Error: rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          Ulvz8+KScKdv/5Fv3lvCgHdXOgGlcse4Uz7tNNDkccQ=
Subject key identifier:   00:0E:92:8C:8A:4A:00:74:3B:B7:DD:C7:EE:46:44:C0:8B:99:95:D3
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       0564
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          0562
Signing time:             Thu 17 Sep 2026 03:10:47 +0000
Manifest this update:     Thu 17 Sep 2026 03:10:46 +0000
Manifest next update:     Sat 19 Sep 2026 03:10:46 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: 1o8Rz2xVV36sXCwhyJcn3J2ikuTqGTK1bkr3c0QpJHA=)
                          2: 05934784930B11F19AA2B6FBCE1D38B0.roa (hash: nb6/XJ6e4mY9S+Wo7/PcMs8AFDHTkQOgBHpBhQIhJuU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380 (0x564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Sep 17 03:10:46 2026 GMT
            Not After : Sep 19 03:10:46 2026 GMT
        Subject: CN=6aab5a37-b4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b9:e2:17:d8:f2:44:cb:10:46:4e:f3:a9:39:
                    08:8d:bb:d8:ad:4e:a9:1a:50:be:ba:87:fe:08:ad:
                    e5:05:f0:32:e1:fb:81:b9:52:c0:0e:0f:39:a4:19:
                    a1:f9:83:4b:87:63:f0:4a:16:dd:59:a3:04:f9:3c:
                    ec:5a:4b:f0:6f:17:bc:25:78:1d:a0:59:24:88:d1:
                    0b:4a:d4:e9:6f:a6:79:c6:6b:ea:d0:77:63:5e:28:
                    96:cb:78:04:b3:f1:d2:53:d0:b6:1f:c9:04:8e:cf:
                    2d:cd:18:6f:58:3f:cb:cc:ed:05:1c:84:ea:a5:9f:
                    b5:4d:e6:44:46:1f:49:39:89:68:bf:a0:3c:10:4e:
                    8f:b0:f0:3d:33:50:25:5b:7d:c6:eb:1f:05:86:7f:
                    2e:46:4d:0c:3a:77:f4:1f:7c:cc:a3:e5:65:89:73:
                    bd:8d:ac:14:4f:4c:bf:c0:aa:8c:92:ce:7f:fa:f3:
                    90:6a:a1:ce:26:de:32:1c:4c:f6:89:28:cf:79:77:
                    78:20:5d:78:5c:5c:17:04:fd:e0:56:94:29:2e:43:
                    ef:0b:65:7f:92:2f:a1:82:97:2d:5f:4d:ce:2f:85:
                    f7:f1:2e:f8:b5:e5:c7:45:8f:2f:c8:2c:99:03:d5:
                    ae:db:d2:18:26:4f:ff:71:db:25:b6:f4:fe:b7:dc:
                    c8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:92:8C:8A:4A:00:74:3B:B7:DD:C7:EE:46:44:C0:8B:99:95:D3
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e8:99:98:73:a8:92:16:43:2e:4e:2d:d1:a8:f1:4a:a8:6c:
         25:dd:ff:31:c0:98:f5:64:d6:0c:1a:89:22:6e:d1:31:ca:9e:
         0d:24:35:30:31:15:f1:7f:f1:b4:0c:38:02:86:4d:e2:c8:61:
         d8:78:17:27:a7:fe:6c:c7:4c:16:8d:c6:be:00:ae:c0:4e:05:
         46:e9:ae:c2:8e:d7:a2:79:11:0a:4f:47:4a:dc:c8:e8:87:15:
         90:32:7f:43:e5:d9:2c:98:b1:88:78:46:9b:42:48:01:6a:19:
         7f:64:9a:88:96:e8:01:97:89:ac:1d:38:ef:6f:c0:30:20:e0:
         fc:de:43:51:df:0c:20:7c:2b:6f:5c:74:06:7a:7e:7f:f6:57:
         46:7e:40:96:25:90:4e:c3:0e:ec:0f:e2:c5:19:03:d2:e6:3c:
         4b:ea:04:51:ce:c7:13:06:8b:87:29:ce:a3:64:52:1e:1d:c2:
         39:9e:93:b6:e6:c1:27:ef:cb:5d:25:73:cf:2c:9b:b5:8d:83:
         e4:1b:84:ff:57:91:2f:65:cb:9f:64:31:7b:9a:88:fa:a8:29:
         0a:5f:fc:dc:be:a8:83:75:f9:fb:5e:fd:fd:94:a4:82:43:66:
         9c:7e:34:7b:ab:bc:7b:b4:8e:b0:c5:19:95:c0:df:12:2b:b1:
         51:77:18:bd
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBWQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkUyRURBUjExMC8GA1UEBRMoNjVEMjk1Q0Y1NDQ3OERGODVBRDY0QUVBOTA2NjhC
QzQxMTRGRDMzRTAeFw0yNjA5MTcwMzEwNDZaFw0yNjA5MTkwMzEwNDZaMBgxFjAU
BgNVBAMTDTZhYWI1YTM3LWI0YjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvueIX2PJEyxBGTvOpOQiNu9itTqkaUL66h/4IreUF8DLh+4G5UsAODzmk
GaH5g0uHY/BKFt1ZowT5POxaS/BvF7wleB2gWSSI0QtK1OlvpnnGa+rQd2NeKJbL
eASz8dJT0LYfyQSOzy3NGG9YP8vM7QUchOqln7VN5kRGH0k5iWi/oDwQTo+w8D0z
UCVbfcbrHwWGfy5GTQw6d/QffMyj5WWJc72NrBRPTL/AqoySzn/685Bqoc4m3jIc
TPaJKM95d3ggXXhcXBcE/eBWlCkuQ+8LZX+SL6GCly1fTc4vhffxLvi15cdFjy/I
LJkD1a7b0hgmT/9x2yW29P633MgnAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUAA6S
jIpKAHQ7t93H7kZEwIuZldMwHwYDVR0jBBgwFoAUZdKVz1RHjfha1krqkGaLxBFP
0z4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJFMkVELzE5QTc4MjRDOTdERjExRURCOTU2NDVGM0YxMjIyNDY4L1pkS1Z6
MVJIamZoYTFrcnFrR2FMeEJGUDB6NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1pkS1Z6MVJIamZoYTFrcnFrR2FMeEJGUDB6NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QkUyRUQvMTlBNzgyNEM5N0RGMTFFREI5NTY0NUYzRjEyMjI0
NjgvWmRLVnoxUkhqZmhhMWtycWtHYUx4QkZQMHo0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAk6JmYc6iSFkMuTi3RqPFKqGwl3f8xwJj1
ZNYMGokibtExyp4NJDUwMRXxf/G0DDgChk3iyGHYeBcnp/5sx0wWjca+AK7ATgVG
6a7CjteieREKT0dK3MjohxWQMn9D5dksmLGIeEabQkgBahl/ZJqIlugBl4msHTjv
b8AwIOD83kNR3wwgfCtvXHQGen5/9ldGfkCWJZBOww7sD+LFGQPS5jxL6gRRzscT
BouHKc6jZFIeHcI5npO25sEn78tdJXPPLJu1jYPkG4T/V5EvZcufZDF7moj6qCkK
X/zcvqiDdfn7Xv39lKSCQ2acfjR7q7x7tI6wxRmVwN8SK7FRdxi9
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:40:01 2026 by rpki-client