Error: rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
File:                     pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json)
Hash identifier:          cAcXDCyxpAFLRLmP+i6XbN12T1XojpISu1jEQEI05so=
Subject key identifier:   DC:CC:74:7E:BC:3B:D8:6D:A2:7E:36:45:2C:2B:BB:77:D9:D7:55:18
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Certificate issuer:       /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial:       03F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
Manifest number:          03D5
Signing time:             Sun 25 Oct 2026 04:06:31 +0000
Manifest this update:     Sun 25 Oct 2026 04:06:30 +0000
Manifest next update:     Tue 27 Oct 2026 04:06:30 +0000
Files and hashes:         1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: jjAAVBhzQa50RdgPhxmtytrHLUOpf/UmwO8nDXBT3Ms=)
                          2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=)
                          3: 13B429E4A82B11F08C7A96A4DAE4EC9C.roa (hash: KYrcNRS9qGwFheXL1jyE5bvgElaJoQSziRbqOSDolOc=)
                          4: 34152306A2FC11F187B2C4D6CE1D38B0.roa (hash: L01OTzrX3QXgBOxOq9ygtuOFpcX4ssn+k1klJk+Qt0U=)
                          5: 284E09F2A09A11F19A2665E5CE1D38B0.roa (hash: u4s7W4AeX+9w69pBqCY0XiznrH9hxmJdxR9Yz6cFOgw=)
                          6: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=)
                          7: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=)
                          8: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=)
                          9: 3D55216081AE11F19AE998BECE1D38B0.roa (hash: tEb4cIz3DQXZxgjEItHyqv4eB8KzPNyX/c919+r53Mw=)
                          10: F6FBFB8E745D11F0BF6D9BD0DAE4EC9C.roa (hash: /YM80rpuDV3whpYSjJG05E1etVVfPSD6PQbBs+HcexM=)
                          11: E09561B85EE111F1A566E6D1CE1D38B0.roa (hash: TIZi3tWlJaC0A2I3Tmcgez2CRqE9zMNpFFToSyX14bA=)
                          12: 4D9876F65EE211F1A6C850D2CE1D38B0.roa (hash: h+9oIW6kC0vNgF4yIkhDZ/ikr8H7uXQtpONqwGk32N4=)
                          13: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=)
                          14: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=)
                          15: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=)
                          16: 85158DEA815A11F1B3416CAECE1D38B0.roa (hash: 85eyGHwM0jbpgdjYqk4rzN/rwaRGR253BARYQ7rwefk=)
                          17: 46D951EEBB1511F0A9D258C2DAE4EC9C.roa (hash: 3T0iCVJnMl4lV9aDTA0q3pEQKQ32TVj85JAiwnswBVc=)
                          18: 80E7A5D28D4411F19F1A6EDBCE1D38B0.roa (hash: mInSDggQH3pxrqeQ7YDV3qxSrqmn8wfRlQ+MMfGbcSc=)
                          19: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=)
                          20: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=)
                          21: 1F57366AAD9E11F0834ED8B4DAE4EC9C.roa (hash: Zr7KgVk21J1guGSwDPBmYm/QDl0oDd0+ZlvGGCwRB7s=)
                          22: 7ABC7650641E11F19351D3B4CE1D38B0.roa (hash: vU0h95lDgAxSIzbpmav0a02fs24DfcjVOpzDPENILEU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1008 (0x3f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
        Validity
            Not Before: Oct 25 04:06:30 2026 GMT
            Not After : Oct 27 04:06:30 2026 GMT
        Subject: CN=6add8046-7e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a7:7e:af:9d:98:51:3f:a4:3d:a3:58:9d:66:
                    c9:5f:63:dd:3a:52:5c:4e:02:b7:20:2c:f7:9e:ad:
                    f9:93:2e:9e:30:93:59:74:08:57:0a:8c:35:e5:7d:
                    3e:3a:c0:5a:f2:c4:66:bc:f3:a8:ad:e3:e5:d4:15:
                    84:3d:f4:6e:3a:1b:87:5a:85:7e:06:e1:7f:cf:a8:
                    bc:8a:fe:c0:9f:b7:1f:47:55:5b:b9:78:4f:c2:11:
                    8e:29:bc:30:24:6d:c1:3e:20:b3:93:78:87:ea:3a:
                    f9:10:4c:2e:a3:3c:62:89:e6:9d:77:3d:34:23:ce:
                    b9:71:36:1c:3a:56:7d:41:fd:3a:d9:06:e5:78:c8:
                    98:1e:da:37:0e:b8:ed:1a:8b:22:06:34:a8:07:8f:
                    e5:a5:a6:00:ea:99:10:64:45:f6:9b:5f:5c:92:30:
                    0b:a6:7f:6c:48:45:6a:e8:70:71:7c:f4:0d:8f:d6:
                    57:1a:2b:88:bf:2d:5d:ef:21:24:66:07:6f:d5:6b:
                    91:e2:d7:22:97:74:7e:15:6c:66:02:d5:02:fd:26:
                    86:f1:c8:71:ca:5d:ce:2e:2a:9a:91:2e:f9:7b:10:
                    52:48:91:0b:f6:48:86:26:be:5e:0f:7c:05:98:1c:
                    84:c2:44:f7:03:87:34:d4:94:e9:c8:5c:51:7d:1d:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:CC:74:7E:BC:3B:D8:6D:A2:7E:36:45:2C:2B:BB:77:D9:D7:55:18
            X509v3 Authority Key Identifier:
                keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f6:d0:4e:b7:d6:5c:86:3e:77:fa:3c:73:58:41:e9:99:40:
         3b:2a:d4:9b:99:1d:59:31:7c:2b:a5:ac:16:86:a5:da:ce:ad:
         3c:aa:67:5f:29:d1:32:e9:02:ac:0d:d8:4c:68:5e:45:80:7d:
         e3:9c:2b:32:f5:88:42:1a:d6:e0:79:87:d6:cc:db:2e:a1:a5:
         90:6a:fb:1a:61:2c:c3:d3:00:b6:fc:c9:9f:d9:1e:ea:84:86:
         43:f0:b6:6d:3b:83:59:22:dd:4b:81:1f:67:a0:e0:40:74:ba:
         d4:16:5c:8a:c7:7d:f5:56:3c:f2:12:3a:5c:63:20:e5:d7:f1:
         23:51:e6:d9:fa:f5:a0:77:a3:32:b3:75:9a:e9:1a:6d:99:73:
         63:fc:c8:f0:c1:5e:0c:93:f5:ae:81:b7:68:ab:c3:ea:4f:ec:
         2f:0e:3d:f5:97:f1:cb:23:64:b2:96:55:3e:91:d3:0b:87:15:
         75:52:61:9d:e2:72:c4:c5:45:94:bf:f2:94:26:cd:02:6c:63:
         68:59:c7:49:34:d6:37:83:39:8b:f2:d8:6c:d5:99:28:98:b0:
         37:9e:cd:61:91:f6:8e:41:17:6e:3e:fb:2f:f3:22:e7:5b:30:
         60:ec:13:cd:9e:8c:22:f2:b9:3c:fd:10:d7:84:09:fd:97:66:
         a9:f8:94:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:32:53 2026 by rpki-client