Error: rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
File:                     HScudZNWWso9tIbvvdAfGXRUyYM.mft (raw, json)
Hash identifier:          BpgbHdFfSnCn1pkcuWFSh8ZRSPIfKNP2CzjLUCneWUI=
Subject key identifier:   C9:7F:74:60:66:3D:26:14:70:B9:9C:89:1F:7D:51:15:64:EA:85:98
Authority key identifier: 1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83
Certificate issuer:       /CN=F36C11E4AR/serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
Certificate serial:       0453
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
Manifest number:          044F
Signing time:             Tue 27 Oct 2026 03:49:22 +0000
Manifest this update:     Tue 27 Oct 2026 03:49:22 +0000
Manifest next update:     Thu 29 Oct 2026 03:49:22 +0000
Files and hashes:         1: HScudZNWWso9tIbvvdAfGXRUyYM.crl (hash: 44X5Zise7CD33yEs8N/BoD7bJGNdrO7umhjQ9RswJGc=)
                          2: 8A3B9A02D43611F0ABE21CE3DAE4EC9C.roa (hash: g6+393n0LLnjFEWhxP4PpmEZk2YkvC9IrbPAjflCtNo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
                          rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AR, serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
        Validity
            Not Before: Oct 27 03:49:22 2026 GMT
            Not After : Oct 29 03:49:22 2026 GMT
        Subject: CN=6ae01f42-bf3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:50:92:d7:e4:be:73:94:8e:2d:f8:69:39:ba:
                    fc:63:d7:73:a2:a3:78:4a:1e:c3:27:6d:80:a3:11:
                    b0:db:4e:ba:6e:cf:ae:bc:fc:a6:8c:3d:56:29:2a:
                    d6:35:fa:eb:01:93:99:b7:55:21:e0:5e:4b:ee:3a:
                    db:02:07:a0:62:29:19:cb:87:1a:2a:33:29:e9:8e:
                    5a:c8:a0:5c:25:a4:a7:bd:67:79:80:9e:94:e5:c4:
                    f2:07:2b:91:87:ed:ba:4f:96:42:17:e8:16:56:9f:
                    cf:1e:75:30:a8:ea:c5:e2:0f:72:ed:8c:49:6b:9d:
                    eb:d5:5d:f9:c8:54:4b:5a:88:f6:f2:02:bc:46:fa:
                    2e:b5:87:1d:18:f6:19:79:a8:08:6d:7d:3b:4f:e7:
                    1b:ea:a0:5f:be:26:e1:56:a3:04:cb:c8:5d:29:db:
                    95:52:b8:ed:3e:44:35:42:80:29:67:fe:b8:1b:56:
                    dd:93:32:e6:63:15:d1:8c:6e:29:7d:63:68:3b:35:
                    9c:62:78:f9:0a:27:2b:e8:e0:71:4b:dd:09:a1:28:
                    71:70:d6:9b:8f:bd:c0:6f:87:cc:d3:57:39:81:98:
                    5e:fb:74:25:7b:27:d4:40:41:90:20:b9:4a:80:f5:
                    9f:66:10:14:70:9a:59:02:3d:67:7e:32:d1:6d:13:
                    94:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7F:74:60:66:3D:26:14:70:B9:9C:89:1F:7D:51:15:64:EA:85:98
            X509v3 Authority Key Identifier:
                keyid:1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:d1:9a:4f:33:29:b0:a6:f6:4a:2b:7a:f3:3f:29:26:2d:62:
         66:83:4e:c2:c5:f5:ac:4d:9e:51:a0:82:ec:7b:47:65:fc:0e:
         20:e8:c0:af:a0:50:94:29:f0:2a:27:af:95:ca:93:a8:6e:3d:
         c4:51:69:5a:5c:7d:e2:26:5e:8d:65:5c:d0:d9:e8:74:cf:ba:
         e4:94:4d:07:fd:1b:27:97:4b:13:ad:d7:23:12:12:c0:8a:59:
         45:4f:8e:3a:9b:8c:57:47:9e:51:fb:4a:2c:16:ec:9b:56:47:
         8d:e2:54:9b:15:83:56:04:b6:0b:6c:11:0b:f5:a5:4e:f1:0a:
         ba:41:af:6a:45:5b:37:3c:50:6a:6f:f7:d3:fb:73:f9:5d:d0:
         2d:ee:b6:c8:1a:9b:15:9c:3a:65:db:7b:2a:f7:b3:6e:4a:cf:
         e3:91:83:21:84:a5:f5:30:24:88:1c:65:8c:12:87:d7:8f:cb:
         46:8e:79:fb:6c:a1:90:81:eb:cf:9e:ad:4f:ce:a4:e5:f9:bb:
         24:d7:b3:1d:a9:9c:f9:27:bc:a1:46:a0:ab:a7:af:43:35:74:
         3b:e0:03:42:b8:d8:c1:88:70:24:2b:39:82:71:52:03:c6:c3:
         8f:0e:94:dc:cf:d1:93:2b:2c:fc:88:d0:dc:6f:f9:f3:6b:a3:
         ba:d5:48:0f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBFMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzExRTRBUjExMC8GA1UEBRMoMUQyNzJFNzU5MzU2NUFDQTNEQjQ4NkVGQkREMDFG
MTk3NDU0Qzk4MzAeFw0yNjEwMjcwMzQ5MjJaFw0yNjEwMjkwMzQ5MjJaMBgxFjAU
BgNVBAMTDTZhZTAxZjQyLWJmM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmUJLX5L5zlI4t+Gk5uvxj13Oio3hKHsMnbYCjEbDbTrpuz668/KaMPVYp
KtY1+usBk5m3VSHgXkvuOtsCB6BiKRnLhxoqMynpjlrIoFwlpKe9Z3mAnpTlxPIH
K5GH7bpPlkIX6BZWn88edTCo6sXiD3LtjElrnevVXfnIVEtaiPbyArxG+i61hx0Y
9hl5qAhtfTtP5xvqoF++JuFWowTLyF0p25VSuO0+RDVCgCln/rgbVt2TMuZjFdGM
bil9Y2g7NZxiePkKJyvo4HFL3QmhKHFw1puPvcBvh8zTVzmBmF77dCV7J9RAQZAg
uUqA9Z9mEBRwmlkCPWd+MtFtE5RTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUyX90
YGY9JhRwuZyJH31RFWTqhZgwHwYDVR0jBBgwFoAUHScudZNWWso9tIbvvdAfGXRU
yYMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxMUU0LzI3QzUzQTA4ODNBRDExRUU5OEU1NjYzMjRBRDlFNkZDL0hTY3Vk
Wk5XV3NvOXRJYnZ2ZEFmR1hSVXlZTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0hTY3VkWk5XV3NvOXRJYnZ2ZEFmR1hSVXlZTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzExRTQvMjdDNTNBMDg4M0FEMTFFRTk4RTU2NjMyNEFEOUU2
RkMvSFNjdWRaTldXc285dElidnZkQWZHWFJVeVlNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCh0ZpPMymwpvZKK3rzPykmLWJmg07CxfWs
TZ5RoILse0dl/A4g6MCvoFCUKfAqJ6+VypOobj3EUWlaXH3iJl6NZVzQ2eh0z7rk
lE0H/Rsnl0sTrdcjEhLAillFT446m4xXR55R+0osFuybVkeN4lSbFYNWBLYLbBEL
9aVO8Qq6Qa9qRVs3PFBqb/fT+3P5XdAt7rbIGpsVnDpl23sq97NuSs/jkYMhhKX1
MCSIHGWMEofXj8tGjnn7bKGQgevPnq1PzqTl+bsk17MdqZz5J7yhRqCrp69DNXQ7
4ANCuNjBiHAkKzmCcVIDxsOPDpTcz9GTKyz8iNDcb/nza6O61UgP
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:40:41 2026 by rpki-client