Error: rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
File:                     JLXuZ0cVou7uiGTqX17kcyPPdmw.mft (raw, json)
Hash identifier:          ywP/XmAisoXhpjuRmNUEIrs4efbwIRmy0vupdVXzay4=
Subject key identifier:   8E:4C:11:71:73:C6:4E:EC:F0:78:C1:CE:26:19:53:EA:0E:E0:99:B8
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       035C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
Manifest number:          033A
Signing time:             Tue 13 Oct 2026 04:26:12 +0000
Manifest this update:     Tue 13 Oct 2026 04:26:11 +0000
Manifest next update:     Thu 15 Oct 2026 04:26:11 +0000
Files and hashes:         1: JLXuZ0cVou7uiGTqX17kcyPPdmw.crl (hash: aAM7GrJllqdzf30bG7EzrP3v+HlNJRf4PWTK8KvpK28=)
                          2: 771AE88EFB4A11F0AAFCE1A7DAE4EC9C.roa (hash: 5tEpAkBvCOfAvu8ObJ3pACeWI9scs8Yqzu2ITlQlaDQ=)
                          3: 9DF3C418FB7111F0A5973594DAE4EC9C.roa (hash: /1YlMMU4WG2QEhz0bolihk62C9fCsQxljp6A/1sNcv0=)
                          4: FC0F6B5EFB5511F0BCF3E4EADAE4EC9C.roa (hash: x7exxP2PvrkzXg2ix0W+iY27Dg1chGMloRCXgNJLLaM=)
                          5: DB044376FB5511F0A591DDEADAE4EC9C.roa (hash: Fg9P/HeaXv5QRYtAlIwHYJ5z/Th0BahCHKAK+/f3r2k=)
                          6: E1598838FB7011F0AD701490DAE4EC9C.roa (hash: JgP43kA/lXBRsZlHuqrvGUDtkQ96iasjAO3K+971hDw=)
                          7: B7DC0C10FB7011F0A1FBB18FDAE4EC9C.roa (hash: gkkYnpB0U6pQ1qp1RGflNEgY1w2rOgPlQCBUgsVxYXQ=)
                          8: 02432D1AFB7111F08C9A3D90DAE4EC9C.roa (hash: 0KEm6jxPgvSM10BRHAAO1KiRR7sFqJFpUpgqfbZ6fBI=)
                          9: 94529CFAFB7011F0A6B2258CDAE4EC9C.roa (hash: K+Bby34mABHACcENA0ib4aw1k4qJ8xaR+V02K1VowE0=)
                          10: 2A468C90FB7011F08CFAEB8BDAE4EC9C.roa (hash: iBjiD/V09quEYYt7v+D5Kd6pidCvsxSHuHnaWoDBtkM=)
                          11: 74E3E458B4CD11F0AA03ECBADAE4EC9C.roa (hash: AY0QiwrjAafEOuB3cHJtZkwE9/VN10SzQVkJB6bXQ/Y=)
                          12: 1ADF23A0FB7211F0B03CE897DAE4EC9C.roa (hash: lkmbuGj1M2XNxgNqCelIQB8e/yGVlL35nnN7RlOAw64=)
                          13: 48F28C06D4E311F08F11FDA2DAE4EC9C.roa (hash: CI4H6ZH2WY4yMzJpNZrOIHduBWMsPnflJQ3HTefTY6A=)
                          14: 073F8D34FB5511F092C4A7E6DAE4EC9C.roa (hash: aQiVzz7CCp4LQ4sRPU9y/pF5XqpbYyhPkGWXchU0sHA=)
                          15: 2405BF08FB7111F088A44D90DAE4EC9C.roa (hash: KcIa8OJXIo7gy9SBLq1jvKJhy2bsWROyS2PdIDVB0aY=)
                          16: D2CBC89AFB6F11F08BFBDC87DAE4EC9C.roa (hash: yWjSVgCdgImWguwsXiqvgBYxXDi5Rc5fmfRehJcd2BE=)
                          17: 168C273AFB5411F09E701DE2DAE4EC9C.roa (hash: 2fNUGnW/8pzXCydHd5WxxxXL3gbLVKfvLhHQevEpQPs=)
                          18: 09EFE910FB6F11F092FE9983DAE4EC9C.roa (hash: 5+kski70YgFo/B4ZKgiT473quch1JHle/5OahJEeTGY=)
                          19: 360E593ED4E411F09FE3C0AADAE4EC9C.roa (hash: 4EiOzBHSIujk4Ks69ZGlktfRhgSEW8WBhQg8DJKaNJ4=)
                          20: F514235AD4E311F091552FA7DAE4EC9C.roa (hash: Z5F0JLY3mYskMg+U3W1krrAPY7K8I3NgMQAO+hmJvvI=)
                          21: 20C92AA4FB4A11F0826DFBA3DAE4EC9C.roa (hash: pU2QyAzhUpYD/rd6hihw6WwXOr/lkIocunjQQqS36KA=)
                          22: 39D08E82FB6F11F0A1AC6984DAE4EC9C.roa (hash: Ycg384WdSPMUkh98VDjWotmlGgVC8e39Nv9rbPsRAvQ=)
