Error: rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft
File:                     Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft (raw, json)
Hash identifier:          g3AVqHpFBK+zWb3R5qk0zHh48vmzmNusi7t3qs0vjIM=
Subject key identifier:   B5:ED:42:55:93:EB:57:5D:35:9E:4A:8C:E2:18:DB:76:7A:8D:47:A7
Authority key identifier: 12:FD:0D:AB:C6:CB:1A:DD:44:21:95:27:6A:03:04:E3:E9:72:77:B1
Certificate issuer:       /CN=F36285D3AF/serialNumber=12FD0DABC6CB1ADD442195276A0304E3E97277B1
Certificate serial:       057C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ev0Nq8bLGt1EIZUnagME4-lyd7E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft
Manifest number:          057B
Signing time:             Thu 24 Sep 2026 03:08:03 +0000
Manifest this update:     Thu 24 Sep 2026 03:08:02 +0000
Manifest next update:     Sat 26 Sep 2026 03:08:02 +0000
Files and hashes:         1: Ev0Nq8bLGt1EIZUnagME4-lyd7E.crl (hash: dZrv3Fg/oYKWAIrEIpFuLvk0XUGRQ7I9MAJBoG24wiw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ev0Nq8bLGt1EIZUnagME4-lyd7E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36285D3AF, serialNumber=12FD0DABC6CB1ADD442195276A0304E3E97277B1
        Validity
            Not Before: Sep 24 03:08:02 2026 GMT
            Not After : Sep 26 03:08:02 2026 GMT
        Subject: CN=6ab49413-f630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:19:cb:9b:8b:88:46:15:2d:3c:ce:71:ca:
                    81:74:05:93:44:1f:d8:11:dd:89:20:1d:f3:10:f7:
                    e8:67:7f:8a:71:fc:6b:24:02:c9:0e:7a:25:31:21:
                    87:f4:91:bb:5f:9f:9c:e7:12:7c:e7:f2:c2:2c:29:
                    72:fa:49:e3:6f:38:1a:2b:13:8b:19:68:93:78:d8:
                    39:d0:7a:67:9b:52:78:82:5f:32:be:c9:16:f9:cf:
                    25:6f:f5:e0:2f:d4:52:65:fd:b7:ed:1f:3c:da:d7:
                    7a:ca:57:13:28:bc:59:71:5c:40:23:98:ce:c6:4b:
                    9e:c7:f8:38:ec:48:9e:7d:7c:d6:85:b5:04:65:fd:
                    3e:a6:70:9d:6f:79:ae:55:58:0a:13:68:42:a9:9c:
                    fb:53:e4:26:cc:34:ba:b4:3d:8a:73:f7:58:d1:66:
                    eb:05:12:7c:bd:5a:c8:62:b6:4c:6e:cd:c8:5f:85:
                    38:cb:76:b5:97:1f:05:5a:a8:40:2a:8b:17:19:ec:
                    23:80:85:b9:fb:76:4a:d3:3b:c3:9a:50:91:ba:34:
                    43:c1:e7:1d:bb:25:25:6c:68:af:4f:0b:ad:39:f1:
                    09:68:0b:1e:b6:ec:8b:d6:28:f6:c3:76:58:33:6c:
                    e2:19:b6:b4:62:a6:78:0b:e7:ff:90:4f:73:60:0a:
                    1e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:ED:42:55:93:EB:57:5D:35:9E:4A:8C:E2:18:DB:76:7A:8D:47:A7
            X509v3 Authority Key Identifier:
                keyid:12:FD:0D:AB:C6:CB:1A:DD:44:21:95:27:6A:03:04:E3:E9:72:77:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ev0Nq8bLGt1EIZUnagME4-lyd7E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36285D3/47B43ADC88E311ED8F1952DAF1222468/Ev0Nq8bLGt1EIZUnagME4-lyd7E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:78:43:4c:d9:ac:c4:1b:0b:98:31:8b:a8:bf:2c:a0:e3:ef:
         e8:7e:52:6d:00:ea:1a:37:c2:86:dc:a3:0d:f2:15:b1:0c:c9:
         8e:b4:3f:7b:84:d1:3d:47:30:64:a2:d3:25:4c:1e:f1:91:7d:
         84:46:b5:91:53:00:5a:4e:83:1d:db:53:bd:c0:87:c4:ce:f0:
         d4:bb:84:e2:95:df:56:88:cd:b7:c0:db:c8:6a:1c:9e:76:61:
         74:50:d6:e0:0a:87:5e:67:79:3b:a1:97:ee:2f:f8:29:a8:39:
         e6:fc:a5:d0:6d:a3:e8:af:46:bd:13:fa:86:26:27:f1:f5:fd:
         76:e5:e5:db:2d:3d:26:9f:b1:9c:bf:85:04:d9:d4:34:11:97:
         3b:40:74:3a:73:63:b9:9b:87:71:ed:29:79:91:f0:5b:40:00:
         fc:92:19:0a:f0:bb:9f:08:20:71:d9:e4:fa:2c:1d:72:9d:82:
         f8:1a:8f:a5:49:a6:60:8b:44:a8:da:59:77:a8:42:d1:83:63:
         95:a4:3c:01:f4:84:77:9e:1b:bc:68:87:40:b5:c0:06:2f:4e:
         fc:80:d7:25:0d:07:0b:d8:c4:a6:d4:a9:e3:85:8d:a6:55:46:
         1f:96:55:d4:4e:4a:bb:23:78:e7:c1:a1:79:ca:a6:25:22:75:
         da:8c:6c:61
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mjg1RDNBRjExMC8GA1UEBRMoMTJGRDBEQUJDNkNCMUFERDQ0MjE5NTI3NkEwMzA0
RTNFOTcyNzdCMTAeFw0yNjA5MjQwMzA4MDJaFw0yNjA5MjYwMzA4MDJaMBgxFjAU
BgNVBAMTDTZhYjQ5NDEzLWY2MzAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtBxnLm4uIRhUtPM5xyoF0BZNEH9gR3YkgHfMQ9+hnf4px/GskAskOeiUx
IYf0kbtfn5znEnzn8sIsKXL6SeNvOBorE4sZaJN42DnQemebUniCXzK+yRb5zyVv
9eAv1FJl/bftHzza13rKVxMovFlxXEAjmM7GS57H+DjsSJ59fNaFtQRl/T6mcJ1v
ea5VWAoTaEKpnPtT5CbMNLq0PYpz91jRZusFEny9WshitkxuzchfhTjLdrWXHwVa
qEAqixcZ7COAhbn7dkrTO8OaUJG6NEPB5x27JSVsaK9PC6058QloCx627IvWKPbD
dlgzbOIZtrRipngL5/+QT3NgCh7bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUte1C
VZPrV101nkqM4hjbdnqNR6cwHwYDVR0jBBgwFoAUEv0Nq8bLGt1EIZUnagME4+ly
d7EwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4NUQzLzQ3QjQzQURDODhFMzExRUQ4RjE5NTJEQUYxMjIyNDY4L0V2ME5x
OGJMR3QxRUlaVW5hZ01FNC1seWQ3RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0V2ME5xOGJMR3QxRUlaVW5hZ01FNC1seWQ3RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mjg1RDMvNDdCNDNBREM4OEUzMTFFRDhGMTk1MkRBRjEy
MjI0NjgvRXYwTnE4YkxHdDFFSVpVbmFnTUU0LWx5ZDdFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC5eENM2azEGwuYMYuovyyg4+/oflJt
AOoaN8KG3KMN8hWxDMmOtD97hNE9RzBkotMlTB7xkX2ERrWRUwBaToMd21O9wIfE
zvDUu4Tild9WiM23wNvIahyedmF0UNbgCodeZ3k7oZfuL/gpqDnm/KXQbaPor0a9
E/qGJifx9f125eXbLT0mn7Gcv4UE2dQ0EZc7QHQ6c2O5m4dx7Sl5kfBbQAD8khkK
8LufCCBx2eT6LB1ynYL4Go+lSaZgi0So2ll3qELRg2OVpDwB9IR3nhu8aIdAtcAG
L078gNclDQcL2MSm1KnjhY2mVUYfllXUTkq7I3jnwaF5yqYlInXajGxh
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:19:35 2026 by rpki-client