Error: rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
File:                     eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft (raw, json)
Hash identifier:          FG4codhE3XXS05sVnxju4i9wZKYXYLOmntqKqQXthC8=
Subject key identifier:   BC:6E:9B:04:E3:AE:8F:A0:15:2E:2F:FA:49:4C:5E:93:82:9A:FC:55
Authority key identifier: 78:99:B7:58:C4:C9:DD:D5:9A:0D:2F:77:25:61:53:F4:06:36:CB:E1
Certificate issuer:       /CN=F36480E0AF/serialNumber=7899B758C4C9DDD59A0D2F77256153F40636CBE1
Certificate serial:       1010
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eJm3WMTJ3dWaDS93JWFT9AY2y-E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
Manifest number:          1010
Signing time:             Sun 27 Sep 2026 00:55:45 +0000
Manifest this update:     Sun 27 Sep 2026 00:55:44 +0000
Manifest next update:     Tue 29 Sep 2026 00:55:44 +0000
Files and hashes:         1: eJm3WMTJ3dWaDS93JWFT9AY2y-E.crl (hash: w3f9pw0oJRia1jhxoX5tcfjbKKEtt0Y120JGW0TG6Bk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eJm3WMTJ3dWaDS93JWFT9AY2y-E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4112 (0x1010)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36480E0AF, serialNumber=7899B758C4C9DDD59A0D2F77256153F40636CBE1
        Validity
            Not Before: Sep 27 00:55:44 2026 GMT
            Not After : Sep 29 00:55:44 2026 GMT
        Subject: CN=6ab86991-265a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b7:38:81:39:37:0c:12:0e:9b:72:62:7c:9c:
                    b5:b6:c9:9b:91:86:45:68:e3:8a:ce:70:f3:f9:23:
                    2f:7b:69:38:7d:03:39:86:b1:a2:59:37:7d:c1:75:
                    cd:ba:5e:6a:d4:92:db:d6:d0:ec:6a:c4:52:5c:55:
                    49:ba:b6:b9:43:db:f7:6e:41:a0:bb:a2:7c:d6:6c:
                    79:05:d6:fe:32:53:1e:40:80:66:7e:fe:b9:27:03:
                    62:69:3d:3c:d9:b4:f2:c2:14:00:96:82:30:b9:17:
                    14:e1:e6:46:bb:ea:0c:6d:44:b5:34:61:d0:3c:1d:
                    ae:de:1c:40:75:7a:ae:b3:5b:8e:7d:bc:04:cf:2b:
                    ce:b5:8d:f4:7b:41:59:ae:d9:cd:3d:d7:19:f9:67:
                    49:5b:dd:ee:7d:3a:07:64:07:d0:75:bf:e1:f3:ef:
                    da:74:f2:ca:07:49:c0:9b:50:28:e0:9a:d0:83:bc:
                    7a:4b:b9:ef:4c:6b:c6:56:af:cf:65:2b:5f:1d:02:
                    ca:0b:b5:df:f5:1e:be:be:31:7d:83:ba:81:a6:bb:
                    b4:ea:e2:f4:37:8a:33:0e:e6:7d:c1:cb:d1:59:40:
                    08:f5:35:bd:c1:0c:6d:9e:7d:50:c2:8d:6c:2f:b9:
                    f7:81:63:36:e9:21:1c:1a:7d:e8:ce:02:ac:2f:65:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:6E:9B:04:E3:AE:8F:A0:15:2E:2F:FA:49:4C:5E:93:82:9A:FC:55
            X509v3 Authority Key Identifier:
                keyid:78:99:B7:58:C4:C9:DD:D5:9A:0D:2F:77:25:61:53:F4:06:36:CB:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJm3WMTJ3dWaDS93JWFT9AY2y-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36480E0/07087662563011E5AF29B284F8AEA228/eJm3WMTJ3dWaDS93JWFT9AY2y-E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:8d:91:16:ad:c3:0d:13:bd:30:51:51:7b:34:75:36:20:
         c4:44:80:28:2c:dd:7e:03:24:c8:a0:de:52:f7:41:91:b7:70:
         ef:55:01:ca:99:8d:52:53:cf:d7:ca:d2:45:85:13:77:b4:72:
         a0:0a:88:8e:b8:9b:97:25:54:6d:a9:84:a2:95:0a:5c:e9:df:
         c1:a2:8c:9a:91:18:ea:d0:37:e9:2f:38:ad:78:a5:44:d5:f6:
         c0:59:e5:5e:13:0d:ec:bf:be:e4:29:ba:3f:2b:66:10:18:6d:
         33:e5:25:ba:2e:00:86:98:86:4c:da:20:cc:b6:0a:16:36:fd:
         09:bc:e9:cc:f4:cd:b4:2b:be:f4:d9:0d:d0:2f:30:c7:ef:86:
         3b:01:06:3e:0f:b4:e2:63:8a:bd:ea:2d:92:b4:35:11:aa:e7:
         b2:1e:3c:b6:8e:1b:5e:d8:d5:12:35:30:eb:26:07:b2:96:5d:
         6d:91:85:9a:35:b3:59:71:60:66:cc:55:28:59:b2:df:b2:9e:
         66:84:87:d9:86:08:55:e1:68:2d:4c:38:9b:c7:af:e2:48:00:
         36:56:48:4f:85:f7:b7:e3:5d:9c:8f:76:e8:a1:1e:52:5e:7e:
         0d:36:85:90:44:15:c4:32:ba:26:50:04:c5:c2:91:eb:bd:e6:
         2b:b6:06:21
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICEBAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDgwRTBBRjExMC8GA1UEBRMoNzg5OUI3NThDNEM5RERENTlBMEQyRjc3MjU2MTUz
RjQwNjM2Q0JFMTAeFw0yNjA5MjcwMDU1NDRaFw0yNjA5MjkwMDU1NDRaMBgxFjAU
BgNVBAMTDTZhYjg2OTkxLTI2NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNtziBOTcMEg6bcmJ8nLW2yZuRhkVo44rOcPP5Iy97aTh9AzmGsaJZN33B
dc26XmrUktvW0OxqxFJcVUm6trlD2/duQaC7onzWbHkF1v4yUx5AgGZ+/rknA2Jp
PTzZtPLCFACWgjC5FxTh5ka76gxtRLU0YdA8Ha7eHEB1eq6zW459vATPK861jfR7
QVmu2c091xn5Z0lb3e59OgdkB9B1v+Hz79p08soHScCbUCjgmtCDvHpLue9Ma8ZW
r89lK18dAsoLtd/1Hr6+MX2DuoGmu7Tq4vQ3ijMO5n3By9FZQAj1Nb3BDG2efVDC
jWwvufeBYzbpIRwafejOAqwvZZRNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvG6b
BOOuj6AVLi/6SUxek4Ka/FUwHwYDVR0jBBgwFoAUeJm3WMTJ3dWaDS93JWFT9AY2
y+EwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ4MEUwLzA3MDg3NjYyNTYzMDExRTVBRjI5QjI4NEY4QUVBMjI4L2VKbTNX
TVRKM2RXYURTOTNKV0ZUOUFZMnktRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VKbTNXTVRKM2RXYURTOTNKV0ZUOUFZMnktRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDgwRTAvMDcwODc2NjI1NjMwMTFFNUFGMjlCMjg0RjhB
RUEyMjgvZUptM1dNVEozZFdhRFM5M0pXRlQ5QVkyeS1FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCW2I2RFq3DDRO9MFFRezR1NiDERIAo
LN1+AyTIoN5S90GRt3DvVQHKmY1SU8/XytJFhRN3tHKgCoiOuJuXJVRtqYSilQpc
6d/BooyakRjq0DfpLziteKVE1fbAWeVeEw3sv77kKbo/K2YQGG0z5SW6LgCGmIZM
2iDMtgoWNv0JvOnM9M20K7702Q3QLzDH74Y7AQY+D7TiY4q96i2StDURqueyHjy2
jhte2NUSNTDrJgeyll1tkYWaNbNZcWBmzFUoWbLfsp5mhIfZhghV4WgtTDibx6/i
SAA2VkhPhfe3412cj3booR5SXn4NNoWQRBXEMromUATFwpHrveYrtgYh
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:28:23 2026 by rpki-client