Error: rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft
File:                     j0bclvxCB36wfkfE1NrsuUVbSAI.mft (raw, json)
Hash identifier:          9SMBgz4lk/CpuSCX2JmpFiKWAOpcxG7QU2sWNeurVJ8=
Subject key identifier:   C0:BD:31:8A:D9:13:8B:F5:66:D4:70:A9:79:F5:05:0C:24:EB:F3:1F
Authority key identifier: 8F:46:DC:96:FC:42:07:7E:B0:7E:47:C4:D4:DA:EC:B9:45:5B:48:02
Certificate issuer:       /CN=F36D4BDDAF/serialNumber=8F46DC96FC42077EB07E47C4D4DAECB9455B4802
Certificate serial:       06CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/j0bclvxCB36wfkfE1NrsuUVbSAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft
Manifest number:          06C9
Signing time:             Sun 25 Oct 2026 02:38:46 +0000
Manifest this update:     Sun 25 Oct 2026 02:38:45 +0000
Manifest next update:     Tue 27 Oct 2026 02:38:45 +0000
Files and hashes:         1: j0bclvxCB36wfkfE1NrsuUVbSAI.crl (hash: pYztNdKFbofDneywaqCOdq5KzdCbyJUsSDNMnm6O+Q0=)
                          2: 9A0262EA985B11EE8649C347D25BE465.roa (hash: 2GtUyuUh0H4Yru4Poa6BwFUwVcgQdscXDl84Vttn9/k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/j0bclvxCB36wfkfE1NrsuUVbSAI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1741 (0x6cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D4BDDAF, serialNumber=8F46DC96FC42077EB07E47C4D4DAECB9455B4802
        Validity
            Not Before: Oct 25 02:38:45 2026 GMT
            Not After : Oct 27 02:38:45 2026 GMT
        Subject: CN=6add6bb6-7af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:99:c5:93:3a:f4:04:98:89:c5:83:97:77:
                    e9:23:76:9a:e8:4d:9c:b2:f9:31:eb:6b:84:4b:56:
                    e3:0a:b5:08:08:dd:47:21:cb:42:75:a1:4a:2b:f9:
                    c7:b0:1d:19:10:4d:7f:2b:de:25:d2:9e:a3:56:dd:
                    ad:1d:e5:a6:77:8b:b7:7f:03:e1:e1:fe:6a:db:bf:
                    41:cb:ac:2d:da:9e:aa:26:ad:94:3e:24:4c:6f:08:
                    6d:00:00:6a:06:bb:17:c4:b7:af:d1:d0:42:21:4c:
                    39:74:a1:87:b1:02:51:2c:61:b0:b7:56:15:0c:2e:
                    9f:c8:e3:62:72:20:4f:fd:30:d7:34:e9:7b:17:ab:
                    e5:e2:b6:ac:70:77:fa:90:08:81:3c:92:62:73:63:
                    c6:ee:cb:11:46:8f:8c:40:8d:be:37:90:74:ef:d3:
                    d1:d2:fe:55:93:a6:bf:ad:8c:9c:49:33:3c:1a:da:
                    71:7f:10:8c:dd:b0:20:bc:77:ef:e6:de:fc:1a:40:
                    61:71:ba:09:68:b2:19:82:12:55:7e:36:cf:e2:96:
                    2b:ad:6f:e1:a9:06:a7:43:8a:db:03:b6:44:74:2c:
                    eb:73:0c:2c:fd:12:d3:b8:71:4f:37:7c:40:77:c9:
                    65:61:f3:b2:76:37:6c:44:d6:ab:a6:7a:6e:a7:f9:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BD:31:8A:D9:13:8B:F5:66:D4:70:A9:79:F5:05:0C:24:EB:F3:1F
            X509v3 Authority Key Identifier:
                keyid:8F:46:DC:96:FC:42:07:7E:B0:7E:47:C4:D4:DA:EC:B9:45:5B:48:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/j0bclvxCB36wfkfE1NrsuUVbSAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4BDD/F8376F14A50E11EC9AABF8A25A40D577/j0bclvxCB36wfkfE1NrsuUVbSAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d3:75:91:f8:ed:8d:07:b6:06:d7:7d:df:57:8f:78:59:7b:
         6b:cc:fa:58:6b:25:14:ac:37:1c:37:b8:13:2f:48:8a:2f:2c:
         78:93:73:05:67:0e:56:9f:d3:6e:aa:e1:a7:fa:d2:04:07:cf:
         af:be:ae:ab:93:ae:c6:f3:9b:85:7d:2c:22:87:63:a1:1e:b5:
         12:11:55:bf:4d:9d:2b:af:01:4c:24:af:bd:38:9a:32:e2:47:
         b7:dd:16:1d:44:59:0b:fb:1f:dc:73:6d:9b:e0:2f:13:3f:dd:
         21:e4:89:2a:a7:a3:76:65:bb:60:26:80:c9:48:f8:0e:87:58:
         d9:14:a6:d6:3d:2e:a6:d4:9d:60:fc:53:49:8e:6e:4a:2e:49:
         05:03:3b:c6:e0:de:b3:31:50:55:d4:ad:ac:67:a2:89:7d:cd:
         ad:aa:93:bf:79:d2:a4:d9:22:69:57:3b:ae:64:e4:42:40:b2:
         fa:8c:9e:da:1b:c8:02:8c:06:bb:64:4a:70:79:55:e7:42:50:
         17:24:0a:ff:c3:8f:ab:7c:b6:ae:f8:51:f4:fe:38:9d:54:f4:
         37:41:65:e1:61:b7:12:54:6b:5c:af:4f:0e:73:d2:1e:96:13:
         81:a5:8e:94:cc:2c:d0:42:3a:ee:98:d7:1d:46:a0:f7:1e:a2:
         c5:cc:aa:06
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBs0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDRCRERBRjExMC8GA1UEBRMoOEY0NkRDOTZGQzQyMDc3RUIwN0U0N0M0RDREQUVD
Qjk0NTVCNDgwMjAeFw0yNjEwMjUwMjM4NDVaFw0yNjEwMjcwMjM4NDVaMBgxFjAU
BgNVBAMTDTZhZGQ2YmI2LTdhZjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5L5nFkzr0BJiJxYOXd+kjdproTZyy+THra4RLVuMKtQgI3Uchy0J1oUor
+cewHRkQTX8r3iXSnqNW3a0d5aZ3i7d/A+Hh/mrbv0HLrC3anqomrZQ+JExvCG0A
AGoGuxfEt6/R0EIhTDl0oYexAlEsYbC3VhUMLp/I42JyIE/9MNc06XsXq+Xitqxw
d/qQCIE8kmJzY8buyxFGj4xAjb43kHTv09HS/lWTpr+tjJxJMzwa2nF/EIzdsCC8
d+/m3vwaQGFxugloshmCElV+Ns/iliutb+GpBqdDitsDtkR0LOtzDCz9EtO4cU83
fEB3yWVh87J2N2xE1qumem6n+XZXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwL0x
itkTi/Vm1HCpefUFDCTr8x8wHwYDVR0jBBgwFoAUj0bclvxCB36wfkfE1NrsuUVb
SAIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ0QkREL0Y4Mzc2RjE0QTUwRTExRUM5QUFCRjhBMjVBNDBENTc3L2owYmNs
dnhDQjM2d2ZrZkUxTnJzdVVWYlNBSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2owYmNsdnhDQjM2d2ZrZkUxTnJzdVVWYlNBSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDRCREQvRjgzNzZGMTRBNTBFMTFFQzlBQUJGOEEyNUE0
MEQ1NzcvajBiY2x2eENCMzZ3ZmtmRTFOcnN1VVZiU0FJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBk03WR+O2NB7YG133fV494WXtrzPpY
ayUUrDccN7gTL0iKLyx4k3MFZw5Wn9NuquGn+tIEB8+vvq6rk67G85uFfSwih2Oh
HrUSEVW/TZ0rrwFMJK+9OJoy4ke33RYdRFkL+x/cc22b4C8TP90h5Ikqp6N2Zbtg
JoDJSPgOh1jZFKbWPS6m1J1g/FNJjm5KLkkFAzvG4N6zMVBV1K2sZ6KJfc2tqpO/
edKk2SJpVzuuZORCQLL6jJ7aG8gCjAa7ZEpweVXnQlAXJAr/w4+rfLau+FH0/jid
VPQ3QWXhYbcSVGtcr08Oc9IelhOBpY6UzCzQQjrumNcdRqD3HqLFzKoG
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:26:03 2026 by rpki-client