Error: rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
File:                     XVF78Pc5Gfdta8kSUmnO62DdUyw.mft (raw, json)
Hash identifier:          T1NRQrzApvRE6m20goppR6Vf8n9bi4L41KHtxPJUXVo=
Subject key identifier:   BB:B1:4E:37:44:7B:B2:52:85:DE:9A:38:A3:08:5B:D0:AA:DE:D3:A0
Authority key identifier: 5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C
Certificate issuer:       /CN=F36AC63AAR/serialNumber=5D517BF0F73919F76D6BC9125269CEEB60DD532C
Certificate serial:       04A1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
Manifest number:          049D
Signing time:             Thu 08 Oct 2026 03:38:54 +0000
Manifest this update:     Thu 08 Oct 2026 03:38:53 +0000
Manifest next update:     Sat 10 Oct 2026 03:38:53 +0000
Files and hashes:         1: XVF78Pc5Gfdta8kSUmnO62DdUyw.crl (hash: TqfVvsaw7GxQgjfsIZ6ZdT8SlhsLxCvISWQVgTRrkzg=)
                          2: 698E9F34419411EEACB6225E4AD9E6FC.roa (hash: Do8surr/Om2q4tT9UI+z5gRxR2ztOA+6DaMkNjqE0sI=)
                          3: 2848E24A419F11EE84EBC77E4AD9E6FC.roa (hash: 31vEi8mw6ILLVWMlSZQg7FufWrxLwP4Iw+HRKtKDgR0=)
                          4: B47043E640C611EE86E5AE4E4AD9E6FC.roa (hash: UWusm55Cxzo56WDe90pWaCjCCJ7TZM8kcbllrJbesr4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
                          rsync://rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAR, serialNumber=5D517BF0F73919F76D6BC9125269CEEB60DD532C
        Validity
            Not Before: Oct  8 03:38:53 2026 GMT
            Not After : Oct 10 03:38:53 2026 GMT
        Subject: CN=6ac7104e-a71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f9:11:74:f7:a8:0e:94:85:0b:bf:f0:4c:9e:
                    39:3b:66:3e:7a:b1:f7:50:8c:42:89:de:12:6a:53:
                    dd:2e:4e:6e:d7:2c:fa:6f:8b:d1:0c:5d:4f:79:a2:
                    eb:db:98:d7:f7:df:f6:5f:73:9f:05:6b:5c:db:ca:
                    67:a1:f0:ec:1b:16:7d:68:07:88:a0:5f:fc:10:6d:
                    23:b5:6e:c5:4c:7b:b5:55:98:49:3a:ac:af:0f:02:
                    2a:4f:c0:f9:72:5a:b1:84:ac:3e:2e:16:69:1e:79:
                    69:c4:d2:f8:07:6e:26:b2:d9:f9:ec:c1:90:12:22:
                    5d:dc:ec:79:d0:92:da:85:9a:28:19:57:5e:08:c0:
                    05:a4:d8:32:ce:55:11:78:52:80:17:7c:ed:37:0f:
                    e8:e7:02:f1:ca:7a:80:42:1e:78:4a:90:e1:58:63:
                    92:a8:8d:e2:d8:6c:42:a6:6a:76:80:4f:58:21:55:
                    be:87:28:77:1b:99:ba:f4:91:97:90:0d:45:03:2c:
                    46:f2:a4:1e:a0:b7:59:34:5c:60:77:39:ab:8a:c3:
                    82:0a:79:16:74:4b:c7:5b:a7:86:91:fb:55:e0:01:
                    67:a7:25:95:a2:fd:93:68:6e:30:86:82:11:01:ef:
                    96:08:5c:29:e6:5d:f5:44:91:75:fe:81:f9:c7:2e:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B1:4E:37:44:7B:B2:52:85:DE:9A:38:A3:08:5B:D0:AA:DE:D3:A0
