Error: rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
File:                     W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft (raw, json)
Hash identifier:          ZAI9NiJ+1EP/G6ZRWVAjO+26qOj44G96ZBOUgzYBJSE=
Subject key identifier:   16:8B:0E:11:CA:2E:8E:1F:60:EA:07:A5:26:D5:F9:92:32:32:DF:54
Authority key identifier: 5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41
Certificate issuer:       /CN=F36B1FB2AR/serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
Certificate serial:       0973
Authority info access:    rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
Manifest number:          0970
Signing time:             Sat 14 Nov 2026 01:49:13 +0000
Manifest this update:     Sat 14 Nov 2026 01:49:13 +0000
Manifest next update:     Mon 16 Nov 2026 01:49:13 +0000
Files and hashes:         1: W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl (hash: XoPiNDM5q6ef7sOU3FsBarZ0/yWCRDC/srko3yPt/M4=)
                          2: 8DD8A63E9F8811EA9E1CD13BF8AEA228.roa (hash: 4gla00WyKnybWEMMlGQqnQZbh5T6kkOr0Aikoc7oSJA=)
                          3: 24F52F7A9F8811EA8771673BF8AEA228.roa (hash: yndl0tOhUDwQ6Y3ExagHGGbpgAi1l8sO07zu0poxd34=)
                          4: 55A993D69F8811EA97099D3BF8AEA228.roa (hash: +ElbU+52e+mg4AC3l85DIIIn/EFrafBGdzVbGsEBQHw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
                          rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2419 (0x973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1FB2AR, serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
        Validity
            Not Before: Nov 14 01:49:13 2026 GMT
            Not After : Nov 16 01:49:13 2026 GMT
        Subject: CN=6af7be19-0d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:19:6e:5d:65:08:1e:dd:df:09:b8:b1:7e:8f:
                    bf:2c:c3:0b:f1:4d:b3:6a:6d:1f:0b:bc:21:4a:58:
                    c0:ae:76:5a:1e:e1:cb:f6:ca:c3:7c:da:0e:b1:0e:
                    0f:55:94:41:a4:cd:ec:be:c9:08:55:43:7f:d4:c1:
                    e0:27:03:ec:a6:e2:dd:88:39:61:6b:5f:62:c5:4f:
                    75:40:27:85:46:90:52:45:57:1c:9b:6b:68:f9:a8:
                    d4:dc:3f:b2:87:04:40:03:fe:03:b5:5e:11:3f:4d:
                    4f:11:0e:9a:19:85:15:0f:66:59:c8:a6:db:3a:4c:
                    76:e2:43:f6:fa:38:8f:2b:48:24:7f:5b:b8:da:91:
                    b8:cf:61:f1:87:3d:5a:b0:ec:d7:ef:15:4a:f5:db:
                    76:61:04:da:22:39:c0:b9:3b:b6:dd:18:a1:94:24:
                    02:21:dc:5f:cc:29:52:d6:32:53:5b:6a:09:28:ee:
                    f7:68:e8:7b:12:19:c8:0c:26:ae:a9:27:ac:8f:07:
                    ca:31:4d:a6:19:aa:89:f9:9a:64:79:81:3a:55:23:
                    56:b5:a6:55:53:d2:ee:10:ff:31:16:98:bc:e2:c1:
                    ac:ae:cb:15:98:c6:7e:05:d6:b6:4f:6b:12:82:8c:
                    48:44:02:70:3c:64:70:0a:37:4d:14:bc:27:18:0a:
                    46:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:8B:0E:11:CA:2E:8E:1F:60:EA:07:A5:26:D5:F9:92:32:32:DF:54
            X509v3 Authority Key Identifier:
                keyid:5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:0c:47:c5:8e:9f:a3:1c:b0:39:84:e4:d7:c1:2c:99:be:33:
         d7:af:13:ec:ee:b7:18:2b:2b:81:de:6e:95:e1:37:98:17:d6:
         30:46:2c:9a:1f:b0:ac:23:79:d3:24:36:eb:ef:dd:dc:2f:e3:
         e6:0a:54:fc:71:31:22:65:a3:71:fa:3a:a6:03:17:c0:9f:cc:
         98:7f:b0:d8:cf:df:36:7f:c4:d4:ac:50:35:75:f0:70:68:49:
         fd:5b:a0:79:28:58:3c:77:38:f0:67:3b:34:e3:d5:9a:6a:44:
         dc:f0:ce:37:2e:e8:96:90:d1:cd:8c:12:6b:09:4d:52:f7:ff:
         d2:30:15:6b:47:58:21:40:78:6e:76:1a:bb:26:f7:2f:2b:1e:
         ab:99:db:3b:2b:3e:c9:c2:54:ca:7c:70:bf:fd:b0:a0:85:9b:
         13:4b:d5:0d:25:e9:ac:6d:11:e0:50:21:63:5f:7e:dd:9e:17:
         f9:3c:a5:0d:1e:c4:7e:f4:75:f6:be:2d:de:c6:15:f2:3c:ee:
         74:28:72:5c:86:5c:7b:ba:30:93:19:e9:50:42:e3:80:99:d7:
         4d:d3:5b:94:92:37:78:4c:3d:7e:e3:69:5a:f2:1b:13:da:64:
         2a:b4:5e:4b:fb:48:bc:98:64:b8:19:8d:76:37:a0:2c:fa:75:
         87:36:30:fb
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCXMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjFGQjJBUjExMC8GA1UEBRMoNUI1MjRFNEIzRjE5RTg0MUJDNjE2NEU5NjNCRkQy
M0QzOENEMzI0MTAeFw0yNjExMTQwMTQ5MTNaFw0yNjExMTYwMTQ5MTNaMBgxFjAU
BgNVBAMTDTZhZjdiZTE5LTBkOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOGW5dZQge3d8JuLF+j78swwvxTbNqbR8LvCFKWMCudloe4cv2ysN82g6x
Dg9VlEGkzey+yQhVQ3/UweAnA+ym4t2IOWFrX2LFT3VAJ4VGkFJFVxyba2j5qNTc
P7KHBEAD/gO1XhE/TU8RDpoZhRUPZlnIpts6THbiQ/b6OI8rSCR/W7jakbjPYfGH
PVqw7NfvFUr123ZhBNoiOcC5O7bdGKGUJAIh3F/MKVLWMlNbagko7vdo6HsSGcgM
Jq6pJ6yPB8oxTaYZqon5mmR5gTpVI1a1plVT0u4Q/zEWmLziwayuyxWYxn4F1rZP
axKCjEhEAnA8ZHAKN00UvCcYCkbNAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUFosO
Ecoujh9g6gelJtX5kjIy31QwHwYDVR0jBBgwFoAUW1JOSz8Z6EG8YWTpY7/SPTjN
MkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIxRkIyL0ZCQTcxNDAyOUY4MzExRUFCMjJCM0QzN0Y4QUVBMjI4L1cxSk9T
ejhaNkVHOFlXVHBZN19TUFRqTk1rRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1cxSk9TejhaNkVHOFlXVHBZN19TUFRqTk1rRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjFGQjIvRkJBNzE0MDI5RjgzMTFFQUIyMkIzRDM3RjhBRUEy
MjgvVzFKT1N6OFo2RUc4WVdUcFk3X1NQVGpOTWtFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMDEfFjp+jHLA5hOTXwSyZvjPXrxPs7rcY
KyuB3m6V4TeYF9YwRiyaH7CsI3nTJDbr793cL+PmClT8cTEiZaNx+jqmAxfAn8yY
f7DYz982f8TUrFA1dfBwaEn9W6B5KFg8dzjwZzs049WaakTc8M43LuiWkNHNjBJr
CU1S9//SMBVrR1ghQHhudhq7JvcvKx6rmds7Kz7JwlTKfHC//bCghZsTS9UNJems
bRHgUCFjX37dnhf5PKUNHsR+9HX2vi3exhXyPO50KHJchlx7ujCTGelQQuOAmddN
01uUkjd4TD1+42la8hsT2mQqtF5L+0i8mGS4GY12N6As+nWHNjD7
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:43:41 2026 by rpki-client