Error: rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
File:                     rwNfxJBpXa-3lvnHN19zijES_Ds.mft (raw, json)
Hash identifier:          CEKPfUkU585zs9wSJP8MpHqk/Pg45L6T2Lx5LzMRpWo=
Subject key identifier:   33:31:1D:37:4B:0E:74:41:2E:30:90:77:69:CF:D8:F0:57:0E:2F:65
Authority key identifier: AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B
Certificate issuer:       /CN=F36A2303AR/serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
Certificate serial:       09DF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
Manifest number:          09D6
Signing time:             Sat 31 Oct 2026 01:42:21 +0000
Manifest this update:     Sat 31 Oct 2026 01:42:20 +0000
Manifest next update:     Mon 02 Nov 2026 01:42:20 +0000
Files and hashes:         1: rwNfxJBpXa-3lvnHN19zijES_Ds.crl (hash: HNiHmpT7PTkkLDMGiMw7fNVALd8AOz82RNmDoL6Z+i8=)
                          2: 7322325A60B211F1A94AA0EFCE1D38B0.roa (hash: DkUrhY6mM2jhhT/wIQ7n53CMBa8i3Sa+6z/2TT6AAqk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
                          rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2527 (0x9df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2303AR, serialNumber=AF035FC490695DAFB796F9C7375F738A3112FC3B
        Validity
            Not Before: Oct 31 01:42:20 2026 GMT
            Not After : Nov  2 01:42:20 2026 GMT
        Subject: CN=6ae5477d-60ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:4d:ff:8d:d4:b3:0a:70:4d:62:69:f1:98:
                    d4:5d:65:f5:2b:bd:65:61:a5:65:69:b4:1e:cb:11:
                    9d:ac:7e:32:5a:dc:3d:98:9f:bf:82:f7:68:1e:0a:
                    b6:46:f5:67:c7:3a:f1:92:27:f2:de:56:51:e5:c8:
                    d8:ab:d9:07:c7:46:6e:e4:a4:9f:2d:fe:78:ab:3b:
                    e3:06:3c:b7:e5:ff:75:72:1c:47:20:d6:e2:ac:9d:
                    5f:2d:be:98:14:8f:e4:ad:48:0d:06:3b:ce:40:7d:
                    fd:f0:20:cf:0f:53:94:56:b3:6b:0c:68:5e:51:aa:
                    1c:67:5a:26:34:b8:3e:b3:e0:f5:26:f4:a7:b3:ba:
                    38:6b:85:78:d0:80:07:2d:82:f0:16:9a:1b:22:fb:
                    f2:04:50:a9:23:25:f1:f9:bb:41:c7:46:58:cf:25:
                    73:e8:59:a3:44:ea:3a:58:ae:b9:81:09:0c:49:a3:
                    59:f4:97:c5:33:d8:e7:3b:43:16:5b:3b:94:97:63:
                    3b:29:d4:f0:5d:19:46:d8:18:0f:a6:82:8d:26:5e:
                    a7:5e:a4:11:0a:65:f5:4d:97:16:78:90:e0:28:77:
                    05:6d:a7:b5:59:c6:90:9d:9d:e3:bb:c8:9e:c4:f7:
                    af:6d:f1:ff:58:74:e8:26:5d:ec:be:d0:c1:3e:7f:
                    0a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:31:1D:37:4B:0E:74:41:2E:30:90:77:69:CF:D8:F0:57:0E:2F:65
            X509v3 Authority Key Identifier:
