Error: rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
File:                     gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft (raw, json)
Hash identifier:          rm1XZU1RxPkZxzlGncQFsp0HcF9eTsjk4ANrvGyccIA=
Subject key identifier:   CF:03:18:43:0D:DD:C2:B6:4C:7F:B5:76:EA:75:57:62:93:4D:B7:4B
Authority key identifier: 81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
Certificate issuer:       /CN=F3652E81AF/serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
Certificate serial:       0736
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
Manifest number:          072E
Signing time:             Sat 26 Sep 2026 02:30:51 +0000
Manifest this update:     Sat 26 Sep 2026 02:30:50 +0000
Manifest next update:     Mon 28 Sep 2026 02:30:50 +0000
Files and hashes:         1: gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl (hash: 199N+Vh0KT2ITVSLWQ+PFUDkGcXCTXZg5LI6WU+a5Aw=)
                          2: AAE956961D5511F18D2C4BCDDAE4EC9C.roa (hash: eNBb4iv8KgSlwncBkb5fhFPzZUtHTRGyst8zzcUlZhw=)
                          3: 24930CEA1D5511F1A8C623CBDAE4EC9C.roa (hash: wGf2MOvj3Yluy431+2pq0vgFtAP/EDswaNN5o6eA4fw=)
                          4: 4271F39E1D5411F1A0107AC5DAE4EC9C.roa (hash: GfmgIfHQlHFs0VWeSTKqFMLmHPB6ns7vlyr6ru21/OM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1846 (0x736)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652E81AF, serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
        Validity
            Not Before: Sep 26 02:30:50 2026 GMT
            Not After : Sep 28 02:30:50 2026 GMT
        Subject: CN=6ab72e5b-7b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:c7:1b:26:c0:0a:af:c0:c9:9e:13:f8:44:c4:
                    b9:f6:32:22:29:bc:2e:af:69:73:9d:56:ec:7e:88:
                    7d:3b:c9:aa:3b:40:22:18:6f:a9:65:11:04:39:45:
                    9a:f5:21:30:ba:33:c0:59:bc:47:66:7a:de:93:c6:
                    05:a1:be:22:cd:1f:db:bc:07:9f:0c:e1:9a:70:92:
                    15:d2:35:93:92:2b:71:cc:38:0d:ad:d1:f8:6f:ab:
                    77:f0:29:f7:7b:9b:4e:d9:b4:a1:94:56:d9:7c:6c:
                    b6:41:36:78:87:4c:fd:41:24:6f:67:36:02:a6:3a:
                    99:34:e6:22:03:a9:cb:d0:0f:85:4a:69:12:aa:32:
                    64:86:ba:bb:53:64:90:97:80:a2:4d:9e:28:d7:25:
                    6f:0c:85:9e:1c:d8:a1:f9:b5:22:1c:98:77:d9:af:
                    c1:f3:b0:dd:02:81:e1:21:2f:3b:17:7e:ad:c3:57:
                    e4:98:8a:73:43:82:0d:3e:5a:46:55:cc:95:ea:7d:
                    e4:9a:f3:26:b4:ab:72:d6:71:9f:d5:a7:61:03:ed:
                    b2:e0:67:47:63:a6:20:fe:b3:67:87:f7:5f:f1:10:
                    17:7d:1a:fa:13:d0:c3:c3:85:06:72:1b:59:c8:3d:
                    0a:4f:54:be:a8:b6:c5:a8:2a:49:9c:22:c4:e7:6f:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:03:18:43:0D:DD:C2:B6:4C:7F:B5:76:EA:75:57:62:93:4D:B7:4B
            X509v3 Authority Key Identifier:
                keyid:81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e6:05:44:c4:99:5a:fb:b1:3b:0f:c5:dd:cf:f2:4f:9c:70:
         5e:45:2d:0e:34:bd:fe:3d:32:91:5a:ba:ef:3c:44:cd:32:6b:
         74:9e:18:2e:9f:ee:77:97:11:8c:d5:df:de:17:0d:f3:be:35:
         46:3f:40:ee:1b:1e:4f:d9:94:da:4e:83:54:c3:f2:ed:b6:ea:
         8f:b5:a3:86:fa:8d:0c:9c:6e:61:c6:68:f4:10:f3:1c:fb:87:
         9a:f6:6f:eb:72:4c:1c:3b:33:42:3a:26:db:6a:ed:57:b7:f4:
         fc:a7:51:b3:5d:6c:62:ee:a0:e9:fe:58:5b:40:fe:27:f9:c8:
         a9:0c:34:70:dd:91:4b:fe:db:4f:6e:6c:c7:a0:30:39:51:a2:
         19:45:ff:3c:bc:02:61:25:59:46:a1:d0:7e:8b:b5:5e:d2:3e:
         c6:1d:61:5f:b8:e3:75:dd:76:87:a8:8e:59:e2:b2:a8:45:92:
         5b:8b:b2:9b:f7:84:6d:e2:db:8d:10:23:74:fe:95:02:dc:18:
         ed:0c:b1:18:46:17:d1:a5:23:d0:dd:d0:35:94:e5:bd:d6:39:
         cb:85:28:f1:5a:3d:0c:11:79:c7:8c:89:69:4f:e4:4e:e9:a8:
         d3:b7:0b:8f:0b:7e:f1:15:b8:be:6b:dc:e9:a4:fd:ad:45:47:
         e7:ce:af:e2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBzYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTJFODFBRjExMC8GA1UEBRMoODEzMTY0RTUzNURGNUIxQjQzRjhGQTZFMjI1REQw
RkE5OENGNkZFRDAeFw0yNjA5MjYwMjMwNTBaFw0yNjA5MjgwMjMwNTBaMBgxFjAU
BgNVBAMTDTZhYjcyZTViLTdiNGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqxxsmwAqvwMmeE/hExLn2MiIpvC6vaXOdVux+iH07yao7QCIYb6llEQQ5
RZr1ITC6M8BZvEdmet6TxgWhviLNH9u8B58M4ZpwkhXSNZOSK3HMOA2t0fhvq3fw
Kfd7m07ZtKGUVtl8bLZBNniHTP1BJG9nNgKmOpk05iIDqcvQD4VKaRKqMmSGurtT
ZJCXgKJNnijXJW8MhZ4c2KH5tSIcmHfZr8HzsN0CgeEhLzsXfq3DV+SYinNDgg0+
WkZVzJXqfeSa8ya0q3LWcZ/Vp2ED7bLgZ0djpiD+s2eH91/xEBd9GvoT0MPDhQZy
G1nIPQpPVL6otsWoKkmcIsTnb/AhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzwMY
Qw3dwrZMf7V26nVXYpNNt0swHwYDVR0jBBgwFoAUgTFk5TXfWxtD+PpuIl3Q+pjP
b+0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUyRTgxLzJEQTI0NEEwNDE2NzExRUM4NzBBMzA3Q0Q4QTAxNENFL2dURms1
VFhmV3h0RC1QcHVJbDNRLXBqUGItMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dURms1VFhmV3h0RC1QcHVJbDNRLXBqUGItMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTJFODEvMkRBMjQ0QTA0MTY3MTFFQzg3MEEzMDdDRDhB
MDE0Q0UvZ1RGazVUWGZXeHRELVBwdUlsM1EtcGpQYi0wLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQ5gVExJla+7E7D8Xdz/JPnHBeRS0O
NL3+PTKRWrrvPETNMmt0nhgun+53lxGM1d/eFw3zvjVGP0DuGx5P2ZTaToNUw/Lt
tuqPtaOG+o0MnG5hxmj0EPMc+4ea9m/rckwcOzNCOibbau1Xt/T8p1GzXWxi7qDp
/lhbQP4n+cipDDRw3ZFL/ttPbmzHoDA5UaIZRf88vAJhJVlGodB+i7Ve0j7GHWFf
uON13XaHqI5Z4rKoRZJbi7Kb94Rt4tuNECN0/pUC3BjtDLEYRhfRpSPQ3dA1lOW9
1jnLhSjxWj0MEXnHjIlpT+RO6ajTtwuPC37xFbi+a9zppP2tRUfnzq/i
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:27:21 2026 by rpki-client