Error: rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
File:                     ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft (raw, json)
Hash identifier:          5/J8YIJxu76Nj5MzmK8Zl0f+0d+pEH9QivGdHfJb+vQ=
Subject key identifier:   E8:F7:9A:DE:B3:8E:9C:F5:55:2D:87:12:63:30:50:93:F5:F3:C9:1A
Authority key identifier: 64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41
Certificate issuer:       /CN=F36E3530AF/serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
Certificate serial:       03B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
Manifest number:          03B0
Signing time:             Sun 25 Oct 2026 04:08:09 +0000
Manifest this update:     Sun 25 Oct 2026 04:08:08 +0000
Manifest next update:     Tue 27 Oct 2026 04:08:08 +0000
Files and hashes:         1: ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl (hash: y9y3qTLOK+lLq5eW/e4VBjqJyn2JHaHMDgc/OJFXkFA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3530AF, serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
        Validity
            Not Before: Oct 25 04:08:08 2026 GMT
            Not After : Oct 27 04:08:08 2026 GMT
        Subject: CN=6add80a9-86fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ba:6f:d2:ff:37:3c:49:f2:ba:90:c8:18:71:
                    8f:d0:07:14:1f:ea:09:63:ce:d3:1f:dd:1d:17:06:
                    81:5f:6d:ab:98:20:db:5b:d1:1d:c2:f1:87:f1:bf:
                    cf:37:56:05:c0:1f:30:6a:3f:c6:e0:74:93:13:a2:
                    44:46:7a:55:3b:7c:ac:8a:75:5a:4d:f5:54:7c:88:
                    03:6d:57:67:e5:59:e3:a2:4d:97:70:91:74:12:53:
                    b7:6e:2a:85:e2:4b:0b:0c:cc:aa:22:06:6f:14:dd:
                    d1:af:f2:b5:78:9e:1a:56:3a:d9:79:e7:1a:d7:5f:
                    c6:6a:bf:47:78:3f:0b:ae:b0:c1:f1:ec:ae:68:16:
                    b9:86:54:0e:f8:b2:d1:a6:fa:83:b9:29:cb:cb:28:
                    44:74:4a:57:0f:9f:9c:44:ac:eb:03:79:4c:f9:e6:
                    bb:4b:23:0c:cb:9e:88:12:ed:61:b4:81:2f:19:ba:
                    ad:7a:08:4f:0c:63:d4:d6:05:35:9e:43:c4:f3:1b:
                    13:cb:f5:fb:8c:e1:3e:7e:b6:b1:44:9c:82:32:9f:
                    86:99:17:1c:98:67:60:fe:24:78:f8:e8:67:b9:f1:
                    86:e3:91:d5:2e:1b:cf:a9:88:b5:78:24:1b:ba:7c:
                    78:fd:b7:a8:55:83:e7:1a:00:67:87:53:1f:0b:f6:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F7:9A:DE:B3:8E:9C:F5:55:2D:87:12:63:30:50:93:F5:F3:C9:1A
            X509v3 Authority Key Identifier:
                keyid:64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:e4:e6:fd:74:73:a6:73:d5:52:d3:b8:ce:f0:6f:0c:34:5b:
         b9:5f:36:1c:16:2c:ec:dd:bc:28:47:35:9e:ff:45:0f:e8:b6:
         48:4c:25:04:1d:62:b6:03:e2:af:aa:54:81:8d:77:b5:df:e5:
         ac:2b:51:fb:1b:55:6f:86:c1:eb:53:b9:99:9d:02:61:b3:c1:
         a6:c8:f6:2d:ad:a7:e7:8e:0b:ee:6e:ae:01:bd:ea:58:99:5c:
         40:af:39:a7:39:c5:6e:b8:da:ac:98:23:8e:22:96:45:66:99:
         f1:81:be:26:37:ef:6f:b8:f2:73:68:94:71:0c:60:cf:0c:bb:
         83:65:d9:cb:1e:36:05:49:77:38:0b:f2:90:a4:91:9c:29:d2:
         a8:23:50:64:2f:cf:8a:8b:ce:8c:9b:85:29:9c:18:82:d6:ca:
         d0:da:a6:b7:1f:b7:da:23:29:ae:62:ba:0c:33:9a:13:c5:32:
         84:29:d1:ea:4e:a2:69:b6:b5:8d:4b:ce:ee:74:95:f0:67:fc:
         7c:f0:30:5b:fb:b0:b2:80:aa:fd:6d:e1:ab:ef:73:68:ce:bb:
         a0:c7:02:c9:3c:1e:1c:52:92:6e:23:ad:d8:7d:2a:c9:9a:4e:
         c0:31:b7:23:6a:b4:8d:82:10:02:6d:b7:a0:b3:9a:56:a2:aa:
         2e:28:12:aa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM1MzBBRjExMC8GA1UEBRMoNjRFNDhCNzVFMjE2NzRGODZENEU2QjVGNDIzNjlB
N0E3M0JFMjU0MTAeFw0yNjEwMjUwNDA4MDhaFw0yNjEwMjcwNDA4MDhaMBgxFjAU
BgNVBAMTDTZhZGQ4MGE5LTg2ZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjum/S/zc8SfK6kMgYcY/QBxQf6gljztMf3R0XBoFfbauYINtb0R3C8Yfx
v883VgXAHzBqP8bgdJMTokRGelU7fKyKdVpN9VR8iANtV2flWeOiTZdwkXQSU7du
KoXiSwsMzKoiBm8U3dGv8rV4nhpWOtl55xrXX8Zqv0d4PwuusMHx7K5oFrmGVA74
stGm+oO5KcvLKER0SlcPn5xErOsDeUz55rtLIwzLnogS7WG0gS8Zuq16CE8MY9TW
BTWeQ8TzGxPL9fuM4T5+trFEnIIyn4aZFxyYZ2D+JHj46Ge58YbjkdUuG8+piLV4
JBu6fHj9t6hVg+caAGeHUx8L9haNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6Pea
3rOOnPVVLYcSYzBQk/XzyRowHwYDVR0jBBgwFoAUZOSLdeIWdPhtTmtfQjaaenO+
JUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzNTMwLzY0MDUxRjY2RkRBQTExRUVCOEQ0Nzg1NTAxNzAwMUIxL1pPU0xk
ZUlXZFBodFRtdGZRamFhZW5PLUpVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pPU0xkZUlXZFBodFRtdGZRamFhZW5PLUpVRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTM1MzAvNjQwNTFGNjZGREFBMTFFRUI4RDQ3ODU1MDE3
MDAxQjEvWk9TTGRlSVdkUGh0VG10ZlFqYWFlbk8tSlVFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAs5Ob9dHOmc9VS07jO8G8MNFu5XzYc
Fizs3bwoRzWe/0UP6LZITCUEHWK2A+KvqlSBjXe13+WsK1H7G1VvhsHrU7mZnQJh
s8GmyPYtrafnjgvubq4BvepYmVxArzmnOcVuuNqsmCOOIpZFZpnxgb4mN+9vuPJz
aJRxDGDPDLuDZdnLHjYFSXc4C/KQpJGcKdKoI1BkL8+Ki86Mm4UpnBiC1srQ2qa3
H7faIymuYroMM5oTxTKEKdHqTqJptrWNS87udJXwZ/x88DBb+7CygKr9beGr73No
zrugxwLJPB4cUpJuI63YfSrJmk7AMbcjarSNghACbbegs5pWoqouKBKq
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:04:59 2026 by rpki-client