Error: rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          R2EMRfRZS1+PinOWNlYuINwnbiyw1EKXneaW6dpbjdY=
Subject key identifier:   05:5A:F1:B6:D8:3C:61:56:5C:06:4A:AD:60:52:B4:14:BD:D6:EE:D0
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       06E7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          06DF
Signing time:             Sat 26 Sep 2026 02:36:15 +0000
Manifest this update:     Sat 26 Sep 2026 02:36:15 +0000
Manifest next update:     Mon 28 Sep 2026 02:36:15 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: vdndwNUvMlZ7f2NREjmW2fC1v7SgE3d1/YEs8qLQ8fo=)
                          2: FA488F2084E511F1ACE5B8D1CE1D38B0.roa (hash: Pd+84KPhPBsNkpBN1hVe9FHlx1CumYc3oDhGGRlaBgg=)
                          3: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          4: F05CDE6684E611F1886BCED9CE1D38B0.roa (hash: BKX3UcRCwM62AYLNiq8SzyAS2T5C7ScNOyMg7wplAWU=)
                          5: 2C82DE8284E611F19FB81CD2CE1D38B0.roa (hash: b3bTfsHITdYZ9ni2iIT1pWPRt5idzYLvZ2tzcXpea+8=)
                          6: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 02:36:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Sep 26 02:36:15 2026 GMT
            Not After : Sep 28 02:36:15 2026 GMT
        Subject: CN=6ab72f9f-da2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:75:b8:91:f0:2c:f0:83:74:48:04:d5:80:fb:
                    74:ae:8e:9b:c9:9b:30:85:c7:0a:bb:96:ed:c2:56:
                    41:02:47:c7:38:0b:f6:61:85:18:44:85:3d:a8:81:
                    f1:dd:ae:48:38:5d:5e:11:95:18:52:70:3e:e3:9a:
                    3c:1f:ef:61:cc:a5:c3:80:3d:46:f8:08:27:d2:87:
                    f3:54:11:4d:b4:1f:5f:90:71:9d:bc:d8:ba:af:fa:
                    22:89:f6:9b:79:c8:79:50:67:33:87:a6:c0:b9:b6:
                    bc:05:cd:14:e0:5b:25:81:13:88:89:10:0f:d1:3b:
                    ca:91:33:ca:08:a2:6c:ee:3a:17:8a:d7:75:76:32:
                    68:81:16:0e:ee:b3:fd:b9:23:07:a2:52:4f:70:da:
                    d0:ba:9a:ee:7c:fb:ae:c0:f3:3f:af:9b:f0:4a:33:
                    52:6c:26:82:79:f8:15:4f:4e:de:72:84:ca:0e:89:
                    37:4f:a9:bd:65:d6:01:3a:02:ed:e0:39:e9:e7:e8:
                    f2:a7:92:0d:70:fb:8a:ee:37:fd:d0:69:36:08:d6:
                    f8:37:63:f6:67:5b:f1:f8:4d:08:47:b5:18:05:35:
                    ee:e1:b1:b6:61:41:a3:5f:b1:d2:0b:c2:e7:e4:9f:
                    48:e4:6c:0b:5f:a0:e1:a4:69:a1:44:d1:ee:ba:f7:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5A:F1:B6:D8:3C:61:56:5C:06:4A:AD:60:52:B4:14:BD:D6:EE:D0
