Error: rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
File:                     Ex2mcDsWwqK0jDriza4e_9rh-zo.mft (raw, json)
Hash identifier:          khQoCYzi6ZK2bnqyT4axLUNyPDjMSwJUy6RhjcXi4lg=
Subject key identifier:   D5:25:FC:3B:EC:27:9D:1F:D1:C6:20:E5:B7:82:74:11:E7:BB:A1:C4
Authority key identifier: 13:1D:A6:70:3B:16:C2:A2:B4:8C:3A:E2:CD:AE:1E:FF:DA:E1:FB:3A
Certificate issuer:       /CN=F365052EAF/serialNumber=131DA6703B16C2A2B48C3AE2CDAE1EFFDAE1FB3A
Certificate serial:       0312
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
Manifest number:          0311
Signing time:             Wed 23 Sep 2026 04:25:06 +0000
Manifest this update:     Wed 23 Sep 2026 04:25:05 +0000
Manifest next update:     Fri 25 Sep 2026 04:25:05 +0000
Files and hashes:         1: Ex2mcDsWwqK0jDriza4e_9rh-zo.crl (hash: lA/kbJ4mf7donPtV6ZGYd8DubbR+A8NIoN+CbJudbxY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786 (0x312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365052EAF, serialNumber=131DA6703B16C2A2B48C3AE2CDAE1EFFDAE1FB3A
        Validity
            Not Before: Sep 23 04:25:05 2026 GMT
            Not After : Sep 25 04:25:05 2026 GMT
        Subject: CN=6ab354a2-f79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:13:a9:a1:d5:8f:d2:83:97:f0:42:95:77:
                    82:25:3d:8d:82:9b:3d:ae:6e:ee:8b:3b:b5:2b:52:
                    9c:bc:d0:9a:75:84:da:a0:b7:07:b5:41:57:d7:01:
                    5f:bc:ef:b7:e3:3e:bf:36:49:af:66:16:fc:85:cb:
                    bc:f1:a0:c9:86:c7:1b:4f:89:6a:6a:9b:33:a0:94:
                    1b:65:f2:41:4c:27:7c:d4:5c:99:b0:98:3b:4c:8a:
                    b6:94:73:e5:33:54:a8:29:d1:55:bf:c3:12:23:96:
                    ee:52:30:ee:70:df:4f:17:b7:3b:7d:4f:f2:55:af:
                    c1:18:76:ad:b0:21:8f:58:43:ce:ab:25:0c:6c:19:
                    58:87:bd:c6:dd:49:98:cd:64:0d:45:69:2d:c5:ea:
                    5e:70:76:27:ed:7e:0d:12:77:96:17:5b:dd:77:d3:
                    54:b2:b9:a6:2e:90:63:87:77:0f:6c:b1:c8:6c:1e:
                    a6:c3:0c:81:56:68:ce:c2:fc:1c:11:4f:5b:8f:2c:
                    46:ca:52:f2:6e:85:66:de:1a:2a:61:9a:d5:bf:4e:
                    73:68:78:17:ee:99:ab:68:7a:63:3c:b7:38:0e:84:
                    90:2a:4d:03:d1:40:c8:4b:cd:37:73:25:dc:1e:3d:
                    c2:49:25:4f:e8:49:0d:df:e2:44:f3:43:8e:e6:c8:
                    c0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:25:FC:3B:EC:27:9D:1F:D1:C6:20:E5:B7:82:74:11:E7:BB:A1:C4
            X509v3 Authority Key Identifier:
                keyid:13:1D:A6:70:3B:16:C2:A2:B4:8C:3A:E2:CD:AE:1E:FF:DA:E1:FB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:6c:2e:fe:de:dd:d8:80:2e:8e:3b:52:71:95:b0:6a:4d:d3:
         cc:c2:66:bd:4f:ef:9e:39:8a:6c:f7:d0:d8:25:cb:fc:a8:ee:
         bf:3c:4c:03:84:32:79:6f:8b:b7:55:d3:48:4c:a6:2b:b6:27:
         d1:f8:19:5c:65:ec:05:19:bf:7b:43:aa:b5:ad:27:9a:75:93:
         15:47:20:c8:79:0f:6a:cc:0f:94:cf:bc:87:6a:eb:98:12:fe:
         4f:e5:89:48:80:fb:c3:e9:d6:f4:f1:b0:59:18:a9:c0:07:9c:
         9d:09:d4:1b:1d:2f:68:84:98:dc:5a:8b:79:74:05:9f:87:76:
         c5:21:32:20:13:1d:82:7e:d5:4c:54:d1:af:94:83:1e:7e:16:
         8e:66:57:32:3a:49:eb:8b:f1:90:3a:8e:bf:3d:0e:b6:f6:22:
         03:8b:c4:d5:41:20:46:c4:b7:40:66:be:d9:d9:cc:a8:06:55:
         2a:3c:8a:d6:c6:d3:57:93:6f:87:48:5f:2a:c5:f8:80:2e:89:
         57:b2:ae:d3:08:bc:a2:e4:ad:22:18:98:43:5a:1f:01:9a:2b:
         cb:b3:11:83:7c:18:07:a9:41:7c:b0:da:45:17:fd:78:5a:52:
         11:ff:6e:f2:c0:ac:f1:45:e1:56:fd:21:aa:fe:fc:2a:6e:5d:
         6d:9c:ab:6e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAxIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA1MkVBRjExMC8GA1UEBRMoMTMxREE2NzAzQjE2QzJBMkI0OEMzQUUyQ0RBRTFF
RkZEQUUxRkIzQTAeFw0yNjA5MjMwNDI1MDVaFw0yNjA5MjUwNDI1MDVaMBgxFjAU
BgNVBAMTDTZhYjM1NGEyLWY3OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6TxOpodWP0oOX8EKVd4IlPY2Cmz2ubu6LO7UrUpy80Jp1hNqgtwe1QVfX
AV+877fjPr82Sa9mFvyFy7zxoMmGxxtPiWpqmzOglBtl8kFMJ3zUXJmwmDtMiraU
c+UzVKgp0VW/wxIjlu5SMO5w308Xtzt9T/JVr8EYdq2wIY9YQ86rJQxsGViHvcbd
SZjNZA1FaS3F6l5wdiftfg0Sd5YXW91301SyuaYukGOHdw9sschsHqbDDIFWaM7C
/BwRT1uPLEbKUvJuhWbeGiphmtW/TnNoeBfumatoemM8tzgOhJAqTQPRQMhLzTdz
JdwePcJJJU/oSQ3f4kTzQ47myMDnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1SX8
O+wnnR/RxiDlt4J0Eee7ocQwHwYDVR0jBBgwFoAUEx2mcDsWwqK0jDriza4e/9rh
+zowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNTJFLzdCQzQ4MkRFNUU0QjExRUZCQzc4QTFBMzc2MkU5NTFBL0V4Mm1j
RHNXd3FLMGpEcml6YTRlXzlyaC16by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0V4Mm1jRHNXd3FLMGpEcml6YTRlXzlyaC16by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTA1MkUvN0JDNDgyREU1RTRCMTFFRkJDNzhBMUEzNzYy
RTk1MUEvRXgybWNEc1d3cUswakRyaXphNGVfOXJoLXpvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/bC7+3t3YgC6OO1JxlbBqTdPMwma9
T++eOYps99DYJcv8qO6/PEwDhDJ5b4u3VdNITKYrtifR+BlcZewFGb97Q6q1rSea
dZMVRyDIeQ9qzA+Uz7yHauuYEv5P5YlIgPvD6db08bBZGKnAB5ydCdQbHS9ohJjc
Wot5dAWfh3bFITIgEx2CftVMVNGvlIMefhaOZlcyOknri/GQOo6/PQ629iIDi8TV
QSBGxLdAZr7Z2cyoBlUqPIrWxtNXk2+HSF8qxfiALolXsq7TCLyi5K0iGJhDWh8B
mivLsxGDfBgHqUF8sNpFF/14WlIR/27ywKzxReFW/SGq/vwqbl1tnKtu
-----END CERTIFICATE-----
Generated at Wed Sep 23 06:49:54 2026 by rpki-client