Error: rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft
File:                     1UBLBG1uzW10FBvTrkknuMYH7mI.mft (raw, json)
Hash identifier:          pE1uXLc6vbqf3NTGbOiw0fjU+TCIBHXtOAqWTaGzBrk=
Subject key identifier:   DE:29:8E:BA:08:E5:47:F0:EF:40:62:6B:A4:7B:02:1F:F3:F3:0A:9F
Authority key identifier: D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62
Certificate issuer:       /CN=F36AD16CAF/serialNumber=D5404B046D6ECD6D74141BD3AE4927B8C607EE62
Certificate serial:       0269
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft
Manifest number:          0266
Signing time:             Wed 30 Sep 2026 04:47:41 +0000
Manifest this update:     Wed 30 Sep 2026 04:47:40 +0000
Manifest next update:     Fri 02 Oct 2026 04:47:40 +0000
Files and hashes:         1: 1UBLBG1uzW10FBvTrkknuMYH7mI.crl (hash: fifFRlTVt70XVKNS6DiRFcxTb4vkjKQX72zxEbP9ZWo=)
                          2: ECDF0294E2F011EFA5448084762E951A.roa (hash: hXr3aIoe6pq1Sawze/LnuYeCtDMM5/NeWXc3edXkyp0=)
                          3: CDB8F76CE2F011EF8B167384762E951A.roa (hash: 9KKjnosE/y11PQGz3bLEh/OZ2s+jOF1SYOCeKyVCZGQ=)
                          4: 151E2B36E2F111EF89EBF584762E951A.roa (hash: E+8etKURQ4E310TRAdoliaSiZqoCpE/HK5uaO+7doEA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 617 (0x269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AD16CAF, serialNumber=D5404B046D6ECD6D74141BD3AE4927B8C607EE62
        Validity
            Not Before: Sep 30 04:47:40 2026 GMT
            Not After : Oct  2 04:47:40 2026 GMT
        Subject: CN=6abc946d-4022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:36:18:d8:d4:0c:1c:77:68:e1:d4:c8:d4:
                    eb:79:6d:52:f5:2e:6c:a2:07:28:98:02:88:d5:f0:
                    4a:87:0b:94:7f:7d:73:81:bd:64:bc:43:74:3e:a9:
                    fb:2e:c7:c2:bf:76:4f:2d:b2:d3:6d:14:87:fd:da:
                    5d:d3:7f:c9:8b:b9:f6:b3:47:18:3f:32:e0:a4:11:
                    b3:83:56:82:de:3a:16:6c:e0:b3:47:a9:fa:ca:2e:
                    63:2b:25:f0:dc:2d:e2:1b:a6:97:d8:d1:38:60:49:
                    01:d2:fb:9b:46:b3:99:6b:a7:dc:72:fd:56:5e:5b:
                    e3:e1:c9:f5:0b:21:0b:5e:8f:bc:8e:eb:d9:f1:d6:
                    a3:39:9f:8d:ca:95:95:d7:2b:c3:79:56:0b:17:3e:
                    e7:41:43:e8:65:e9:64:2a:48:cc:7d:e2:20:48:40:
                    49:da:88:a9:1f:da:29:6e:49:ca:de:34:a9:c3:ef:
                    8d:b8:c9:ba:3b:12:5b:25:04:09:37:b6:df:aa:a5:
                    9e:04:6b:b4:49:77:74:fa:a9:95:95:41:47:6a:8a:
                    23:fc:36:f2:d8:dc:26:95:7a:1d:55:e6:79:dd:74:
                    3b:5e:69:5b:07:9c:39:5b:2d:8a:31:f7:70:71:0b:
                    30:05:4b:0f:2a:c9:af:f8:e8:9b:10:bb:b9:76:b0:
                    7c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:29:8E:BA:08:E5:47:F0:EF:40:62:6B:A4:7B:02:1F:F3:F3:0A:9F
            X509v3 Authority Key Identifier:
                keyid:D5:40:4B:04:6D:6E:CD:6D:74:14:1B:D3:AE:49:27:B8:C6:07:EE:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1UBLBG1uzW10FBvTrkknuMYH7mI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AD16C/548B5C86E2F011EF87C35C80762E951A/1UBLBG1uzW10FBvTrkknuMYH7mI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:68:a3:ac:ef:42:0b:93:18:47:2c:93:8b:00:46:79:17:cd:
         11:51:a1:45:8b:61:94:0a:2c:d0:bd:37:32:13:1d:3c:07:b2:
         3e:47:03:df:41:dd:05:00:7b:0c:d0:80:9f:bc:da:63:00:d9:
         f3:7f:52:52:4e:ca:87:42:bc:06:bc:03:69:04:91:37:a3:b3:
         6c:19:96:f6:d7:2b:e1:82:71:a1:d2:b5:ae:60:bd:ad:8b:44:
         5d:14:a4:1a:c9:4b:bc:36:e1:4a:60:b6:cb:56:bc:d8:d3:31:
         6b:e0:f2:d5:7f:3b:74:a1:13:17:60:c3:cc:99:eb:6f:cc:3b:
         fb:6c:7d:73:7e:67:33:56:c6:90:9e:36:51:2a:5f:28:b7:41:
         a9:bb:70:d4:e5:5c:e8:fa:ce:f5:41:54:32:cb:5a:41:83:75:
         31:cd:14:43:4c:6a:45:9d:80:5d:9f:14:4b:78:60:9e:5a:d9:
         ea:c9:a1:db:11:a8:69:9f:44:68:26:0f:38:6c:3f:0c:cf:db:
         91:68:fd:bd:0c:70:12:fa:ba:c7:fb:4c:dc:85:33:f3:e0:60:
         4c:36:a5:21:10:75:a0:87:88:5a:1a:e3:88:ee:0b:cc:c9:6f:
         30:da:ee:8b:17:1b:a7:01:69:ba:d6:9c:da:35:7d:9b:02:6f:
         d2:81:4c:03
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAmkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUQxNkNBRjExMC8GA1UEBRMoRDU0MDRCMDQ2RDZFQ0Q2RDc0MTQxQkQzQUU0OTI3
QjhDNjA3RUU2MjAeFw0yNjA5MzAwNDQ3NDBaFw0yNjEwMDIwNDQ3NDBaMBgxFjAU
BgNVBAMTDTZhYmM5NDZkLTQwMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0ZDYY2NQMHHdo4dTI1Ot5bVL1LmyiByiYAojV8EqHC5R/fXOBvWS8Q3Q+
qfsux8K/dk8tstNtFIf92l3Tf8mLufazRxg/MuCkEbODVoLeOhZs4LNHqfrKLmMr
JfDcLeIbppfY0ThgSQHS+5tGs5lrp9xy/VZeW+PhyfULIQtej7yO69nx1qM5n43K
lZXXK8N5VgsXPudBQ+hl6WQqSMx94iBIQEnaiKkf2iluScreNKnD7424ybo7Elsl
BAk3tt+qpZ4Ea7RJd3T6qZWVQUdqiiP8NvLY3CaVeh1V5nnddDteaVsHnDlbLYox
93BxCzAFSw8qya/46JsQu7l2sHyzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3imO
ugjlR/DvQGJrpHsCH/PzCp8wHwYDVR0jBBgwFoAU1UBLBG1uzW10FBvTrkknuMYH
7mIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFEMTZDLzU0OEI1Qzg2RTJGMDExRUY4N0MzNUM4MDc2MkU5NTFBLzFVQkxC
RzF1elcxMEZCdlRya2tudU1ZSDdtSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzFVQkxCRzF1elcxMEZCdlRya2tudU1ZSDdtSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUQxNkMvNTQ4QjVDODZFMkYwMTFFRjg3QzM1QzgwNzYy
RTk1MUEvMVVCTEJHMXV6VzEwRkJ2VHJra251TVlIN21JLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBraKOs70ILkxhHLJOLAEZ5F80RUaFF
i2GUCizQvTcyEx08B7I+RwPfQd0FAHsM0ICfvNpjANnzf1JSTsqHQrwGvANpBJE3
o7NsGZb21yvhgnGh0rWuYL2ti0RdFKQayUu8NuFKYLbLVrzY0zFr4PLVfzt0oRMX
YMPMmetvzDv7bH1zfmczVsaQnjZRKl8ot0Gpu3DU5Vzo+s71QVQyy1pBg3UxzRRD
TGpFnYBdnxRLeGCeWtnqyaHbEahpn0RoJg84bD8Mz9uRaP29DHAS+rrH+0zchTPz
4GBMNqUhEHWgh4haGuOI7gvMyW8w2u6LFxunAWm61pzaNX2bAm/SgUwD
-----END CERTIFICATE-----
Generated at Wed Sep 30 16:29:37 2026 by rpki-client