Error: rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
File:                     epndbb4tFgeKUOWEHlqOilkM3Us.mft (raw, json)
Hash identifier:          vxhBfP3VZmurwRnH3Ga8urVaYKF/vxrn74WJ+F+oyGg=
Subject key identifier:   8C:A9:3D:0B:74:3D:2D:FB:66:AB:4A:71:A9:9E:8C:1F:22:D4:F2:22
Authority key identifier: 7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B
Certificate issuer:       /CN=F365052EAR/serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
Certificate serial:       0316
Authority info access:    rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
Manifest number:          0315
Signing time:             Sun 27 Sep 2026 04:25:36 +0000
Manifest this update:     Sun 27 Sep 2026 04:25:36 +0000
Manifest next update:     Tue 29 Sep 2026 04:25:36 +0000
Files and hashes:         1: epndbb4tFgeKUOWEHlqOilkM3Us.crl (hash: PcI5qiKeHRzfhOLI9Y+HMLlTQVP4W4naRsoTsZJN9ZQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
                          rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790 (0x316)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365052EAR, serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
        Validity
            Not Before: Sep 27 04:25:36 2026 GMT
            Not After : Sep 29 04:25:36 2026 GMT
        Subject: CN=6ab89ac0-8418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0e:53:50:61:eb:7a:10:9b:0a:33:bf:5d:59:
                    b4:94:49:c4:4e:aa:8a:2e:bc:d8:21:97:8e:4f:47:
                    e6:10:4a:57:3b:cf:d9:77:b7:4e:96:c4:ec:71:17:
                    32:f3:63:c0:5f:4f:53:ea:89:51:ac:ad:1d:ed:cc:
                    0f:64:13:a9:23:b7:d2:64:f2:15:10:fa:fe:8a:27:
                    df:85:bd:17:a5:98:9f:84:5d:b6:32:2f:d2:b9:41:
                    b9:23:2d:29:4e:4c:fc:0d:bf:55:ca:e9:a3:a1:70:
                    ea:92:3b:2c:76:28:5a:ec:14:3e:a5:a4:8c:aa:47:
                    6d:90:39:2f:13:00:d6:67:20:6a:20:7a:a4:db:eb:
                    ae:ae:96:d9:4e:f6:d6:e4:de:ea:55:08:a4:15:3a:
                    c0:2c:e9:5d:97:59:a3:18:39:7c:dc:ef:a5:23:75:
                    24:5b:9e:03:96:8b:51:40:49:ff:16:92:d9:0c:92:
                    52:f2:66:8b:e6:b2:61:d3:5d:8e:b6:37:65:15:36:
                    be:13:67:e0:df:99:3d:5d:e6:2a:d7:4f:e1:5f:fb:
                    a4:d5:45:27:98:f2:58:4e:4f:bf:3e:a0:9b:6f:1e:
                    46:8e:52:dc:55:68:3e:26:0f:8c:69:b0:61:32:8e:
                    45:33:09:0e:f1:7c:87:83:b9:ed:c3:20:b2:1a:18:
                    6b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A9:3D:0B:74:3D:2D:FB:66:AB:4A:71:A9:9E:8C:1F:22:D4:F2:22
            X509v3 Authority Key Identifier:
                keyid:7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:01:0f:6b:3a:cd:26:23:03:0a:2f:d0:11:62:6a:14:1b:30:
         43:5a:a8:8b:46:6e:0a:20:b3:9b:35:56:e0:23:04:26:7c:c1:
         b2:0c:df:f9:6c:cb:ac:70:88:58:37:44:a5:7d:ea:40:4c:62:
         93:0c:b2:c1:b3:86:e9:dd:5c:13:4b:c0:b0:05:f8:fe:17:c1:
         ef:05:1e:0a:48:c2:5a:58:26:bc:5e:5c:f2:09:25:e9:aa:43:
         8f:53:48:f6:3d:36:4d:a4:37:2b:5e:e1:e9:8d:f0:3e:32:aa:
         9f:40:9e:7c:b7:35:6c:69:cc:9e:24:85:80:1c:9f:aa:20:9e:
         12:5a:53:e0:10:c2:e5:89:df:32:41:2b:6b:62:e2:8d:81:40:
         8b:d6:ee:43:17:e3:83:3f:ae:a8:d2:ab:7a:c7:59:06:cb:e0:
         cb:07:92:04:59:ce:ab:67:cf:51:b5:08:fc:56:99:96:72:f5:
         14:df:ab:01:90:26:56:63:27:04:b5:76:18:86:6b:71:b4:9f:
         ad:e4:01:b6:07:ff:06:ac:a1:c6:1d:48:d3:42:3c:65:4b:1d:
         4c:5e:59:61:81:6a:e5:e3:4e:48:fd:dc:63:1d:bf:62:d9:69:
         ff:5c:b8:65:be:1d:7b:27:a8:94:bb:92:91:6b:0f:97:4c:91:
         8e:f0:43:f3
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAxYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA1MkVBUjExMC8GA1UEBRMoN0E5OURENkRCRTJEMTYwNzhBNTBFNTg0MUU1QThF
OEE1OTBDREQ0QjAeFw0yNjA5MjcwNDI1MzZaFw0yNjA5MjkwNDI1MzZaMBgxFjAU
BgNVBAMTDTZhYjg5YWMwLTg0MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCSDlNQYet6EJsKM79dWbSUScROqoouvNghl45PR+YQSlc7z9l3t06WxOxx
FzLzY8BfT1PqiVGsrR3tzA9kE6kjt9Jk8hUQ+v6KJ9+FvRelmJ+EXbYyL9K5Qbkj
LSlOTPwNv1XK6aOhcOqSOyx2KFrsFD6lpIyqR22QOS8TANZnIGogeqTb666ultlO
9tbk3upVCKQVOsAs6V2XWaMYOXzc76UjdSRbngOWi1FASf8WktkMklLyZovmsmHT
XY62N2UVNr4TZ+DfmT1d5irXT+Ff+6TVRSeY8lhOT78+oJtvHkaOUtxVaD4mD4xp
sGEyjkUzCQ7xfIeDue3DILIaGGvbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUjKk9
C3Q9Lftmq0pxqZ6MHyLU8iIwHwYDVR0jBBgwFoAUepndbb4tFgeKUOWEHlqOilkM
3UswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNTJFLzY0RUMxQzVDNUU0QjExRUZCN0M0OERBMzc2MkU5NTFBL2VwbmRi
YjR0RmdlS1VPV0VIbHFPaWxrTTNVcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VwbmRiYjR0RmdlS1VPV0VIbHFPaWxrTTNVcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NTA1MkUvNjRFQzFDNUM1RTRCMTFFRkI3QzQ4REEzNzYyRTk1
MUEvZXBuZGJiNHRGZ2VLVU9XRUhscU9pbGtNM1VzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLAQ9rOs0mIwMKL9ARYmoUGzBDWqiLRm4K
ILObNVbgIwQmfMGyDN/5bMuscIhYN0SlfepATGKTDLLBs4bp3VwTS8CwBfj+F8Hv
BR4KSMJaWCa8XlzyCSXpqkOPU0j2PTZNpDcrXuHpjfA+MqqfQJ58tzVsacyeJIWA
HJ+qIJ4SWlPgEMLlid8yQStrYuKNgUCL1u5DF+ODP66o0qt6x1kGy+DLB5IEWc6r
Z89RtQj8VpmWcvUU36sBkCZWYycEtXYYhmtxtJ+t5AG2B/8GrKHGHUjTQjxlSx1M
XllhgWrl405I/dxjHb9i2Wn/XLhlvh17J6iUu5KRaw+XTJGO8EPz
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:24:36 2026 by rpki-client