Error: rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
File:                     An4aRGPGhfvWOGP507I7rC2TsWg.mft (raw, json)
Hash identifier:          FoJtmoKpz8/Ec6iwZEXiGrzrF2OcRKMxLKjzDPKw07o=
Subject key identifier:   08:46:D6:07:7C:70:38:B7:10:55:96:0C:84:73:AC:B8:CA:D2:E9:FD
Authority key identifier: 02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68
Certificate issuer:       /CN=F36252A7AF/serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
Certificate serial:       0A41
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
Manifest number:          0A3A
Signing time:             Fri 25 Sep 2026 01:36:29 +0000
Manifest this update:     Fri 25 Sep 2026 01:36:28 +0000
Manifest next update:     Sun 27 Sep 2026 01:36:28 +0000
Files and hashes:         1: An4aRGPGhfvWOGP507I7rC2TsWg.crl (hash: l3Cv2VugBeqyH+g0fx6I+SX6xLpw4CYz4wYWTWsg28U=)
                          2: B2E0450EE3A911E99D048322F8AEA228.roa (hash: 9hAcLh1dvKVs2136J7HCIPg/BmbZ3SUhxACWArab3Io=)
                          3: E9F7B7D4E3A911E9BF86B122F8AEA228.roa (hash: 9COidhiFaVCAPV0UHswnXt+QzIn+TW+J/QQrjMlznyw=)
                          4: 59BD768489A311F1BC93DDBDCE1D38B0.roa (hash: PnOZM4fziwXgFuIEH1/8SuyMNltqLTKgfJ/kcx4KdpE=)
                          5: CE979090E3A911E982D79922F8AEA228.roa (hash: ZUuGDNl5OtIqVt3JPAYRM2b5xFa0dAXmMX0QV9sXPf0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 01:36:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36252A7AF, serialNumber=027E1A4463C685FBD63863F9D3B23BAC2D93B168
        Validity
            Not Before: Sep 25 01:36:28 2026 GMT
            Not After : Sep 27 01:36:28 2026 GMT
        Subject: CN=6ab5d01c-f8b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:38:2b:f0:2e:d8:87:08:c2:73:6b:c5:c1:
                    57:eb:c4:45:12:21:d7:89:f3:73:04:fe:d5:2b:7a:
                    80:fb:0b:fd:3a:73:c4:1e:9a:76:59:15:d2:1f:f3:
                    26:db:82:ae:98:d7:6d:bf:a4:7f:d0:54:63:aa:5b:
                    d3:55:a1:1a:a5:9f:06:35:cf:03:af:34:7d:e8:d3:
                    18:d0:43:1d:d2:2c:11:d5:49:c6:a4:0b:4a:38:b7:
                    15:ff:24:d4:dc:78:dd:0b:ff:3f:16:09:f6:6e:6f:
                    02:29:46:c2:e2:15:6b:cf:63:9f:15:89:56:26:ba:
                    0d:e2:5f:e2:1c:be:0f:8a:80:ee:bd:16:17:06:79:
                    bc:63:77:f6:01:fe:11:97:4f:44:d9:de:5e:02:69:
                    00:da:78:1f:f7:40:84:bf:2b:19:bb:9e:a8:d1:92:
                    e7:25:e5:ad:38:e8:40:f7:36:6b:92:2a:78:5f:1c:
                    06:26:52:a3:fd:9a:1b:f5:8e:32:25:cc:7c:53:00:
                    d7:c0:0b:85:2c:7c:da:21:51:7b:c0:ae:19:07:8b:
                    bd:6a:db:45:62:ce:68:19:1d:b4:59:48:2d:89:5f:
                    0c:64:bd:d6:66:8b:dc:a8:2b:99:15:70:4b:47:a0:
                    80:2e:dc:fc:ee:40:52:9e:42:c1:33:8e:69:89:bc:
                    a6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:46:D6:07:7C:70:38:B7:10:55:96:0C:84:73:AC:B8:CA:D2:E9:FD