            X509v3 Authority Key Identifier:
                keyid:5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:97:6f:62:21:7c:b0:d4:2e:7a:75:3f:1b:58:f4:80:e6:
         ba:91:06:d3:0d:11:de:c1:7e:75:a6:5b:01:21:7e:0f:fd:b7:
         59:1c:a7:25:cd:c9:91:57:5f:29:c3:a2:9a:16:37:f1:68:2a:
         d5:24:7d:63:cc:4b:c0:a6:51:28:04:e0:42:95:bc:7b:63:15:
         0e:00:ea:d5:e9:6e:b6:0b:e7:b0:dc:50:46:32:f8:b3:4a:e0:
         fb:62:3c:7d:6c:ef:eb:7e:b6:14:6d:93:77:ce:db:95:ed:b5:
         b5:66:60:32:9c:c1:a2:31:67:c3:e1:27:6f:38:c8:63:fb:a1:
         2e:33:58:ae:bb:8f:0c:84:27:5c:0f:0b:73:e0:7b:25:ff:81:
         eb:8a:44:71:32:59:76:f2:64:42:8d:10:6a:72:3a:3b:7c:3a:
         09:21:7f:15:2f:09:ae:a3:d1:fa:74:22:be:45:17:22:ab:e7:
         bb:21:a4:2b:98:fa:a6:5d:69:2a:17:c9:88:a6:75:dc:b3:e8:
         7f:1a:18:d7:8a:b8:80:83:42:6b:2e:61:90:bd:e5:da:70:d3:
         78:c3:a6:8d:a5:1d:65:aa:d4:1e:aa:c4:9c:28:37:31:63:ef:
         d2:1a:af:3a:8a:0c:66:47:4d:38:34:18:4b:79:12:f6:18:be:
         96:c0:ec:58
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBKEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUM2M0FBUjExMC8GA1UEBRMoNUQ1MTdCRjBGNzM5MTlGNzZENkJDOTEyNTI2OUNF
RUI2MERENTMyQzAeFw0yNjEwMDgwMzM4NTNaFw0yNjEwMTAwMzM4NTNaMBgxFjAU
BgNVBAMTDTZhYzcxMDRlLWE3MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDY+RF096gOlIULv/BMnjk7Zj56sfdQjEKJ3hJqU90uTm7XLPpvi9EMXU95
ouvbmNf33/Zfc58Fa1zbymeh8OwbFn1oB4igX/wQbSO1bsVMe7VVmEk6rK8PAipP
wPlyWrGErD4uFmkeeWnE0vgHbiay2fnswZASIl3c7HnQktqFmigZV14IwAWk2DLO
VRF4UoAXfO03D+jnAvHKeoBCHnhKkOFYY5KojeLYbEKmanaAT1ghVb6HKHcbmbr0
kZeQDUUDLEbypB6gt1k0XGB3OauKw4IKeRZ0S8dbp4aR+1XgAWenJZWi/ZNobjCG
ghEB75YIXCnmXfVEkXX+gfnHLmPlAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUu7FO
N0R7slKF3po4owhb0Kre06AwHwYDVR0jBBgwFoAUXVF78Pc5Gfdta8kSUmnO62Dd
UywwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFDNjNBLzBBNDhDM0QyNDBDMzExRUVCRjBFNDc0MzRBRDlFNkZDL1hWRjc4
UGM1R2ZkdGE4a1NVbW5PNjJEZFV5dy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hWRjc4UGM1R2ZkdGE4a1NVbW5PNjJEZFV5dy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QUM2M0EvMEE0OEMzRDI0MEMzMTFFRUJGMEU0NzQzNEFEOUU2
RkMvWFZGNzhQYzVHZmR0YThrU1Vtbk82MkRkVXl3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM8pdvYiF8sNQuenU/G1j0gOa6kQbTDRHe
wX51plsBIX4P/bdZHKclzcmRV18pw6KaFjfxaCrVJH1jzEvAplEoBOBClbx7YxUO
AOrV6W62C+ew3FBGMvizSuD7Yjx9bO/rfrYUbZN3ztuV7bW1ZmAynMGiMWfD4Sdv
OMhj+6EuM1iuu48MhCdcDwtz4Hsl/4HrikRxMll28mRCjRBqcjo7fDoJIX8VLwmu
o9H6dCK+RRciq+e7IaQrmPqmXWkqF8mIpnXcs+h/GhjXiriAg0JrLmGQveXacNN4
w6aNpR1lqtQeqsScKDcxY+/SGq86igxmR004NBhLeRL2GL6WwOxY
-----END CERTIFICATE-----
Generated at Thu Oct 8 19:23:53 2026 by rpki-client