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:80:5c:ee:88:aa:d9:ec:1d:fa:a9:b0:f0:84:45:f7:4c:2a:
         63:40:37:03:18:27:c7:f4:fa:21:e0:05:a8:0b:8c:bf:8f:8c:
         f9:d6:a5:be:4a:34:f0:b9:87:d3:74:4b:ca:18:55:df:21:48:
         a5:8a:70:69:26:a2:72:c7:d3:0c:44:bb:ef:70:10:5e:30:10:
         f6:a9:32:e1:e3:b3:3e:a4:85:f6:f0:57:89:0d:39:b2:68:7d:
         b9:14:d4:e1:e0:b1:d3:4a:e8:28:27:af:a4:05:f3:6c:1f:51:
         63:c1:98:5c:fc:3f:f2:f4:56:55:17:df:49:65:30:fa:8e:7e:
         51:4e:23:ac:d6:be:bb:b8:5d:fe:ba:08:83:98:c3:fa:93:dd:
         b1:8c:96:44:bf:9a:47:8b:12:90:0a:e4:11:7d:b2:df:49:67:
         da:7f:6e:85:0c:6a:e1:53:62:e3:48:30:4c:10:30:a0:93:c1:
         2d:20:e6:65:72:7d:91:d8:70:c5:0e:9b:70:eb:93:bd:04:b9:
         ad:77:14:86:4f:e2:b1:b4:5f:9d:32:eb:49:44:ac:f7:96:8d:
         98:9f:f3:d6:4b:dc:71:5d:15:44:d6:1f:e7:da:42:d6:ba:2b:
         be:e0:8c:22:83:42:fa:17:c3:d0:e6:73:6e:6e:eb:7c:48:40:
         bd:30:f6:ab
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBucwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzAzNjlBUjExMC8GA1UEBRMoMjk1OTFDNjU1MzNFRkQwODk3MkY0QTk3NUJFQzQx
QzY1QjQ0NUVFMDAeFw0yNjA5MjYwMjM2MTVaFw0yNjA5MjgwMjM2MTVaMBgxFjAU
BgNVBAMTDTZhYjcyZjlmLWRhMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDadbiR8Czwg3RIBNWA+3SujpvJmzCFxwq7lu3CVkECR8c4C/ZhhRhEhT2o
gfHdrkg4XV4RlRhScD7jmjwf72HMpcOAPUb4CCfSh/NUEU20H1+QcZ282Lqv+iKJ
9pt5yHlQZzOHpsC5trwFzRTgWyWBE4iJEA/RO8qRM8oIomzuOheK13V2MmiBFg7u
s/25IweiUk9w2tC6mu58+67A8z+vm/BKM1JsJoJ5+BVPTt5yhMoOiTdPqb1l1gE6
Au3gOenn6PKnkg1w+4ruN/3QaTYI1vg3Y/ZnW/H4TQhHtRgFNe7hsbZhQaNfsdIL
wufkn0jkbAtfoOGkaaFE0e669whXAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBVrx
ttg8YVZcBkqtYFK0FL3W7tAwHwYDVR0jBBgwFoAUKVkcZVM+/QiXL0qXW+xBxltE
XuAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwMzY5LzU2NTA1MjkwN0U3ODExRUM5RkFEMTRDQjVBNDBENTc3L0tWa2Na
Vk0tX1FpWEwwcVhXLXhCeGx0RVh1QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0tWa2NaVk0tX1FpWEwwcVhXLXhCeGx0RVh1QS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzAzNjkvNTY1MDUyOTA3RTc4MTFFQzlGQUQxNENCNUE0MEQ1
NzcvS1ZrY1pWTS1fUWlYTDBxWFcteEJ4bHRFWHVBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANgFzuiKrZ7B36qbDwhEX3TCpjQDcDGCfH
9Poh4AWoC4y/j4z51qW+SjTwuYfTdEvKGFXfIUilinBpJqJyx9MMRLvvcBBeMBD2
qTLh47M+pIX28FeJDTmyaH25FNTh4LHTSugoJ6+kBfNsH1FjwZhc/D/y9FZVF99J
ZTD6jn5RTiOs1r67uF3+ugiDmMP6k92xjJZEv5pHixKQCuQRfbLfSWfaf26FDGrh
U2LjSDBMEDCgk8EtIOZlcn2R2HDFDptw65O9BLmtdxSGT+KxtF+dMutJRKz3lo2Y
n/PWS9xxXRVE1h/n2kLWuiu+4Iwig0L6F8PQ5nNubut8SEC9MPar
-----END CERTIFICATE-----
Generated at Sun Sep 27 04:04:24 2026 by rpki-client