Error: rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
File:                     GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft (raw, json)
Hash identifier:          pVATmUemO0hX2isA1L9g5e3vDkVjqnZcoezswbNq6EE=
Subject key identifier:   BD:0C:28:92:6C:1F:D8:90:A1:E8:62:B6:22:F2:FE:B0:0E:A8:D1:D4
Authority key identifier: 19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B
Certificate issuer:       /CN=F361935CAF/serialNumber=190945C50473976873EF254B4FA833BC31D9484B
Certificate serial:       065E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
Manifest number:          0659
Signing time:             Sun 11 Oct 2026 02:47:44 +0000
Manifest this update:     Sun 11 Oct 2026 02:47:44 +0000
Manifest next update:     Tue 13 Oct 2026 02:47:44 +0000
Files and hashes:         1: GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl (hash: K7WBT9aZq349X9Iw0rZXCajlNaJkzhFunkCaEJo2ZcU=)
                          2: F31DBFBA898411F1B4E85704CF1D38B0.roa (hash: 8PMDISLlU/TEBQnSnCiE3EbThwDUph7JmIcnQ4JcjVQ=)
                          3: 6B5534A2AFC311EE8606D196775412E6.roa (hash: pIBKsEr+yaxrxYpVZ5L4+xtRFFmaKt0HvuP5/hnszHs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1630 (0x65e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361935CAF, serialNumber=190945C50473976873EF254B4FA833BC31D9484B
        Validity
            Not Before: Oct 11 02:47:44 2026 GMT
            Not After : Oct 13 02:47:44 2026 GMT
        Subject: CN=6acaf8d0-efa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:26:78:46:13:0c:c1:5f:e9:ba:bd:1b:e4:25:
                    38:04:f7:a6:8a:c1:e3:ac:3d:3d:7d:f2:13:54:da:
                    a5:f6:48:40:49:06:a0:21:ff:9b:15:e0:55:1b:f9:
                    44:3d:3d:65:f8:cc:0b:16:4e:e1:be:69:29:a9:48:
                    49:2d:f6:f5:02:c4:34:42:5c:df:95:2a:82:b4:f4:
                    70:23:69:ac:75:70:65:f4:da:29:33:d1:93:54:17:
                    2e:1c:31:8b:cf:6b:ea:1a:2f:07:e3:61:f1:35:68:
                    10:c2:d4:77:be:74:f1:06:8b:a7:2e:f9:99:87:56:
                    8c:d2:6f:5f:d4:88:74:d6:ce:0a:36:64:a3:f7:21:
                    2f:89:56:d9:0d:0f:63:ce:b1:bc:42:ed:b2:a1:5d:
                    ee:5f:80:f4:bf:80:e7:62:23:f3:55:2d:9d:fd:25:
                    1a:7e:80:af:65:ba:14:0b:f6:b2:35:03:4d:d5:98:
                    ab:58:e3:87:94:57:20:96:81:a7:17:52:3d:fe:ba:
                    af:e2:a1:4f:85:ca:7e:8f:73:3b:36:e1:47:e1:85:
                    50:9d:06:7f:7e:fc:e0:b6:c6:5f:11:b1:b9:3b:ef:
                    22:c2:5b:89:e2:da:13:82:39:2a:65:bf:92:76:14:
                    e2:04:1f:87:cf:6f:42:67:95:c0:b1:ac:02:b7:4e:
                    44:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:0C:28:92:6C:1F:D8:90:A1:E8:62:B6:22:F2:FE:B0:0E:A8:D1:D4
            X509v3 Authority Key Identifier:
                keyid:19:09:45:C5:04:73:97:68:73:EF:25:4B:4F:A8:33:BC:31:D9:48:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GQlFxQRzl2hz7yVLT6gzvDHZSEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361935C/21C9348AEF0011ECB389E5A1F1222468/GQlFxQRzl2hz7yVLT6gzvDHZSEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e9:98:0e:a2:ff:10:14:65:79:bc:37:fd:8e:c7:2a:42:10:
         40:3a:42:0f:ce:2d:5b:4a:45:21:e6:b6:5e:04:a2:6b:4f:7e:
         0d:c5:f7:87:8f:a7:ed:76:77:51:da:c7:ed:b8:59:4c:95:d0:
         69:28:30:15:bf:e3:e2:0b:0c:01:08:31:eb:40:88:3c:75:e4:
         4b:da:f7:be:89:3b:fe:9b:1c:13:0e:74:e7:7c:0e:91:e2:d3:
         06:a1:91:f7:b2:85:7e:55:1e:59:25:93:13:df:f9:ab:f7:2f:
         f5:d5:4b:5a:0c:a0:28:b6:a9:6e:77:40:1e:9c:50:d7:28:da:
         73:27:55:8a:57:e2:5e:56:b7:da:94:38:56:88:a9:14:b9:e5:
         0c:bf:b8:95:be:e6:ce:81:f2:4c:b1:98:92:ba:0c:56:6e:80:
         b3:13:5f:b1:08:0c:30:49:99:8f:fd:30:da:2a:30:fb:ea:76:
         ac:0d:1e:82:63:7c:62:26:f0:e8:06:d6:8e:6a:ce:3d:fd:79:
         5c:5c:36:66:ee:21:30:9a:fd:4b:90:e4:be:5c:73:f2:d4:3e:
         df:ce:47:cf:1c:f9:7d:fa:25:31:6c:69:5a:b9:c5:20:a4:02:
         c2:fd:90:70:5c:ba:46:01:a2:a9:e3:53:b4:5d:d6:88:58:21:
         a8:1f:47:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBl4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTkzNUNBRjExMC8GA1UEBRMoMTkwOTQ1QzUwNDczOTc2ODczRUYyNTRCNEZBODMz
QkMzMUQ5NDg0QjAeFw0yNjEwMTEwMjQ3NDRaFw0yNjEwMTMwMjQ3NDRaMBgxFjAU
BgNVBAMTDTZhY2FmOGQwLWVmYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbJnhGEwzBX+m6vRvkJTgE96aKweOsPT198hNU2qX2SEBJBqAh/5sV4FUb
+UQ9PWX4zAsWTuG+aSmpSEkt9vUCxDRCXN+VKoK09HAjaax1cGX02ikz0ZNUFy4c
MYvPa+oaLwfjYfE1aBDC1He+dPEGi6cu+ZmHVozSb1/UiHTWzgo2ZKP3IS+JVtkN
D2POsbxC7bKhXe5fgPS/gOdiI/NVLZ39JRp+gK9luhQL9rI1A03VmKtY44eUVyCW
gacXUj3+uq/ioU+Fyn6Pczs24UfhhVCdBn9+/OC2xl8Rsbk77yLCW4ni2hOCOSpl
v5J2FOIEH4fPb0JnlcCxrAK3TkSlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvQwo
kmwf2JCh6GK2IvL+sA6o0dQwHwYDVR0jBBgwFoAUGQlFxQRzl2hz7yVLT6gzvDHZ
SEswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5MzVDLzIxQzkzNDhBRUYwMDExRUNCMzg5RTVBMUYxMjIyNDY4L0dRbEZ4
UVJ6bDJoejd5VkxUNmd6dkRIWlNFcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dRbEZ4UVJ6bDJoejd5VkxUNmd6dkRIWlNFcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTkzNUMvMjFDOTM0OEFFRjAwMTFFQ0IzODlFNUExRjEy
MjI0NjgvR1FsRnhRUnpsMmh6N3lWTFQ2Z3p2REhaU0VzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB06ZgOov8QFGV5vDf9jscqQhBAOkIP
zi1bSkUh5rZeBKJrT34NxfeHj6ftdndR2sftuFlMldBpKDAVv+PiCwwBCDHrQIg8
deRL2ve+iTv+mxwTDnTnfA6R4tMGoZH3soV+VR5ZJZMT3/mr9y/11UtaDKAotqlu
d0AenFDXKNpzJ1WKV+JeVrfalDhWiKkUueUMv7iVvubOgfJMsZiSugxWboCzE1+x
CAwwSZmP/TDaKjD76nasDR6CY3xiJvDoBtaOas49/XlcXDZm7iEwmv1LkOS+XHPy
1D7fzkfPHPl9+iUxbGlaucUgpALC/ZBwXLpGAaKp41O0XdaIWCGoH0dL
-----END CERTIFICATE-----
Generated at Sun Oct 11 21:10:15 2026 by rpki-client