Error: rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
File:                     5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft (raw, json)
Hash identifier:          tAq3EMAT7iKY6diueXPiqY0nlE69d/nZICWLxRneDTs=
Subject key identifier:   E3:EA:E5:FC:52:38:71:69:4B:D3:56:0D:C6:DB:5A:66:3A:09:72:66
Authority key identifier: E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F
Certificate issuer:       /CN=F36D6E6DAF/serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
Certificate serial:       0AE9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
Manifest number:          0ADF
Signing time:             Sat 24 Oct 2026 01:23:20 +0000
Manifest this update:     Sat 24 Oct 2026 01:23:19 +0000
Manifest next update:     Mon 26 Oct 2026 01:23:19 +0000
Files and hashes:         1: 5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl (hash: iyek3bMMQpQH6C1MgyuMaxq33vfWIdYt+DNwPJRx1Sw=)
                          2: A70D973E035811EB8CD6BB2EF8AEA228.roa (hash: xD1TsSOLzb9zgs5taA+QevFCLmTa0OLA9qXS/G/GWVw=)
                          3: 6FCCF99E035911EBA2969D2FF8AEA228.roa (hash: Brj3mGjB3Yf03eWIJCSVbmDY44O5T8140En+VTMw/XM=)
                          4: 4AAB98F0035911EB9D53632FF8AEA228.roa (hash: u6MKKtyNGkyNHWMBVkyzfCJjg2ohp3vSDpNE9KtffTs=)
                          5: 08E422B6035911EBB3240F2FF8AEA228.roa (hash: /Zi4DjYvbwyH8lralhYmtbRDBTQdUunZaejcHcESqgQ=)
                          6: 505E6CAAF83111F082A4E095DAE4EC9C.roa (hash: w5mN97uCWsUBvGHsC6kiqTtZ9/reHDjZERztz56UvmE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2793 (0xae9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D6E6DAF, serialNumber=E4C2E6BF4463C8EC342C455F3FE016E5CE53887F
        Validity
            Not Before: Oct 24 01:23:19 2026 GMT
            Not After : Oct 26 01:23:19 2026 GMT
        Subject: CN=6adc0888-50e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a8:0f:34:f3:de:6f:54:7b:ae:38:37:65:3d:
                    03:f9:2e:58:f2:4e:ee:1c:37:48:24:5f:fa:9d:30:
                    ab:8c:ad:37:2a:4b:01:80:0b:d8:64:e9:40:fd:4b:
                    32:50:1b:6f:f7:e6:c3:51:24:cf:54:ce:12:a5:f5:
                    3a:48:db:63:4a:b6:27:c6:4f:b9:37:64:1e:16:83:
                    8e:00:c9:4a:b6:f5:4d:10:9f:4f:eb:e8:1c:35:97:
                    c3:e3:7f:f8:b8:25:f3:fa:d8:c2:43:02:77:d8:93:
                    4b:54:b3:45:1c:8a:71:41:ad:11:11:89:f9:e8:b7:
                    0d:42:48:a2:57:d0:3b:e5:71:f9:52:0b:24:78:d1:
                    4b:35:63:bb:f3:d6:cf:b0:2d:c2:8a:97:9a:1d:9e:
                    04:9f:46:e0:34:77:fe:04:d1:60:93:fc:d6:29:59:
                    f0:30:74:c1:54:b4:d4:fc:84:94:8d:75:77:24:9f:
                    8a:6c:c3:e7:b6:ae:41:51:d6:95:78:19:be:62:b2:
                    43:51:6f:4f:d9:5e:0d:92:27:2e:1a:34:30:21:08:
                    40:85:fb:32:f0:e1:9f:e4:65:11:6e:2c:30:e4:02:
                    09:23:71:b8:d2:98:0d:6d:57:bb:f9:41:30:74:45:
                    5b:d6:81:6d:c2:70:55:ee:0f:26:bd:6d:ca:ea:88:
