Error: rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
File:                     6vTkF_QNHJDUbdlViOspDev7ius.mft (raw, json)
Hash identifier:          n1nn1Opv4ayw43Sq8yiwyzxMHXf12rsiVL+ll80WURo=
Subject key identifier:   8D:50:2C:A7:EF:6D:82:3C:2A:7E:B6:4F:35:78:B9:CA:09:C7:D3:8A
Authority key identifier: EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
Certificate issuer:       /CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Certificate serial:       04C8
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
Manifest number:          04C6
Signing time:             Wed 23 Sep 2026 03:32:14 +0000
Manifest this update:     Wed 23 Sep 2026 03:32:13 +0000
Manifest next update:     Fri 25 Sep 2026 03:32:13 +0000
Files and hashes:         1: 6vTkF_QNHJDUbdlViOspDev7ius.crl (hash: 6sdWT5p30a99QcPp3CwKr2M0K+ygDgbNYPVUKD4QDxA=)
                          2: D505C1903E8F11EFAE9EEE8B762E951A.roa (hash: NwidDV20CYZEDHZ6t+ZNN3IKmoqOlGtHrBQtSGaeJsg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                          rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224 (0x4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC8BRI, serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
        Validity
            Not Before: Sep 23 03:32:13 2026 GMT
            Not After : Sep 25 03:32:13 2026 GMT
        Subject: CN=6ab3483e-3c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:dc:f8:ce:87:b7:f6:9d:0b:34:72:0f:32:9a:
                    f7:47:0d:ba:28:2d:a0:e5:05:6a:ef:53:4c:cb:9b:
                    0a:66:b5:cf:19:0f:00:e1:f1:1a:c7:4a:8c:76:20:
                    28:ac:40:29:ac:1b:fc:d4:8a:8d:7b:ae:d3:ac:4e:
                    fe:91:60:c4:47:9c:58:65:3e:cb:5c:f3:c7:18:ec:
                    54:41:dd:62:26:27:12:dc:8b:1d:6d:42:27:75:c1:
                    93:b9:ba:4b:32:a4:3f:88:9b:0b:3f:f6:fd:2f:79:
                    8c:f3:cd:81:f9:82:ad:bd:5c:70:58:7e:3c:6a:91:
                    51:4c:b1:7e:a5:28:02:c5:9c:4b:38:ff:55:fa:5b:
                    cb:10:81:32:45:43:7f:89:ee:15:8a:59:81:be:ca:
                    02:1d:e6:75:51:49:09:2b:64:33:44:91:d7:4c:be:
                    c1:25:51:f0:cd:9e:db:2d:ef:37:d4:b9:45:b0:d6:
                    64:d0:03:19:80:ff:03:64:5d:bd:5d:a8:82:ba:84:
                    21:b0:41:ab:24:06:92:a9:be:aa:aa:81:f1:9f:e1:
                    cd:8f:15:5f:80:46:af:4d:0a:b4:58:86:80:3a:1b:
                    35:6e:6c:17:a9:f5:28:6d:9a:1b:d3:03:cc:ef:e3:
                    d6:94:44:45:59:81:51:00:cf:22:37:f0:5b:ff:8b:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:50:2C:A7:EF:6D:82:3C:2A:7E:B6:4F:35:78:B9:CA:09:C7:D3:8A
