Error: rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.mft
File:                     Fdlfbintt9ciND2PGxuJGRzX_rY.mft (raw, json)
Hash identifier:          QYdGwaIJbSaPtOy0t2tQkTRFpuJqYslXeS5rQD3KR7A=
Subject key identifier:   1D:AC:68:AE:79:C1:4D:72:D6:8F:51:64:C8:97:27:05:BB:D3:F5:CA
Authority key identifier: 15:D9:5F:6E:29:ED:B7:D7:22:34:3D:8F:1B:1B:89:19:1C:D7:FE:B6
Certificate issuer:       /CN=F3689367AF/serialNumber=15D95F6E29EDB7D722343D8F1B1B89191CD7FEB6
Certificate serial:       9D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Fdlfbintt9ciND2PGxuJGRzX_rY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.mft
Manifest number:          9C
Signing time:             Thu 24 Sep 2026 05:36:20 +0000
Manifest this update:     Thu 24 Sep 2026 05:36:20 +0000
Manifest next update:     Sat 26 Sep 2026 05:36:20 +0000
Files and hashes:         1: Fdlfbintt9ciND2PGxuJGRzX_rY.crl (hash: HMQyl8foG+WJrWvUT+BtI3dNFTNmo5Hso2da3jR0hrM=)
                          2: 4C7DA85E402911F1AC2314E9CE1D38B0.roa (hash: SKuYSEUTgADKXB1Cl4lh91s+CFbc+6/oE1Zl62kvoCc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Fdlfbintt9ciND2PGxuJGRzX_rY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 157 (0x9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689367AF, serialNumber=15D95F6E29EDB7D722343D8F1B1B89191CD7FEB6
        Validity
            Not Before: Sep 24 05:36:20 2026 GMT
            Not After : Sep 26 05:36:20 2026 GMT
        Subject: CN=6ab4b6d4-b485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:63:10:40:14:a0:51:11:ad:3c:32:b7:08:f7:
                    72:8d:83:0d:03:bf:06:b6:48:35:72:73:bf:9e:4c:
                    5c:d1:84:02:b4:35:69:e6:a4:d9:7a:f8:a2:4a:77:
                    02:03:8e:25:f1:f2:40:ab:e9:08:1d:8d:62:07:43:
                    09:bf:9d:3c:43:2e:3e:bd:3c:4c:ea:26:ed:43:e1:
                    96:26:c5:e7:93:57:c1:6a:ad:93:2d:18:45:c4:60:
                    e2:d2:a2:8a:7f:a0:61:87:13:ba:51:93:74:4f:1a:
                    b8:90:5b:a9:96:45:70:5d:6b:fc:fa:d7:cc:5e:2d:
                    ef:f1:7b:0d:ac:80:95:82:85:4c:98:94:b0:dd:da:
                    93:8e:4a:21:b9:22:cd:02:51:be:ff:6d:35:de:d7:
                    72:6f:bc:a2:cb:b6:cd:6c:d1:34:e7:0c:bd:7d:f1:
                    4d:ca:95:a7:9b:8c:f3:dc:a5:56:39:36:0c:d4:2a:
                    41:8d:34:6c:fb:27:46:cc:72:ba:4e:21:9d:86:02:
                    ca:4a:25:c3:1d:ce:71:7d:66:0e:33:d2:d5:44:31:
                    8b:31:6d:2d:b1:06:2f:c7:24:11:13:64:a7:41:fa:
                    3e:69:e9:1c:fc:d8:dd:60:53:f6:0f:1b:3c:ba:93:
                    16:2d:ba:d8:0a:34:df:68:11:86:69:44:90:47:a0:
                    c4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AC:68:AE:79:C1:4D:72:D6:8F:51:64:C8:97:27:05:BB:D3:F5:CA
            X509v3 Authority Key Identifier:
                keyid:15:D9:5F:6E:29:ED:B7:D7:22:34:3D:8F:1B:1B:89:19:1C:D7:FE:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Fdlfbintt9ciND2PGxuJGRzX_rY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689367/A5973082402811F180DBEDE4CE1D38B0/Fdlfbintt9ciND2PGxuJGRzX_rY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:08:d8:71:3c:ed:af:71:13:cf:8c:05:44:b9:4c:1c:27:40:
         45:58:cd:b2:1e:10:81:27:02:8b:52:12:f5:80:d9:aa:c1:43:
         94:cb:c7:c4:53:ad:c9:08:0f:87:30:71:21:b5:83:a5:a7:b2:
         48:56:ca:c7:9d:04:b9:57:1a:bb:4c:93:3a:3e:6c:c8:b3:2d:
         d2:b2:16:1d:b5:8a:8e:db:52:8b:6d:19:c0:68:a7:12:2b:4b:
         46:f9:78:20:1a:37:5d:aa:5c:eb:61:9c:e1:a9:74:d8:d4:3d:
         03:c3:2e:8c:6d:5e:46:f1:74:37:8a:40:a8:fd:d3:9b:44:e9:
         01:28:80:df:04:aa:e6:e0:42:b9:6a:cf:5a:1e:56:15:d4:7f:
         a7:6f:f9:af:1b:47:92:0a:58:5c:28:be:7b:2a:26:94:6f:21:
         00:20:90:fa:5d:7f:e3:48:7c:06:13:77:f6:27:24:ef:da:11:
         26:54:be:6d:f3:86:79:05:a1:78:93:d0:38:5a:43:74:ab:5b:
         31:06:75:e1:a0:56:ed:c5:87:04:29:dc:ed:e9:f1:c8:64:7d:
         df:8b:41:2e:a7:cb:9b:c1:02:71:39:26:e9:98:60:cf:9d:82:
         58:40:cd:9b:95:f0:7c:4c:2c:83:d0:9b:33:c6:94:c7:99:b2:
         f5:b6:9d:84
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAJ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODkzNjdBRjExMC8GA1UEBRMoMTVEOTVGNkUyOUVEQjdENzIyMzQzRDhGMUIxQjg5
MTkxQ0Q3RkVCNjAeFw0yNjA5MjQwNTM2MjBaFw0yNjA5MjYwNTM2MjBaMBgxFjAU
BgNVBAMTDTZhYjRiNmQ0LWI0ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCtYxBAFKBREa08MrcI93KNgw0Dvwa2SDVyc7+eTFzRhAK0NWnmpNl6+KJK
dwIDjiXx8kCr6QgdjWIHQwm/nTxDLj69PEzqJu1D4ZYmxeeTV8FqrZMtGEXEYOLS
oop/oGGHE7pRk3RPGriQW6mWRXBda/z618xeLe/xew2sgJWChUyYlLDd2pOOSiG5
Is0CUb7/bTXe13JvvKLLts1s0TTnDL198U3KlaebjPPcpVY5NgzUKkGNNGz7J0bM
crpOIZ2GAspKJcMdznF9Zg4z0tVEMYsxbS2xBi/HJBETZKdB+j5p6Rz82N1gU/YP
Gzy6kxYtutgKNN9oEYZpRJBHoMQHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHaxo
rnnBTXLWj1FkyJcnBbvT9cowHwYDVR0jBBgwFoAUFdlfbintt9ciND2PGxuJGRzX
/rYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg5MzY3L0E1OTczMDgyNDAyODExRjE4MERCRURFNENFMUQzOEIwL0ZkbGZi
aW50dDljaU5EMlBHeHVKR1J6WF9yWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0ZkbGZiaW50dDljaU5EMlBHeHVKR1J6WF9yWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODkzNjcvQTU5NzMwODI0MDI4MTFGMTgwREJFREU0Q0Ux
RDM4QjAvRmRsZmJpbnR0OWNpTkQyUEd4dUpHUnpYX3JZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVCNhxPO2vcRPPjAVEuUwcJ0BFWM2y
HhCBJwKLUhL1gNmqwUOUy8fEU63JCA+HMHEhtYOlp7JIVsrHnQS5Vxq7TJM6PmzI
sy3SshYdtYqO21KLbRnAaKcSK0tG+XggGjddqlzrYZzhqXTY1D0Dwy6MbV5G8XQ3
ikCo/dObROkBKIDfBKrm4EK5as9aHlYV1H+nb/mvG0eSClhcKL57KiaUbyEAIJD6
XX/jSHwGE3f2JyTv2hEmVL5t84Z5BaF4k9A4WkN0q1sxBnXhoFbtxYcEKdzt6fHI
ZH3fi0Eup8ubwQJxOSbpmGDPnYJYQM2blfB8TCyD0JszxpTHmbL1tp2E
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:27:29 2026 by rpki-client