Error: rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
File:                     U_eNgMrA6y6s13sBdd8xno91J5Y.mft (raw, json)
Hash identifier:          kqAig7cvub6kXKjIyCtmHoACm4JNY2trNg5SLsZHnQk=
Subject key identifier:   A6:DB:C2:51:2C:D8:A8:BF:89:D4:1E:7C:E2:7C:F1:EE:BE:C7:54:4F
Authority key identifier: 53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96
Certificate issuer:       /CN=F36AC63AAP/serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
Certificate serial:       04C9
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
Manifest number:          04B5
Signing time:             Mon 05 Oct 2026 03:40:35 +0000
Manifest this update:     Mon 05 Oct 2026 03:40:34 +0000
Manifest next update:     Wed 07 Oct 2026 03:40:34 +0000
Files and hashes:         1: U_eNgMrA6y6s13sBdd8xno91J5Y.crl (hash: hCf5bU3pDt9Y17DTLpTABibjAUmg7e7wCbRxpC/OT80=)
                          2: A5829FB8FAFD11EEB4C6D20D017001B1.roa (hash: 1gu4Qu8rsgArGS1Y9Jq2u1pp9GqrVEYfqnEUTV3m1CI=)
                          3: 846EEB8A2DA311F191823FA9DAE4EC9C.roa (hash: cabYmfkn2blVlA5gD0tdwhmgI41cFwtIr5rkIE3cCV8=)
                          4: 4281149CF7DF11EE80FF1021017001B1.roa (hash: cUFtSMR0TSwZ2UTIiyI0fv21ujQldFBY5Sypbj+4CnU=)
                          5: 60E7510AFAFD11EEB483D20C017001B1.roa (hash: M+guvwSynGfTHvTOyvTfqunoeJ7intrM84s+ebCzAj4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
                          rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 00:15:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225 (0x4c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAP, serialNumber=53F78D80CAC0EB2EACD77B0175DF319E8F752796
        Validity
            Not Before: Oct  5 03:40:34 2026 GMT
            Not After : Oct  7 03:40:34 2026 GMT
        Subject: CN=6ac31c33-bcbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:41:7a:c1:66:66:eb:47:6f:13:f6:25:e7:
                    31:1f:41:13:31:53:6a:85:11:c8:73:8c:94:f3:ad:
                    6a:14:6b:ff:08:bb:f4:2b:fa:cb:76:bd:f8:d4:34:
                    4e:f6:21:57:63:5a:d6:51:7d:0f:6a:4e:82:73:c8:
                    ec:84:b1:f2:4d:d2:0d:e0:31:07:43:74:52:36:3f:
                    6b:7f:83:1f:26:2b:6b:6a:82:09:90:97:d4:ad:00:
                    d0:1b:39:94:fd:f6:12:67:04:84:76:0f:a8:2a:09:
                    76:d3:90:66:7a:63:dc:64:91:25:2e:0d:5a:a6:c4:
                    10:ad:fb:6a:c3:f2:e4:66:32:3a:a2:b4:b9:27:ad:
                    df:f3:8d:89:6e:35:06:9f:6a:5b:7a:01:9b:56:9c:
                    f9:5a:97:f8:ea:26:84:4d:b0:7e:3c:43:16:6c:0e:
                    0f:5b:37:20:7b:7d:08:a3:7c:8a:f4:2f:66:3a:ca:
                    66:04:ad:1d:e2:7f:57:9b:64:67:2a:13:24:e9:a7:
                    a6:06:57:aa:69:93:37:64:68:79:d8:a6:9f:65:ea:
                    fa:18:fe:28:9c:37:1a:ee:bf:ae:e3:d8:25:8a:75:
                    ee:30:20:56:be:e4:eb:fe:31:78:b3:82:33:5c:46:
                    23:71:79:fc:89:cd:83:1e:4f:43:4e:c3:cf:01:4d:
                    23:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DB:C2:51:2C:D8:A8:BF:89:D4:1E:7C:E2:7C:F1:EE:BE:C7:54:4F
            X509v3 Authority Key Identifier:
