Error: rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
File:                     QUU0FvBOj22xFq-_-XGXUae9vPc.mft (raw, json)
Hash identifier:          +Xbz1Bts82Ftz7htw7Lf/JeAvwXDv4TdOflfdV/iIRc=
Subject key identifier:   C2:DA:B2:4B:2C:37:EC:9C:AF:7F:AD:10:AD:9B:4E:6A:AF:8B:96:A6
Authority key identifier: 41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7
Certificate issuer:       /CN=F36AC99EAF/serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
Certificate serial:       071D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
Manifest number:          071A
Signing time:             Sun 01 Nov 2026 02:34:03 +0000
Manifest this update:     Sun 01 Nov 2026 02:34:02 +0000
Manifest next update:     Tue 03 Nov 2026 02:34:02 +0000
Files and hashes:         1: QUU0FvBOj22xFq-_-XGXUae9vPc.crl (hash: LJv/TFlVDqFIl3MDa/xT6lWLrIzJ8DMEWTdFC/VzvB0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 00:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC99EAF, serialNumber=41453416F04E8F6DB116AFBFF9719751A7BDBCF7
        Validity
            Not Before: Nov  1 02:34:02 2026 GMT
            Not After : Nov  3 02:34:02 2026 GMT
        Subject: CN=6ae6a51b-2438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:19:bc:c6:f5:ec:d1:7d:28:61:c6:ca:3d:
                    e7:0b:65:ae:74:22:30:1a:07:97:b1:1e:00:12:a5:
                    72:4b:6f:9c:08:b0:63:02:08:eb:c1:47:07:a4:82:
                    40:72:ec:60:11:f6:ab:77:4c:c0:d7:59:37:a5:d3:
                    51:b3:91:ab:56:2f:87:5e:94:9d:81:cd:a4:a6:03:
                    f4:67:de:24:fb:f9:95:8e:b7:ae:6f:52:5c:bd:ab:
                    cf:07:4f:b8:e2:96:d0:a8:fe:ca:7a:11:60:74:73:
                    ae:12:4a:cb:7d:a0:1d:9a:4b:50:0b:92:8f:80:f9:
                    03:d4:30:7a:7f:7a:cc:ec:3b:08:74:67:38:0e:d7:
                    14:0a:b7:60:19:4f:7d:65:e7:6d:22:5a:34:1a:04:
                    f0:7b:e9:6a:57:22:b9:c5:bf:52:cc:ed:2e:48:3f:
                    d9:7b:a5:31:3d:7f:45:4e:4e:8f:2f:b6:81:b7:83:
                    aa:c6:cf:7c:22:74:8b:9a:c7:37:28:cc:b0:24:24:
                    2a:fe:37:de:f0:15:49:86:cf:14:81:57:12:33:16:
                    6f:54:6c:77:95:f7:f8:da:34:51:d2:83:e0:3e:b7:
                    06:0b:e8:73:cb:b6:c9:62:07:75:59:17:42:19:81:
                    8b:34:0b:06:24:ae:4a:ec:c9:ce:a2:e7:bf:27:2e:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:DA:B2:4B:2C:37:EC:9C:AF:7F:AD:10:AD:9B:4E:6A:AF:8B:96:A6
            X509v3 Authority Key Identifier:
                keyid:41:45:34:16:F0:4E:8F:6D:B1:16:AF:BF:F9:71:97:51:A7:BD:BC:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QUU0FvBOj22xFq-_-XGXUae9vPc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC99E/CDE6FB5C63F611EC974EA7945A40D577/QUU0FvBOj22xFq-_-XGXUae9vPc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2f:ec:3c:a3:0f:af:90:e2:b2:22:bf:3f:da:44:3a:dc:75:
         f0:3c:41:39:01:b6:21:0f:76:63:8d:52:3a:48:7d:f1:05:3d:
         08:00:05:0e:cd:0f:91:54:d9:2d:69:84:46:30:84:99:03:a3:
         25:13:14:2f:8e:f8:a1:4a:e5:7c:e8:7c:ad:86:26:2e:94:f4:
         67:58:f8:fe:9c:46:ce:9c:7e:60:90:f7:47:3c:2b:e0:2e:d7:
         d0:3f:b9:64:45:d9:df:a8:c3:91:43:42:30:8d:5b:39:af:51:
         e1:49:38:49:12:46:a6:8b:76:e6:e9:3d:48:c1:ab:07:de:75:
         fc:37:51:04:cf:4b:54:80:49:c6:af:e5:0d:78:63:11:ae:14:
         18:2b:cd:82:bd:9a:9b:66:59:4e:cc:a9:8f:04:e0:db:de:03:
         67:7e:0e:08:73:14:52:fe:e1:b1:1a:73:47:cd:6a:5b:86:96:
         e8:84:cb:7e:7c:1f:7d:39:a2:a5:ba:a9:b9:69:cf:6e:34:2f:
         c2:9c:7d:d4:eb:6d:da:c6:72:a2:57:af:88:1e:14:29:d3:3e:
         1c:8a:f6:8f:ad:c0:a7:87:eb:fe:0f:58:56:e1:2f:cb:6f:a3:
         72:33:ee:24:09:0e:aa:f1:96:1e:3d:1c:a4:6e:20:e5:00:2e:
         de:1d:0a:9b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBx0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUM5OUVBRjExMC8GA1UEBRMoNDE0NTM0MTZGMDRFOEY2REIxMTZBRkJGRjk3MTk3
NTFBN0JEQkNGNzAeFw0yNjExMDEwMjM0MDJaFw0yNjExMDMwMjM0MDJaMBgxFjAU
BgNVBAMTDTZhZTZhNTFiLTI0MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUzRm8xvXs0X0oYcbKPecLZa50IjAaB5exHgASpXJLb5wIsGMCCOvBRwek
gkBy7GAR9qt3TMDXWTel01GzkatWL4delJ2BzaSmA/Rn3iT7+ZWOt65vUly9q88H
T7jiltCo/sp6EWB0c64SSst9oB2aS1ALko+A+QPUMHp/eszsOwh0ZzgO1xQKt2AZ
T31l520iWjQaBPB76WpXIrnFv1LM7S5IP9l7pTE9f0VOTo8vtoG3g6rGz3widIua
xzcozLAkJCr+N97wFUmGzxSBVxIzFm9UbHeV9/jaNFHSg+A+twYL6HPLtsliB3VZ
F0IZgYs0CwYkrkrsyc6i578nLpMrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwtqy
Syw37Jyvf60QrZtOaq+LlqYwHwYDVR0jBBgwFoAUQUU0FvBOj22xFq+/+XGXUae9
vPcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFDOTlFL0NERTZGQjVDNjNGNjExRUM5NzRFQTc5NDVBNDBENTc3L1FVVTBG
dkJPajIyeEZxLV8tWEdYVWFlOXZQYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FVVTBGdkJPajIyeEZxLV8tWEdYVWFlOXZQYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUM5OUUvQ0RFNkZCNUM2M0Y2MTFFQzk3NEVBNzk0NUE0
MEQ1NzcvUVVVMEZ2Qk9qMjJ4RnEtXy1YR1hVYWU5dlBjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJL+w8ow+vkOKyIr8/2kQ63HXwPEE5
AbYhD3ZjjVI6SH3xBT0IAAUOzQ+RVNktaYRGMISZA6MlExQvjvihSuV86HythiYu
lPRnWPj+nEbOnH5gkPdHPCvgLtfQP7lkRdnfqMORQ0IwjVs5r1HhSThJEkami3bm
6T1IwasH3nX8N1EEz0tUgEnGr+UNeGMRrhQYK82CvZqbZllOzKmPBODb3gNnfg4I
cxRS/uGxGnNHzWpbhpbohMt+fB99OaKluqm5ac9uNC/CnH3U623axnKiV6+IHhQp
0z4civaPrcCnh+v+D1hW4S/Lb6NyM+4kCQ6q8ZYePRykbiDlAC7eHQqb
-----END CERTIFICATE-----
Generated at Sun Nov 1 17:45:53 2026 by rpki-client