Error: rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
File:                     FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft (raw, json)
Hash identifier:          weE4zeThM0FR+9W0+E16Hmx3zXV53/WUZlEJDXZs2uw=
Subject key identifier:   60:5E:E5:87:AA:4F:90:D5:1B:8F:4B:A0:35:9D:A9:BF:15:66:B8:A4
Authority key identifier: 15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB
Certificate issuer:       /CN=F36A32F5AF/serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
Certificate serial:       0315
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
Manifest number:          0314
Signing time:             Sun 25 Oct 2026 04:29:11 +0000
Manifest this update:     Sun 25 Oct 2026 04:29:10 +0000
Manifest next update:     Tue 27 Oct 2026 04:29:10 +0000
Files and hashes:         1: FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl (hash: 59RUkjhfIQXD10soHFuhV4g0wX29MrCmlTR8WRXmt58=)
                          2: B505C262710911EF82F828AE762E951A.roa (hash: xT25C22GG0twXqlKDHqtHM6ZD8MTGkUTk1OnWMySjRQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A32F5AF, serialNumber=15BC062B0B70E8F7F20B4A15BE0509005B7310CB
        Validity
            Not Before: Oct 25 04:29:10 2026 GMT
            Not After : Oct 27 04:29:10 2026 GMT
        Subject: CN=6add8596-09ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3e:4c:e2:9d:14:84:84:7a:41:b1:d1:da:00:
                    c4:a3:84:c3:dc:97:d5:71:32:b3:65:54:1d:a4:ca:
                    d2:17:27:0c:7d:c7:35:7b:c4:30:af:06:f6:a9:66:
                    bc:c6:4e:db:e1:33:a5:87:3d:0b:5c:e2:e5:00:c7:
                    f2:2e:9c:81:cd:24:84:fb:49:17:d5:5d:b4:a8:5e:
                    59:0d:f2:fe:ff:40:3f:94:4b:98:af:ad:94:c4:96:
                    b3:dc:f6:a3:78:94:58:4e:a5:fc:76:20:84:d7:6d:
                    43:51:ea:22:9f:81:85:c5:3a:8f:ad:53:d5:33:3d:
                    56:a3:3a:12:56:e9:30:16:ac:03:32:d0:c4:f6:9e:
                    22:7b:e5:ae:a0:0e:1b:de:56:30:9d:4d:b4:ae:49:
                    69:87:f2:26:44:a9:12:f3:86:d9:b1:4f:3f:98:83:
                    34:62:b8:97:79:36:7f:c3:1c:64:38:9b:bd:eb:aa:
                    48:16:e5:34:73:e0:43:fc:71:06:55:c8:3d:d0:94:
                    5e:21:2b:fc:58:35:2a:24:df:95:43:5e:93:03:21:
                    1f:5f:f1:92:f5:02:e3:52:9c:41:b5:f7:10:66:df:
                    2b:e6:90:7d:ea:53:39:a4:54:53:f4:4f:6f:4c:fc:
                    5e:f3:86:20:44:87:84:53:c9:02:37:4d:f2:bf:71:
                    be:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5E:E5:87:AA:4F:90:D5:1B:8F:4B:A0:35:9D:A9:BF:15:66:B8:A4
            X509v3 Authority Key Identifier:
                keyid:15:BC:06:2B:0B:70:E8:F7:F2:0B:4A:15:BE:05:09:00:5B:73:10:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FbwGKwtw6PfyC0oVvgUJAFtzEMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A32F5/034990A4710811EFA7A9E4A3762E951A/FbwGKwtw6PfyC0oVvgUJAFtzEMs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:6a:0f:3c:ab:c5:80:9d:db:be:42:fc:66:b2:b0:5d:65:18:
         cb:a4:f2:df:86:1c:ef:ad:ad:39:09:57:c8:03:88:c6:9d:80:
         e0:52:38:13:e0:2d:fe:d0:d5:77:d1:d7:ab:01:61:93:2b:80:
         56:d7:75:61:86:33:c6:e8:13:41:82:73:64:e9:59:89:e0:dd:
         83:92:ae:a1:38:d7:3b:e5:68:cd:85:53:8a:d8:c3:99:ac:e4:
         e7:3d:c8:56:31:f6:d2:d4:14:73:96:30:fb:f3:bf:90:08:c3:
         91:48:fb:5b:dd:57:81:01:cd:98:ea:58:77:e2:97:b0:91:3b:
         5c:f8:86:d9:45:3e:6b:01:8f:e8:f0:0f:63:a9:21:37:46:6f:
         68:cf:cd:a7:0a:f1:cb:5e:8e:be:a7:8a:09:e8:ee:72:d1:47:
         91:ec:72:30:71:9c:1b:71:28:fc:50:91:a4:a4:d1:4a:9e:b2:
         af:8c:67:8a:9a:b3:f7:11:30:6e:3d:be:be:33:0b:aa:72:61:
         d7:86:35:18:77:d8:31:36:49:b3:78:35:76:01:15:a0:ac:7c:
         ba:ec:7c:e7:3c:3e:f4:40:8e:fc:cf:60:f5:2f:db:40:04:a3:
         9d:01:e0:7e:c1:0e:3c:bb:32:86:48:d5:f1:c9:d1:ca:46:f1:
         28:a7:74:f1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAxUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTMyRjVBRjExMC8GA1UEBRMoMTVCQzA2MkIwQjcwRThGN0YyMEI0QTE1QkUwNTA5
MDA1QjczMTBDQjAeFw0yNjEwMjUwNDI5MTBaFw0yNjEwMjcwNDI5MTBaMBgxFjAU
BgNVBAMTDTZhZGQ4NTk2LTA5Y2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjPkzinRSEhHpBsdHaAMSjhMPcl9VxMrNlVB2kytIXJwx9xzV7xDCvBvap
ZrzGTtvhM6WHPQtc4uUAx/IunIHNJIT7SRfVXbSoXlkN8v7/QD+US5ivrZTElrPc
9qN4lFhOpfx2IITXbUNR6iKfgYXFOo+tU9UzPVajOhJW6TAWrAMy0MT2niJ75a6g
DhveVjCdTbSuSWmH8iZEqRLzhtmxTz+YgzRiuJd5Nn/DHGQ4m73rqkgW5TRz4EP8
cQZVyD3QlF4hK/xYNSok35VDXpMDIR9f8ZL1AuNSnEG19xBm3yvmkH3qUzmkVFP0
T29M/F7zhiBEh4RTyQI3TfK/cb4zAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYF7l
h6pPkNUbj0ugNZ2pvxVmuKQwHwYDVR0jBBgwFoAUFbwGKwtw6PfyC0oVvgUJAFtz
EMswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzMkY1LzAzNDk5MEE0NzEwODExRUZBN0E5RTRBMzc2MkU5NTFBL0Zid0dL
d3R3NlBmeUMwb1Z2Z1VKQUZ0ekVNcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0Zid0dLd3R3NlBmeUMwb1Z2Z1VKQUZ0ekVNcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTMyRjUvMDM0OTkwQTQ3MTA4MTFFRkE3QTlFNEEzNzYy
RTk1MUEvRmJ3R0t3dHc2UGZ5QzBvVnZnVUpBRnR6RU1zLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLag88q8WAndu+QvxmsrBdZRjLpPLf
hhzvra05CVfIA4jGnYDgUjgT4C3+0NV30derAWGTK4BW13VhhjPG6BNBgnNk6VmJ
4N2Dkq6hONc75WjNhVOK2MOZrOTnPchWMfbS1BRzljD787+QCMORSPtb3VeBAc2Y
6lh34pewkTtc+IbZRT5rAY/o8A9jqSE3Rm9oz82nCvHLXo6+p4oJ6O5y0UeR7HIw
cZwbcSj8UJGkpNFKnrKvjGeKmrP3ETBuPb6+MwuqcmHXhjUYd9gxNkmzeDV2ARWg
rHy67HznPD70QI78z2D1L9tABKOdAeB+wQ48uzKGSNXxydHKRvEop3Tx
-----END CERTIFICATE-----
Generated at Sun Oct 25 08:15:42 2026 by rpki-client