Error: rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
File:                     VmuZsSWb_WaDTuJmVk4KreYwXH0.mft (raw, json)
Hash identifier:          28tSqfJ4TpaYfRfi1nr5TgnWnUOEwioBMADkuPgghg4=
Subject key identifier:   7F:49:C8:28:E0:C0:84:51:CA:B2:96:F2:CA:C8:1F:76:09:A7:2F:5A
Authority key identifier: 56:6B:99:B1:25:9B:FD:66:83:4E:E2:66:56:4E:0A:AD:E6:30:5C:7D
Certificate issuer:       /CN=F3652B4FAR/serialNumber=566B99B1259BFD66834EE266564E0AADE6305C7D
Certificate serial:       6A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
Manifest number:          69
Signing time:             Sat 10 Oct 2026 05:44:03 +0000
Manifest this update:     Sat 10 Oct 2026 05:44:02 +0000
Manifest next update:     Mon 12 Oct 2026 05:44:02 +0000
Files and hashes:         1: VmuZsSWb_WaDTuJmVk4KreYwXH0.crl (hash: oSx42vqIZgsD0OxFokdFwfPiKkWKMGoLbJegmmMZfDE=)
                          2: 086E21E4739A11F1856A661ACF1D38B0.roa (hash: Iwj4Iz6FPSO/V/ChjskNqodJ18zm4zl5mQLO7h52nOM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
                          rsync://rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 05:44:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652B4FAR, serialNumber=566B99B1259BFD66834EE266564E0AADE6305C7D
        Validity
            Not Before: Oct 10 05:44:02 2026 GMT
            Not After : Oct 12 05:44:02 2026 GMT
        Subject: CN=6ac9d0a3-cf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:ed:aa:c3:c2:ae:59:ce:18:4f:f7:23:cd:
                    3f:02:b7:83:29:52:1d:7d:04:eb:18:1f:92:c6:8b:
                    b8:90:0d:dd:3f:bb:c3:81:4f:dd:59:ac:cf:21:0f:
                    d1:6d:b3:c3:49:bc:0e:0b:58:08:a2:11:fb:50:56:
                    b4:44:9c:6c:47:f8:65:73:f8:75:f2:da:24:c7:c3:
                    27:47:54:bc:bc:d7:5f:fb:bc:76:b1:f8:bb:c7:89:
                    37:6d:c3:db:eb:be:20:45:a3:5d:b3:47:bd:6c:4c:
                    af:69:f1:68:38:7f:54:42:ba:37:30:74:f5:1e:83:
                    12:19:c5:0d:84:12:07:e2:86:1d:52:1f:de:50:79:
                    12:4d:7e:41:0a:f0:28:7a:c9:20:2f:0c:a2:a7:ae:
                    0e:72:93:e7:99:4a:c8:24:2b:8f:9b:e7:50:8f:ca:
                    63:e9:cd:bd:ad:7d:77:82:50:87:1f:9a:ec:c9:d2:
                    5e:80:f2:2f:a3:39:c3:85:8d:01:51:2c:01:d1:f5:
                    ee:f0:0d:8e:17:16:11:65:a1:73:e8:97:0a:44:1e:
                    44:bb:4d:81:f8:0d:6e:d8:54:e6:19:d4:c4:63:38:
                    dd:e5:38:46:f7:da:55:49:f2:51:03:4e:0e:f9:8f:
                    18:a0:84:34:52:e8:d3:c0:92:f5:83:62:de:b5:be:
                    ae:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:49:C8:28:E0:C0:84:51:CA:B2:96:F2:CA:C8:1F:76:09:A7:2F:5A
            X509v3 Authority Key Identifier:
                keyid:56:6B:99:B1:25:9B:FD:66:83:4E:E2:66:56:4E:0A:AD:E6:30:5C:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VmuZsSWb_WaDTuJmVk4KreYwXH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/14D57352739911F199FE7914CF1D38B0/VmuZsSWb_WaDTuJmVk4KreYwXH0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:3b:12:78:f9:72:ad:7b:2e:dd:1b:6b:a2:e9:83:3c:74:a3:
         e3:7a:4d:a3:f3:eb:97:b6:15:f5:19:c3:e3:48:c8:da:6a:ee:
         2b:97:b7:c1:b9:c0:e1:12:c6:71:0f:2f:5c:1a:f6:c6:4a:51:
         89:88:b4:33:39:4e:b7:46:a1:dc:7f:52:1c:c7:af:ed:51:02:
         b9:51:c1:ee:03:82:8b:1c:c0:e4:fe:5d:cc:f8:2a:e1:9d:54:
         79:5e:93:b4:b5:22:8b:bb:07:b6:6a:f6:2e:0e:b5:e2:90:c3:
         1e:1b:cd:63:d2:7a:9e:79:24:bf:ac:f6:1a:6b:9c:40:ad:65:
         3d:5b:63:c0:7c:ab:16:9f:36:af:15:0e:d4:d7:a5:be:f3:76:
         d2:6c:06:0c:7c:fc:8f:1a:2c:6f:64:ca:5c:ec:4d:fd:03:3b:
         3e:99:7d:86:4b:4b:2b:e7:8e:fe:48:d9:1a:48:51:92:57:df:
         e8:6c:7e:43:61:db:8c:9e:93:50:2e:43:6e:47:c6:9a:5a:ec:
         a1:33:f8:29:a1:9c:b5:6c:c1:da:e9:73:50:a7:1a:e4:9c:bb:
         15:2d:5f:44:25:f4:72:de:a1:ca:fb:5e:20:b9:c6:85:c7:5d:
         12:55:79:3b:69:78:54:14:36:40:95:d7:28:3a:7d:02:8f:05:
         47:51:cf:1c
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBajANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MkI0RkFSMTEwLwYDVQQFEyg1NjZCOTlCMTI1OUJGRDY2ODM0RUUyNjY1NjRFMEFB
REU2MzA1QzdEMB4XDTI2MTAxMDA1NDQwMloXDTI2MTAxMjA1NDQwMlowGDEWMBQG
A1UEAxMNNmFjOWQwYTMtY2Y2OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOh87arDwq5ZzhhP9yPNPwK3gylSHX0E6xgfksaLuJAN3T+7w4FP3VmszyEP
0W2zw0m8DgtYCKIR+1BWtEScbEf4ZXP4dfLaJMfDJ0dUvLzXX/u8drH4u8eJN23D
2+u+IEWjXbNHvWxMr2nxaDh/VEK6NzB09R6DEhnFDYQSB+KGHVIf3lB5Ek1+QQrw
KHrJIC8MoqeuDnKT55lKyCQrj5vnUI/KY+nNva19d4JQhx+a7MnSXoDyL6M5w4WN
AVEsAdH17vANjhcWEWWhc+iXCkQeRLtNgfgNbthU5hnUxGM43eU4RvfaVUnyUQNO
DvmPGKCENFLo08CS9YNi3rW+rk0CAwEAAaOCArUwggKxMB0GA1UdDgQWBBR/Scgo
4MCEUcqylvLKyB92CacvWjAfBgNVHSMEGDAWgBRWa5mxJZv9ZoNO4mZWTgqt5jBc
fTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTJCNEYvMTRENTczNTI3Mzk5MTFGMTk5RkU3OTE0Q0YxRDM4QjAvVm11WnNT
V2JfV2FEVHVKbVZrNEtyZVl3WEgwLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
Vm11WnNTV2JfV2FEVHVKbVZrNEtyZVl3WEgwLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY1MkI0Ri8xNEQ1NzM1MjczOTkxMUYxOTlGRTc5MTRDRjFEMzhC
MC9WbXVac1NXYl9XYURUdUptVms0S3JlWXdYSDAubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJU7Enj5cq17Lt0ba6Lpgzx0o+N6TaPz65e2
FfUZw+NIyNpq7iuXt8G5wOESxnEPL1wa9sZKUYmItDM5TrdGodx/UhzHr+1RArlR
we4DgoscwOT+Xcz4KuGdVHlek7S1Iou7B7Zq9i4OteKQwx4bzWPSep55JL+s9hpr
nECtZT1bY8B8qxafNq8VDtTXpb7zdtJsBgx8/I8aLG9kylzsTf0DOz6ZfYZLSyvn
jv5I2RpIUZJX3+hsfkNh24yek1AuQ25Hxppa7KEz+CmhnLVswdrpc1CnGuScuxUt
X0Ql9HLeocr7XiC5xoXHXRJVeTtpeFQUNkCV1yg6fQKPBUdRzxw=
-----END CERTIFICATE-----
Generated at Sun Oct 11 07:15:17 2026 by rpki-client