                    80:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EA:E5:FC:52:38:71:69:4B:D3:56:0D:C6:DB:5A:66:3A:09:72:66
            X509v3 Authority Key Identifier:
                keyid:E4:C2:E6:BF:44:63:C8:EC:34:2C:45:5F:3F:E0:16:E5:CE:53:88:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5MLmv0RjyOw0LEVfP-AW5c5TiH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D6E6D/324E8CBC814711E98C0F4E24F8AEA228/5MLmv0RjyOw0LEVfP-AW5c5TiH8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:91:5b:44:47:54:d2:2c:37:30:51:f7:57:1d:12:fe:8f:a5:
         56:4f:1c:58:da:7f:15:cf:ba:ae:71:4b:e0:66:6f:88:63:df:
         1c:8c:bc:80:e8:ff:3a:6b:88:d8:26:fa:76:60:fa:3e:90:1d:
         d2:30:c4:ff:28:2c:51:9c:84:ea:52:03:68:0b:93:77:7b:26:
         c4:26:c8:4e:50:86:d8:c6:27:88:ff:22:9a:d5:fc:9c:3a:ce:
         f2:37:ec:69:69:87:5a:8b:27:7d:6f:30:70:27:86:99:b7:37:
         9d:50:1e:85:68:73:86:28:b6:ea:bb:57:51:d0:c6:c5:d0:68:
         1d:42:87:d8:20:e9:f7:86:fd:0b:64:ff:4b:0f:29:41:35:0a:
         0a:c4:1e:7b:68:4e:be:68:7c:ca:29:15:19:e0:84:8d:b2:10:
         5d:6b:66:00:e5:4c:6b:69:19:f9:88:44:ed:f9:e9:5e:f7:7b:
         d5:3f:28:cb:f9:55:b4:41:27:f3:66:33:05:56:20:25:ae:b6:
         4f:1f:8c:a8:e3:13:30:5b:89:cf:11:2d:88:de:bf:b6:74:a3:
         fe:56:8a:d7:ed:b5:06:9b:e9:62:fe:9f:a4:23:1a:fe:aa:b8:
         c1:8e:46:2d:6d:8e:23:79:1d:83:77:12:78:b8:8a:0c:59:b6:
         76:3d:06:ac
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCukwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDZFNkRBRjExMC8GA1UEBRMoRTRDMkU2QkY0NDYzQzhFQzM0MkM0NTVGM0ZFMDE2
RTVDRTUzODg3RjAeFw0yNjEwMjQwMTIzMTlaFw0yNjEwMjYwMTIzMTlaMBgxFjAU
BgNVBAMTDTZhZGMwODg4LTUwZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuqA80895vVHuuODdlPQP5LljyTu4cN0gkX/qdMKuMrTcqSwGAC9hk6UD9
SzJQG2/35sNRJM9UzhKl9TpI22NKtifGT7k3ZB4Wg44AyUq29U0Qn0/r6Bw1l8Pj
f/i4JfP62MJDAnfYk0tUs0UcinFBrRERifnotw1CSKJX0DvlcflSCyR40Us1Y7vz
1s+wLcKKl5odngSfRuA0d/4E0WCT/NYpWfAwdMFUtNT8hJSNdXckn4psw+e2rkFR
1pV4Gb5iskNRb0/ZXg2SJy4aNDAhCECF+zLw4Z/kZRFuLDDkAgkjcbjSmA1tV7v5
QTB0RVvWgW3CcFXuDya9bcrqiID1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4+rl
/FI4cWlL01YNxttaZjoJcmYwHwYDVR0jBBgwFoAU5MLmv0RjyOw0LEVfP+AW5c5T
iH8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ2RTZELzMyNEU4Q0JDODE0NzExRTk4QzBGNEUyNEY4QUVBMjI4LzVNTG12
MFJqeU93MExFVmZQLUFXNWM1VGlIOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVNTG12MFJqeU93MExFVmZQLUFXNWM1VGlIOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDZFNkQvMzI0RThDQkM4MTQ3MTFFOThDMEY0RTI0RjhB
RUEyMjgvNU1MbXYwUmp5T3cwTEVWZlAtQVc1YzVUaUg4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5kVtER1TSLDcwUfdXHRL+j6VWTxxY
2n8Vz7qucUvgZm+IY98cjLyA6P86a4jYJvp2YPo+kB3SMMT/KCxRnITqUgNoC5N3
eybEJshOUIbYxieI/yKa1fycOs7yN+xpaYdaiyd9bzBwJ4aZtzedUB6FaHOGKLbq
u1dR0MbF0GgdQofYIOn3hv0LZP9LDylBNQoKxB57aE6+aHzKKRUZ4ISNshBda2YA
5UxraRn5iETt+ele93vVPyjL+VW0QSfzZjMFViAlrrZPH4yo4xMwW4nPES2I3r+2
dKP+VorX7bUGm+li/p+kIxr+qrjBjkYtbY4jeR2DdxJ4uIoMWbZ2PQas
-----END CERTIFICATE-----
Generated at Sat Oct 24 05:23:05 2026 by rpki-client