Error: rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
File:                     RGKi49FTZoSmrSMoDP2hhYW6Rug.mft (raw, json)
Hash identifier:          EDZ3i5gkKBw477Sr81aYr6/4G91YRPfbBSOZsT1YYRo=
Subject key identifier:   0F:15:5B:9C:64:D9:92:0E:03:9F:AD:E9:0D:D4:A6:87:5F:CB:AF:CE
Authority key identifier: 44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8
Certificate issuer:       /CN=F36455FBAF/serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
Certificate serial:       05D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
Manifest number:          05CD
Signing time:             Fri 25 Sep 2026 03:04:57 +0000
Manifest this update:     Fri 25 Sep 2026 03:04:56 +0000
Manifest next update:     Sun 27 Sep 2026 03:04:56 +0000
Files and hashes:         1: RGKi49FTZoSmrSMoDP2hhYW6Rug.crl (hash: yae3cfH5pN6dyMNgiSlik3Dtg0mAsPCFmWn2DrSsxko=)
                          2: DDFC2BF08CF711F1BB88A212CF1D38B0.roa (hash: hr6ElrihATc78d5WqQJCxdCYuXhQgsouSoSSt/TE0Tc=)
                          3: 68DCA48A8A5411F1917BEBF8CE1D38B0.roa (hash: 3vTSaEtEOnFn9KuheTF81XkElcWkmzlKDkHKLYKalOY=)
                          4: C48E89BA8A5411F1B004F6FCCE1D38B0.roa (hash: XktUWr86OFCoCLGD5TDHlTLBdurnxWwUHKblb3/NzZs=)
                          5: 148BCB9E8A5511F1951213FDCE1D38B0.roa (hash: J+tkhNUxLX7cRuis8AunqQjdW/I75K6IIxqcvuvvwDs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1496 (0x5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36455FBAF, serialNumber=4462A2E3D1536684A6AD23280CFDA18585BA46E8
        Validity
            Not Before: Sep 25 03:04:56 2026 GMT
            Not After : Sep 27 03:04:56 2026 GMT
        Subject: CN=6ab5e4d9-413d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a6:f7:bf:d7:f8:c0:c9:72:8f:d1:d8:38:2c:
                    4b:19:d2:5e:8d:72:e7:35:61:b9:44:c8:bd:04:1a:
                    11:d6:f5:c9:5f:a9:b8:b3:99:64:16:31:eb:89:af:
                    fa:3f:d5:72:5f:c3:31:5e:52:4c:0b:e9:53:1f:4f:
                    55:4b:51:08:9d:45:ea:1e:74:59:a4:4e:44:e3:6c:
                    6d:97:1f:01:36:06:01:e7:06:25:c1:dc:34:88:ad:
                    c6:a7:6e:e7:9f:2e:1a:90:ef:4a:98:c0:8d:d1:67:
                    f2:4b:33:0a:1d:03:5b:06:bc:af:8f:61:79:70:84:
                    93:a4:3a:f4:95:18:2c:61:4a:f3:69:be:c9:18:75:
                    57:84:a6:b9:b6:10:17:ea:de:2b:04:7f:32:6b:33:
                    77:23:17:fc:5f:00:75:bd:83:f0:87:68:98:08:91:
                    0c:15:72:77:58:67:63:da:00:5c:54:a9:3b:70:ac:
                    28:10:ea:27:03:7a:66:08:26:67:4a:14:62:ca:42:
                    51:68:08:98:e4:c4:cc:04:33:3b:bf:ad:23:39:46:
                    f9:95:cf:28:ac:02:1b:5f:ab:25:a8:d4:d6:83:b2:
                    a1:df:c3:5f:8f:55:14:17:db:43:bf:56:95:e9:90:
                    9d:e5:db:16:c8:22:3b:8f:70:65:4f:6e:89:60:75:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:15:5B:9C:64:D9:92:0E:03:9F:AD:E9:0D:D4:A6:87:5F:CB:AF:CE
