Error: rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
File:                     r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft (raw, json)
Hash identifier:          rK9SJY2N9VdmswUEgtdYMzOVRz1bfMsfHqHj+k5z6BE=
Subject key identifier:   89:B5:59:CA:CB:BB:90:94:9F:C6:23:7F:F4:80:09:35:5D:FE:3E:2A
Authority key identifier: AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
Certificate issuer:       /CN=F36F8BC2AF/serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
Certificate serial:       0363
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
Manifest number:          035E
Signing time:             Mon 26 Oct 2026 04:18:51 +0000
Manifest this update:     Mon 26 Oct 2026 04:18:51 +0000
Manifest next update:     Wed 28 Oct 2026 04:18:50 +0000
Files and hashes:         1: r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl (hash: ShMrXXwnkaVN3K4v3O1tGnJQfpUEeOBGDSHnvb+CgDU=)
                          2: 3AB9C0D0ED6D11F09ACA117DDAE4EC9C.roa (hash: qWbACSj4Y3MG+OhyVSYDEFibc3PnkmJTw+r0W8ExIVM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8BC2AF, serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
        Validity
            Not Before: Oct 26 04:18:51 2026 GMT
            Not After : Oct 28 04:18:50 2026 GMT
        Subject: CN=6aded4ab-9002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:e0:25:f6:97:9d:1c:a7:f5:b0:4a:38:b5:
                    ce:0d:6e:35:e9:e0:08:79:9a:14:aa:45:74:c9:78:
                    27:81:15:c8:72:72:4c:8c:33:bb:53:de:af:05:08:
                    7d:40:bc:02:6e:b1:ee:80:09:c0:7c:e9:03:cd:54:
                    65:ce:f8:c2:c8:16:2f:29:06:a9:2c:77:d3:65:c1:
                    36:5b:c2:3d:6f:44:58:79:47:94:d7:b6:bd:df:21:
                    67:f8:67:21:4d:36:00:cf:3e:50:a5:da:ff:e4:50:
                    5d:b8:0e:6d:ad:48:de:0c:b5:de:fd:bf:3a:78:fa:
                    d7:c7:af:4e:b5:36:82:bc:c4:af:d0:50:7b:20:74:
                    6a:71:99:93:c5:73:59:97:11:5f:0e:93:d4:38:ed:
                    5e:2e:38:11:33:48:d7:38:a1:e4:24:f2:f6:f6:47:
                    aa:66:67:bf:60:a5:f9:45:d6:7f:43:bf:41:ed:76:
                    4f:eb:18:3f:56:d9:01:54:5e:d0:fd:bd:80:03:3f:
                    a9:89:11:56:b7:ef:fd:3e:e4:f0:ec:2b:7b:fd:01:
                    5d:59:fd:ba:ce:36:43:74:73:f9:d0:d2:8b:7d:8b:
                    73:02:ef:4d:32:3e:f3:e2:f1:cb:05:ee:f8:37:f0:
                    d6:90:f1:14:81:34:93:05:8a:fa:33:66:c5:31:0c:
                    49:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B5:59:CA:CB:BB:90:94:9F:C6:23:7F:F4:80:09:35:5D:FE:3E:2A
            X509v3 Authority Key Identifier:
                keyid:AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a4:1a:30:e5:8a:2d:e8:fb:80:69:3f:b9:11:95:1e:c9:9d:
         16:42:d6:c1:39:cf:6c:b5:57:8c:ca:c0:6a:d5:45:3d:74:ea:
         98:fe:28:eb:19:3b:20:d0:5e:87:bb:db:5f:f8:5f:35:5d:90:
         da:57:d4:3b:90:29:b6:7c:c8:65:3d:d1:b5:b3:66:6d:28:e0:
         60:2b:57:b0:1e:82:58:89:8c:e9:39:0f:d3:77:48:a6:8d:b4:
         f5:6c:eb:c4:a3:4c:eb:3b:1f:4c:68:ad:1e:c2:57:3f:e7:d5:
         bc:08:b3:19:51:50:6f:d3:42:10:3f:68:8b:d5:64:de:c6:eb:
         28:de:8b:cd:49:7c:05:2f:1b:3d:4d:96:26:9e:24:80:78:b1:
         0b:35:bd:67:62:0a:50:e2:fd:ee:69:b8:ef:85:34:39:bb:69:
         79:7f:5c:d7:17:71:65:38:44:64:05:4a:fe:10:ea:3e:b0:ee:
         67:ad:78:95:ed:d6:b2:92:e6:f6:5f:96:96:23:31:04:6e:c7:
         bb:83:a2:36:26:44:0a:43:9e:a9:7b:59:17:ab:8e:97:10:a5:
         91:f9:5d:6d:a9:c7:d8:fb:5e:29:fd:ad:37:d8:ac:5d:6c:1b:
         17:bb:10:0c:db:85:19:5b:48:95:75:f6:e7:ab:38:85:de:37:
         70:9e:9f:bc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA2MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjhCQzJBRjExMC8GA1UEBRMoQUZDMEMxNkI4MDVBNEJCM0FFNzNFREMyNEM1Mzgz
ODBGQzBFOUE0OTAeFw0yNjEwMjYwNDE4NTFaFw0yNjEwMjgwNDE4NTBaMBgxFjAU
BgNVBAMTDTZhZGVkNGFiLTkwMDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB8eAl9pedHKf1sEo4tc4NbjXp4Ah5mhSqRXTJeCeBFchyckyMM7tT3q8F
CH1AvAJuse6ACcB86QPNVGXO+MLIFi8pBqksd9NlwTZbwj1vRFh5R5TXtr3fIWf4
ZyFNNgDPPlCl2v/kUF24Dm2tSN4Mtd79vzp4+tfHr061NoK8xK/QUHsgdGpxmZPF
c1mXEV8Ok9Q47V4uOBEzSNc4oeQk8vb2R6pmZ79gpflF1n9Dv0Htdk/rGD9W2QFU
XtD9vYADP6mJEVa37/0+5PDsK3v9AV1Z/brONkN0c/nQ0ot9i3MC700yPvPi8csF
7vg38NaQ8RSBNJMFivozZsUxDElZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUibVZ
ysu7kJSfxiN/9IAJNV3+PiowHwYDVR0jBBgwFoAUr8DBa4BaS7Ouc+3CTFODgPwO
mkkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4QkMyLzEyQjMxNzkyMzlFODExRUZBRkI3NUY5NTc2MkU5NTFBL3I4REJh
NEJhUzdPdWMtM0NURk9EZ1B3T21ray5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3I4REJhNEJhUzdPdWMtM0NURk9EZ1B3T21ray5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjhCQzIvMTJCMzE3OTIzOUU4MTFFRkFGQjc1Rjk1NzYy
RTk1MUEvcjhEQmE0QmFTN091Yy0zQ1RGT0RnUHdPbWtrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBQpBow5Yot6PuAaT+5EZUeyZ0WQtbB
Oc9stVeMysBq1UU9dOqY/ijrGTsg0F6Hu9tf+F81XZDaV9Q7kCm2fMhlPdG1s2Zt
KOBgK1ewHoJYiYzpOQ/Td0imjbT1bOvEo0zrOx9MaK0ewlc/59W8CLMZUVBv00IQ
P2iL1WTexuso3ovNSXwFLxs9TZYmniSAeLELNb1nYgpQ4v3uabjvhTQ5u2l5f1zX
F3FlOERkBUr+EOo+sO5nrXiV7daykub2X5aWIzEEbse7g6I2JkQKQ56pe1kXq46X
EKWR+V1tqcfY+14p/a032KxdbBsXuxAM24UZW0iVdfbnqziF3jdwnp+8
-----END CERTIFICATE-----
Generated at Mon Oct 26 19:32:17 2026 by rpki-client