Error: rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
File:                     M_vh3N40HGSYaNQWvz6gAALE3yA.mft (raw, json)
Hash identifier:          cq1qLG7jvWKtewoglU2dvQlWW5GHvSa4eKNEqolFGZc=
Subject key identifier:   16:78:E3:65:C3:4B:45:CC:5D:92:AB:26:74:62:78:02:7E:1E:42:81
Authority key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
Certificate issuer:       /CN=F365C754AF/serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
Certificate serial:       0518
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
Manifest number:          0514
Signing time:             Fri 25 Sep 2026 03:23:35 +0000
Manifest this update:     Fri 25 Sep 2026 03:23:34 +0000
Manifest next update:     Sun 27 Sep 2026 03:23:34 +0000
Files and hashes:         1: M_vh3N40HGSYaNQWvz6gAALE3yA.crl (hash: O1aHmUoKsL728ezvMmquxd0GsGWRRTQoV6G5pdkCZbQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:23:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C754AF, serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
        Validity
            Not Before: Sep 25 03:23:34 2026 GMT
            Not After : Sep 27 03:23:34 2026 GMT
        Subject: CN=6ab5e937-d136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ca:43:ec:01:1e:13:c1:de:64:66:fb:c4:7e:
                    86:2b:d2:ba:ed:80:c7:90:8f:19:66:e5:ca:92:dc:
                    ad:d9:6c:12:8f:8f:8a:ab:0f:d9:75:ed:63:d9:85:
                    96:d3:33:22:5d:c9:13:0e:c2:2a:cb:4f:4b:ae:60:
                    55:11:b3:4b:b5:e3:7e:99:4c:86:e9:56:6f:e3:b1:
                    a9:de:22:f9:25:30:db:e3:7f:88:49:c4:12:cc:cc:
                    66:8f:5a:c4:33:44:6c:3b:30:39:2b:ed:25:42:9f:
                    57:ae:14:5b:a3:8f:c1:81:92:f9:5c:61:e1:da:0e:
                    72:c9:f6:74:95:84:7f:b4:c3:b4:59:04:d0:13:3b:
                    a0:95:0d:3a:71:ad:7c:5e:ea:85:15:e6:05:cf:5f:
                    2d:55:f0:5c:57:80:ef:33:c2:3a:d1:4b:3d:f6:e2:
                    bb:90:64:c7:ed:e5:9e:f9:16:81:3f:23:1b:46:aa:
                    5a:6e:f4:9d:f9:ee:94:ac:29:ac:e3:15:e2:14:3d:
                    c7:36:cd:47:72:62:05:41:eb:a4:a5:18:1e:6e:7c:
                    00:51:30:3e:01:9f:4c:e2:79:14:70:83:cf:77:82:
                    92:14:77:eb:ef:a5:77:d9:6a:c9:d2:eb:f2:58:21:
                    92:73:56:8b:51:5c:56:19:e1:48:4b:92:f4:ae:36:
                    05:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:78:E3:65:C3:4B:45:CC:5D:92:AB:26:74:62:78:02:7E:1E:42:81
            X509v3 Authority Key Identifier:
                keyid:33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e6:b3:6c:51:87:57:88:8b:e8:9b:e9:28:b7:09:73:38:76:
         2e:de:5f:76:39:de:c2:b5:a1:d6:43:94:7f:e4:97:2b:f0:b1:
         1a:24:c5:82:bd:98:13:af:32:8f:82:90:2d:0f:22:84:58:be:
         b6:5a:b7:d9:e2:a0:8d:d8:98:76:20:a5:70:6e:2e:b2:78:8f:
         c5:77:5d:90:d2:51:fe:dd:05:80:aa:bb:30:b2:ef:ea:8b:28:
         b2:33:11:be:6e:5a:11:d7:5c:67:fa:e7:f5:98:fc:c1:e6:84:
         fe:78:1f:8e:2b:5f:f7:be:06:c4:1e:d8:8c:a4:4e:36:eb:c6:
         03:5c:5f:91:34:c8:4a:7c:1c:a5:d8:af:d6:df:30:70:98:39:
         0b:ff:5e:ab:1f:34:d1:a0:2e:cc:41:b2:1f:9b:b6:f4:63:f4:
         ef:c6:b0:34:7f:64:3b:05:3b:1a:85:86:7f:17:ce:35:27:20:
         95:94:9d:04:28:de:a4:48:65:44:b7:64:c0:48:2f:fc:b1:eb:
         18:37:ea:a2:32:35:ba:60:9f:0c:c0:fa:c6:b0:fb:45:ea:f5:
         12:aa:05:2e:20:8c:2f:25:2a:b3:ca:91:80:24:42:53:ff:3c:
         da:c0:1e:68:8f:c9:89:5d:1d:59:0c:d9:41:ca:79:9b:04:5a:
         44:b6:13:4d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBRgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUM3NTRBRjExMC8GA1UEBRMoMzNGQkUxRENERTM0MUM2NDk4NjhENDE2QkYzRUEw
MDAwMkM0REYyMDAeFw0yNjA5MjUwMzIzMzRaFw0yNjA5MjcwMzIzMzRaMBgxFjAU
BgNVBAMTDTZhYjVlOTM3LWQxMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUykPsAR4Twd5kZvvEfoYr0rrtgMeQjxlm5cqS3K3ZbBKPj4qrD9l17WPZ
hZbTMyJdyRMOwirLT0uuYFURs0u1436ZTIbpVm/jsaneIvklMNvjf4hJxBLMzGaP
WsQzRGw7MDkr7SVCn1euFFujj8GBkvlcYeHaDnLJ9nSVhH+0w7RZBNATO6CVDTpx
rXxe6oUV5gXPXy1V8FxXgO8zwjrRSz324ruQZMft5Z75FoE/IxtGqlpu9J357pSs
KazjFeIUPcc2zUdyYgVB66SlGB5ufABRMD4Bn0zieRRwg893gpIUd+vvpXfZasnS
6/JYIZJzVotRXFYZ4UhLkvSuNgWVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFnjj
ZcNLRcxdkqsmdGJ4An4eQoEwHwYDVR0jBBgwFoAUM/vh3N40HGSYaNQWvz6gAALE
3yAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVDNzU0LzlDMjM0MUU4REI5MTExRURCRUJGNjIwQzMwNkQ4QzFEL01fdmgz
TjQwSEdTWWFOUVd2ejZnQUFMRTN5QS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01fdmgzTjQwSEdTWWFOUVd2ejZnQUFMRTN5QS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUM3NTQvOUMyMzQxRThEQjkxMTFFREJFQkY2MjBDMzA2
RDhDMUQvTV92aDNONDBIR1NZYU5RV3Z6NmdBQUxFM3lBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCY5rNsUYdXiIvom+kotwlzOHYu3l92
Od7CtaHWQ5R/5Jcr8LEaJMWCvZgTrzKPgpAtDyKEWL62WrfZ4qCN2Jh2IKVwbi6y
eI/Fd12Q0lH+3QWAqrswsu/qiyiyMxG+bloR11xn+uf1mPzB5oT+eB+OK1/3vgbE
HtiMpE4268YDXF+RNMhKfByl2K/W3zBwmDkL/16rHzTRoC7MQbIfm7b0Y/TvxrA0
f2Q7BTsahYZ/F841JyCVlJ0EKN6kSGVEt2TASC/8sesYN+qiMjW6YJ8MwPrGsPtF
6vUSqgUuIIwvJSqzypGAJEJT/zzawB5oj8mJXR1ZDNlBynmbBFpEthNN
-----END CERTIFICATE-----
Generated at Sat Sep 26 03:45:30 2026 by rpki-client