            X509v3 Authority Key Identifier:
                keyid:EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1b:54:b3:51:18:5e:41:1a:f6:80:2a:8b:76:52:82:61:2f:
         06:d2:e8:30:c4:d9:d0:9d:06:af:8c:33:78:9b:75:e1:91:40:
         a9:5c:8e:db:b1:bd:b8:ce:96:5d:98:6e:94:68:2f:cb:07:8e:
         2a:a5:06:c6:af:28:a0:5f:ad:c3:de:ab:1c:2f:28:ae:5e:5b:
         2e:47:70:ce:b9:e2:f2:f2:f2:de:52:14:fd:77:47:fb:0c:ea:
         c9:5a:93:41:67:e3:bf:89:52:40:e7:c8:62:56:54:8c:0c:09:
         c8:0b:18:72:af:3a:65:e7:57:ee:e0:b1:2a:ee:41:ba:6c:31:
         91:23:f3:16:d7:7a:a7:6d:6b:bc:15:bc:89:b0:e6:b8:fe:dd:
         22:c0:39:87:d2:17:a4:13:7d:4f:78:52:d7:7f:a6:5e:00:5b:
         d7:ad:6a:2d:1e:b3:7b:6d:d5:03:62:41:6d:7e:55:82:23:9c:
         7c:87:2d:74:63:9d:1b:88:43:e3:83:6c:b1:18:04:58:d9:2a:
         73:5b:ea:ff:df:02:84:45:ab:ce:ae:eb:51:0e:ef:ad:e6:49:
         67:89:eb:f9:8c:f6:9a:e0:15:8e:f1:f3:50:5b:bd:e3:96:fe:
         44:38:30:7e:45:6f:91:36:0f:92:78:06:b6:e0:af:37:21:08:
         cc:ba:cd:16
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBMgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0ZDOEJSSTExMC8GA1UEBRMoRUFGNEU0MTdGNDBEMUM5MEQ0NkREOTU1ODhFQjI5
MERFQkZCOEFFQjAeFw0yNjA5MjMwMzMyMTNaFw0yNjA5MjUwMzMyMTNaMBgxFjAU
BgNVBAMTDTZhYjM0ODNlLTNjN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDP3PjOh7f2nQs0cg8ymvdHDbooLaDlBWrvU0zLmwpmtc8ZDwDh8RrHSox2
ICisQCmsG/zUio17rtOsTv6RYMRHnFhlPstc88cY7FRB3WImJxLcix1tQid1wZO5
uksypD+Imws/9v0veYzzzYH5gq29XHBYfjxqkVFMsX6lKALFnEs4/1X6W8sQgTJF
Q3+J7hWKWYG+ygId5nVRSQkrZDNEkddMvsElUfDNntst7zfUuUWw1mTQAxmA/wNk
Xb1dqIK6hCGwQaskBpKpvqqqgfGf4c2PFV+ARq9NCrRYhoA6GzVubBep9ShtmhvT
A8zv49aUREVZgVEAzyI38Fv/i7otAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUjVAs
p+9tgjwqfrZPNXi5ygnH04owHwYDVR0jBBgwFoAU6vTkF/QNHJDUbdlViOspDev7
iuswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGQzhCLzkyQkUyQTk2MEVBOTExRUU4MTg1NjA3NjRBRDlFNkZDLzZ2VGtG
X1FOSEpEVWJkbFZpT3NwRGV2N2l1cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzZ2VGtGX1FOSEpEVWJkbFZpT3NwRGV2N2l1cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0ZDOEIvOTJCRTJBOTYwRUE5MTFFRTgxODU2MDc2NEFEOUU2
RkMvNnZUa0ZfUU5ISkRVYmRsVmlPc3BEZXY3aXVzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9G1SzURheQRr2gCqLdlKCYS8G0ugwxNnQ
nQavjDN4m3XhkUCpXI7bsb24zpZdmG6UaC/LB44qpQbGryigX63D3qscLyiuXlsu
R3DOueLy8vLeUhT9d0f7DOrJWpNBZ+O/iVJA58hiVlSMDAnICxhyrzpl51fu4LEq
7kG6bDGRI/MW13qnbWu8FbyJsOa4/t0iwDmH0hekE31PeFLXf6ZeAFvXrWotHrN7
bdUDYkFtflWCI5x8hy10Y50biEPjg2yxGARY2SpzW+r/3wKERavOrutRDu+t5kln
iev5jPaa4BWO8fNQW73jlv5EODB+RW+RNg+SeAa24K83IQjMus0W
-----END CERTIFICATE-----
Generated at Wed Sep 23 07:22:07 2026 by rpki-client