            X509v3 Authority Key Identifier:
                keyid:44:62:A2:E3:D1:53:66:84:A6:AD:23:28:0C:FD:A1:85:85:BA:46:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RGKi49FTZoSmrSMoDP2hhYW6Rug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36455FB/157D54F455CB11ED97DF9691F1222468/RGKi49FTZoSmrSMoDP2hhYW6Rug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:1e:ba:e2:17:e9:77:55:39:ba:d3:bc:48:f9:8b:de:a2:8b:
         8f:6a:fd:f0:56:90:af:2b:04:52:76:81:6e:45:df:fe:6d:60:
         8a:72:a4:3b:5f:07:ca:fa:68:32:63:26:e9:91:86:da:d5:88:
         12:de:a7:1e:0f:9e:30:e7:c0:2c:5a:c9:21:b8:50:44:e9:18:
         a2:86:83:60:63:42:12:a4:8b:e4:32:e5:04:8f:70:7b:68:37:
         ad:79:c2:58:2b:26:29:3e:ad:52:e0:e4:41:5f:1f:5e:ea:25:
         69:46:3e:a6:22:4c:ca:17:28:ef:b0:a8:74:1e:0f:6e:4f:b9:
         21:3c:82:bc:b8:a3:56:03:86:d1:61:fc:9a:23:64:e1:df:67:
         0f:c7:37:d1:7d:30:a2:30:8c:54:a0:08:92:cb:65:0d:a6:16:
         b8:3c:82:2b:1f:7d:04:3d:8a:7d:bc:5a:40:92:70:c3:23:53:
         e1:66:cf:27:9b:c1:21:3b:5e:28:14:64:e5:2a:94:45:da:6e:
         c1:38:66:27:46:7d:b6:ca:8b:54:c7:2f:e7:b2:45:90:a8:0b:
         a9:12:a1:83:bc:8c:c6:7a:a0:b3:9a:e8:0b:8f:11:16:10:c0:
         33:86:d1:02:51:54:f2:6b:09:3e:6e:3a:4a:02:0a:f0:81:43:
         87:8f:2b:1e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBdgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1RkJBRjExMC8GA1UEBRMoNDQ2MkEyRTNEMTUzNjY4NEE2QUQyMzI4MENGREEx
ODU4NUJBNDZFODAeFw0yNjA5MjUwMzA0NTZaFw0yNjA5MjcwMzA0NTZaMBgxFjAU
BgNVBAMTDTZhYjVlNGQ5LTQxM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDspve/1/jAyXKP0dg4LEsZ0l6Ncuc1YblEyL0EGhHW9clfqbizmWQWMeuJ
r/o/1XJfwzFeUkwL6VMfT1VLUQidReoedFmkTkTjbG2XHwE2BgHnBiXB3DSIrcan
buefLhqQ70qYwI3RZ/JLMwodA1sGvK+PYXlwhJOkOvSVGCxhSvNpvskYdVeEprm2
EBfq3isEfzJrM3cjF/xfAHW9g/CHaJgIkQwVcndYZ2PaAFxUqTtwrCgQ6icDemYI
JmdKFGLKQlFoCJjkxMwEMzu/rSM5RvmVzyisAhtfqyWo1NaDsqHfw1+PVRQX20O/
VpXpkJ3l2xbIIjuPcGVPbolgdaatAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUDxVb
nGTZkg4Dn63pDdSmh1/Lr84wHwYDVR0jBBgwFoAURGKi49FTZoSmrSMoDP2hhYW6
RugwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NUZCLzE1N0Q1NEY0NTVDQjExRUQ5N0RGOTY5MUYxMjIyNDY4L1JHS2k0
OUZUWm9TbXJTTW9EUDJoaFlXNlJ1Zy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JHS2k0OUZUWm9TbXJTTW9EUDJoaFlXNlJ1Zy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU1RkIvMTU3RDU0RjQ1NUNCMTFFRDk3REY5NjkxRjEy
MjI0NjgvUkdLaTQ5RlRab1NtclNNb0RQMmhoWVc2UnVnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsHrriF+l3VTm607xI+YveoouPav3w
VpCvKwRSdoFuRd/+bWCKcqQ7XwfK+mgyYybpkYba1YgS3qceD54w58AsWskhuFBE
6RiihoNgY0ISpIvkMuUEj3B7aDetecJYKyYpPq1S4ORBXx9e6iVpRj6mIkzKFyjv
sKh0Hg9uT7khPIK8uKNWA4bRYfyaI2Th32cPxzfRfTCiMIxUoAiSy2UNpha4PIIr
H30EPYp9vFpAknDDI1PhZs8nm8EhO14oFGTlKpRF2m7BOGYnRn22yotUxy/nskWQ
qAupEqGDvIzGeqCzmugLjxEWEMAzhtECUVTyawk+bjpKAgrwgUOHjyse
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:21:53 2026 by rpki-client