Error: rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
File:                     _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json)
Hash identifier:          IRbti0M7jwZaMRDfcEl3+fKVZ1laXnaqAs5FiKmoiSw=
Subject key identifier:   79:0A:1F:5C:F1:F5:0B:47:BC:8E:CF:7B:01:44:5D:B7:E9:EA:D8:A6
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       0B2D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
Manifest number:          0B06
Signing time:             Tue 27 Oct 2026 01:27:26 +0000
Manifest this update:     Tue 27 Oct 2026 01:27:25 +0000
Manifest next update:     Thu 29 Oct 2026 01:27:25 +0000
Files and hashes:         1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: lrB6EmcXpzvgDc/dsK85m6jEv9tupE9jsj7iRVZRIwM=)
                          2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=)
                          3: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=)
                          4: B5869B0AC3C211F09F106C8BDAE4EC9C.roa (hash: mJeNbgIsODW0IZbdvirwPYTHzrvnFAJ+2bHY0LU02rk=)
                          5: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=)
                          6: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=)
                          7: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=)
                          8: 65F327B8C3C011F0ABEF947BDAE4EC9C.roa (hash: ZNx35ltsV215KO54NwIZRAjQFKuUp9eg7CgfIYk5wag=)
                          9: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=)
                          10: D836FE9222B311F1AE59E8A5DAE4EC9C.roa (hash: Zo4dYOB2OMVvcxcANyuKsstxdleGAQAhhFqhzGOXqz0=)
                          11: A0F84E4E22B411F1A094D2A9DAE4EC9C.roa (hash: RVM1tl7LuX44NxHiJWipsP33NfLSDKNOMeT1ioVv3KI=)
                          12: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=)
                          13: 90942EAE22B611F1B2F2A6B5DAE4EC9C.roa (hash: B2oH+YLYL80SnvHNj5we7c9W00Nmw5CHyRiieTPA9Fk=)
                          14: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=)
                          15: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=)
                          16: C7DF70DA22B611F1A9E4ACB5DAE4EC9C.roa (hash: FzSMi1ExAtIbBrOh99I/Xg/w2xrMl9lU3Ek0la62bJM=)
                          17: ED8D90DC22B611F1BFEFC9B7DAE4EC9C.roa (hash: Lg3vE54geb/W/HK9e5QX9UvaE5HfR3V6ZT67toBAsnk=)
                          18: 882D016CC3C211F091DEFD88DAE4EC9C.roa (hash: P8CrTuzMoS9SDVWJrxvNUlVaky2bUCzT4t7YspZSN5c=)
                          19: 691543FE22B611F1AD41E6B3DAE4EC9C.roa (hash: OcXC+95ot7At7Mu6jgi4eynHpzMzzE33mDt+ILGM0mU=)
                          20: 213A16D822B411F19F2100A8DAE4EC9C.roa (hash: +REceu3vGyfkElasQapk8ytHIl0xpyt/9IoQ658hAK8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2861 (0xb2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Oct 27 01:27:25 2026 GMT
            Not After : Oct 29 01:27:25 2026 GMT
        Subject: CN=6adffdfd-ab77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:52:71:95:be:cd:53:dc:37:24:cf:0a:bf:7b:
                    4e:7a:37:f6:30:da:e9:17:d9:31:a8:91:69:00:5a:
                    92:07:a5:4f:35:fb:7e:e3:d2:79:c1:df:74:8a:dc:
                    5f:54:b7:d3:54:8d:ab:bb:15:69:2b:82:63:b0:a5:
                    5b:fb:47:ab:5d:d6:57:bd:9c:6e:19:4a:9a:da:fb:
                    42:cb:81:30:d5:46:fa:4a:fa:f2:6a:e8:39:27:91:
                    18:53:e2:c4:e2:e5:cd:91:39:8b:27:21:56:84:3c:
                    49:1a:dc:78:74:f5:4d:2f:1e:96:3e:5f:1a:60:88:
                    e2:5b:1a:34:da:1e:f3:81:43:eb:66:20:ad:c3:b4:
                    9d:fe:4f:c9:ce:6e:34:b8:35:58:c7:35:92:db:b4:
                    d2:e5:3f:1d:83:93:60:97:0a:f4:32:a6:1a:b2:c1:
                    1b:c5:fe:11:eb:df:9b:ad:73:34:33:c6:52:15:d6:
                    46:3a:51:23:2f:6d:66:14:ec:8a:e7:15:91:5f:6c:
                    26:56:97:4a:74:f1:80:17:0c:e0:61:48:dc:d4:56:
                    11:f6:7d:5f:6c:d5:77:e5:13:bf:74:32:27:00:ee:
                    49:67:88:f1:8e:0f:ad:32:d6:a7:eb:a3:a0:f3:67:
                    19:91:df:ef:95:da:fb:cd:e9:57:f3:a4:3c:da:0a:
                    fd:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0A:1F:5C:F1:F5:0B:47:BC:8E:CF:7B:01:44:5D:B7:E9:EA:D8:A6
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:80:1f:7c:ae:7e:41:f0:dc:5f:fb:97:a8:29:9f:46:77:
         23:b1:d0:66:8a:ee:6c:1f:69:49:f5:f9:21:c7:e5:10:58:6f:
         ce:07:58:50:ff:f4:ed:aa:ff:89:d0:17:ed:ed:bb:1c:1e:6a:
         df:31:fc:b6:fe:9c:3a:7d:af:e2:22:5c:65:d1:33:50:87:52:
         fa:3a:79:2b:7c:42:ac:9e:5c:19:0d:58:39:b3:72:e2:34:ce:
         55:b8:cb:51:5d:15:9d:c6:3d:74:c4:dc:95:ef:53:6a:88:0e:
         ab:06:57:88:7e:f2:56:c4:9f:b8:e0:18:59:63:fa:4a:ad:21:
         6b:a3:99:fe:9a:70:7a:fb:1e:bc:a3:f1:6d:ff:05:e0:38:3a:
         fa:05:ef:ed:b8:e6:06:3f:4e:0c:b4:94:1a:65:3a:28:eb:31:
         2d:ab:19:57:51:4b:4f:0c:2d:7d:07:34:6b:b3:29:07:84:c5:
         dc:b8:28:05:b1:dd:96:be:8c:62:29:80:1d:7a:2a:0f:55:33:
         9a:34:49:57:38:e9:50:f0:4c:38:ce:ac:b2:7d:80:90:70:7b:
         3a:fe:bc:3a:95:6b:0a:d9:b7:34:05:83:5d:3b:b8:74:38:fa:
         1e:2d:ba:aa:97:53:e9:a7:46:c6:e6:99:f1:ec:94:96:04:a0:
         bd:39:58:1d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM3M0RBRjExMC8GA1UEBRMoRkQ4RTA0NTg4NEIxNjY5RUJENDMwQUU1NjY3MjFE
OTc0MDRBNkNFODAeFw0yNjEwMjcwMTI3MjVaFw0yNjEwMjkwMTI3MjVaMBgxFjAU
BgNVBAMTDTZhZGZmZGZkLWFiNzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvUnGVvs1T3Dckzwq/e056N/Yw2ukX2TGokWkAWpIHpU81+37j0nnB33SK
3F9Ut9NUjau7FWkrgmOwpVv7R6td1le9nG4ZSpra+0LLgTDVRvpK+vJq6DknkRhT
4sTi5c2ROYsnIVaEPEka3Hh09U0vHpY+XxpgiOJbGjTaHvOBQ+tmIK3DtJ3+T8nO
bjS4NVjHNZLbtNLlPx2Dk2CXCvQyphqywRvF/hHr35utczQzxlIV1kY6USMvbWYU
7IrnFZFfbCZWl0p08YAXDOBhSNzUVhH2fV9s1XflE790MicA7klniPGOD60y1qfr
o6DzZxmR3++V2vvN6VfzpDzaCv2/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeQof
XPH1C0e8js97AURdt+nq2KYwHwYDVR0jBBgwFoAU/Y4EWISxZp69QwrlZnIdl0BK
bOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4QUVBMjI4L19ZNEVX
SVN4WnA2OVF3cmxabklkbDBCS2JPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19ZNEVXSVN4WnA2OVF3cmxabklkbDBCS2JPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTM3M0QvNEQyMkFDRDY4QjczMTFFOUE0OUE0MzY4RjhB
RUEyMjgvX1k0RVdJU3hacDY5UXdybFpuSWRsMEJLYk9nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsIoAffK5+QfDcX/uXqCmfRncjsdBm
iu5sH2lJ9fkhx+UQWG/OB1hQ//Ttqv+J0Bft7bscHmrfMfy2/pw6fa/iIlxl0TNQ
h1L6OnkrfEKsnlwZDVg5s3LiNM5VuMtRXRWdxj10xNyV71NqiA6rBleIfvJWxJ+4
4BhZY/pKrSFro5n+mnB6+x68o/Ft/wXgODr6Be/tuOYGP04MtJQaZToo6zEtqxlX
UUtPDC19BzRrsykHhMXcuCgFsd2WvoxiKYAdeioPVTOaNElXOOlQ8Ew4zqyyfYCQ
cHs6/rw6lWsK2bc0BYNdO7h0OPoeLbqql1Ppp0bG5pnx7JSWBKC9OVgd
-----END CERTIFICATE-----
Generated at Tue Oct 27 13:06:49 2026 by rpki-client