Error: rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
File:                     W6sl6CIJkNVzzHXHuaKwqb9142A.mft (raw, json)
Hash identifier:          cD3voOo386Ry28oyXKwzdzOK9Sk3K9AY9UfKc/6bmsY=
Subject key identifier:   44:D3:2E:04:6D:E1:7B:14:82:56:45:2B:79:EC:3F:AE:2F:E9:59:93
Authority key identifier: 5B:AB:25:E8:22:09:90:D5:73:CC:75:C7:B9:A2:B0:A9:BF:75:E3:60
Certificate issuer:       /CN=F3618F6DAF/serialNumber=5BAB25E8220990D573CC75C7B9A2B0A9BF75E360
Certificate serial:       088A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/W6sl6CIJkNVzzHXHuaKwqb9142A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
Manifest number:          0889
Signing time:             Sun 04 Oct 2026 01:56:00 +0000
Manifest this update:     Sun 04 Oct 2026 01:56:00 +0000
Manifest next update:     Tue 06 Oct 2026 01:56:00 +0000
Files and hashes:         1: W6sl6CIJkNVzzHXHuaKwqb9142A.crl (hash: EqqXG27k2IO7Jvq9aBOOD1Dju5M2DB1Okz4aXqZ/lJo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/W6sl6CIJkNVzzHXHuaKwqb9142A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618F6DAF, serialNumber=5BAB25E8220990D573CC75C7B9A2B0A9BF75E360
        Validity
            Not Before: Oct  4 01:56:00 2026 GMT
            Not After : Oct  6 01:56:00 2026 GMT
        Subject: CN=6ac1b230-8912
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:08:d6:ae:45:dd:26:ac:00:0f:ff:24:1d:
                    ae:27:18:bc:67:ec:85:25:d2:d9:14:c7:8b:3b:07:
                    03:7c:ed:31:10:20:5c:bb:5c:17:94:02:a6:86:ed:
                    7c:78:e3:1d:17:39:c3:b9:45:62:4a:42:6d:58:fa:
                    14:d7:87:38:ca:95:4c:b5:a7:85:48:d6:9d:3d:28:
                    06:ef:b0:8e:89:0b:e1:3f:3a:4c:1e:1a:c6:a5:48:
                    d8:0a:89:13:2d:d8:83:0b:f7:6f:e9:0f:2c:79:fa:
                    3f:f2:d5:e9:9f:16:2e:02:88:61:b1:03:ad:82:54:
                    49:62:1f:64:6f:91:5c:b5:71:1f:8f:fa:55:c5:a7:
                    b7:ca:99:d9:87:9d:aa:27:e2:3d:ca:75:fe:92:d6:
                    17:59:63:59:84:39:08:b7:86:51:e0:e6:1e:ab:b0:
                    57:27:29:8e:6a:72:5e:78:8b:e0:de:d9:2c:44:de:
                    ce:09:dd:2a:c5:f4:6b:d0:32:da:1e:45:b8:50:8e:
                    f5:8c:2e:6f:32:63:b1:78:7c:ea:14:02:ea:35:5e:
                    79:2a:91:ab:b2:62:05:44:29:c4:62:92:0f:54:65:
                    1f:51:1b:39:42:bd:a9:d7:9e:10:ee:b8:3e:a8:19:
                    bb:c4:47:82:ed:88:8c:c7:67:46:f9:d6:f4:90:66:
                    22:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D3:2E:04:6D:E1:7B:14:82:56:45:2B:79:EC:3F:AE:2F:E9:59:93
            X509v3 Authority Key Identifier:
