Error: rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
File:                     OdAwrgr6xpErCxM_96NC94TQ6ow.mft (raw, json)
Hash identifier:          YnSTgc2kBSuG7iVp60Vv2PAHW9beVsdJvEFrTkqEuao=
Subject key identifier:   E5:1D:95:AE:AC:02:9A:BA:96:FF:75:9B:C0:1F:B6:EF:9E:E0:A1:28
Authority key identifier: 39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C
Certificate issuer:       /CN=F36F0163AF/serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
Certificate serial:       0A40
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
Manifest number:          0A3A
Signing time:             Sun 25 Oct 2026 01:37:48 +0000
Manifest this update:     Sun 25 Oct 2026 01:37:47 +0000
Manifest next update:     Tue 27 Oct 2026 01:37:47 +0000
Files and hashes:         1: OdAwrgr6xpErCxM_96NC94TQ6ow.crl (hash: GVxXw9Gzqq0dfA3BO5BrAibtK4FjuiUdeZSyD6wKQ/E=)
                          2: FE48D08AFC9D11E9BD0D4B40F8AEA228.roa (hash: bklBiFJiibIM4Ahr4MuYEGegKTjEFLUjUyhhSPhmCAA=)
                          3: EC1AC2E4FCA011E99F078842F8AEA228.roa (hash: vMaEHZSbtMwTml47SDgjbkHSKoCPHIjAJPxF4JG+NtM=)
                          4: B0109E46FC9F11E9A7249141F8AEA228.roa (hash: mWLr9gpGgYGc2eTR3HzordVAt5z5qlqSSvhvwmTMGaQ=)
                          5: 38D7B3B4FC9F11E9A4E33B41F8AEA228.roa (hash: nNsbmr9/5pRB8Y6AFAqdxecPNFhdqNuMc+kOEEeB4Yk=)
                          6: BF97D40AFC9B11E9A8F7AE3EF8AEA228.roa (hash: G9n58toWNUqMDu66699/GW70sTU/7pnUIRdVDqWMeDQ=)
                          7: A4EBAA16FC9E11E9A1B9C140F8AEA228.roa (hash: 80PrfbUNINLOm8aOdH0UPxFoBlumMScmqP938jPlttA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2624 (0xa40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0163AF, serialNumber=39D030AE0AFAC6912B0B133FF7A342F784D0EA8C
        Validity
            Not Before: Oct 25 01:37:47 2026 GMT
            Not After : Oct 27 01:37:47 2026 GMT
        Subject: CN=6add5d6c-1d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:80:80:1e:4e:17:bb:f8:38:44:db:12:0c:
                    1f:87:25:ed:a4:8c:b9:30:3f:5d:a7:ac:9c:28:88:
                    cc:fc:4a:bf:81:2c:40:57:63:2a:db:e7:e0:b0:1b:
                    e6:9c:6d:63:7d:3b:44:1f:b0:e5:77:7d:a7:00:89:
                    2b:d0:92:0d:cf:8f:d5:a1:39:16:67:cb:5d:2f:73:
                    2d:c2:8f:53:59:b1:15:b8:64:3a:0a:93:37:7f:47:
                    17:db:66:1f:e9:88:e6:83:f6:28:14:6d:38:41:f5:
                    4a:28:21:b1:2f:08:fe:1d:0f:05:d8:88:36:7b:66:
                    69:a7:0d:a8:2f:98:47:98:a9:01:34:ba:33:02:96:
                    e2:92:5f:e2:d6:72:f8:4a:6d:8a:82:b2:b0:8d:a0:
                    4b:3a:2a:ee:82:81:18:33:51:40:bc:ef:39:d7:bb:
                    a2:7a:82:5d:e7:d9:13:24:e0:1c:31:f3:20:82:84:
                    92:bd:4d:9d:77:59:3a:73:99:4f:52:05:4b:c7:8e:
                    27:5b:b6:c5:8f:f0:b5:0f:98:a1:45:d2:90:9d:12:
                    ed:3e:d1:fd:fb:23:54:17:b2:3c:3c:5d:9d:d6:f8:
                    30:ec:71:d4:b9:c1:04:43:9a:96:46:7d:a3:67:1a:
                    46:08:f4:2c:3d:00:64:66:db:c1:fb:eb:23:70:76:
                    f0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1D:95:AE:AC:02:9A:BA:96:FF:75:9B:C0:1F:B6:EF:9E:E0:A1:28
            X509v3 Authority Key Identifier:
                keyid:39:D0:30:AE:0A:FA:C6:91:2B:0B:13:3F:F7:A3:42:F7:84:D0:EA:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OdAwrgr6xpErCxM_96NC94TQ6ow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0163/885DC644FC9A11E98179B23DF8AEA228/OdAwrgr6xpErCxM_96NC94TQ6ow.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bd:e4:28:e2:5e:3f:d6:02:e5:d2:e0:5b:da:dc:b2:f2:65:
         89:ce:36:e5:f4:ba:41:ae:8e:4d:00:01:c1:1a:6c:64:6f:9f:
         27:43:70:c8:c3:75:a3:11:5f:2e:60:8d:de:cc:b4:20:f4:1b:
         54:c5:df:e5:9e:1f:ef:e8:f1:39:75:d4:11:88:18:e1:46:8b:
         a3:e4:eb:bf:f6:41:44:08:19:2b:8e:da:67:51:cf:cf:1f:34:
         4e:ae:a0:7b:d6:d5:3b:dc:db:62:75:61:5a:2e:4a:9a:0e:68:
         3b:9b:64:22:65:4e:50:31:05:7f:95:b0:19:e3:a6:23:ba:15:
         2f:45:b9:c1:f7:55:a7:a8:4b:57:74:69:e0:5f:a9:8f:cc:17:
         34:a0:43:f2:26:cf:fc:7d:c1:70:f0:9b:0b:55:88:14:ae:65:
         6c:5f:08:aa:c0:9c:eb:b4:5f:8c:23:fb:3a:c9:5c:e8:8c:f1:
         6f:5b:94:c2:6f:85:51:32:78:62:a0:22:46:57:a1:fa:77:86:
         e3:be:42:25:1d:7a:39:f7:87:dd:e5:2c:76:f0:38:b5:15:a2:
         68:07:68:82:0a:c0:2b:5e:8f:19:88:6e:14:db:de:a1:b3:03:
         b4:dd:5b:8d:08:4c:a2:92:f0:4e:d6:f1:7e:d0:05:54:8a:b8:
         03:f9:fb:e3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCkAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjAxNjNBRjExMC8GA1UEBRMoMzlEMDMwQUUwQUZBQzY5MTJCMEIxMzNGRjdBMzQy
Rjc4NEQwRUE4QzAeFw0yNjEwMjUwMTM3NDdaFw0yNjEwMjcwMTM3NDdaMBgxFjAU
BgNVBAMTDTZhZGQ1ZDZjLTFkNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOv4CAHk4Xu/g4RNsSDB+HJe2kjLkwP12nrJwoiMz8Sr+BLEBXYyrb5+Cw
G+acbWN9O0QfsOV3facAiSvQkg3Pj9WhORZny10vcy3Cj1NZsRW4ZDoKkzd/Rxfb
Zh/piOaD9igUbThB9UooIbEvCP4dDwXYiDZ7ZmmnDagvmEeYqQE0ujMCluKSX+LW
cvhKbYqCsrCNoEs6Ku6CgRgzUUC87znXu6J6gl3n2RMk4Bwx8yCChJK9TZ13WTpz
mU9SBUvHjidbtsWP8LUPmKFF0pCdEu0+0f37I1QXsjw8XZ3W+DDscdS5wQRDmpZG
faNnGkYI9Cw9AGRm28H76yNwdvDtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5R2V
rqwCmrqW/3WbwB+2757goSgwHwYDVR0jBBgwFoAUOdAwrgr6xpErCxM/96NC94TQ
6owwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwMTYzLzg4NURDNjQ0RkM5QTExRTk4MTc5QjIzREY4QUVBMjI4L09kQXdy
Z3I2eHBFckN4TV85Nk5DOTRUUTZvdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09kQXdyZ3I2eHBFckN4TV85Nk5DOTRUUTZvdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjAxNjMvODg1REM2NDRGQzlBMTFFOTgxNzlCMjNERjhB
RUEyMjgvT2RBd3JncjZ4cEVyQ3hNXzk2TkM5NFRRNm93Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvveQo4l4/1gLl0uBb2tyy8mWJzjbl
9LpBro5NAAHBGmxkb58nQ3DIw3WjEV8uYI3ezLQg9BtUxd/lnh/v6PE5ddQRiBjh
Rouj5Ou/9kFECBkrjtpnUc/PHzROrqB71tU73NtidWFaLkqaDmg7m2QiZU5QMQV/
lbAZ46YjuhUvRbnB91WnqEtXdGngX6mPzBc0oEPyJs/8fcFw8JsLVYgUrmVsXwiq
wJzrtF+MI/s6yVzojPFvW5TCb4VRMnhioCJGV6H6d4bjvkIlHXo594fd5Sx28Di1
FaJoB2iCCsArXo8ZiG4U296hswO03VuNCEyikvBO1vF+0AVUirgD+fvj
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:12:22 2026 by rpki-client