Error: rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
File:                     5GfUsiPAgVQKkfIRfW5UihuCiew.mft (raw, json)
Hash identifier:          v0jrVdk6QQKZIyC6i/YS3WIMEq+r/eZmURdrXyMOLIg=
Subject key identifier:   1A:52:B0:53:0D:DE:A0:09:CD:9A:95:38:73:F9:22:5A:C3:C7:5D:D7
Authority key identifier: E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC
Certificate issuer:       /CN=F36DBA67AF/serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
Certificate serial:       067E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
Manifest number:          0679
Signing time:             Mon 26 Oct 2026 02:44:41 +0000
Manifest this update:     Mon 26 Oct 2026 02:44:40 +0000
Manifest next update:     Wed 28 Oct 2026 02:44:40 +0000
Files and hashes:         1: 5GfUsiPAgVQKkfIRfW5UihuCiew.crl (hash: yErQleor451aAbfijVJA/lGUTdtsaxy2PuIj8o5EBWY=)
                          2: 04EDE310BFC711F0A31BB5E6DAE4EC9C.roa (hash: 0QychqzlMIzWQM6dar4QBq1yYOt0ya+7aLt7+P0MnUM=)
                          3: 6079B38285A911F1813D3FFACE1D38B0.roa (hash: HKUnWMBlRiw5f9CmNCu81saZ+U9zzyZA66WEg7qXgWM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:44:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1662 (0x67e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBA67AF, serialNumber=E467D4B223C081540A91F2117D6E548A1B8289EC
        Validity
            Not Before: Oct 26 02:44:40 2026 GMT
            Not After : Oct 28 02:44:40 2026 GMT
        Subject: CN=6adebe99-7ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0f:0e:81:17:ee:5e:6c:95:a1:62:75:5e:49:
                    74:f8:68:ac:ef:58:12:3e:88:a6:10:c1:79:1b:17:
                    7f:06:37:ea:78:a9:5c:8b:16:02:a8:91:84:a3:00:
                    6a:1d:4c:35:df:b9:af:16:04:69:1b:46:94:d1:c5:
                    44:c4:ca:89:60:fc:53:70:f3:56:e2:fd:90:94:21:
                    f8:f8:90:b8:75:9b:52:29:5f:da:70:e2:7c:8b:c2:
                    60:e1:79:5d:19:f5:e7:47:69:9d:c6:b6:50:d2:e8:
                    a2:71:de:35:58:96:f2:3e:5f:3b:c0:2a:92:61:b7:
                    32:ad:06:67:b4:e3:65:bd:9e:51:5b:50:7f:fe:53:
                    a5:7c:56:a9:e5:84:e0:ef:74:80:b4:6c:fc:f9:94:
                    3a:5b:88:dd:b8:91:10:71:d6:3a:80:dd:cc:9e:61:
                    b8:53:b2:e1:20:af:cf:dd:d7:9f:47:a2:14:ef:95:
                    be:22:eb:53:10:78:11:15:6b:a4:47:a6:69:cd:be:
                    3f:bb:4a:d4:82:9f:c3:4d:77:e7:64:df:25:75:8c:
                    b1:b8:61:f2:ae:92:87:ea:83:48:ce:4a:a2:4b:a3:
                    4e:f6:fc:8f:cd:da:54:90:6c:1a:88:4b:e2:aa:e4:
                    10:6d:ba:33:8c:af:99:54:14:99:c8:bf:54:85:8f:
                    aa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:52:B0:53:0D:DE:A0:09:CD:9A:95:38:73:F9:22:5A:C3:C7:5D:D7
            X509v3 Authority Key Identifier:
                keyid:E4:67:D4:B2:23:C0:81:54:0A:91:F2:11:7D:6E:54:8A:1B:82:89:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5GfUsiPAgVQKkfIRfW5UihuCiew.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBA67/B20091CEE26711ECBC813FA5F1222468/5GfUsiPAgVQKkfIRfW5UihuCiew.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:61:1e:d6:91:72:3f:ca:cb:17:fd:fd:f6:e4:86:d0:ce:92:
         1c:c0:22:e9:b0:77:80:35:ea:71:69:21:5f:07:44:63:1b:0b:
         d4:a4:aa:1c:e1:b8:1e:6d:61:da:8a:6e:31:8c:7b:3e:ce:2c:
         87:36:25:e6:3f:a7:48:51:46:f1:a6:33:6d:bd:ce:58:d7:78:
         3a:72:7c:f0:62:ac:a9:e8:cd:0d:f1:17:a3:06:9e:47:ce:6b:
         7d:ec:58:39:0d:b4:e5:42:6d:30:31:00:0c:71:8e:77:21:6d:
         32:57:73:83:f6:fc:41:ed:b5:96:0e:d1:87:05:9b:ca:85:3d:
         e5:2a:0e:df:9d:6c:d5:a6:e5:8c:f4:7c:4a:59:1c:cb:ab:db:
         b3:25:11:7a:9e:45:84:a7:bf:f4:9c:7f:18:b0:fa:23:5b:af:
         12:60:6d:22:e4:5d:c9:37:56:f0:e0:bc:f9:bf:ea:0e:e8:98:
         72:ca:a3:d1:d7:fb:35:05:56:fa:d1:17:74:62:4d:08:98:f9:
         6b:8b:f7:ec:bc:45:44:12:66:84:f2:25:cf:68:09:0d:3f:39:
         35:75:3e:19:a6:b9:ec:66:8f:fb:57:e6:dc:8f:71:d5:22:ec:
         57:bc:c3:85:93:ce:4b:cc:9a:71:c8:ba:d7:dc:6a:84:6f:8c:
         49:30:3b:50
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBn4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJBNjdBRjExMC8GA1UEBRMoRTQ2N0Q0QjIyM0MwODE1NDBBOTFGMjExN0Q2RTU0
OEExQjgyODlFQzAeFw0yNjEwMjYwMjQ0NDBaFw0yNjEwMjgwMjQ0NDBaMBgxFjAU
BgNVBAMTDTZhZGViZTk5LTdhZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCjDw6BF+5ebJWhYnVeSXT4aKzvWBI+iKYQwXkbF38GN+p4qVyLFgKokYSj
AGodTDXfua8WBGkbRpTRxUTEyolg/FNw81bi/ZCUIfj4kLh1m1IpX9pw4nyLwmDh
eV0Z9edHaZ3GtlDS6KJx3jVYlvI+XzvAKpJhtzKtBme042W9nlFbUH/+U6V8Vqnl
hODvdIC0bPz5lDpbiN24kRBx1jqA3cyeYbhTsuEgr8/d159HohTvlb4i61MQeBEV
a6RHpmnNvj+7StSCn8NNd+dk3yV1jLG4YfKukofqg0jOSqJLo072/I/N2lSQbBqI
S+Kq5BBtujOMr5lUFJnIv1SFj6obAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGlKw
Uw3eoAnNmpU4c/kiWsPHXdcwHwYDVR0jBBgwFoAU5GfUsiPAgVQKkfIRfW5UihuC
iewwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCQTY3L0IyMDA5MUNFRTI2NzExRUNCQzgxM0ZBNUYxMjIyNDY4LzVHZlVz
aVBBZ1ZRS2tmSVJmVzVVaWh1Q2lldy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVHZlVzaVBBZ1ZRS2tmSVJmVzVVaWh1Q2lldy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REJBNjcvQjIwMDkxQ0VFMjY3MTFFQ0JDODEzRkE1RjEy
MjI0NjgvNUdmVXNpUEFnVlFLa2ZJUmZXNVVpaHVDaWV3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBVYR7WkXI/yssX/f325IbQzpIcwCLp
sHeANepxaSFfB0RjGwvUpKoc4bgebWHaim4xjHs+ziyHNiXmP6dIUUbxpjNtvc5Y
13g6cnzwYqyp6M0N8RejBp5Hzmt97Fg5DbTlQm0wMQAMcY53IW0yV3OD9vxB7bWW
DtGHBZvKhT3lKg7fnWzVpuWM9HxKWRzLq9uzJRF6nkWEp7/0nH8YsPojW68SYG0i
5F3JN1bw4Lz5v+oO6JhyyqPR1/s1BVb60Rd0Yk0ImPlri/fsvEVEEmaE8iXPaAkN
Pzk1dT4ZprnsZo/7V+bcj3HVIuxXvMOFk85LzJpxyLrX3GqEb4xJMDtQ
-----END CERTIFICATE-----
Generated at Mon Oct 26 10:56:58 2026 by rpki-client