                keyid:53:F7:8D:80:CA:C0:EB:2E:AC:D7:7B:01:75:DF:31:9E:8F:75:27:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/U_eNgMrA6y6s13sBdd8xno91J5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/3017B30240C311EEA7230C444AD9E6FC/U_eNgMrA6y6s13sBdd8xno91J5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:95:77:72:a4:88:b5:26:0d:4a:e0:6b:e4:fd:4e:c8:05:23:
         00:1a:e3:e2:13:8e:67:5a:a9:67:95:44:ee:da:d7:13:62:57:
         15:36:c2:09:c9:31:5b:bd:dd:50:cd:15:f1:2f:7e:f5:9d:b1:
         f5:a8:ef:e8:32:f0:98:4d:43:81:61:3e:60:99:ad:12:1e:f9:
         af:fa:e5:42:2d:dc:5f:b7:cc:57:46:06:7a:8c:43:30:62:3f:
         67:e0:f0:bd:df:d2:4f:20:d1:f8:1a:57:54:fb:31:e4:24:81:
         f1:33:70:c8:ac:7c:04:33:de:e9:7b:f9:91:7a:7a:51:81:ae:
         18:dc:cf:4c:24:4b:f3:60:96:09:ec:15:b9:b6:3f:4d:ce:17:
         5c:a9:70:2f:1e:52:f6:8b:14:88:3c:e8:57:1d:a6:79:9e:dd:
         da:4e:1d:b3:3c:ed:73:46:81:d5:8b:95:61:79:07:6f:6a:3b:
         5c:7d:a1:fb:24:0a:92:74:92:56:02:78:a1:a6:69:0e:1d:12:
         a0:60:83:c9:50:e9:fc:6c:95:8d:ef:27:d5:d6:1e:ec:8b:5b:
         e6:d2:3d:60:68:c2:f8:e3:aa:8c:2a:54:54:96:54:d4:18:44:
         af:fc:47:d5:9f:e9:18:6b:fd:6f:51:cb:c8:3e:13:22:52:6c:
         3b:6f:2e:cc
-----BEGIN CERTIFICATE-----
MIIFlDCCBHygAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUM2M0FBUDExMC8GA1UEBRMoNTNGNzhEODBDQUMwRUIyRUFDRDc3QjAxNzVERjMx
OUU4Rjc1Mjc5NjAeFw0yNjEwMDUwMzQwMzRaFw0yNjEwMDcwMzQwMzRaMBgxFjAU
BgNVBAMTDTZhYzMxYzMzLWJjYmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6FUF6wWZm60dvE/Yl5zEfQRMxU2qFEchzjJTzrWoUa/8Iu/Qr+st2vfjU
NE72IVdjWtZRfQ9qToJzyOyEsfJN0g3gMQdDdFI2P2t/gx8mK2tqggmQl9StANAb
OZT99hJnBIR2D6gqCXbTkGZ6Y9xkkSUuDVqmxBCt+2rD8uRmMjqitLknrd/zjYlu
NQafalt6AZtWnPlal/jqJoRNsH48QxZsDg9bNyB7fQijfIr0L2Y6ymYErR3if1eb
ZGcqEyTpp6YGV6ppkzdkaHnYpp9l6voY/iicNxruv67j2CWKde4wIFa+5Ov+MXiz
gjNcRiNxefyJzYMeT0NOw88BTSP3AgMBAAGjggK2MIICsjAdBgNVHQ4EFgQUptvC
USzYqL+J1B584nzx7r7HVE8wHwYDVR0jBBgwFoAUU/eNgMrA6y6s13sBdd8xno91
J5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFDNjNBLzMwMTdCMzAyNDBDMzExRUVBNzIzMEM0NDRBRDlFNkZDL1VfZU5n
TXJBNnk2czEzc0JkZDh4bm85MUo1WS5jcmwwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcG5p
Yy9VX2VOZ01yQTZ5NnMxM3NCZGQ4eG5vOTFKNVkuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHVBggrBgEFBQcBCwSByDCBxTCBiwYIKwYBBQUH
MAuGf3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkFDNjNBLzMwMTdCMzAyNDBDMzExRUVBNzIzMEM0NDRBRDlF
NkZDL1VfZU5nTXJBNnk2czEzc0JkZDh4bm85MUo1WS5tZnQwNQYIKwYBBQUHMA2G
KWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMBUGCCsG
AQUFBwEIAQH/BAYwBKACBQAwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC
AAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJV3cqSItSYNSuBr5P1OyAUjABrj4hOO
Z1qpZ5VE7trXE2JXFTbCCckxW73dUM0V8S9+9Z2x9ajv6DLwmE1DgWE+YJmtEh75
r/rlQi3cX7fMV0YGeoxDMGI/Z+Dwvd/STyDR+BpXVPsx5CSB8TNwyKx8BDPe6Xv5
kXp6UYGuGNzPTCRL82CWCewVubY/Tc4XXKlwLx5S9osUiDzoVx2meZ7d2k4dszzt
c0aB1YuVYXkHb2o7XH2h+yQKknSSVgJ4oaZpDh0SoGCDyVDp/GyVje8n1dYe7Itb
5tI9YGjC+OOqjCpUVJZU1BhEr/xH1Z/pGGv9b1HLyD4TIlJsO28uzA==
-----END CERTIFICATE-----
Generated at Tue Oct 6 02:35:21 2026 by rpki-client