcvp6tMRCbchfnm4VVw01lhILVzRfjA=)
                          26: 8058325C291811F1BCA469E5DAE4EC9C.roa (hash: tn84rYgdhGNCGvc6GHqAV2yntcG3hM0yk13lx2/0f0g=)
                          27: 32A4F74C31CA11F1A89426C5DAE4EC9C.roa (hash: 6PvDVTzGzqpsU1NuvcWjmyoaxR1Pmky5CuTuNIv3Vuk=)
                          28: 3CA9E5062D1811F1B62BFBF4DAE4EC9C.roa (hash: i9e2Z/xX/L9oVfHEoB5qHiCLB71AT9kMB03oQMgB07s=)
                          29: 1E751F0431CF11F1A29171E0DAE4EC9C.roa (hash: Wva+Ot8drC807YhHscETaYZc4/LMLEyI5FKmSQmkMb0=)
                          30: 8F5F9A36334211F1952ABDA1CE1D38B0.roa (hash: TRLftW7bQP4YHkozq600eml5OVZhzd6UoYvqA+Pi6rY=)
                          31: 5F6C45B02D1911F19C780B7BDAE4EC9C.roa (hash: bOxuL7xuj8ZVGs3jT5rSLBPTBOPxm9e39rt/LXAf8q4=)
                          32: BEFF110C2D1811F1A1F97CF5DAE4EC9C.roa (hash: 3agqaHMVa66E4J+qH2SRoSQKzgeQvz+LrhURDFz8B1I=)
                          33: 24407F2431DD11F1B2EF6FB0DAE4EC9C.roa (hash: swExoTSzr/HphO/RuiYU4vF1Uh5yVj5x3/uO3edAUWw=)
                          34: 901DEFCA2D1811F1A30C24F5DAE4EC9C.roa (hash: idx082MQgEGFii3PMe5uhvENRLBGqI2MvkDj/0s+aOo=)
                          35: 095EF0C031E011F190717FC1DAE4EC9C.roa (hash: dzflDoxOpzpUgSIWiEA972HPgxMsTyqLlK8yrYd0ey4=)
                          36: 3F0F0F7031C211F19F838798DAE4EC9C.roa (hash: n7CiBbLyLhTC5G5W9u5fi8nfjYNPB7ln0RUmNgrJ9zI=)
                          37: 31CEFF34333C11F1A29948F9CE1D38B0.roa (hash: vwXLDZXZzTg/OEkNIbZZslfRneJP1AMm64AZWINF7J8=)
                          38: 1306C5242D0A11F1ACE79FA2DAE4EC9C.roa (hash: Yap6AiBkD3ixZ9mWZ1ZB8OCM/j6jVoGOnv3+2v/DDNI=)
                          39: 14B3FDF031C511F19BFBF3A7DAE4EC9C.roa (hash: yki70wMJjkF8GK10Y244hzfzk5cj+gAW3eBV96fUOME=)
                          40: 83A6A4D4334011F1A7D0E413CF1D38B0.roa (hash: 74QB8V26zqay7IX5/bDpPWmQodgpJK1gmMK9RYjD57I=)
                          41: CC2DC63031BD11F1991EE480DAE4EC9C.roa (hash: BOHs5+10RMjUndeT2FzPUD4KqFm+1OkeMgiCuz86fDw=)
                          42: 9FF9476C31BB11F1BEBBC5F1DAE4EC9C.roa (hash: ng+xI/QLSvaWcBtYJKU3+sh8o2b7s+XTpnLUsVJRDNQ=)
                          43: 637EEFD031BB11F1B9968FF1DAE4EC9C.roa (hash: 8v1K6f5pVaGEkN0RYF56XSCdk82jOyqLTbXIL2m0YSQ=)
                          44: 48690C5431C911F1981D27BFDAE4EC9C.roa (hash: EUVMx+SXkeZ58/9y3EmTr96W5XKI9Y2B6lAIh14TtcI=)
                          45: B2FA3840288211F1BDB7ECF4DAE4EC9C.roa (hash: 5/ROpgAZwkQdj2BqP/MW/qlEH7eR3MDQUUaLt+Ee2ao=)
                          46: 5527F30431D011F1958427E9DAE4EC9C.roa (hash: AIvtBN5UUEa0IW3TZyf90eURXW/vkLS6CaLRuEgcyQM=)
                          47: 45C2EF7E333B11F1ADF4D3F4CE1D38B0.roa (hash: V86xrnh/y+DTVy0ksoIWIJSKRIobCwk+V5t+KofAi+I=)
