Error: rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
File:                     e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft (raw, json)
Hash identifier:          991CzBgePSFfGkfaZfaUlOiZiCYLfMrjGHDyYzz1RYs=
Subject key identifier:   34:1C:1F:75:C8:15:E4:86:2A:11:AB:AB:F8:DC:55:10:2B:DE:84:C8
Authority key identifier: 7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7
Certificate issuer:       /CN=F36C8371AF/serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
Certificate serial:       0B1D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
Manifest number:          0AFC
Signing time:             Sat 24 Oct 2026 01:21:04 +0000
Manifest this update:     Sat 24 Oct 2026 01:21:04 +0000
Manifest next update:     Mon 26 Oct 2026 01:21:04 +0000
Files and hashes:         1: e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl (hash: H6/ZsWTDLq+Soj1DnthBpbV57GEDKoptK9EqQVKB+y0=)
                          2: F9ED1F02A63F11F1A345EA10CF1D38B0.roa (hash: dNQffKIfgpu5UvBEJZj10ngrY8Soenp4AD4Dzs6iXEI=)
                          3: 83DE5F6A846D11EFA57E969F762E951A.roa (hash: IHDNSoDz6NaLFKQMla3bz7pkaWMQeK4uJ2veJcSe6Bo=)
                          4: 034D2B64846E11EF9FCBBFA3762E951A.roa (hash: MyH4BxPN5oQf/ANUALV0gIzKpengDwYp7tXNj92dOUA=)
                          5: B055BE8AA63F11F18855E20CCF1D38B0.roa (hash: H5PYWjF5pufw/XJ5+m7A1O7S47fkkIZjScY2ft4mJKw=)
                          6: 234C0456853311EFBF75427C762E951A.roa (hash: uuNRG2eR48PpA2s/qJek6gIiTSySHcCAlVVVdllLteQ=)
                          7: 03C4F3DE847211EFA62717BC762E951A.roa (hash: DqzPe8h8VGO/3zmxtNnExqcXOxGel0PuulNOoKoDgfw=)
                          8: 6A1E070A846E11EF95C3ECA5762E951A.roa (hash: qXYZkDeWWR0u4xjdfmy4wQ/7TN06VLsNt66GOFiNZ4M=)
                          9: D93E38CC846D11EFB9E4AEA1762E951A.roa (hash: l368pZGbrsHe3aKYVyLgSeJ6hE8hbIVXQuNLEe/h0d0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 01:21:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2845 (0xb1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AF, serialNumber=7B965B64C3E724B93FC00B186E15E35CED535DC7
        Validity
            Not Before: Oct 24 01:21:04 2026 GMT
            Not After : Oct 26 01:21:04 2026 GMT
        Subject: CN=6adc0800-4ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:01:e4:96:c1:c2:16:cf:d1:a2:c7:ec:a1:c8:
                    b7:92:09:60:8a:f8:75:9c:06:74:a5:bc:ca:e1:e2:
                    ea:90:93:99:66:f1:14:26:b9:0e:f8:80:b9:02:e6:
                    b3:9a:a6:4c:27:bb:87:fa:3b:f6:a1:78:7a:5f:02:
                    6e:61:51:1a:00:06:bd:f7:45:3f:de:2b:8b:17:13:
                    64:ad:7d:2d:1d:54:55:11:8f:30:71:e8:f0:fd:a9:
                    d2:99:3f:64:ee:bc:5e:f1:c7:a4:22:3b:d8:f0:5a:
                    b4:57:ec:94:dc:ae:66:d8:06:fb:41:f0:62:65:b5:
                    2a:f7:40:69:a1:01:e6:51:5e:56:a3:3f:4b:02:7b:
                    b3:71:88:ee:54:cd:3e:f4:ab:75:5e:08:25:2d:2d:
                    1f:ac:a2:af:ed:40:37:e4:96:2a:66:bd:28:c7:46:
                    f1:54:39:75:1f:b2:ef:af:36:78:d2:b8:63:42:35:
                    94:1d:8e:0d:61:95:a9:cb:2f:4e:69:6c:ca:bd:5e:
                    56:59:86:70:02:73:a7:6f:07:9b:8b:e0:ff:e3:bd:
