Error: rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
File:                     DV2bCS_jnIf5O8uUysP2yR0WyOs.mft (raw, json)
Hash identifier:          +RjjnQY1gpKIghxp65Wm1oEbd0s5vcrMRcYxFC2+BEE=
Subject key identifier:   D5:A5:2C:05:B5:73:F5:B7:F3:30:87:65:1F:F5:90:BC:82:4B:7C:20
Authority key identifier: 0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB
Certificate issuer:       /CN=F367890AAF/serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
Certificate serial:       0AD4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
Manifest number:          0ACA
Signing time:             Fri 25 Sep 2026 01:23:02 +0000
Manifest this update:     Fri 25 Sep 2026 01:23:02 +0000
Manifest next update:     Sun 27 Sep 2026 01:23:02 +0000
Files and hashes:         1: DV2bCS_jnIf5O8uUysP2yR0WyOs.crl (hash: p6/5OAvCeUNxI2DS8aYKQqmfrfWHNZZWpg2Pr1/tOyY=)
                          2: 1CD89842944B11EA8D91181BF8AEA228.roa (hash: G8QTB1cDSlhFc1aM1m+wP1xl5Ubb7Vbu7br4H677GAs=)
                          3: 1385324820B311EA8A79CB75F8AEA228.roa (hash: E+0kaNnyaz2XaAgp2UmW3UiOevGh8K77GCjxHRNxjgk=)
                          4: 8CD6FED820B311EAAC843476F8AEA228.roa (hash: Gf1aru2E3Yggqz5sr3+VkWloIXes+1L3V6Xe+EwFJW4=)
                          5: 6C0163EC20B311EAB8D01576F8AEA228.roa (hash: qKJSwkjO0UEEtt3fvEcg777sLhnc5F/s5CDz6fXaO0M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 01:23:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772 (0xad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367890AAF, serialNumber=0D5D9B092FE39C87F93BCB94CAC3F6C91D16C8EB
        Validity
            Not Before: Sep 25 01:23:02 2026 GMT
            Not After : Sep 27 01:23:02 2026 GMT
        Subject: CN=6ab5ccf6-8682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a7:fc:01:13:17:76:ea:12:4c:d9:71:a5:5d:
                    4c:da:36:62:82:b3:6b:25:06:4b:bd:ee:89:da:f9:
                    8f:06:24:e8:bb:e7:91:88:43:2f:e1:5a:68:27:b2:
                    e3:f6:a6:4a:2d:93:26:a5:30:5a:79:72:b1:ca:a8:
                    f5:f6:27:8b:6d:3a:6b:8c:52:49:c0:5e:8f:82:77:
                    20:3e:aa:85:11:aa:51:01:1a:df:92:8e:d2:d2:3a:
                    c6:72:5f:6c:13:d6:47:5f:c3:bc:15:6c:2b:ca:34:
                    1d:bc:9f:a6:0e:d4:c1:3c:c0:2b:fe:0c:fd:c3:7a:
                    48:de:c2:2a:8b:e9:87:a3:2c:52:94:99:83:9b:d8:
                    7d:76:a8:3c:a0:d1:ae:74:6a:c0:7e:dc:8a:b5:51:
                    22:03:c6:e5:41:5d:cf:92:04:44:8e:07:1b:0c:17:
                    5b:99:cf:2e:0c:d7:0f:60:58:a2:8d:ea:c9:54:27:
                    d0:64:37:d2:3b:c3:63:d8:be:47:49:c8:29:87:08:
                    88:9b:fa:0f:43:81:d0:1d:e4:0d:3c:0f:52:54:4b:
                    13:d5:9c:65:f7:a2:59:85:89:51:b4:2f:22:53:b6:
                    b0:9b:68:10:10:f2:11:07:c4:92:8b:a8:5c:d1:e8:
                    32:66:5c:c8:50:67:43:6c:0d:b4:c9:6d:a9:a8:e0:
