Error: rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          Zqque4kkeq3cQj070Dp+X2U3xFNIP9qVP4ZNXrZ8bVc=
Subject key identifier:   06:CD:A3:06:7F:3D:1A:FB:45:46:56:AB:58:D6:F6:1D:5B:A4:6D:B0
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       0486
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          0485
Signing time:             Sat 24 Oct 2026 03:44:47 +0000
Manifest this update:     Sat 24 Oct 2026 03:44:47 +0000
Manifest next update:     Mon 26 Oct 2026 03:44:47 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: 5Mvmo/U/9KNtQxIA9+sxXLH7yS0EZXwconKCcxXeKF0=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158 (0x486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF, serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
        Validity
            Not Before: Oct 24 03:44:47 2026 GMT
            Not After : Oct 26 03:44:47 2026 GMT
        Subject: CN=6adc29af-1588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f4:ff:ea:e7:fc:ae:93:dd:36:8b:3b:a9:d2:
                    b1:f0:ee:7e:6f:37:a8:05:1f:65:13:74:0f:19:4b:
                    9f:4a:6b:34:ac:88:9c:da:11:b9:55:cf:38:2f:c2:
                    e6:96:48:eb:7c:53:56:2b:ce:e0:fa:2e:04:8a:ae:
                    f4:16:2e:34:9c:e7:7f:75:bd:4f:74:64:74:ea:a6:
                    33:04:8a:00:fd:cc:e3:67:40:f7:7d:1f:bd:c5:db:
                    cb:a4:99:45:a0:17:f0:17:98:80:2d:28:a2:3a:1a:
                    0a:e0:6e:db:4a:5b:ea:a5:7f:3b:1a:bf:6c:a0:78:
                    6b:f4:19:3d:e9:58:d3:3f:ef:7c:08:85:5a:6f:82:
                    20:93:e3:73:f7:75:64:5a:38:ed:0b:23:97:51:20:
                    57:b2:8c:5e:f5:1b:d3:2a:4e:c3:b7:d1:9d:d2:c7:
                    90:02:d7:ba:4b:0c:3d:56:9e:b5:e5:62:ad:26:00:
                    10:93:2e:c0:2d:f1:d9:d5:7b:47:70:60:55:ca:4d:
                    da:47:e6:f2:89:b2:cc:d3:f4:44:c5:90:c8:c4:d5:
                    53:ec:3c:ac:de:47:ce:c3:c1:96:69:d5:1c:f5:52:
                    70:dd:e5:b0:4f:ff:0d:75:37:60:d9:d6:1c:46:2a:
                    d3:8c:cc:dc:e9:2e:c9:e9:05:bd:97:e0:a2:27:f6:
                    83:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CD:A3:06:7F:3D:1A:FB:45:46:56:AB:58:D6:F6:1D:5B:A4:6D:B0
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b7:31:b1:6c:f1:09:61:0d:52:fa:ce:cc:9c:15:56:99:87:
         ef:e0:7c:99:2e:9f:b3:5b:70:d0:bc:02:09:2f:2d:87:a4:bf:
         af:70:02:c8:94:f4:7d:26:22:2a:ee:04:3b:0c:d7:82:9b:fc:
         31:7e:5e:3f:6e:a9:a4:4c:92:41:00:c0:91:fc:3e:2b:44:e2:
         b7:3d:9f:a9:06:37:82:97:03:b8:f2:a0:e4:f4:02:87:b3:bc:
         2b:87:2c:9b:32:72:67:c8:d3:66:a0:ec:61:fe:ce:5c:a0:9b:
         e7:29:36:0a:4d:9d:d7:09:d7:42:08:da:9c:47:ed:7f:78:3a:
         6d:a2:47:28:89:ef:ee:87:ae:ef:3e:70:fa:e8:fc:a5:f5:df:
         a6:f7:79:6e:fd:af:dd:8e:36:15:3d:5e:89:93:96:17:51:99:
         7e:70:53:37:33:a6:fa:42:22:60:00:ad:d9:cd:d1:30:b3:ae:
         61:7a:fa:c7:5b:47:2d:76:b3:fd:e9:8b:f4:c8:a2:ea:99:f5:
         d7:62:fe:bd:4d:bc:4a:ac:5f:cb:33:00:4f:49:be:78:32:53:
         b8:f9:0c:88:1c:a7:6d:88:f9:dd:f4:c7:87:0f:34:af:de:9e:
         a1:ba:8a:2a:b0:f9:9f:35:dd:6a:de:ec:6d:18:d7:b2:dd:78:
         10:2b:50:60
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkM4QTBBRjExMC8GA1UEBRMoMkU2MEY5NjEzMTRBQTdENkZERERFRTlEQkFCMzEy
Mzc0NzA1RTZDQjAeFw0yNjEwMjQwMzQ0NDdaFw0yNjEwMjYwMzQ0NDdaMBgxFjAU
BgNVBAMTDTZhZGMyOWFmLTE1ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC49P/q5/yuk902izup0rHw7n5vN6gFH2UTdA8ZS59KazSsiJzaEblVzzgv
wuaWSOt8U1YrzuD6LgSKrvQWLjSc5391vU90ZHTqpjMEigD9zONnQPd9H73F28uk
mUWgF/AXmIAtKKI6GgrgbttKW+qlfzsav2ygeGv0GT3pWNM/73wIhVpvgiCT43P3
dWRaOO0LI5dRIFeyjF71G9MqTsO30Z3Sx5AC17pLDD1WnrXlYq0mABCTLsAt8dnV
e0dwYFXKTdpH5vKJsszT9ETFkMjE1VPsPKzeR87DwZZp1Rz1UnDd5bBP/w11N2DZ
1hxGKtOMzNzpLsnpBb2X4KIn9oOjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBs2j
Bn89GvtFRlarWNb2HVukbbAwHwYDVR0jBBgwFoAULmD5YTFKp9b93e6durMSN0cF
5sswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDOEEwL0YxMDkyNkEyNTZFNjExRUVBOTVCMjY1MzRBRDlFNkZDL0xtRDVZ
VEZLcDliOTNlNmR1ck1TTjBjRjVzcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xtRDVZVEZLcDliOTNlNmR1ck1TTjBjRjVzcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkM4QTAvRjEwOTI2QTI1NkU2MTFFRUE5NUIyNjUzNEFE
OUU2RkMvTG1ENVlURktwOWI5M2U2ZHVyTVNOMGNGNXNzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAutzGxbPEJYQ1S+s7MnBVWmYfv4HyZ
Lp+zW3DQvAIJLy2HpL+vcALIlPR9JiIq7gQ7DNeCm/wxfl4/bqmkTJJBAMCR/D4r
ROK3PZ+pBjeClwO48qDk9AKHs7wrhyybMnJnyNNmoOxh/s5coJvnKTYKTZ3XCddC
CNqcR+1/eDptokcoie/uh67vPnD66Pyl9d+m93lu/a/djjYVPV6Jk5YXUZl+cFM3
M6b6QiJgAK3ZzdEws65hevrHW0ctdrP96Yv0yKLqmfXXYv69TbxKrF/LMwBPSb54
MlO4+QyIHKdtiPnd9MeHDzSv3p6huooqsPmfNd1q3uxtGNey3XgQK1Bg
-----END CERTIFICATE-----
Generated at Sat Oct 24 17:31:27 2026 by rpki-client