                    83:15:33:6f:68:4e:eb:76:26:7a:ff:29:3d:b5:65:
                    18:13:1e:42:6c:7b:6e:e2:37:39:3f:69:ac:81:91:
                    03:d7:10:5d:52:b9:52:a8:8f:5d:5f:3f:f5:93:76:
                    69:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1C:1F:75:C8:15:E4:86:2A:11:AB:AB:F8:DC:55:10:2B:DE:84:C8
            X509v3 Authority Key Identifier:
                keyid:7B:96:5B:64:C3:E7:24:B9:3F:C0:0B:18:6E:15:E3:5C:ED:53:5D:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/EC0AE8747AFA11E988A3C33CF8AEA228/e5ZbZMPnJLk_wAsYbhXjXO1TXcc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:32:6c:ae:7f:5e:12:94:3a:d5:fa:8d:7f:17:c6:31:c0:
         45:da:9c:91:c4:67:74:53:a5:3c:05:bb:6e:63:23:15:47:c6:
         79:4d:7d:3e:a1:9e:2f:db:51:e0:42:f4:03:3f:d3:36:0a:a6:
         8a:e5:ee:b9:13:34:68:a7:ae:09:c9:7b:76:93:4c:40:28:63:
         41:4b:79:33:a7:32:25:2f:9b:8b:37:6e:f0:6b:11:5b:2c:23:
         0f:e3:94:f1:34:12:b5:91:be:f9:e6:95:ca:3d:fe:42:d4:2c:
         d5:24:71:6e:8f:ff:ce:74:82:d7:cc:a8:d2:5b:1c:c2:11:af:
         cd:78:7f:4b:d3:f9:a8:a5:86:11:17:f9:88:ca:02:04:5f:d5:
         b2:3c:43:f6:82:a8:a0:77:54:66:fe:2c:7c:6a:f5:9b:0a:21:
         aa:8f:70:70:c6:2e:c7:83:67:31:ca:8e:2a:38:5f:35:0b:59:
         41:60:3a:54:68:7d:19:39:a9:4c:5d:d4:ef:0f:6c:ca:ac:42:
         9f:41:f7:bb:93:e6:e9:62:f9:92:a5:04:69:b0:5b:15:bd:e0:
         18:88:be:87:db:f2:cc:d9:f5:a6:91:24:60:b5:94:f1:6e:ea:
         25:ba:62:5e:23:6c:d3:33:19:e8:53:54:e2:55:c7:d0:bb:1d:
         0f:6f:c3:20
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCx0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzgzNzFBRjExMC8GA1UEBRMoN0I5NjVCNjRDM0U3MjRCOTNGQzAwQjE4NkUxNUUz
NUNFRDUzNURDNzAeFw0yNjEwMjQwMTIxMDRaFw0yNjEwMjYwMTIxMDRaMBgxFjAU
BgNVBAMTDTZhZGMwODAwLTRjYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5AeSWwcIWz9Gix+yhyLeSCWCK+HWcBnSlvMrh4uqQk5lm8RQmuQ74gLkC
5rOapkwnu4f6O/aheHpfAm5hURoABr33RT/eK4sXE2StfS0dVFURjzBx6PD9qdKZ
P2TuvF7xx6QiO9jwWrRX7JTcrmbYBvtB8GJltSr3QGmhAeZRXlajP0sCe7NxiO5U
zT70q3VeCCUtLR+soq/tQDfklipmvSjHRvFUOXUfsu+vNnjSuGNCNZQdjg1hlanL
L05pbMq9XlZZhnACc6dvB5uL4P/jvYMVM29oTut2Jnr/KT21ZRgTHkJse27iNzk/
aayBkQPXEF1SuVKoj11fP/WTdmlzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUNBwf
dcgV5IYqEaur+NxVECvehMgwHwYDVR0jBBgwFoAUe5ZbZMPnJLk/wAsYbhXjXO1T
XccwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM4MzcxL0VDMEFFODc0N0FGQTExRTk4OEEzQzMzQ0Y4QUVBMjI4L2U1WmJa
TVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WmJaTVBuSkxrX3dBc1liaFhqWE8xVFhjYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzgzNzEvRUMwQUU4NzQ3QUZBMTFFOTg4QTNDMzNDRjhB
RUEyMjgvZTVaYlpNUG5KTGtfd0FzWWJoWGpYTzFUWGNjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7PDJsrn9eEpQ61fqNfxfGMcBF2pyR
xGd0U6U8BbtuYyMVR8Z5TX0+oZ4v21HgQvQDP9M2CqaK5e65EzRop64JyXt2k0xA
KGNBS3kzpzIlL5uLN27waxFbLCMP45TxNBK1kb755pXKPf5C1CzVJHFuj//OdILX
zKjSWxzCEa/NeH9L0/mopYYRF/mIygIEX9WyPEP2gqigd1Rm/ix8avWbCiGqj3Bw
xi7Hg2cxyo4qOF81C1lBYDpUaH0ZOalMXdTvD2zKrEKfQfe7k+bpYvmSpQRpsFsV
veAYiL6H2/LM2fWmkSRgtZTxbuolumJeI2zTMxnoU1TiVcfQux0Pb8Mg
-----END CERTIFICATE-----
Generated at Sun Oct 25 03:18:58 2026 by rpki-client