                keyid:5B:AB:25:E8:22:09:90:D5:73:CC:75:C7:B9:A2:B0:A9:BF:75:E3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W6sl6CIJkNVzzHXHuaKwqb9142A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7d:7b:9d:b5:57:35:08:ee:ed:db:69:3f:f2:73:77:c3:86:
         f0:e0:79:f3:8d:8d:ea:fe:15:39:1b:d7:29:d5:6b:d8:56:94:
         11:eb:b6:f3:36:26:07:5a:20:28:c8:4a:70:3d:d2:e5:56:3f:
         78:51:78:6d:a9:8a:5c:8b:43:9d:6a:ba:25:eb:d9:7a:c6:f4:
         36:83:84:2e:26:47:9a:e1:1a:73:ff:90:57:2b:bf:8f:76:18:
         c6:df:d0:2b:87:0a:2b:16:a1:5b:5e:b8:17:a1:c9:6d:6c:7e:
         ba:c3:3a:87:c4:2c:94:8a:98:0c:bf:4d:ee:f2:8c:3e:51:75:
         c4:09:86:e4:39:2e:07:d1:dd:54:ca:38:9c:3c:23:4e:d7:71:
         60:63:b1:04:e8:c8:77:1f:39:90:e8:56:f3:26:15:ab:93:70:
         63:1b:2d:63:2c:36:ce:87:db:ce:92:c5:25:5a:1c:1d:43:61:
         32:79:f7:41:94:03:86:ca:d6:69:7b:a3:52:64:b8:53:e4:7b:
         ce:ea:1e:f7:fd:ff:6f:9f:74:4f:0b:5b:05:31:17:a4:0f:2f:
         08:fc:fa:25:88:c8:ea:47:d8:7a:7e:ff:2b:7b:e5:54:08:16:
         8c:21:7b:88:6f:a3:91:36:68:5c:cf:37:e1:74:58:c7:dc:86:
         7f:4f:4d:be
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCIowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MThGNkRBRjExMC8GA1UEBRMoNUJBQjI1RTgyMjA5OTBENTczQ0M3NUM3QjlBMkIw
QTlCRjc1RTM2MDAeFw0yNjEwMDQwMTU2MDBaFw0yNjEwMDYwMTU2MDBaMBgxFjAU
BgNVBAMTDTZhYzFiMjMwLTg5MTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCxPQjWrkXdJqwAD/8kHa4nGLxn7IUl0tkUx4s7BwN87TEQIFy7XBeUAqaG
7Xx44x0XOcO5RWJKQm1Y+hTXhzjKlUy1p4VI1p09KAbvsI6JC+E/OkweGsalSNgK
iRMt2IML92/pDyx5+j/y1emfFi4CiGGxA62CVEliH2RvkVy1cR+P+lXFp7fKmdmH
naon4j3Kdf6S1hdZY1mEOQi3hlHg5h6rsFcnKY5qcl54i+De2SxE3s4J3SrF9GvQ
MtoeRbhQjvWMLm8yY7F4fOoUAuo1XnkqkauyYgVEKcRikg9UZR9RGzlCvanXnhDu
uD6oGbvER4LtiIzHZ0b51vSQZiKpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURNMu
BG3hexSCVkUreew/ri/pWZMwHwYDVR0jBBgwFoAUW6sl6CIJkNVzzHXHuaKwqb91
42AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE4RjZEL0VGNjgyOTY4MzJFQzExRUI4ODdGQkMzQkY4QUVBMjI4L1c2c2w2
Q0lKa05WenpIWEh1YUt3cWI5MTQyQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1c2c2w2Q0lKa05WenpIWEh1YUt3cWI5MTQyQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MThGNkQvRUY2ODI5NjgzMkVDMTFFQjg4N0ZCQzNCRjhB
RUEyMjgvVzZzbDZDSUprTlZ6ekhYSHVhS3dxYjkxNDJBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAifXudtVc1CO7t22k/8nN3w4bw4Hnz
jY3q/hU5G9cp1WvYVpQR67bzNiYHWiAoyEpwPdLlVj94UXhtqYpci0Odarol69l6
xvQ2g4QuJkea4Rpz/5BXK7+PdhjG39ArhworFqFbXrgXocltbH66wzqHxCyUipgM
v03u8ow+UXXECYbkOS4H0d1UyjicPCNO13FgY7EE6Mh3HzmQ6FbzJhWrk3BjGy1j
LDbOh9vOksUlWhwdQ2EyefdBlAOGytZpe6NSZLhT5HvO6h73/f9vn3RPC1sFMRek
Dy8I/PoliMjqR9h6fv8re+VUCBaMIXuIb6ORNmhczzfhdFjH3IZ/T02+
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:19:38 2026 by rpki-client