Error: rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft
File:                     4CHIx8UoCk9ahEY7VfB-of5s1qU.mft (raw, json)
Hash identifier:          Imev2N4oUso4nGGbqtA9hxZATgwWT78un1J84/V8xMI=
Subject key identifier:   57:71:A1:85:9A:03:F4:1B:AB:7A:4B:9D:D1:E4:9C:7D:E8:91:22:D0
Authority key identifier: E0:21:C8:C7:C5:28:0A:4F:5A:84:46:3B:55:F0:7E:A1:FE:6C:D6:A5
Certificate issuer:       /CN=F362A277AF/serialNumber=E021C8C7C5280A4F5A84463B55F07EA1FE6CD6A5
Certificate serial:       0112
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4CHIx8UoCk9ahEY7VfB-of5s1qU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft
Manifest number:          0111
Signing time:             Sun 11 Oct 2026 05:24:16 +0000
Manifest this update:     Sun 11 Oct 2026 05:24:15 +0000
Manifest next update:     Tue 13 Oct 2026 05:24:15 +0000
Files and hashes:         1: 4CHIx8UoCk9ahEY7VfB-of5s1qU.crl (hash: EZHtmW+k+VC+Hz6Ldyts7oY/+2sN9ZhpSMrF17nmXsE=)
                          2: 35088E64F2D111F080879F85DAE4EC9C.roa (hash: 15uh+glgz7knRoenJ8yS1Q8GBqNFF56yVyjL+9QdwzA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4CHIx8UoCk9ahEY7VfB-of5s1qU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A277AF, serialNumber=E021C8C7C5280A4F5A84463B55F07EA1FE6CD6A5
        Validity
            Not Before: Oct 11 05:24:15 2026 GMT
            Not After : Oct 13 05:24:15 2026 GMT
        Subject: CN=6acb1d80-e794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:b6:27:ce:49:e3:3b:1f:ed:36:02:2e:bc:00:
                    65:7b:09:77:0d:92:c5:de:fd:cc:3d:16:a8:f9:7c:
                    d3:c4:28:10:f9:22:26:76:d8:57:96:fd:39:16:b1:
                    0c:c0:8f:e8:4c:bb:cb:50:39:1f:1b:c4:84:85:7f:
                    52:dc:f1:94:1e:93:ed:fe:e5:08:5c:d6:05:25:b7:
                    1c:c2:79:86:29:7d:ab:af:eb:ad:b3:f4:aa:35:28:
                    11:16:2d:5e:46:51:9e:01:13:fa:25:a4:5b:e5:05:
                    6e:6b:09:08:29:9c:60:22:66:b5:f0:5e:4d:e0:0c:
                    40:df:aa:04:40:bb:04:6c:0d:26:25:10:73:68:81:
                    13:d2:93:cf:bf:dc:c5:4a:dc:35:4e:b4:4d:cd:aa:
                    16:4d:67:b9:b4:14:f8:53:70:bc:53:1e:c5:05:0a:
                    02:81:f7:2c:2b:47:e1:96:07:5d:05:bc:49:a2:40:
                    fc:42:91:18:81:c8:59:26:e7:3a:47:d5:2a:02:04:
                    a8:89:c4:13:45:01:45:d5:cf:69:1e:05:de:dd:b0:
                    65:c6:58:7e:65:5a:28:ca:a8:f3:6c:94:c2:62:70:
                    cc:77:54:b0:53:ce:60:65:5b:f7:fd:3b:39:a8:ce:
                    c1:ba:b0:e4:e7:8e:bb:79:9b:3b:72:1d:ee:89:42:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:71:A1:85:9A:03:F4:1B:AB:7A:4B:9D:D1:E4:9C:7D:E8:91:22:D0
            X509v3 Authority Key Identifier:
                keyid:E0:21:C8:C7:C5:28:0A:4F:5A:84:46:3B:55:F0:7E:A1:FE:6C:D6:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4CHIx8UoCk9ahEY7VfB-of5s1qU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A277/C259389EF17E11F0A7CEF57EDAE4EC9C/4CHIx8UoCk9ahEY7VfB-of5s1qU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:3b:9d:a1:96:eb:5d:9a:19:73:36:be:17:8f:db:8a:50:9c:
         96:e3:c7:04:ba:87:8a:20:15:fd:7a:75:58:cb:31:52:6e:9d:
         fb:d0:2b:e5:19:e0:49:38:70:aa:73:67:70:55:fc:01:6d:14:
         55:23:05:ba:58:b3:9f:f6:fb:e8:9e:0a:59:d6:52:95:b3:c4:
         b4:2b:7d:61:cb:81:25:79:ae:3d:c8:dc:d9:fd:12:7d:0c:ac:
         13:01:79:d5:ce:2a:c0:d5:68:14:7e:fa:3c:1e:68:d1:06:cd:
         47:3d:77:1c:cf:52:a2:1e:92:4b:e3:39:7d:44:f3:ab:24:e7:
         f5:52:4c:37:dd:40:82:b0:b0:90:5a:68:46:cd:bc:e7:3a:67:
         b8:09:f2:f5:88:2f:4d:c1:98:e0:ae:77:78:e6:0f:4d:e6:fa:
         85:1b:8a:7c:6a:38:90:5b:0b:ca:9d:d2:68:5a:96:19:de:13:
         a6:b8:7b:cc:a8:f0:1c:d6:08:04:89:52:fd:f7:94:f5:89:6d:
         c8:8a:97:90:6b:0f:c2:5e:a7:69:33:26:b5:8a:6f:df:1d:49:
         57:61:d5:99:cf:a1:3a:48:05:8d:ea:0c:37:bb:9f:2e:db:3d:
         f1:38:3c:27:ee:f3:b6:23:1d:b0:62:f8:05:cc:65:31:55:77:
         0d:65:67:5f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICARIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkEyNzdBRjExMC8GA1UEBRMoRTAyMUM4QzdDNTI4MEE0RjVBODQ0NjNCNTVGMDdF
QTFGRTZDRDZBNTAeFw0yNjEwMTEwNTI0MTVaFw0yNjEwMTMwNTI0MTVaMBgxFjAU
BgNVBAMTDTZhY2IxZDgwLWU3OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDvtifOSeM7H+02Ai68AGV7CXcNksXe/cw9Fqj5fNPEKBD5IiZ22FeW/TkW
sQzAj+hMu8tQOR8bxISFf1Lc8ZQek+3+5Qhc1gUltxzCeYYpfauv662z9Ko1KBEW
LV5GUZ4BE/olpFvlBW5rCQgpnGAiZrXwXk3gDEDfqgRAuwRsDSYlEHNogRPSk8+/
3MVK3DVOtE3NqhZNZ7m0FPhTcLxTHsUFCgKB9ywrR+GWB10FvEmiQPxCkRiByFkm
5zpH1SoCBKiJxBNFAUXVz2keBd7dsGXGWH5lWijKqPNslMJicMx3VLBTzmBlW/f9
OzmozsG6sOTnjrt5mztyHe6JQriLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUV3Gh
hZoD9Burekud0eScfeiRItAwHwYDVR0jBBgwFoAU4CHIx8UoCk9ahEY7VfB+of5s
1qUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJBMjc3L0MyNTkzODlFRjE3RTExRjBBN0NFRjU3RURBRTRFQzlDLzRDSEl4
OFVvQ2s5YWhFWTdWZkItb2Y1czFxVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRDSEl4OFVvQ2s5YWhFWTdWZkItb2Y1czFxVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkEyNzcvQzI1OTM4OUVGMTdFMTFGMEE3Q0VGNTdFREFF
NEVDOUMvNENISXg4VW9DazlhaEVZN1ZmQi1vZjVzMXFVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtO52hlutdmhlzNr4Xj9uKUJyW48cE
uoeKIBX9enVYyzFSbp370CvlGeBJOHCqc2dwVfwBbRRVIwW6WLOf9vvongpZ1lKV
s8S0K31hy4Elea49yNzZ/RJ9DKwTAXnVzirA1WgUfvo8HmjRBs1HPXccz1KiHpJL
4zl9RPOrJOf1Ukw33UCCsLCQWmhGzbznOme4CfL1iC9NwZjgrnd45g9N5vqFG4p8
ajiQWwvKndJoWpYZ3hOmuHvMqPAc1ggEiVL995T1iW3IipeQaw/CXqdpMya1im/f
HUlXYdWZz6E6SAWN6gw3u58u2z3xODwn7vO2Ix2wYvgFzGUxVXcNZWdf
-----END CERTIFICATE-----
Generated at Sun Oct 11 23:46:27 2026 by rpki-client