Error: rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
File:                     EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft (raw, json)
Hash identifier:          lg0y1LFvZvOtapJzzLm09oYQxpnRbBUSZqzeU8Adm10=
Subject key identifier:   4E:05:E1:50:64:C9:5A:FE:A5:F9:F6:62:BD:09:A4:C0:4C:F7:70:54
Authority key identifier: 11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46
Certificate issuer:       /CN=F3692425AF/serialNumber=11E23E8B2C8BC39CFA27519820176ACB343DC846
Certificate serial:       0381
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
Manifest number:          0380
Signing time:             Mon 28 Sep 2026 04:12:42 +0000
Manifest this update:     Mon 28 Sep 2026 04:12:41 +0000
Manifest next update:     Wed 30 Sep 2026 04:12:41 +0000
Files and hashes:         1: EeI-iyyLw5z6J1GYIBdqyzQ9yEY.crl (hash: l35riNVI3PEWAt/IFodgGCR7dQb8uC+8C6b/7YSuKLU=)
                          2: A2753E20085E11EFA72EA420017001B1.roa (hash: HdajjDnJFTsdeeb8I0ztD/XdQiYbnMj3dOgOhC5cpoo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692425AF, serialNumber=11E23E8B2C8BC39CFA27519820176ACB343DC846
        Validity
            Not Before: Sep 28 04:12:41 2026 GMT
            Not After : Sep 30 04:12:41 2026 GMT
        Subject: CN=6ab9e93a-d3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8e:7d:cb:38:75:52:2a:bd:d4:68:bc:ca:69:
                    10:61:2b:38:84:ca:81:2c:d0:e9:88:7e:39:ee:91:
                    87:cb:91:ea:ff:b9:1a:b8:c2:40:31:e0:73:69:04:
                    de:c6:1a:72:0f:76:ec:25:f2:61:05:d3:d1:8c:c6:
                    4c:95:ae:8b:4d:a2:6b:5c:82:28:21:6e:4e:f1:93:
                    7f:3c:3b:b5:aa:fa:e4:dd:77:44:17:a3:35:f5:b0:
                    5f:bf:48:b0:85:6b:48:61:5a:f0:0b:fc:c3:f7:37:
                    d4:24:0d:a8:13:67:b8:11:dc:e7:31:93:65:2f:66:
                    5e:85:1d:96:83:54:58:6f:42:65:3d:37:87:83:5a:
                    09:c1:f6:da:3b:4c:71:1d:ff:37:55:9e:62:c7:52:
                    38:64:72:ef:91:58:75:cd:95:8f:20:db:d5:5c:bf:
                    ff:75:3e:62:a3:51:81:f0:94:6f:e7:5b:fb:2a:23:
                    56:8b:25:8f:6a:4d:b3:29:ca:66:3c:fb:5f:f0:dd:
                    15:a0:88:bc:09:69:df:a2:e7:76:e9:a7:0f:09:cb:
                    f9:41:81:fa:c8:26:cf:f2:ad:ef:e4:33:e1:09:91:
                    94:83:da:af:1b:76:09:f0:6c:29:07:39:61:b9:59:
                    2d:bd:57:b7:16:aa:dc:7b:76:63:26:d7:d7:b5:4b:
                    66:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:05:E1:50:64:C9:5A:FE:A5:F9:F6:62:BD:09:A4:C0:4C:F7:70:54
            X509v3 Authority Key Identifier:
                keyid:11:E2:3E:8B:2C:8B:C3:9C:FA:27:51:98:20:17:6A:CB:34:3D:C8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692425/1F2C5EA2081F11EF8401B10E017001B1/EeI-iyyLw5z6J1GYIBdqyzQ9yEY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:47:3b:df:9a:2c:ab:04:5b:86:57:ea:75:63:c3:c3:2a:65:
         1b:bd:58:6a:3a:9b:3d:27:d4:62:7f:51:bc:e3:8d:3f:46:71:
         1c:f3:7d:23:8b:0c:75:bd:8c:13:50:51:3c:8f:4e:b2:d9:e8:
         08:eb:a4:5b:a3:ae:0c:ef:80:18:73:82:80:64:76:11:28:36:
         af:10:ac:67:02:12:dc:f0:0a:a4:22:2b:0b:d0:53:79:32:67:
         31:b6:f9:56:5c:7e:ce:14:35:5d:fb:32:06:28:9b:05:87:46:
         83:c7:e6:68:40:93:88:96:24:a0:78:54:c3:0e:97:44:8a:a9:
         d0:6a:ee:0d:64:e7:7d:1c:f5:38:cf:8d:9a:b9:78:f9:ad:54:
         a8:44:6f:0e:2e:5a:08:7a:6b:1c:6a:14:72:2d:7a:a8:06:9c:
         62:8b:f1:c4:1f:8f:a4:61:25:d1:75:c8:b7:9d:da:c5:b9:bf:
         b8:87:ee:62:ed:e1:8b:8e:44:df:5c:09:ed:a5:19:6c:d8:c3:
         76:ae:25:39:e6:75:d2:38:f0:45:99:f4:8d:30:d8:02:3d:0d:
         b0:55:35:69:b6:7f:06:e5:8a:b3:74:d4:f5:6e:d7:c8:b4:f1:
         1f:62:ef:a1:23:ba:f0:5f:df:20:ae:9d:83:0b:d5:93:f6:ea:
         f7:91:92:71
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTI0MjVBRjExMC8GA1UEBRMoMTFFMjNFOEIyQzhCQzM5Q0ZBMjc1MTk4MjAxNzZB
Q0IzNDNEQzg0NjAeFw0yNjA5MjgwNDEyNDFaFw0yNjA5MzAwNDEyNDFaMBgxFjAU
BgNVBAMTDTZhYjllOTNhLWQzY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNjn3LOHVSKr3UaLzKaRBhKziEyoEs0OmIfjnukYfLker/uRq4wkAx4HNp
BN7GGnIPduwl8mEF09GMxkyVrotNomtcgighbk7xk388O7Wq+uTdd0QXozX1sF+/
SLCFa0hhWvAL/MP3N9QkDagTZ7gR3Ocxk2UvZl6FHZaDVFhvQmU9N4eDWgnB9to7
THEd/zdVnmLHUjhkcu+RWHXNlY8g29Vcv/91PmKjUYHwlG/nW/sqI1aLJY9qTbMp
ymY8+1/w3RWgiLwJad+i53bppw8Jy/lBgfrIJs/yre/kM+EJkZSD2q8bdgnwbCkH
OWG5WS29V7cWqtx7dmMm19e1S2bjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTgXh
UGTJWv6l+fZivQmkwEz3cFQwHwYDVR0jBBgwFoAUEeI+iyyLw5z6J1GYIBdqyzQ9
yEYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkyNDI1LzFGMkM1RUEyMDgxRjExRUY4NDAxQjEwRTAxNzAwMUIxL0VlSS1p
eXlMdzV6NkoxR1lJQmRxeXpROXlFWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VlSS1peXlMdzV6NkoxR1lJQmRxeXpROXlFWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTI0MjUvMUYyQzVFQTIwODFGMTFFRjg0MDFCMTBFMDE3
MDAxQjEvRWVJLWl5eUx3NXo2SjFHWUlCZHF5elE5eUVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8RzvfmiyrBFuGV+p1Y8PDKmUbvVhq
Ops9J9Rif1G8440/RnEc830jiwx1vYwTUFE8j06y2egI66Rbo64M74AYc4KAZHYR
KDavEKxnAhLc8AqkIisL0FN5MmcxtvlWXH7OFDVd+zIGKJsFh0aDx+ZoQJOIliSg
eFTDDpdEiqnQau4NZOd9HPU4z42auXj5rVSoRG8OLloIemscahRyLXqoBpxii/HE
H4+kYSXRdci3ndrFub+4h+5i7eGLjkTfXAntpRls2MN2riU55nXSOPBFmfSNMNgC
PQ2wVTVptn8G5YqzdNT1btfItPEfYu+hI7rwX98grp2DC9WT9ur3kZJx
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:21:03 2026 by rpki-client