                keyid:AF:03:5F:C4:90:69:5D:AF:B7:96:F9:C7:37:5F:73:8A:31:12:FC:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rwNfxJBpXa-3lvnHN19zijES_Ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2303/78CB6F96594311EA8E2E6161F8AEA228/rwNfxJBpXa-3lvnHN19zijES_Ds.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:0a:ed:a4:af:dc:14:f5:4e:6e:c9:4c:dd:66:a1:90:ae:69:
         93:13:e5:ea:39:fb:9f:a6:81:e5:d8:7e:a4:5e:c9:ac:55:79:
         8f:49:88:4e:ba:e8:c4:3b:7d:19:04:fd:5a:dc:dd:c5:09:cb:
         73:68:64:58:f3:b5:f2:05:cb:85:68:fa:3d:7b:07:c3:9d:3d:
         64:38:eb:e8:12:bf:8f:62:ee:ce:17:c9:7c:d8:07:b4:8f:dc:
         e3:9d:83:ac:21:80:61:fa:56:ed:81:c0:c8:e8:da:1f:89:31:
         7d:06:6c:f5:54:8e:46:5c:c7:4a:85:6e:42:90:7b:3a:0e:26:
         be:21:8b:29:1f:ee:d8:b4:f7:fa:48:da:fc:ec:4e:83:c9:19:
         ca:a7:73:c6:f8:7e:88:d4:6f:ea:aa:27:94:60:ad:65:74:f0:
         7f:a9:3e:c4:3a:2b:a7:97:c0:66:89:11:e1:ce:8c:da:d9:2c:
         1f:2b:4a:fb:83:1e:8d:9f:ed:00:1f:fa:bc:cb:2b:99:a4:36:
         da:62:e8:9f:25:99:f8:18:64:2a:fd:71:4b:14:d3:78:60:f5:
         bc:4f:c2:3c:55:7f:98:24:98:4a:3b:50:89:5a:8a:86:e8:1b:
         75:48:dd:2a:7c:66:88:04:15:6b:94:c8:bf:74:93:ca:67:a3:
         58:40:3b:91
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCd8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTIzMDNBUjExMC8GA1UEBRMoQUYwMzVGQzQ5MDY5NURBRkI3OTZGOUM3Mzc1Rjcz
OEEzMTEyRkMzQjAeFw0yNjEwMzEwMTQyMjBaFw0yNjExMDIwMTQyMjBaMBgxFjAU
BgNVBAMTDTZhZTU0NzdkLTYwYmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2+k3/jdSzCnBNYmnxmNRdZfUrvWVhpWVptB7LEZ2sfjJa3D2Yn7+C92ge
CrZG9WfHOvGSJ/LeVlHlyNir2QfHRm7kpJ8t/nirO+MGPLfl/3VyHEcg1uKsnV8t
vpgUj+StSA0GO85Aff3wIM8PU5RWs2sMaF5RqhxnWiY0uD6z4PUm9KezujhrhXjQ
gActgvAWmhsi+/IEUKkjJfH5u0HHRljPJXPoWaNE6jpYrrmBCQxJo1n0l8Uz2Oc7
QxZbO5SXYzsp1PBdGUbYGA+mgo0mXqdepBEKZfVNlxZ4kOAodwVtp7VZxpCdneO7
yJ7E969t8f9YdOgmXey+0ME+fwrBAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUMzEd
N0sOdEEuMJB3ac/Y8FcOL2UwHwYDVR0jBBgwFoAUrwNfxJBpXa+3lvnHN19zijES
/DswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEyMzAzLzc4Q0I2Rjk2NTk0MzExRUE4RTJFNjE2MUY4QUVBMjI4L3J3TmZ4
SkJwWGEtM2x2bkhOMTl6aWpFU19Ecy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3J3TmZ4SkJwWGEtM2x2bkhOMTl6aWpFU19Ecy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTIzMDMvNzhDQjZGOTY1OTQzMTFFQThFMkU2MTYxRjhBRUEy
MjgvcndOZnhKQnBYYS0zbHZuSE4xOXppakVTX0RzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCDCu2kr9wU9U5uyUzdZqGQrmmTE+XqOfuf
poHl2H6kXsmsVXmPSYhOuujEO30ZBP1a3N3FCctzaGRY87XyBcuFaPo9ewfDnT1k
OOvoEr+PYu7OF8l82Ae0j9zjnYOsIYBh+lbtgcDI6NofiTF9Bmz1VI5GXMdKhW5C
kHs6Dia+IYspH+7YtPf6SNr87E6DyRnKp3PG+H6I1G/qqieUYK1ldPB/qT7EOiun
l8BmiRHhzoza2SwfK0r7gx6Nn+0AH/q8yyuZpDbaYuifJZn4GGQq/XFLFNN4YPW8
T8I8VX+YJJhKO1CJWoqG6Bt1SN0qfGaIBBVrlMi/dJPKZ6NYQDuR
-----END CERTIFICATE-----
Generated at Sat Oct 31 05:16:52 2026 by rpki-client