Error: rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
File:                     2qhy_5oERGtxio2fR1VL-lgbOg4.mft (raw, json)
Hash identifier:          zYId6BbnJEdBI+kgyApS2BfqwqIGIXlvBxEC/nB0WBc=
Subject key identifier:   E7:9A:13:A9:D0:5E:BF:EE:A5:24:15:85:81:0D:BB:0E:8C:E0:88:A6
Authority key identifier: DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E
Certificate issuer:       /CN=F362793FAF/serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
Certificate serial:       02EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
Manifest number:          02DB
Signing time:             Thu 08 Oct 2026 04:36:48 +0000
Manifest this update:     Thu 08 Oct 2026 04:36:47 +0000
Manifest next update:     Sat 10 Oct 2026 04:36:47 +0000
Files and hashes:         1: 2qhy_5oERGtxio2fR1VL-lgbOg4.crl (hash: 5lWv7BK7fwMiGfueIzWsPN9UxhjjPtRMtQpIjqHHq5o=)
                          2: 7D874958B87D11EFB3643257762E951A.roa (hash: onul5/YLBBz+YGmXUqj+3gM9pVUef26/bXQij1jV9rY=)
                          3: 3D775376B87D11EFAB4FF956762E951A.roa (hash: b6euF38rD57vl3/+UQug0tSlMLOGy1TjPgA9WLcJx/k=)
                          4: 5A3BE2FAB87E11EF981C545D762E951A.roa (hash: iiNCcB7diX0XVv+jA4F51IRnj9i5QGDFj/H4TV2LPnA=)
                          5: 8BF912DCB8C311EFBA768387762E951A.roa (hash: 4MzJryMeE1qGlBnjDKdwaAv93aYiFWEXltRxjKpruGs=)
                          6: 378108EEB87E11EF81427D5B762E951A.roa (hash: pvxHcsYPa0Lv9jDaQ8hW3DYwerAD0pRgtEnW8FTTQOg=)
                          7: B3D4A0FAB87D11EF99011259762E951A.roa (hash: pJknO3SfyaIF7Mf7TXt63Y5B2q/zY499L4XbyGAJGWw=)
                          8: 5C024D8CB87D11EFB7C42257762E951A.roa (hash: NFBzy2Yi/mXJiGIrYLnb6yECZlLOSbsf4t2bOiNIZd8=)
                          9: 98F59802B87D11EFBDAE0659762E951A.roa (hash: McIOupeXZ3ZuHvVifTjAnpDUlUDytTyutBT9QiQDcHw=)
                          10: FC601FE8B87D11EFB11B5D5B762E951A.roa (hash: kMhymzWCs2TuT+6gLYGn8unjH29vHiUNHpcIxz2N4+Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 751 (0x2ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362793FAF, serialNumber=DAA872FF9A04446B718A8D9F47554BFA581B3A0E
        Validity
            Not Before: Oct  8 04:36:47 2026 GMT
            Not After : Oct 10 04:36:47 2026 GMT
        Subject: CN=6ac71ddf-895b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:fa:b7:10:fd:48:72:a5:25:88:40:81:60:
                    72:f6:73:b1:55:c0:77:56:ad:30:fc:d0:5a:49:79:
                    d5:da:f9:7f:a1:b9:9c:29:96:cf:9b:33:cf:c1:b5:
                    67:0f:f8:69:87:07:b3:39:35:53:91:27:7e:89:f9:
                    d2:7c:9a:e9:9e:c1:7e:fa:4b:68:24:53:61:f7:f3:
                    18:47:c8:d1:cb:bb:18:c2:4a:82:99:0d:1c:cc:ee:
                    b6:e5:5f:7b:98:e3:b7:51:58:83:f2:97:bb:20:28:
                    b0:58:79:1c:d5:f6:96:69:17:b1:04:a3:f1:ac:17:
                    9b:16:dc:e4:17:84:5f:1b:99:71:45:67:2b:4b:c7:
                    8b:07:af:94:85:40:0c:07:03:10:2a:64:34:e2:86:
                    52:15:f2:7c:71:39:e0:d2:08:5c:c1:c6:f1:0c:15:
                    7c:58:89:a7:e8:a0:50:45:e1:d7:22:4f:b7:da:24:
                    f8:10:bf:c6:1d:ff:a8:9b:fd:36:f8:29:47:8f:65:
                    7b:db:7f:e0:1f:9d:03:95:13:d4:78:34:f7:97:f6:
                    dd:d5:27:a9:c2:30:dc:29:1a:08:10:88:47:8e:0a:
                    5d:fd:2f:57:15:e4:7f:b9:31:9f:e6:78:ec:a0:36:
                    08:1b:21:c8:a9:74:31:16:8e:5d:5b:13:13:21:f0:
                    bb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9A:13:A9:D0:5E:BF:EE:A5:24:15:85:81:0D:BB:0E:8C:E0:88:A6
            X509v3 Authority Key Identifier:
                keyid:DA:A8:72:FF:9A:04:44:6B:71:8A:8D:9F:47:55:4B:FA:58:1B:3A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2qhy_5oERGtxio2fR1VL-lgbOg4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362793F/065D4DBAA64311EF8B4D3E8B762E951A/2qhy_5oERGtxio2fR1VL-lgbOg4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c4:97:ac:4f:9c:5b:33:66:78:ed:89:fc:74:92:c3:c5:df:
         6d:07:00:6e:ed:7c:38:1c:ad:cb:0b:3b:f1:99:5b:27:bb:5e:
         58:9b:c3:37:2d:c2:85:b6:a0:e4:82:0f:22:1a:74:00:64:6b:
         ac:51:8d:f0:82:dc:97:16:36:d6:17:b9:b2:49:4a:5f:54:24:
         a2:c2:5f:c8:76:d5:64:88:9c:6c:3b:d8:36:b5:1c:41:b9:bf:
         e9:5d:a4:04:2a:28:15:ed:eb:bf:83:d5:95:7b:9f:a9:ec:3e:
         29:94:78:4f:c2:c3:03:97:da:4b:d8:d5:6e:f7:62:5a:d6:c7:
         c1:9b:16:a4:b8:ee:d5:f0:33:2a:91:46:7e:84:c7:02:c8:10:
         1a:2e:0f:a3:58:e6:c2:d1:f5:eb:7b:15:8c:b8:22:6d:2e:af:
         0b:ed:a4:ab:3c:58:4f:b7:c6:d9:10:5a:ea:ae:74:ae:34:92:
         00:52:d0:90:6f:45:f6:b4:bd:48:74:04:6c:e7:96:f8:a0:d4:
         47:20:58:f0:f6:c9:1c:a0:49:27:72:90:78:a6:c9:0b:0b:57:
         b2:0c:f2:03:79:f3:84:a2:6c:e4:59:b0:03:cf:5d:33:86:f4:
         a7:a1:4f:81:9f:f7:5d:75:02:eb:7e:44:d2:41:ff:e5:22:09:
         7a:3a:88:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAu8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mjc5M0ZBRjExMC8GA1UEBRMoREFBODcyRkY5QTA0NDQ2QjcxOEE4RDlGNDc1NTRC
RkE1ODFCM0EwRTAeFw0yNjEwMDgwNDM2NDdaFw0yNjEwMTAwNDM2NDdaMBgxFjAU
BgNVBAMTDTZhYzcxZGRmLTg5NWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC64fq3EP1IcqUliECBYHL2c7FVwHdWrTD80FpJedXa+X+huZwpls+bM8/B
tWcP+GmHB7M5NVORJ36J+dJ8mumewX76S2gkU2H38xhHyNHLuxjCSoKZDRzM7rbl
X3uY47dRWIPyl7sgKLBYeRzV9pZpF7EEo/GsF5sW3OQXhF8bmXFFZytLx4sHr5SF
QAwHAxAqZDTihlIV8nxxOeDSCFzBxvEMFXxYiafooFBF4dciT7faJPgQv8Yd/6ib
/Tb4KUePZXvbf+AfnQOVE9R4NPeX9t3VJ6nCMNwpGggQiEeOCl39L1cV5H+5MZ/m
eOygNggbIcipdDEWjl1bExMh8Lv7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU55oT
qdBev+6lJBWFgQ27DozgiKYwHwYDVR0jBBgwFoAU2qhy/5oERGtxio2fR1VL+lgb
Og4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3OTNGLzA2NUQ0REJBQTY0MzExRUY4QjREM0U4Qjc2MkU5NTFBLzJxaHlf
NW9FUkd0eGlvMmZSMVZMLWxnYk9nNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJxaHlfNW9FUkd0eGlvMmZSMVZMLWxnYk9nNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mjc5M0YvMDY1RDREQkFBNjQzMTFFRjhCNEQzRThCNzYy
RTk1MUEvMnFoeV81b0VSR3R4aW8yZlIxVkwtbGdiT2c0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfxJesT5xbM2Z47Yn8dJLDxd9tBwBu
7Xw4HK3LCzvxmVsnu15Ym8M3LcKFtqDkgg8iGnQAZGusUY3wgtyXFjbWF7mySUpf
VCSiwl/IdtVkiJxsO9g2tRxBub/pXaQEKigV7eu/g9WVe5+p7D4plHhPwsMDl9pL
2NVu92Ja1sfBmxakuO7V8DMqkUZ+hMcCyBAaLg+jWObC0fXrexWMuCJtLq8L7aSr
PFhPt8bZEFrqrnSuNJIAUtCQb0X2tL1IdARs55b4oNRHIFjw9skcoEkncpB4pskL
C1eyDPIDefOEomzkWbADz10zhvSnoU+Bn/dddQLrfkTSQf/lIgl6OojL
-----END CERTIFICATE-----
Generated at Thu Oct 8 11:32:11 2026 by rpki-client