                    1f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A5:2C:05:B5:73:F5:B7:F3:30:87:65:1F:F5:90:BC:82:4B:7C:20
            X509v3 Authority Key Identifier:
                keyid:0D:5D:9B:09:2F:E3:9C:87:F9:3B:CB:94:CA:C3:F6:C9:1D:16:C8:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DV2bCS_jnIf5O8uUysP2yR0WyOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367890A/D5950BFE814611E98A26EC23F8AEA228/DV2bCS_jnIf5O8uUysP2yR0WyOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a0:57:9a:c2:e2:b0:ed:27:17:26:ea:62:58:b5:f3:34:d4:
         2c:29:12:c1:d4:fb:dd:9f:83:11:97:66:eb:87:c4:24:6f:67:
         dc:27:64:70:d5:ff:01:61:91:e8:ef:e1:83:d6:5e:f7:5e:c2:
         44:ef:40:74:4e:6c:b5:7d:9a:64:c2:19:ca:e9:9e:68:f9:73:
         a1:f6:68:73:5a:23:06:f5:ee:f7:26:6b:ad:a8:da:4c:4f:78:
         27:4e:7c:bf:82:ef:b8:40:53:74:e3:84:9b:1a:42:92:3f:c0:
         2b:18:6f:7a:06:e0:fd:26:42:e1:54:47:d9:a5:44:d7:79:1b:
         27:1a:72:fa:c0:d6:a8:97:a5:2b:5d:8b:2f:82:fd:af:35:53:
         0a:9e:d8:ec:1b:47:3c:81:59:89:98:d7:d1:f5:92:9d:aa:56:
         49:82:67:e5:e1:e6:bb:6f:23:93:8c:64:72:e6:fc:e9:5f:c3:
         1b:07:00:10:0b:41:dd:45:d4:e9:63:ff:0e:e1:20:45:3a:3d:
         21:a1:d9:1a:3d:d5:c0:72:4b:8b:71:63:34:cc:53:cb:91:04:
         82:58:e9:10:d5:a3:b1:62:ed:e1:8f:5a:78:2d:4c:b7:ae:fd:
         fb:b4:56:15:07:84:00:3c:9c:f8:cf:7d:3b:d4:00:c2:7e:36:
         58:78:07:89
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzg5MEFBRjExMC8GA1UEBRMoMEQ1RDlCMDkyRkUzOUM4N0Y5M0JDQjk0Q0FDM0Y2
QzkxRDE2QzhFQjAeFw0yNjA5MjUwMTIzMDJaFw0yNjA5MjcwMTIzMDJaMBgxFjAU
BgNVBAMTDTZhYjVjY2Y2LTg2ODIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0p/wBExd26hJM2XGlXUzaNmKCs2slBku97ona+Y8GJOi755GIQy/hWmgn
suP2pkotkyalMFp5crHKqPX2J4ttOmuMUknAXo+CdyA+qoURqlEBGt+SjtLSOsZy
X2wT1kdfw7wVbCvKNB28n6YO1ME8wCv+DP3DekjewiqL6YejLFKUmYOb2H12qDyg
0a50asB+3Iq1USIDxuVBXc+SBESOBxsMF1uZzy4M1w9gWKKN6slUJ9BkN9I7w2PY
vkdJyCmHCIib+g9DgdAd5A08D1JUSxPVnGX3olmFiVG0LyJTtrCbaBAQ8hEHxJKL
qFzR6DJmXMhQZ0NsDbTJbamo4B+ZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1aUs
BbVz9bfzMIdlH/WQvIJLfCAwHwYDVR0jBBgwFoAUDV2bCS/jnIf5O8uUysP2yR0W
yOswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc4OTBBL0Q1OTUwQkZFODE0NjExRTk4QTI2RUMyM0Y4QUVBMjI4L0RWMmJD
U19qbklmNU84dVV5c1AyeVIwV3lPcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RWMmJDU19qbklmNU84dVV5c1AyeVIwV3lPcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzg5MEEvRDU5NTBCRkU4MTQ2MTFFOThBMjZFQzIzRjhB
RUEyMjgvRFYyYkNTX2puSWY1Tzh1VXlzUDJ5UjBXeU9zLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxoFeawuKw7ScXJupiWLXzNNQsKRLB
1Pvdn4MRl2brh8Qkb2fcJ2Rw1f8BYZHo7+GD1l73XsJE70B0Tmy1fZpkwhnK6Z5o
+XOh9mhzWiMG9e73JmutqNpMT3gnTny/gu+4QFN044SbGkKSP8ArGG96BuD9JkLh
VEfZpUTXeRsnGnL6wNaol6UrXYsvgv2vNVMKntjsG0c8gVmJmNfR9ZKdqlZJgmfl
4ea7byOTjGRy5vzpX8MbBwAQC0HdRdTpY/8O4SBFOj0hodkaPdXAckuLcWM0zFPL
kQSCWOkQ1aOxYu3hj1p4LUy3rv37tFYVB4QAPJz4z3071ADCfjZYeAeJ
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:25:07 2026 by rpki-client