            X509v3 Authority Key Identifier:
                keyid:02:7E:1A:44:63:C6:85:FB:D6:38:63:F9:D3:B2:3B:AC:2D:93:B1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/An4aRGPGhfvWOGP507I7rC2TsWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36252A7/89497A60E38311E99E55F585F8AEA228/An4aRGPGhfvWOGP507I7rC2TsWg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:03:6c:9b:35:74:28:ef:ee:13:c6:30:cc:73:0f:03:5e:24:
         a5:23:48:49:72:7f:7c:f5:84:c3:59:0b:09:96:fb:fd:fa:0f:
         c9:b4:2b:10:cf:19:24:60:60:7c:4f:50:30:89:24:e6:98:58:
         9d:04:30:f3:d6:4b:21:3d:16:c5:80:b0:03:67:ec:3a:a3:6d:
         7f:51:e7:a2:71:72:13:19:a7:49:56:7a:f2:f2:1e:4c:3f:20:
         f9:ac:64:34:62:be:9c:be:63:80:96:54:43:13:d0:cc:50:45:
         f6:44:03:61:f5:12:8b:42:f1:a7:9e:e3:86:cb:7c:63:7c:52:
         d4:93:09:10:e8:f0:b0:4b:ca:e1:76:c7:d5:24:cf:05:fb:d4:
         9c:49:60:c1:56:ed:20:f9:68:9e:36:be:51:a6:dd:57:94:7b:
         6a:8c:1d:d7:a9:13:b4:00:4f:41:52:22:36:d9:e5:49:44:a3:
         95:c0:08:cd:e2:2a:85:5d:fd:96:af:88:5d:79:f4:57:91:63:
         2c:42:84:ac:15:1b:06:77:c5:6a:4e:db:74:59:26:4f:dc:bd:
         54:9c:5b:4d:c3:69:ec:68:a5:53:0e:82:b3:96:80:f5:7d:4d:
         2b:f8:5c:af:18:5f:55:76:4b:ae:23:d0:9f:46:43:87:7a:16:
         26:30:f0:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjUyQTdBRjExMC8GA1UEBRMoMDI3RTFBNDQ2M0M2ODVGQkQ2Mzg2M0Y5RDNCMjNC
QUMyRDkzQjE2ODAeFw0yNjA5MjUwMTM2MjhaFw0yNjA5MjcwMTM2MjhaMBgxFjAU
BgNVBAMTDTZhYjVkMDFjLWY4YjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+qDgr8C7YhwjCc2vFwVfrxEUSIdeJ83ME/tUreoD7C/06c8QemnZZFdIf
8ybbgq6Y122/pH/QVGOqW9NVoRqlnwY1zwOvNH3o0xjQQx3SLBHVScakC0o4txX/
JNTceN0L/z8WCfZubwIpRsLiFWvPY58ViVYmug3iX+Icvg+KgO69FhcGebxjd/YB
/hGXT0TZ3l4CaQDaeB/3QIS/Kxm7nqjRkucl5a046ED3NmuSKnhfHAYmUqP9mhv1
jjIlzHxTANfAC4UsfNohUXvArhkHi71q20VizmgZHbRZSC2JXwxkvdZmi9yoK5kV
cEtHoIAu3PzuQFKeQsEzjmmJvKYBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCEbW
B3xwOLcQVZYMhHOsuMrS6f0wHwYDVR0jBBgwFoAUAn4aRGPGhfvWOGP507I7rC2T
sWgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI1MkE3Lzg5NDk3QTYwRTM4MzExRTk5RTU1RjU4NUY4QUVBMjI4L0FuNGFS
R1BHaGZ2V09HUDUwN0k3ckMyVHNXZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FuNGFSR1BHaGZ2V09HUDUwN0k3ckMyVHNXZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjUyQTcvODk0OTdBNjBFMzgzMTFFOTlFNTVGNTg1RjhB
RUEyMjgvQW40YVJHUEdoZnZXT0dQNTA3STdyQzJUc1dnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNA2ybNXQo7+4TxjDMcw8DXiSlI0hJ
cn989YTDWQsJlvv9+g/JtCsQzxkkYGB8T1AwiSTmmFidBDDz1kshPRbFgLADZ+w6
o21/UeeicXITGadJVnry8h5MPyD5rGQ0Yr6cvmOAllRDE9DMUEX2RANh9RKLQvGn
nuOGy3xjfFLUkwkQ6PCwS8rhdsfVJM8F+9ScSWDBVu0g+WieNr5Rpt1XlHtqjB3X
qRO0AE9BUiI22eVJRKOVwAjN4iqFXf2Wr4hdefRXkWMsQoSsFRsGd8VqTtt0WSZP
3L1UnFtNw2nsaKVTDoKzloD1fU0r+FyvGF9VdkuuI9CfRkOHehYmMPC0
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:11:36 2026 by rpki-client