Error: rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
File:                     snY9UExa-ft12a62ByQi-Hoaa_Y.mft (raw, json)
Hash identifier:          ihimAelsOHHQ3IvmsFmwcewyNU4DZ6V6JZ99Y1ojH7w=
Subject key identifier:   D6:4F:27:C5:B0:46:78:C5:99:58:F8:30:98:F5:5F:99:AB:69:82:7A
Authority key identifier: B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6
Certificate issuer:       /CN=F36FC75CAF/serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
Certificate serial:       02E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
Manifest number:          02E3
Signing time:             Tue 27 Oct 2026 04:35:23 +0000
Manifest this update:     Tue 27 Oct 2026 04:35:22 +0000
Manifest next update:     Thu 29 Oct 2026 04:35:22 +0000
Files and hashes:         1: snY9UExa-ft12a62ByQi-Hoaa_Y.crl (hash: CDe60l1n00D6U9EWMZ0WSfGLTcDgZHk5hqKQtIdI6Mk=)
                          2: 2836E3E2983811EFB48AAD6F762E951A.roa (hash: ilc1+7HG6/OhpNZjczTeMOkT7vcZALpZGaGEFuomW1E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC75CAF, serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
        Validity
            Not Before: Oct 27 04:35:22 2026 GMT
            Not After : Oct 29 04:35:22 2026 GMT
        Subject: CN=6ae02a0a-c86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:cf:a9:fe:43:11:c5:38:2f:7c:ee:66:86:
                    a2:03:c3:6c:26:dd:f3:83:0f:f3:5b:25:d7:7f:4e:
                    cd:33:c2:b8:0a:bb:ac:2a:e5:7f:e1:b4:25:46:70:
                    d6:82:3e:83:6c:1e:d4:ac:81:32:35:75:e2:e8:4e:
                    4c:9b:9b:9d:1e:10:2b:66:9e:89:14:a8:bc:54:c6:
                    2b:c1:cf:a8:59:ee:26:0e:65:9b:bb:e5:2b:81:40:
                    44:41:1d:00:95:b6:c8:06:dc:ef:e8:35:9b:23:76:
                    fe:5f:2a:fa:39:a8:35:69:77:9c:fe:5d:96:72:b8:
                    32:7b:24:22:84:69:eb:02:65:80:6a:df:85:e8:b0:
                    86:83:8d:64:af:96:e8:49:1b:77:b8:c7:31:a5:3f:
                    bb:80:17:e2:4e:72:9c:15:d7:1f:a1:83:11:19:b7:
                    14:1e:e7:1b:38:05:ba:cc:32:ff:dd:73:27:bf:70:
                    70:55:94:be:08:e8:fc:cd:54:ed:a7:bf:d1:0f:1a:
                    42:34:f5:c2:ca:80:86:96:8b:8f:46:15:28:36:57:
                    e8:2d:14:12:71:c7:5e:bc:0c:59:02:d9:b9:6e:ae:
                    ff:cc:6a:92:a2:4a:55:25:e0:c4:1d:a1:b3:8f:80:
                    81:1c:5b:49:99:79:59:cc:f4:19:d9:9c:aa:f0:4e:
                    e6:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4F:27:C5:B0:46:78:C5:99:58:F8:30:98:F5:5F:99:AB:69:82:7A
            X509v3 Authority Key Identifier:
                keyid:B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:0d:8e:31:67:7f:b0:15:24:a9:0c:a9:a1:a0:e3:99:c4:e5:
         b4:4f:c9:0e:8b:03:58:96:56:f2:f7:ff:6a:4d:31:43:f4:37:
         51:36:40:7d:c4:dc:16:de:5a:9f:cf:3c:b2:14:9e:8e:40:f7:
         b2:dd:27:98:f3:74:58:84:fe:ea:f4:d6:5e:b8:ac:7e:eb:1a:
         1e:ee:e1:d9:72:00:f6:35:56:27:ab:51:a4:a8:64:f1:55:1b:
         78:57:85:42:3d:c1:a5:d4:90:96:29:3c:87:1d:5c:84:81:06:
         88:1e:88:c0:44:77:b0:6b:76:91:bc:ca:ed:dd:a1:87:62:f3:
         42:a7:f7:f3:62:21:8e:cf:40:73:18:f8:76:6c:e7:8f:9c:f2:
         6b:98:8a:00:b1:4f:06:38:ba:39:7d:c6:ab:9d:ec:45:bd:b2:
         c6:5c:de:d0:3b:83:3d:1b:26:bb:ed:0d:1e:ab:93:e8:d6:b1:
         f7:9a:ad:4e:63:b7:40:78:16:8f:27:1b:bc:65:19:ca:7f:6f:
         05:47:4e:5a:7c:1b:16:e7:22:c5:1c:5c:11:d3:13:39:6a:34:
         6b:c1:1e:c3:57:b0:98:83:81:a6:1c:6a:2c:cf:5b:47:d1:1c:
         91:d0:7c:a4:d7:f1:22:ad:fe:ef:79:97:30:6b:cf:e6:29:f8:
         37:b1:e9:99
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAuQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkM3NUNBRjExMC8GA1UEBRMoQjI3NjNENTA0QzVBRjlGQjc1RDlBRUI2MDcyNDIy
Rjg3QTFBNkJGNjAeFw0yNjEwMjcwNDM1MjJaFw0yNjEwMjkwNDM1MjJaMBgxFjAU
BgNVBAMTDTZhZTAyYTBhLWM4NmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/U8+p/kMRxTgvfO5mhqIDw2wm3fODD/NbJdd/Ts0zwrgKu6wq5X/htCVG
cNaCPoNsHtSsgTI1deLoTkybm50eECtmnokUqLxUxivBz6hZ7iYOZZu75SuBQERB
HQCVtsgG3O/oNZsjdv5fKvo5qDVpd5z+XZZyuDJ7JCKEaesCZYBq34XosIaDjWSv
luhJG3e4xzGlP7uAF+JOcpwV1x+hgxEZtxQe5xs4BbrMMv/dcye/cHBVlL4I6PzN
VO2nv9EPGkI09cLKgIaWi49GFSg2V+gtFBJxx168DFkC2blurv/MapKiSlUl4MQd
obOPgIEcW0mZeVnM9BnZnKrwTuZDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1k8n
xbBGeMWZWPgwmPVfmatpgnowHwYDVR0jBBgwFoAUsnY9UExa+ft12a62ByQi+Hoa
a/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDNzVDLzlFMTRCNUJFOTgzNjExRUZCOTdCRDE2NDc2MkU5NTFBL3NuWTlV
RXhhLWZ0MTJhNjJCeVFpLUhvYWFfWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NuWTlVRXhhLWZ0MTJhNjJCeVFpLUhvYWFfWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkM3NUMvOUUxNEI1QkU5ODM2MTFFRkI5N0JEMTY0NzYy
RTk1MUEvc25ZOVVFeGEtZnQxMmE2MkJ5UWktSG9hYV9ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXDY4xZ3+wFSSpDKmhoOOZxOW0T8kO
iwNYllby9/9qTTFD9DdRNkB9xNwW3lqfzzyyFJ6OQPey3SeY83RYhP7q9NZeuKx+
6xoe7uHZcgD2NVYnq1GkqGTxVRt4V4VCPcGl1JCWKTyHHVyEgQaIHojARHewa3aR
vMrt3aGHYvNCp/fzYiGOz0BzGPh2bOePnPJrmIoAsU8GOLo5fcarnexFvbLGXN7Q
O4M9Gya77Q0eq5Po1rH3mq1OY7dAeBaPJxu8ZRnKf28FR05afBsW5yLFHFwR0xM5
ajRrwR7DV7CYg4GmHGosz1tH0RyR0Hyk1/Eirf7veZcwa8/mKfg3semZ
-----END CERTIFICATE-----
Generated at Tue Oct 27 09:25:32 2026 by rpki-client