Error: rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
File:                     W6zoN39KxIJPmq_HsThFyWtgsko.mft (raw, json)
Hash identifier:          Ci8/XhjcjUzEFslfvQlTH5HnlrrcKe97KlyRSD8LN+8=
Subject key identifier:   66:93:B1:94:DF:12:6F:E0:EF:7B:52:09:A5:80:ED:FB:AC:CF:59:B8
Authority key identifier: 5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A
Certificate issuer:       /CN=F363E214AR/serialNumber=5BACE8377F4AC4824F9AAFC7B13845C96B60B24A
Certificate serial:       0ACB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
Manifest number:          0ACA
Signing time:             Sun 11 Oct 2026 01:22:06 +0000
Manifest this update:     Sun 11 Oct 2026 01:22:05 +0000
Manifest next update:     Tue 13 Oct 2026 01:22:05 +0000
Files and hashes:         1: W6zoN39KxIJPmq_HsThFyWtgsko.crl (hash: 0XGsJp/tHPJBakNrsulmD8s+moesGilZ3pxZoORYdKo=)
                          2: AD8D26F27D4D11E9A43C5972F8AEA228.roa (hash: J0NYDzKOggR45pKs8ueiUloNUhy6/sW6bdalJakcT1Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
                          rsync://rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2763 (0xacb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E214AR, serialNumber=5BACE8377F4AC4824F9AAFC7B13845C96B60B24A
        Validity
            Not Before: Oct 11 01:22:05 2026 GMT
            Not After : Oct 13 01:22:05 2026 GMT
        Subject: CN=6acae4be-c204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:9a:1b:3d:ad:a7:31:db:f6:c5:86:cd:bf:
                    1d:1b:ee:2a:9c:6f:38:cc:bc:73:b2:30:12:45:d9:
                    78:73:47:63:00:23:df:ef:cc:12:f8:48:40:60:59:
                    8b:c6:4e:c5:ee:2f:ed:bc:8a:a1:3a:85:bc:f5:82:
                    ec:06:42:e1:38:88:9f:ca:87:51:49:69:31:f6:20:
                    1f:b9:c8:6e:21:fc:de:94:df:0f:f1:a6:c2:38:62:
                    72:47:bc:5b:73:0e:f5:d0:54:92:9f:16:93:fa:2d:
                    09:7e:a2:8e:1d:e5:ff:29:9e:db:68:a2:be:7d:bd:
                    05:e9:c8:d8:86:4b:d5:5f:b7:de:fe:0f:e7:2b:11:
                    38:e4:de:8a:91:fa:37:c0:ad:5b:81:04:53:26:5c:
                    ee:fd:d5:b3:d6:f8:63:c0:a0:80:7d:85:a6:29:20:
                    4d:6d:76:24:1f:4f:13:63:af:f0:19:9b:02:f3:ee:
                    4f:36:d1:96:a9:ae:80:69:46:09:60:ad:f2:b5:ed:
                    65:47:be:6d:3c:74:cd:a3:88:2a:08:45:ca:12:64:
                    77:b6:91:96:a8:a6:e0:1f:fb:f1:c6:c5:ef:d1:1d:
                    36:2a:5e:6f:0c:8c:61:a8:c3:39:c8:2b:0e:06:13:
                    bc:df:2f:6f:3a:16:32:70:6a:a1:ad:8a:fd:71:63:
                    ca:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:93:B1:94:DF:12:6F:E0:EF:7B:52:09:A5:80:ED:FB:AC:CF:59:B8
            X509v3 Authority Key Identifier:
                keyid:5B:AC:E8:37:7F:4A:C4:82:4F:9A:AF:C7:B1:38:45:C9:6B:60:B2:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W6zoN39KxIJPmq_HsThFyWtgsko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/98A6F1C67D4A11E9860EED6FF8AEA228/W6zoN39KxIJPmq_HsThFyWtgsko.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:e6:d5:cf:ea:8a:d6:f2:e2:6c:cf:b2:52:55:78:ac:65:e4:
         f3:c3:29:67:bb:86:d5:ba:88:27:33:86:72:09:06:38:eb:ad:
         3c:9e:e8:43:4c:e8:ca:bb:6e:76:1f:1e:9f:c8:27:0e:5d:c6:
         cb:80:c2:09:25:2e:29:e3:16:79:70:cd:45:ae:91:55:54:dd:
         61:6a:47:f6:f8:7f:c4:23:63:04:77:2a:c7:56:d5:4a:ed:5e:
         53:b9:ed:95:94:56:cf:2d:b3:37:31:fd:8d:91:06:ed:73:9e:
         55:f1:87:a6:88:10:73:82:bb:90:7f:a7:99:ef:17:7c:69:b4:
         6a:72:f1:dd:f7:32:d6:e0:76:42:11:73:d1:f6:08:38:5a:9d:
         6f:90:10:e8:38:6c:08:d3:58:87:aa:8d:5d:e1:3b:9b:f7:b0:
         09:31:90:45:3c:9f:56:19:f9:c3:6f:83:89:e8:5d:3c:9b:f9:
         54:73:6a:d3:aa:00:24:2c:b0:9c:19:a4:46:9e:91:ff:05:11:
         17:ad:e0:79:13:c8:11:14:79:12:cd:1d:45:d9:a6:af:a8:d5:
         7f:cd:46:9c:67:a3:f6:d7:81:4a:06:1a:29:0f:b5:90:f5:52:
         d4:08:2b:91:a3:52:72:ff:43:90:1c:be:eb:f1:ef:5c:06:1d:
         78:98:5c:21
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCsswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0UyMTRBUjExMC8GA1UEBRMoNUJBQ0U4Mzc3RjRBQzQ4MjRGOUFBRkM3QjEzODQ1
Qzk2QjYwQjI0QTAeFw0yNjEwMTEwMTIyMDVaFw0yNjEwMTMwMTIyMDVaMBgxFjAU
BgNVBAMTDTZhY2FlNGJlLWMyMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDH6JobPa2nMdv2xYbNvx0b7iqcbzjMvHOyMBJF2XhzR2MAI9/vzBL4SEBg
WYvGTsXuL+28iqE6hbz1guwGQuE4iJ/Kh1FJaTH2IB+5yG4h/N6U3w/xpsI4YnJH
vFtzDvXQVJKfFpP6LQl+oo4d5f8pnttoor59vQXpyNiGS9Vft97+D+crETjk3oqR
+jfArVuBBFMmXO791bPW+GPAoIB9haYpIE1tdiQfTxNjr/AZmwLz7k820ZaproBp
RglgrfK17WVHvm08dM2jiCoIRcoSZHe2kZaopuAf+/HGxe/RHTYqXm8MjGGowznI
Kw4GE7zfL286FjJwaqGtiv1xY8qXAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUZpOx
lN8Sb+Dve1IJpYDt+6zPWbgwHwYDVR0jBBgwFoAUW6zoN39KxIJPmq/HsThFyWtg
skowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNFMjE0Lzk4QTZGMUM2N0Q0QTExRTk4NjBFRUQ2RkY4QUVBMjI4L1c2em9O
MzlLeElKUG1xX0hzVGhGeVd0Z3Nrby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1c2em9OMzlLeElKUG1xX0hzVGhGeVd0Z3Nrby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2M0UyMTQvOThBNkYxQzY3RDRBMTFFOTg2MEVFRDZGRjhBRUEy
MjgvVzZ6b04zOUt4SUpQbXFfSHNUaEZ5V3Rnc2tvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDJ5tXP6orW8uJsz7JSVXisZeTzwylnu4bV
uognM4ZyCQY46608nuhDTOjKu252Hx6fyCcOXcbLgMIJJS4p4xZ5cM1FrpFVVN1h
akf2+H/EI2MEdyrHVtVK7V5Tue2VlFbPLbM3Mf2NkQbtc55V8YemiBBzgruQf6eZ
7xd8abRqcvHd9zLW4HZCEXPR9gg4Wp1vkBDoOGwI01iHqo1d4Tub97AJMZBFPJ9W
GfnDb4OJ6F08m/lUc2rTqgAkLLCcGaRGnpH/BREXreB5E8gRFHkSzR1F2aavqNV/
zUacZ6P214FKBhopD7WQ9VLUCCuRo1Jy/0OQHL7r8e9cBh14mFwh
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:44:58 2026 by rpki-client