Error: rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
File:                     sOuFTcDYmjIzySVR0W0U1DjPVR8.mft (raw, json)
Hash identifier:          XaKEwVPWggmWGvg0kzqCqSmSwZg1oby4jnHylp+cB9A=
Subject key identifier:   61:2D:A8:EF:53:F4:BC:53:42:A0:D3:6D:E2:6F:82:6F:08:1B:44:03
Authority key identifier: B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F
Certificate issuer:       /CN=F36B5EE7RI/serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
Certificate serial:       01B1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
Manifest number:          01B0
Signing time:             Fri 25 Sep 2026 05:02:21 +0000
Manifest this update:     Fri 25 Sep 2026 05:02:20 +0000
Manifest next update:     Sun 27 Sep 2026 05:02:20 +0000
Files and hashes:         1: sOuFTcDYmjIzySVR0W0U1DjPVR8.crl (hash: G4FJUt7cQ4VvaUBPxni2gW8E2IH9pUUPmqUDCAB8c3U=)
                          2: 2CED30A26B9211F0B55B648ADAE4EC9C.roa (hash: 8FK7+AonagW3DFNpcFJhHjfYGIQ/QIt42K+ERVsqWds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                          rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 433 (0x1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7RI, serialNumber=B0EB854DC0D89A3233C92551D16D14D438CF551F
        Validity
            Not Before: Sep 25 05:02:20 2026 GMT
            Not After : Sep 27 05:02:20 2026 GMT
        Subject: CN=6ab6005c-200b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d8:3f:76:6e:68:83:21:2b:6b:f1:e3:e4:f1:
                    72:36:c6:fc:79:dd:36:e9:e6:32:eb:f2:18:d2:64:
                    d4:68:07:17:51:3d:ef:ec:bc:f4:56:be:95:04:95:
                    83:94:25:77:58:f5:59:d0:d6:77:1a:d6:d1:9c:da:
                    4b:86:d7:0b:a7:01:76:d7:03:3f:09:f5:20:c5:66:
                    01:48:9e:f8:d5:19:85:16:4a:29:f5:05:bc:72:c5:
                    0e:2d:37:c5:d5:1b:e1:f0:17:0a:98:ae:98:cc:c5:
                    72:1f:f4:ba:68:66:75:09:a6:44:77:4a:57:68:00:
                    c3:ec:14:55:ef:4e:b0:19:de:ec:54:a8:27:4d:c6:
                    e5:e3:44:b4:28:1a:65:bd:4d:23:6c:9e:9b:96:04:
                    6b:2f:b5:53:2c:8c:3f:7c:59:7b:1f:af:32:a3:c3:
                    26:04:71:a2:bf:e8:6a:03:6e:65:31:aa:a6:a6:51:
                    b8:55:ac:dc:68:5c:71:58:5c:12:5d:45:65:a6:db:
                    d9:8b:a8:67:93:58:a9:80:53:5a:b7:3a:11:cf:e2:
                    0e:e2:99:7d:c9:42:69:4d:94:69:dc:4c:c4:eb:ce:
                    60:b0:d5:35:63:10:c6:8e:e3:be:08:8b:cc:4f:ba:
                    91:70:b4:bf:b4:f7:f7:97:28:cf:2f:87:b6:89:a2:
                    25:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2D:A8:EF:53:F4:BC:53:42:A0:D3:6D:E2:6F:82:6F:08:1B:44:03
            X509v3 Authority Key Identifier:
                keyid:B0:EB:85:4D:C0:D8:9A:32:33:C9:25:51:D1:6D:14:D4:38:CF:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/sOuFTcDYmjIzySVR0W0U1DjPVR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/ED7066526B9011F0819CC681DAE4EC9C/sOuFTcDYmjIzySVR0W0U1DjPVR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:61:0b:07:f5:e0:5b:4b:43:44:21:0d:ea:de:c2:a1:00:
         dc:90:16:82:ef:dd:2c:18:e2:a3:23:a1:9d:5a:09:0b:14:d1:
         de:0f:38:0e:c1:e9:3e:4b:8c:c2:63:46:66:41:cf:56:8c:b8:
         76:b4:f5:f1:e0:b3:3e:7c:d2:45:13:1b:6c:17:b0:58:6d:a4:
         99:5e:3b:7b:e9:94:37:1b:73:c9:ea:64:6e:d1:dc:9b:72:b7:
         71:53:55:14:d3:fe:2b:56:45:10:99:6f:54:5a:99:d3:f9:86:
         78:b8:f9:8d:e3:a2:a2:7e:22:c3:b2:5f:8b:b6:a5:70:a9:2b:
         41:7c:09:4b:42:95:53:1d:f7:b6:9e:2a:b7:94:7c:a6:47:7b:
         60:1a:74:f2:0e:06:97:32:e5:62:06:cd:91:73:66:aa:69:1a:
         25:9a:01:50:1d:72:64:e7:9e:14:2c:75:2b:e5:a5:8a:31:53:
         22:f8:0d:1a:3b:e9:b6:63:3c:b5:24:88:f9:57:ea:e5:8c:10:
         75:f0:83:6a:0f:08:ac:de:60:cc:33:3a:f6:9f:ec:59:3b:eb:
         64:14:e6:3b:3b:5e:1a:8a:58:c4:f3:4f:da:06:ca:6a:7d:44:
         a3:e4:c6:86:21:5d:69:17:05:de:ef:b9:d4:2b:96:13:46:dd:
         09:f4:9c:93
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAbEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjVFRTdSSTExMC8GA1UEBRMoQjBFQjg1NERDMEQ4OUEzMjMzQzkyNTUxRDE2RDE0
RDQzOENGNTUxRjAeFw0yNjA5MjUwNTAyMjBaFw0yNjA5MjcwNTAyMjBaMBgxFjAU
BgNVBAMTDTZhYjYwMDVjLTIwMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC92D92bmiDIStr8ePk8XI2xvx53Tbp5jLr8hjSZNRoBxdRPe/svPRWvpUE
lYOUJXdY9VnQ1nca1tGc2kuG1wunAXbXAz8J9SDFZgFInvjVGYUWSin1BbxyxQ4t
N8XVG+HwFwqYrpjMxXIf9LpoZnUJpkR3SldoAMPsFFXvTrAZ3uxUqCdNxuXjRLQo
GmW9TSNsnpuWBGsvtVMsjD98WXsfrzKjwyYEcaK/6GoDbmUxqqamUbhVrNxoXHFY
XBJdRWWm29mLqGeTWKmAU1q3OhHP4g7imX3JQmlNlGncTMTrzmCw1TVjEMaO474I
i8xPupFwtL+09/eXKM8vh7aJoiWJAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUYS2o
71P0vFNCoNNt4m+CbwgbRAMwHwYDVR0jBBgwFoAUsOuFTcDYmjIzySVR0W0U1DjP
VR8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1RUU3L0VENzA2NjUyNkI5MDExRjA4MTlDQzY4MURBRTRFQzlDL3NPdUZU
Y0RZbWpJenlTVlIwVzBVMURqUFZSOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L3NPdUZUY0RZbWpJenlTVlIwVzBVMURqUFZSOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QjVFRTcvRUQ3MDY2NTI2QjkwMTFGMDgxOUNDNjgxREFFNEVD
OUMvc091RlRjRFltakl6eVNWUjBXMFUxRGpQVlI4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBmpmELB/XgW0tDRCEN6t7CoQDckBaC790s
GOKjI6GdWgkLFNHeDzgOwek+S4zCY0ZmQc9WjLh2tPXx4LM+fNJFExtsF7BYbaSZ
Xjt76ZQ3G3PJ6mRu0dybcrdxU1UU0/4rVkUQmW9UWpnT+YZ4uPmN46KifiLDsl+L
tqVwqStBfAlLQpVTHfe2niq3lHymR3tgGnTyDgaXMuViBs2Rc2aqaRolmgFQHXJk
554ULHUr5aWKMVMi+A0aO+m2Yzy1JIj5V+rljBB18INqDwis3mDMMzr2n+xZO+tk
FOY7O14ailjE80/aBspqfUSj5MaGIV1pFwXe77nUK5YTRt0J9JyT
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:03:00 2026 by rpki-client