                          48: 181970DA552211F1B9642311CF1D38B0.roa (hash: FrqgJULwxDs9PKgC0s454c8XZzkNJcz5Z/71KciqL8E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 Oct 2026 02:17:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2215 (0x8a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: Oct  2 02:17:57 2026 GMT
            Not After : Oct  4 02:17:57 2026 GMT
        Subject: CN=6abf1456-2850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7c:5f:7a:a5:ed:02:38:b1:e9:90:9a:2e:38:
                    48:ce:7f:34:f3:a3:b7:bf:2e:60:53:31:83:56:24:
                    c2:35:37:63:17:cd:7a:b7:c7:02:f3:7e:88:f3:17:
                    ba:ff:6d:4d:0a:89:b1:93:2e:dc:6e:2e:ee:91:62:
                    51:17:06:9a:fb:35:d2:65:2c:73:de:5b:1f:0b:dd:
                    99:16:62:d9:96:d3:3b:e6:07:80:29:b4:0c:0f:0f:
                    02:40:38:10:a1:70:30:76:8f:24:ca:23:87:72:3a:
                    3b:6b:69:0b:ff:6b:db:31:ed:46:28:c8:e8:c3:92:
                    93:fe:15:be:da:24:d0:c3:94:c1:2a:17:ea:37:20:
                    6f:20:8a:b2:05:5f:5c:ca:91:ed:bf:a7:3c:7e:4b:
                    be:63:6c:e6:e1:8f:4a:a9:6c:af:8e:cb:f2:ba:88:
                    89:f7:0a:88:a5:c6:7c:bc:16:ca:df:ad:95:49:47:
                    c6:2c:57:91:59:e4:71:0e:d6:d0:31:d8:2e:1f:ee:
                    e4:eb:2a:56:52:3c:44:8d:c6:56:a1:ee:59:95:eb:
                    5c:37:f5:ad:64:66:24:7e:17:5c:34:17:eb:9f:7d:
                    ff:2b:9b:f4:06:ea:2a:73:c3:2c:72:af:3f:18:57:
                    d9:a0:a8:57:43:63:95:f2:f2:bc:9b:47:2c:47:89:
                    1e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9A:72:F6:1A:FA:7C:1D:26:DA:BA:6A:ED:2F:3C:33:93:F5:1D:CE
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:5f:30:28:f7:ea:86:7b:e4:47:bf:65:e5:dc:cc:f3:76:ce:
         ae:59:9a:a9:44:81:b6:ee:62:c7:e8:05:af:d5:d3:f5:0d:39:
         40:07:fa:4a:30:aa:d9:27:4a:25:22:b7:fa:69:17:d7:10:c0:
         82:aa:8c:1a:3c:8d:17:d0:2e:51:05:f6:75:19:c0:31:73:c3:
         1a:e0:65:43:ee:94:46:f6:e8:70:91:3c:ef:7b:92:e3:7a:75:
         29:0b:61:8c:6a:4e:d2:8d:08:04:bc:07:53:03:64:4a:7c:b1:
         46:d7:32:be:79:9a:44:a5:0b:b4:fa:30:7f:68:2c:24:4a:40:
         0e:b9:65:53:bc:21:1d:ca:a7:40:42:1f:e7:fd:49:56:cc:07:
         80:bb:9a:0e:10:b6:c5:ce:13:ca:ab:8f:66:2a:41:95:f4:d4:
         bb:b3:6d:e6:9f:6a:cd:18:1f:c4:0a:c4:8c:7f:8b:59:5e:10:
         02:42:67:7e:64:20:e1:70:4d:81:95:5b:e9:8e:50:a8:63:2e:
         f7:d6:92:e1:2b:a4:36:9a:b7:c6:c5:f7:b2:ef:71:1e:3f:3f:
         64:a8:7b:3d:07:4f:1b:4a:45:8d:14:5e:17:e1:35:d8:45:db:
         49:18:25:09:48:8b:41:a5:36:42:db:82:3c:24:c0:6c:44:c3:
         9e:78:bf:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 14:53:30 2026 by rpki-client