                          23: F88BC080FB6F11F09D34A289DAE4EC9C.roa (hash: /GE28hujkDfkadVHYpvzQjNEQIJ0HAGNjq2XCpg5udQ=)
                          24: 4729B37CFB4911F0A899D89FDAE4EC9C.roa (hash: yT0NPsWigo1cldoU0WJEXq2hmJdWuDarxTKcbBJC6Mo=)
                          25: FCADBB1CFB4911F087FEF6A3DAE4EC9C.roa (hash: Ll/t+UGJiPjy4nvQYWhEkhTvq61Iji3DxrUVlHahphw=)
                          26: CBE36C5CFB5311F0A1A48BDEDAE4EC9C.roa (hash: 9zgVKL7gnDZw7DRK/Oi9XT1ccvzS/hLfmpZnDaTQr1c=)
                          27: AAADAA7CFB6F11F0B6ADD787DAE4EC9C.roa (hash: 6wzJ/nsH9Eb8kVkU7cLwWlMlu5zc5WNxR2l0My0vI/4=)
                          28: 49EB67B4FB7011F0B44A0D8CDAE4EC9C.roa (hash: xqzlRa/T31krLVVP5laj/PfhrpGfSUH7BGUNxUu0quI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:26:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Oct 13 04:26:11 2026 GMT
            Not After : Oct 15 04:26:11 2026 GMT
        Subject: CN=6acdb2e4-e24d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:30:05:c8:bd:42:45:69:0b:ee:c9:9b:53:
                    6b:53:95:f1:9f:5c:63:03:68:89:f9:a8:67:26:2e:
                    b3:ba:50:fa:07:02:ca:1e:ad:1a:3e:ca:0b:fe:c8:
                    3b:23:56:2a:56:e4:c6:c6:60:4b:cc:3c:86:c4:c0:
                    e9:6e:26:94:1f:c7:2e:40:6a:57:ae:3e:a6:7b:93:
                    81:61:cd:de:00:01:77:8e:29:2d:00:d9:bb:f6:29:
                    b3:f1:d2:37:85:30:f3:1d:e4:6a:ff:aa:2b:ab:01:
                    e3:17:4d:82:82:9d:d2:58:81:74:f7:97:57:91:c3:
                    ba:53:b6:7a:54:78:88:48:43:65:5f:15:0b:b7:b2:
                    8b:6d:e9:f9:9c:2a:c2:8e:73:eb:0a:09:d2:5f:0b:
                    48:5b:4f:1b:05:0e:bb:e2:44:97:20:8b:0b:9a:7b:
                    53:0f:ae:8a:71:8c:a5:48:54:54:30:e2:ab:93:b1:
                    2e:ed:2e:58:26:4b:71:0e:84:44:6d:97:8b:17:ee:
                    86:50:27:20:d1:bf:0b:11:f7:98:09:86:20:ee:b7:
                    61:15:db:8e:89:fa:e7:2a:b4:ff:4e:92:94:05:ee:
                    95:39:93:43:f0:d9:de:86:d3:17:c8:a5:93:c5:ff:
                    4d:3b:2a:4e:7e:3f:3a:5e:4c:fc:01:a0:ca:49:6c:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:11:71:73:C6:4E:EC:F0:78:C1:CE:26:19:53:EA:0E:E0:99:B8
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:c9:7d:45:fe:09:bc:cb:0b:ab:68:86:96:9b:53:31:78:
         f6:98:0b:c3:00:c6:c7:d5:47:75:72:7a:58:13:9c:e0:04:8e:
         8e:68:c9:46:47:f8:bb:25:52:06:bd:47:6a:30:eb:3f:b0:f2:
         98:4f:9b:c1:f4:a4:c2:c7:f9:0a:49:fd:0a:d1:ed:c5:c2:92:
         ba:87:c3:67:32:06:c2:24:95:36:0d:5f:b7:a2:c7:79:47:63:
         6d:46:31:27:7e:20:44:45:fb:80:6e:2b:19:61:de:d7:1c:47:
         04:9d:17:ad:7c:0e:56:0f:e9:bc:8b:01:ea:ee:a2:aa:16:95:
         b0:0d:01:63:d6:71:c0:46:24:9f:e3:1a:22:a2:ad:f3:0c:63:
         37:4e:4b:c8:6d:ef:76:85:15:da:cd:b9:cb:58:ce:5c:ad:5d:
         97:cf:db:61:f8:42:e7:6f:89:3a:15:03:c3:42:a6:d4:bd:b0:
         37:f7:1f:9e:7b:40:4a:ec:32:5a:11:a9:09:a2:a5:c8:54:7e:
         4a:4e:03:67:7f:33:75:b1:4e:a4:39:2b:99:0c:5b:f7:5d:53:
         00:d3:c2:ae:29:07:eb:6d:a5:ce:cc:06:b4:39:be:01:bb:08:
         cd:f9:59:00:16:1e:ff:ca:68:63:78:b9:78:3a:e5:a2:43:2c:
         2b:77:88:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:33:59 2026 by rpki-client