Error: rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft
File:                     k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft (raw, json)
Hash identifier:          gXRSd7boMEaSNpmiPsjg/jskarYMENSRdFDIg8VNPdU=
Subject key identifier:   29:E6:45:19:C4:56:D0:94:82:F6:C9:A3:03:63:AE:4B:C9:10:81:FC
Authority key identifier: 93:C9:B2:1F:C8:54:30:38:BF:B4:25:F3:D9:0D:5C:47:44:DD:77:4A
Certificate issuer:       /CN=F363F81FAF/serialNumber=93C9B21FC8543038BFB425F3D90D5C4744DD774A
Certificate serial:       7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft
Manifest number:          79
Signing time:             Sat 14 Nov 2026 05:44:36 +0000
Manifest this update:     Sat 14 Nov 2026 05:44:35 +0000
Manifest next update:     Mon 16 Nov 2026 05:44:35 +0000
Files and hashes:         1: k8myH8hUMDi_tCXz2Q1cR0Tdd0o.crl (hash: jT5CnEkFZwQlOSSH9DvH996N59VOs8qvMihEbxHm8BE=)
                          2: E9E4135E846611F190C3AABECE1D38B0.roa (hash: QZ6J7q1ijc+soc8o1wXWWKMcX9fKVLJpvIDMUk+E0Xk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 05:44:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363F81FAF, serialNumber=93C9B21FC8543038BFB425F3D90D5C4744DD774A
        Validity
            Not Before: Nov 14 05:44:35 2026 GMT
            Not After : Nov 16 05:44:35 2026 GMT
        Subject: CN=6af7f544-3757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e6:f0:6d:20:e1:24:5d:79:f2:9e:c5:fc:7b:
                    ef:d9:76:bc:b9:e0:eb:46:6f:b7:86:84:07:3f:c7:
                    32:50:bc:ca:78:c7:01:4c:af:a9:2f:03:d8:a2:78:
                    80:fa:36:54:c9:2f:90:a6:68:d0:85:3f:04:92:92:
                    90:d8:df:58:ec:e5:36:10:6c:7a:f6:90:5f:c2:45:
                    2b:4c:7a:18:b3:94:4e:6e:ce:55:0a:c3:35:31:8c:
                    b8:06:3d:48:3e:1c:b3:b0:1b:48:f1:5d:0b:3b:1c:
                    16:a6:5c:87:df:f9:5f:c2:7a:f8:09:06:4c:07:b5:
                    f2:3f:cc:1d:97:ba:6c:ea:26:04:65:85:2d:b4:53:
                    92:35:14:8d:62:28:0e:4a:8b:89:2e:ad:8a:6a:5a:
                    5a:fb:1c:e0:3e:b9:48:ce:ba:1b:2d:a0:40:38:a1:
                    0a:75:42:eb:dc:0d:73:5c:b3:20:c9:bb:ae:42:dd:
                    3b:63:46:4f:0c:c9:d7:14:c2:e2:52:f9:4a:5b:1f:
                    77:e1:34:61:68:80:e6:be:dc:f1:e5:ca:53:31:40:
                    83:b6:5b:59:e6:a2:56:75:e5:88:0f:ec:91:e8:0d:
                    d1:ab:1d:64:ac:a3:5c:6d:08:c2:ee:ca:4a:8c:cf:
                    4e:98:d8:da:45:84:1d:9e:3e:cd:86:1b:cc:4b:2b:
                    aa:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E6:45:19:C4:56:D0:94:82:F6:C9:A3:03:63:AE:4B:C9:10:81:FC
            X509v3 Authority Key Identifier:
                keyid:93:C9:B2:1F:C8:54:30:38:BF:B4:25:F3:D9:0D:5C:47:44:DD:77:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363F81F/E2DB963C846511F185185EBACE1D38B0/k8myH8hUMDi_tCXz2Q1cR0Tdd0o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:75:7e:84:9d:87:8f:b4:f0:6f:ff:60:44:fb:3b:38:92:20:
         94:7b:34:77:ae:e9:e8:93:67:45:3a:c7:fd:5f:9b:2f:24:7e:
         f8:2c:df:a1:f1:09:b0:c7:fc:2e:90:5d:07:2c:e5:f8:ae:f3:
         cb:63:91:e1:23:b6:55:99:ff:c2:56:d8:42:ed:f8:9f:fe:25:
         7c:da:44:d3:7f:e6:b4:04:6a:52:0b:1d:79:be:5b:34:65:0e:
         dd:27:7b:cf:8e:de:b7:7e:2e:80:b0:21:a9:25:93:83:91:2c:
         c4:9e:70:a5:e7:ce:53:16:64:4d:5e:d4:57:42:04:1f:f3:59:
         48:84:0e:f8:fc:19:3d:a1:c3:79:0c:74:03:48:30:48:84:0d:
         5f:b3:4a:2a:b1:4c:1b:88:3d:80:39:42:aa:94:07:7b:94:d7:
         85:e5:37:6e:db:38:31:38:d7:59:25:5a:b1:77:51:05:6d:36:
         21:af:8e:f1:29:23:ec:58:cd:7e:83:26:84:75:e9:49:cb:9a:
         34:90:52:84:4e:55:c6:ea:6e:64:99:24:ea:00:55:ad:bc:3b:
         51:b9:d2:b0:60:90:4d:40:9c:e0:92:3c:5c:41:ed:80:16:76:
         47:52:46:62:70:03:1b:6b:85:05:d9:70:16:52:27:7f:2e:d3:
         a1:a5:eb:cd
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBezANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
RjgxRkFGMTEwLwYDVQQFEyg5M0M5QjIxRkM4NTQzMDM4QkZCNDI1RjNEOTBENUM0
NzQ0REQ3NzRBMB4XDTI2MTExNDA1NDQzNVoXDTI2MTExNjA1NDQzNVowGDEWMBQG
A1UEAxMNNmFmN2Y1NDQtMzc1NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALHm8G0g4SRdefKexfx779l2vLng60Zvt4aEBz/HMlC8ynjHAUyvqS8D2KJ4
gPo2VMkvkKZo0IU/BJKSkNjfWOzlNhBsevaQX8JFK0x6GLOUTm7OVQrDNTGMuAY9
SD4cs7AbSPFdCzscFqZch9/5X8J6+AkGTAe18j/MHZe6bOomBGWFLbRTkjUUjWIo
DkqLiS6timpaWvsc4D65SM66Gy2gQDihCnVC69wNc1yzIMm7rkLdO2NGTwzJ1xTC
4lL5Slsfd+E0YWiA5r7c8eXKUzFAg7ZbWeaiVnXliA/skegN0asdZKyjXG0Iwu7K
SozPTpjY2kWEHZ4+zYYbzEsrqkUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQp5kUZ
xFbQlIL2yaMDY65LyRCB/DAfBgNVHSMEGDAWgBSTybIfyFQwOL+0JfPZDVxHRN13
SjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0Y4MUYvRTJEQjk2M0M4NDY1MTFGMTg1MTg1RUJBQ0UxRDM4QjAvazhteUg4
aFVNRGlfdENYejJRMWNSMFRkZDBvLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvazhteUg4aFVNRGlfdENYejJRMWNSMFRkZDBvLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYzRjgxRi9FMkRCOTYzQzg0NjUxMUYxODUxODVFQkFDRTFE
MzhCMC9rOG15SDhoVU1EaV90Q1h6MlExY1IwVGRkMG8ubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAEp1foSdh4+08G//YET7OziSIJR7NHeu
6eiTZ0U6x/1fmy8kfvgs36HxCbDH/C6QXQcs5fiu88tjkeEjtlWZ/8JW2ELt+J/+
JXzaRNN/5rQEalILHXm+WzRlDt0ne8+O3rd+LoCwIaklk4ORLMSecKXnzlMWZE1e
1FdCBB/zWUiEDvj8GT2hw3kMdANIMEiEDV+zSiqxTBuIPYA5QqqUB3uU14XlN27b
ODE411klWrF3UQVtNiGvjvEpI+xYzX6DJoR16UnLmjSQUoROVcbqbmSZJOoAVa28
O1G50rBgkE1AnOCSPFxB7YAWdkdSRmJwAxtrhQXZcBZSJ38u06Gl680=
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:34:28 2026 by rpki-client