Error: rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
File:                     0unaaO71cIn0RVxxt8nHfu3iFmI.mft (raw, json)
Hash identifier:          Xh0Lgzy3GDQWoKmHzJUPdoA028NldY1tMJgGEzwtF+Y=
Subject key identifier:   9D:62:5E:8A:36:68:32:15:5A:DF:AB:CF:AF:B4:17:B3:EC:C7:08:E2
Authority key identifier: D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62
Certificate issuer:       /CN=F362E505AF/serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
Certificate serial:       01D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
Manifest number:          01D0
Signing time:             Wed 23 Sep 2026 04:56:23 +0000
Manifest this update:     Wed 23 Sep 2026 04:56:23 +0000
Manifest next update:     Fri 25 Sep 2026 04:56:23 +0000
Files and hashes:         1: 0unaaO71cIn0RVxxt8nHfu3iFmI.crl (hash: 70cDeQ4ST0BBaNnEW33aZGZ4F/AgPJFOGVmOht3ckQk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 04:56:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 465 (0x1d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E505AF, serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
        Validity
            Not Before: Sep 23 04:56:23 2026 GMT
            Not After : Sep 25 04:56:23 2026 GMT
        Subject: CN=6ab35bf7-43d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b3:e1:da:55:c8:4e:35:f2:b8:da:ea:c3:f1:
                    aa:9e:81:95:44:05:19:fd:09:81:df:f8:08:cf:30:
                    c0:08:48:90:d6:7f:57:9e:5d:7a:34:e6:35:06:67:
                    32:89:b9:53:3e:04:3e:4d:07:b8:57:8d:c3:e0:40:
                    30:a9:0f:b5:e4:c0:c9:02:5b:44:18:a8:dd:fc:e8:
                    ab:2c:3b:3f:71:d0:2f:ac:0c:1c:a7:04:17:f5:b8:
                    fe:d6:a0:ee:8e:2e:f8:d0:1c:bd:8d:44:47:d6:d4:
                    cc:8d:83:54:35:92:ef:82:de:af:e7:57:b9:17:53:
                    f3:39:82:d8:9a:52:a6:b8:8e:0b:28:b9:45:d2:c9:
                    6d:59:8d:cd:51:56:a9:14:3c:e3:5d:28:69:b3:0e:
                    f2:64:d9:2a:3a:c6:58:dc:32:5c:2e:79:4d:42:7a:
                    3e:bc:cc:24:b8:f8:bd:76:82:02:34:12:28:f4:32:
                    4c:76:89:35:86:f2:10:93:12:bb:28:5f:af:04:6c:
                    99:50:00:f6:24:ae:34:af:23:c4:f7:3d:b6:90:f9:
                    a2:ca:00:3d:e6:aa:75:40:73:94:65:c1:14:98:41:
                    d1:49:ce:6c:24:3a:81:86:14:20:b6:86:ac:48:0c:
                    38:cc:92:62:04:7d:13:a4:95:c1:31:c4:03:ec:cc:
                    c1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:62:5E:8A:36:68:32:15:5A:DF:AB:CF:AF:B4:17:B3:EC:C7:08:E2
            X509v3 Authority Key Identifier:
                keyid:D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:0e:35:b2:3d:c0:a8:c5:7d:bc:50:14:20:ef:6b:f9:28:e3:
         84:4f:74:a6:d6:d1:06:03:1d:4f:35:30:fa:ef:34:2e:88:cc:
         ea:f9:59:24:66:73:7d:3a:02:52:fa:d3:74:a5:1a:32:27:24:
         aa:75:94:cd:36:5e:0d:b4:c1:ca:9a:0e:16:7f:88:c5:1d:63:
         7d:b8:b3:82:bc:d4:5a:e7:42:c6:d6:69:23:10:30:37:01:7c:
         74:ee:5f:43:71:3a:79:8e:7b:8e:a0:59:c0:d5:79:b9:f2:c6:
         66:b6:ec:73:0d:ba:ad:6d:44:b3:34:03:d5:81:da:78:46:6a:
         6f:7a:db:da:be:db:ca:56:f2:7e:cf:c1:74:68:43:cb:9e:28:
         83:f8:fc:d1:ab:00:78:5b:2a:d1:01:01:b1:85:b6:69:2c:c3:
         1f:3b:b8:a5:b2:90:ea:5b:6a:01:11:62:57:8c:58:6e:82:0b:
         95:27:4f:c1:b4:1d:04:4b:b9:02:56:72:b8:43:af:ef:0c:a8:
         43:70:c8:54:dc:fe:83:9c:6a:5f:ab:1c:0d:bd:56:59:3e:9a:
         18:ba:11:8e:41:09:34:5c:1a:6f:95:11:93:b4:7b:91:71:31:
         2f:83:d1:23:ee:15:5c:8a:6f:3f:bc:44:f7:74:69:86:20:0d:
         74:77:27:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkU1MDVBRjExMC8GA1UEBRMoRDJFOURBNjhFRUY1NzA4OUY0NDU1QzcxQjdDOUM3
N0VFREUyMTY2MjAeFw0yNjA5MjMwNDU2MjNaFw0yNjA5MjUwNDU2MjNaMBgxFjAU
BgNVBAMTDTZhYjM1YmY3LTQzZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGs+HaVchONfK42urD8aqegZVEBRn9CYHf+AjPMMAISJDWf1eeXXo05jUG
ZzKJuVM+BD5NB7hXjcPgQDCpD7XkwMkCW0QYqN386KssOz9x0C+sDBynBBf1uP7W
oO6OLvjQHL2NREfW1MyNg1Q1ku+C3q/nV7kXU/M5gtiaUqa4jgsouUXSyW1Zjc1R
VqkUPONdKGmzDvJk2So6xljcMlwueU1Cej68zCS4+L12ggI0Eij0Mkx2iTWG8hCT
ErsoX68EbJlQAPYkrjSvI8T3PbaQ+aLKAD3mqnVAc5RlwRSYQdFJzmwkOoGGFCC2
hqxIDDjMkmIEfROklcExxAPszMHXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnWJe
ijZoMhVa36vPr7QXs+zHCOIwHwYDVR0jBBgwFoAU0unaaO71cIn0RVxxt8nHfu3i
FmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFNTA1L0E5MURBRDNFNEYzRTExRjA5QTY3MDZDNERBRTRFQzlDLzB1bmFh
TzcxY0luMFJWeHh0OG5IZnUzaUZtSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzB1bmFhTzcxY0luMFJWeHh0OG5IZnUzaUZtSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkU1MDUvQTkxREFEM0U0RjNFMTFGMDlBNjcwNkM0REFF
NEVDOUMvMHVuYWFPNzFjSW4wUlZ4eHQ4bkhmdTNpRm1JLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDDjWyPcCoxX28UBQg72v5KOOET3Sm
1tEGAx1PNTD67zQuiMzq+VkkZnN9OgJS+tN0pRoyJySqdZTNNl4NtMHKmg4Wf4jF
HWN9uLOCvNRa50LG1mkjEDA3AXx07l9DcTp5jnuOoFnA1Xm58sZmtuxzDbqtbUSz
NAPVgdp4RmpvetvavtvKVvJ+z8F0aEPLniiD+PzRqwB4WyrRAQGxhbZpLMMfO7il
spDqW2oBEWJXjFhugguVJ0/BtB0ES7kCVnK4Q6/vDKhDcMhU3P6DnGpfqxwNvVZZ
PpoYuhGOQQk0XBpvlRGTtHuRcTEvg9Ej7hVcim8/vET3dGmGIA10dydv
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:25:28 2026 by rpki-client