Error: rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
File:                     nHonja2J7WPpPiUhm0zaALEAYZM.mft (raw, json)
Hash identifier:          1KbMHke3c68zRxBkjCNeSRVRNFqkUya/wGa+jGPe4c4=
Subject key identifier:   D3:6C:83:DC:93:80:21:1A:AB:9B:FB:F2:03:B4:D8:25:D5:9A:DD:6F
Authority key identifier: 9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93
Certificate issuer:       /CN=F36974EEAF/serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
Certificate serial:       079A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
Manifest number:          0794
Signing time:             Sat 14 Nov 2026 02:21:57 +0000
Manifest this update:     Sat 14 Nov 2026 02:21:57 +0000
Manifest next update:     Mon 16 Nov 2026 02:21:57 +0000
Files and hashes:         1: nHonja2J7WPpPiUhm0zaALEAYZM.crl (hash: UwfAVrYZbYgOCNfOiElTwjTfaeTjtRiOk3B9kRcC5Hc=)
                          2: 88C92358A23311F1BB646617CF1D38B0.roa (hash: QCSLXKTWm2vQD3zE/9mvWuz1rZVCYcOC0JbZ7kpAjs0=)
                          3: FBA2A0FE9C9111F1882BDBB6CE1D38B0.roa (hash: EbOErodNPM0VUbldttQkM4ZkTtmWp5YI0by4dM37x8M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36974EEAF, serialNumber=9C7A278DAD89ED63E93E25219B4CDA00B1006193
        Validity
            Not Before: Nov 14 02:21:57 2026 GMT
            Not After : Nov 16 02:21:57 2026 GMT
        Subject: CN=6af7c5c5-178f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:ce:45:bb:03:ee:a6:5c:76:16:48:ce:65:
                    80:e6:fa:b2:3e:f6:5e:e9:d3:fd:1b:5f:4a:36:5f:
                    3f:2b:30:82:55:0e:65:96:bf:92:b6:bf:9c:5f:eb:
                    ce:d0:4c:84:72:68:ad:45:2d:ea:12:a2:fa:5b:72:
                    d2:14:4b:c7:77:f6:d3:e1:63:6f:ab:44:86:0b:62:
                    d5:9c:68:4d:65:12:14:96:05:f7:80:f5:18:bc:29:
                    de:30:20:fe:d0:d7:62:bb:36:0c:7a:be:b8:1a:ba:
                    db:78:e0:9a:51:16:1d:15:ba:49:46:b2:78:2c:ee:
                    7a:b0:14:b7:81:ec:94:42:3c:66:b3:0f:aa:c6:b1:
                    07:df:7b:de:55:ec:b4:29:70:61:7f:78:f7:22:36:
                    60:81:2b:2d:03:dd:a4:df:21:55:6e:06:a0:63:87:
                    5d:9e:cf:69:f4:f5:b0:03:34:1f:16:93:46:12:41:
                    ad:27:53:57:e6:04:51:43:16:9b:4f:a0:97:f7:b4:
                    d3:b5:a5:92:35:39:d8:56:67:6a:01:31:03:0a:c1:
                    8b:da:e9:8b:11:51:ce:6d:f6:58:48:28:8e:e0:fa:
                    04:62:85:33:36:8c:f3:db:fc:83:0f:fe:e9:74:58:
                    e6:1e:ae:9d:fe:30:96:73:2a:2d:e1:ab:f0:86:48:
                    e3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:6C:83:DC:93:80:21:1A:AB:9B:FB:F2:03:B4:D8:25:D5:9A:DD:6F
            X509v3 Authority Key Identifier:
                keyid:9C:7A:27:8D:AD:89:ED:63:E9:3E:25:21:9B:4C:DA:00:B1:00:61:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nHonja2J7WPpPiUhm0zaALEAYZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36974EE/FD906910158111ECB0810771D8A014CE/nHonja2J7WPpPiUhm0zaALEAYZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:35:6b:c9:b3:f9:aa:bb:b5:51:c4:d3:92:a6:fc:dc:02:f1:
         ef:f6:54:4b:24:c1:03:03:54:a2:f6:68:31:c2:eb:fd:fb:55:
         a7:bb:74:ce:ac:c4:5f:cd:d0:65:5c:66:a3:73:e2:f5:06:18:
         24:ca:80:a9:d9:61:e4:03:40:7d:b9:0a:cf:45:b1:d7:87:6d:
         46:73:04:44:83:30:f7:7c:b9:f3:4b:dd:ce:7e:66:25:78:84:
         a0:59:f2:b1:40:48:7f:75:8b:ac:07:9a:fa:f6:3f:b4:e1:95:
         bb:e8:f2:b0:6e:c6:86:9b:5b:f2:bb:35:60:d7:97:a4:ea:e7:
         7e:bf:1c:df:60:1d:5f:ec:7f:fe:49:5e:00:0d:0b:af:92:83:
         a0:01:7e:b8:5d:54:be:7d:84:6e:29:ba:17:ea:56:9c:4d:2b:
         3f:58:fd:73:dc:76:13:84:69:19:db:a9:9f:35:32:ef:46:a3:
         04:8f:eb:9e:41:f7:d2:76:33:48:c2:b4:6f:6e:23:3f:c3:96:
         79:4d:ba:2c:37:1a:4d:90:9a:a6:0d:15:1b:36:92:f7:0e:63:
         ae:83:e9:65:9d:06:b4:5b:f5:ed:a1:07:34:04:7b:86:45:c6:
         fd:a1:d2:ac:19:99:0e:4f:a5:b6:a9:b6:f5:98:b2:05:bc:45:
         02:cd:f3:09
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB5owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTc0RUVBRjExMC8GA1UEBRMoOUM3QTI3OERBRDg5RUQ2M0U5M0UyNTIxOUI0Q0RB
MDBCMTAwNjE5MzAeFw0yNjExMTQwMjIxNTdaFw0yNjExMTYwMjIxNTdaMBgxFjAU
BgNVBAMTDTZhZjdjNWM1LTE3OGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCr6M5FuwPuplx2FkjOZYDm+rI+9l7p0/0bX0o2Xz8rMIJVDmWWv5K2v5xf
687QTIRyaK1FLeoSovpbctIUS8d39tPhY2+rRIYLYtWcaE1lEhSWBfeA9Ri8Kd4w
IP7Q12K7Ngx6vrgautt44JpRFh0VuklGsngs7nqwFLeB7JRCPGazD6rGsQffe95V
7LQpcGF/ePciNmCBKy0D3aTfIVVuBqBjh12ez2n09bADNB8Wk0YSQa0nU1fmBFFD
FptPoJf3tNO1pZI1OdhWZ2oBMQMKwYva6YsRUc5t9lhIKI7g+gRihTM2jPPb/IMP
/ul0WOYerp3+MJZzKi3hq/CGSONFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU02yD
3JOAIRqrm/vyA7TYJdWa3W8wHwYDVR0jBBgwFoAUnHonja2J7WPpPiUhm0zaALEA
YZMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk3NEVFL0ZEOTA2OTEwMTU4MTExRUNCMDgxMDc3MUQ4QTAxNENFL25Ib25q
YTJKN1dQcFBpVWhtMHphQUxFQVlaTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25Ib25qYTJKN1dQcFBpVWhtMHphQUxFQVlaTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTc0RUUvRkQ5MDY5MTAxNTgxMTFFQ0IwODEwNzcxRDhB
MDE0Q0UvbkhvbmphMko3V1BwUGlVaG0wemFBTEVBWVpNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArNWvJs/mqu7VRxNOSpvzcAvHv9lRL
JMEDA1Si9mgxwuv9+1Wnu3TOrMRfzdBlXGajc+L1BhgkyoCp2WHkA0B9uQrPRbHX
h21GcwREgzD3fLnzS93OfmYleISgWfKxQEh/dYusB5r69j+04ZW76PKwbsaGm1vy
uzVg15ek6ud+vxzfYB1f7H/+SV4ADQuvkoOgAX64XVS+fYRuKboX6lacTSs/WP1z
3HYThGkZ26mfNTLvRqMEj+ueQffSdjNIwrRvbiM/w5Z5TbosNxpNkJqmDRUbNpL3
DmOug+llnQa0W/XtoQc0BHuGRcb9odKsGZkOT6W2qbb1mLIFvEUCzfMJ
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:45:16 2026 by rpki-client