Error: rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File:                     ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier:          6ZiDNJOWpaUm+K9jPlR3QVeD+aDCLeaQxnb+4Mgz0bk=
Subject key identifier:   F4:A3:CD:9E:D7:A5:E7:95:0B:A2:DA:76:72:AC:22:8D:EE:43:81:95
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer:       /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial:       08BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number:          08BF
Signing time:             Sat 24 Oct 2026 01:56:11 +0000
Manifest this update:     Sat 24 Oct 2026 01:56:10 +0000
Manifest next update:     Mon 26 Oct 2026 01:56:10 +0000
Files and hashes:         1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: mdgFnGL0Gl2Zpa7PYOBYO+mxRcMk/qMcX8bC/AEBx1k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
        Validity
            Not Before: Oct 24 01:56:10 2026 GMT
            Not After : Oct 26 01:56:10 2026 GMT
        Subject: CN=6adc103b-4f70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8b:71:55:6f:45:25:6f:52:7a:1f:1c:5b:d5:
                    d5:c2:d1:32:90:0b:db:ee:be:ab:e5:3f:a3:e9:f5:
                    6a:1d:29:6b:a4:4d:d3:ba:8a:dd:b3:25:c6:dc:26:
                    58:ee:1a:5d:6a:78:13:a0:e3:76:8d:68:27:ee:74:
                    60:f1:a5:85:d3:fb:1f:d1:2b:54:24:02:f3:8b:49:
                    ce:d1:7a:8a:7e:a2:1b:33:f0:25:95:02:49:ba:7b:
                    de:67:93:97:10:76:c5:ef:c7:a0:fd:72:7c:38:89:
                    94:ba:b6:75:36:70:bf:b0:75:09:8c:a5:f5:36:f5:
                    d0:c8:78:d5:9a:e1:d0:c4:82:6c:fc:d4:dc:e8:b3:
                    fd:ad:ef:2f:27:63:b0:11:8e:94:5f:f9:6b:43:05:
                    f0:29:49:dd:6d:02:5a:c9:3e:69:cc:c1:eb:c8:89:
                    5b:b2:7f:cd:dc:5c:fe:68:ff:29:60:6a:8d:67:a0:
                    c3:13:40:15:af:86:3b:b3:bd:f7:e1:08:2c:d0:48:
                    97:53:35:1f:ba:d4:9c:96:ef:d8:d8:8b:d0:ee:85:
                    64:da:a8:b8:1d:e7:64:02:ca:67:f7:8b:29:0a:31:
                    1a:52:34:4a:55:0b:24:c4:f7:24:74:9d:19:e5:a1:
                    6a:00:a1:d8:e7:a5:54:51:7b:eb:fc:72:d4:7c:fc:
                    40:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A3:CD:9E:D7:A5:E7:95:0B:A2:DA:76:72:AC:22:8D:EE:43:81:95
            X509v3 Authority Key Identifier:
                keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b3:27:c4:4d:43:e0:ff:27:29:15:b2:50:f8:b9:37:4f:17:
         08:48:9c:3c:0a:6b:3f:d8:12:68:18:29:6a:7c:36:f6:09:bb:
         28:dd:4e:75:9e:9e:d9:be:4a:a2:93:fe:ed:75:76:4c:08:f3:
         ce:79:93:53:83:f8:c0:9a:76:2e:c5:85:f5:64:24:7e:b5:90:
         5d:93:92:30:91:eb:36:d1:20:e4:4f:7a:be:60:a4:59:f9:95:
         b9:c4:00:a5:21:6a:85:92:37:7a:4c:dc:75:9f:15:63:b9:19:
         93:d6:11:e3:a9:d7:d1:12:c0:bd:bf:c9:88:96:d9:b3:c9:81:
         2a:09:68:8e:49:89:73:ea:4c:95:66:ee:54:3c:bf:d0:1a:ed:
         60:99:07:1a:71:11:04:18:c3:5e:88:e3:2a:25:bb:6f:d9:4a:
         00:64:b7:d5:0f:e5:b4:6b:85:c9:05:13:b6:ed:43:9c:f1:09:
         f9:41:dc:8f:f5:ab:e8:61:0f:73:f6:f2:ab:d2:fc:20:a8:1f:
         28:34:58:c2:a8:d5:56:45:1e:38:fa:97:4a:37:ac:41:78:a4:
         80:0d:73:82:3c:23:ea:3b:f5:39:23:b1:19:3a:8e:43:67:54:
         78:46:9e:fb:31:cc:a9:9d:58:29:4a:cc:f6:5a:31:f3:e4:91:
         bb:f7:af:92
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTk5MURBRjExMC8GA1UEBRMoNkEyRDM2RTg3N0Q3MjUyNkM0NEY2RTAwNEZBRjM0
Rjk5MDRGMjMxMTAeFw0yNjEwMjQwMTU2MTBaFw0yNjEwMjYwMTU2MTBaMBgxFjAU
BgNVBAMTDTZhZGMxMDNiLTRmNzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxi3FVb0Ulb1J6Hxxb1dXC0TKQC9vuvqvlP6Pp9WodKWukTdO6it2zJcbc
JljuGl1qeBOg43aNaCfudGDxpYXT+x/RK1QkAvOLSc7Reop+ohsz8CWVAkm6e95n
k5cQdsXvx6D9cnw4iZS6tnU2cL+wdQmMpfU29dDIeNWa4dDEgmz81Nzos/2t7y8n
Y7ARjpRf+WtDBfApSd1tAlrJPmnMwevIiVuyf83cXP5o/ylgao1noMMTQBWvhjuz
vffhCCzQSJdTNR+61JyW79jYi9DuhWTaqLgd52QCymf3iykKMRpSNEpVCyTE9yR0
nRnloWoAodjnpVRRe+v8ctR8/EDBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU9KPN
ntel55ULotp2cqwije5DgZUwHwYDVR0jBBgwFoAUai026HfXJSbET24AT680+ZBP
IxEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE5OTFELzgxOUE3RjI0MTlGMzExRUJCMkEyODMwOEY4QUVBMjI4L2FpMDI2
SGZYSlNiRVQyNEFUNjgwLVpCUEl4RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FpMDI2SGZYSlNiRVQyNEFUNjgwLVpCUEl4RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTk5MUQvODE5QTdGMjQxOUYzMTFFQkIyQTI4MzA4RjhB
RUEyMjgvYWkwMjZIZlhKU2JFVDI0QVQ2ODAtWkJQSXhFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA0syfETUPg/ycpFbJQ+Lk3TxcISJw8
Cms/2BJoGClqfDb2Cbso3U51np7Zvkqik/7tdXZMCPPOeZNTg/jAmnYuxYX1ZCR+
tZBdk5Iwkes20SDkT3q+YKRZ+ZW5xAClIWqFkjd6TNx1nxVjuRmT1hHjqdfREsC9
v8mIltmzyYEqCWiOSYlz6kyVZu5UPL/QGu1gmQcacREEGMNeiOMqJbtv2UoAZLfV
D+W0a4XJBRO27UOc8Qn5QdyP9avoYQ9z9vKr0vwgqB8oNFjCqNVWRR44+pdKN6xB
eKSADXOCPCPqO/U5I7EZOo5DZ1R4Rp77McypnVgpSsz2WjHz5JG796+S
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:17:32 2026 by rpki-client