Error: rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
File:                     0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft (raw, json)
Hash identifier:          yQkQPw1Pb0Ql6scaxk5guN0kOQx1vY2Abo8uq6LTdKA=
Subject key identifier:   AD:CE:35:5D:7B:C6:2C:E9:63:BE:C0:66:A8:47:7A:01:A4:89:8C:EE
Authority key identifier: D1:0D:52:E9:5E:CD:FF:A0:B1:39:46:92:58:80:3D:4A:62:FB:13:EF
Certificate issuer:       /CN=F36B89F3AF/serialNumber=D10D52E95ECDFFA0B139469258803D4A62FB13EF
Certificate serial:       056A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
Manifest number:          0569
Signing time:             Sun 15 Nov 2026 03:15:22 +0000
Manifest this update:     Sun 15 Nov 2026 03:15:21 +0000
Manifest next update:     Tue 17 Nov 2026 03:15:21 +0000
Files and hashes:         1: 0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl (hash: CsMsQ8+lPARhwh0hEe/NwH8W484UA/8kQ9flyKcIsRQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1386 (0x56a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B89F3AF, serialNumber=D10D52E95ECDFFA0B139469258803D4A62FB13EF
        Validity
            Not Before: Nov 15 03:15:21 2026 GMT
            Not After : Nov 17 03:15:21 2026 GMT
        Subject: CN=6af923ca-3304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:92:4b:a2:25:6d:50:ab:8c:88:36:4d:0d:
                    e8:9c:34:5d:ac:e5:70:e4:e7:02:45:09:2a:e8:c4:
                    a4:83:69:8a:3d:bd:29:2a:2e:2a:cb:94:92:4a:b3:
                    36:f5:87:dd:dd:48:f9:1b:f4:0a:2d:20:78:84:23:
                    4f:ea:14:1e:79:d2:6b:97:83:64:f0:9b:16:be:d5:
                    80:d3:0f:aa:d8:f4:ca:be:92:9a:f3:b9:e2:c8:70:
                    94:2b:23:f5:09:f1:0e:7c:51:e4:87:9a:f8:56:d9:
                    50:e6:ff:d6:77:8d:3c:49:5d:59:c5:a3:bd:94:46:
                    db:1a:b6:b7:5a:98:de:2b:7f:2f:18:76:cf:b2:6d:
                    95:6e:22:21:7f:87:95:64:40:c1:a0:20:eb:68:74:
                    bf:f7:50:6d:4c:3e:e5:7f:90:b2:db:16:29:4f:b5:
                    85:8a:d7:be:54:a5:8e:a2:3b:05:5d:c2:76:a4:0c:
                    c5:a6:d4:77:da:3f:08:88:91:bb:8e:31:48:ac:80:
                    15:a8:14:08:ba:0e:f8:08:bb:12:4f:c4:38:08:c4:
                    7a:af:b4:a2:5b:0b:06:e3:10:15:a0:5f:34:c7:68:
                    52:8b:40:1f:66:7e:bc:70:c2:20:f3:85:46:99:06:
                    43:93:a8:21:fe:c5:e1:da:2e:7f:e8:c5:88:b3:43:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CE:35:5D:7B:C6:2C:E9:63:BE:C0:66:A8:47:7A:01:A4:89:8C:EE
            X509v3 Authority Key Identifier:
                keyid:D1:0D:52:E9:5E:CD:FF:A0:B1:39:46:92:58:80:3D:4A:62:FB:13:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b4:35:87:61:23:5b:d9:a7:84:8e:9f:d4:d9:7e:8f:c3:c0:
         01:cf:37:63:fe:cb:76:36:1f:7e:0b:fd:85:16:18:ba:e3:62:
         16:53:d8:8a:80:ca:08:82:11:17:49:3e:1e:73:af:b9:48:65:
         9b:a9:62:59:ac:5c:2c:b3:c2:05:c0:b4:a2:1e:d5:18:61:bb:
         2d:2e:f5:17:1e:3e:13:c3:c2:5d:15:84:d4:a2:c2:6e:65:17:
         b3:c7:12:8f:ce:7d:0b:18:ab:e9:b5:1a:ad:9f:cc:b4:2f:f3:
         b7:87:b0:eb:fc:64:be:52:36:da:77:77:b4:8b:5e:72:d1:b2:
         d4:bc:7a:0a:d2:91:86:36:04:28:34:10:24:21:00:bd:ca:95:
         dc:bd:b3:1b:d0:2e:3c:9b:20:cb:ae:f7:61:b3:e8:15:50:17:
         cf:f1:65:9f:e6:85:c9:45:2b:fc:6e:5f:2e:ae:55:43:92:5f:
         45:02:dd:34:b0:f3:5a:5f:a0:fc:78:6b:2c:d6:d6:e6:0c:e8:
         92:b5:92:ab:dd:34:23:36:ec:81:f3:4a:25:da:46:e5:b5:60:
         b1:26:88:9e:1f:2a:f8:df:51:4a:fc:09:0b:30:f3:bf:33:c6:
         43:dc:fa:9f:04:9d:7d:54:b6:ad:0e:14:2d:61:24:a1:ec:e5:
         54:d8:e5:2f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBWowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Qjg5RjNBRjExMC8GA1UEBRMoRDEwRDUyRTk1RUNERkZBMEIxMzk0NjkyNTg4MDNE
NEE2MkZCMTNFRjAeFw0yNjExMTUwMzE1MjFaFw0yNjExMTcwMzE1MjFaMBgxFjAU
BgNVBAMTDTZhZjkyM2NhLTMzMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCv0pJLoiVtUKuMiDZNDeicNF2s5XDk5wJFCSroxKSDaYo9vSkqLirLlJJK
szb1h93dSPkb9AotIHiEI0/qFB550muXg2Twmxa+1YDTD6rY9Mq+kprzueLIcJQr
I/UJ8Q58UeSHmvhW2VDm/9Z3jTxJXVnFo72URtsatrdamN4rfy8Yds+ybZVuIiF/
h5VkQMGgIOtodL/3UG1MPuV/kLLbFilPtYWK175UpY6iOwVdwnakDMWm1HfaPwiI
kbuOMUisgBWoFAi6DvgIuxJPxDgIxHqvtKJbCwbjEBWgXzTHaFKLQB9mfrxwwiDz
hUaZBkOTqCH+xeHaLn/oxYizQygJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUrc41
XXvGLOljvsBmqEd6AaSJjO4wHwYDVR0jBBgwFoAU0Q1S6V7N/6CxOUaSWIA9SmL7
E+8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI4OUYzLzM2OTIwOTA2QkE5MjExRUQ4RDU0MkFDQkYxMjIyNDY4LzBRMVM2
VjdOXzZDeE9VYVNXSUE5U21MN0UtOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBRMVM2VjdOXzZDeE9VYVNXSUE5U21MN0UtOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Qjg5RjMvMzY5MjA5MDZCQTkyMTFFRDhENTQyQUNCRjEy
MjI0NjgvMFExUzZWN05fNkN4T1VhU1dJQTlTbUw3RS04Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXtDWHYSNb2aeEjp/U2X6Pw8ABzzdj
/st2Nh9+C/2FFhi642IWU9iKgMoIghEXST4ec6+5SGWbqWJZrFwss8IFwLSiHtUY
YbstLvUXHj4Tw8JdFYTUosJuZRezxxKPzn0LGKvptRqtn8y0L/O3h7Dr/GS+Ujba
d3e0i15y0bLUvHoK0pGGNgQoNBAkIQC9ypXcvbMb0C48myDLrvdhs+gVUBfP8WWf
5oXJRSv8bl8urlVDkl9FAt00sPNaX6D8eGss1tbmDOiStZKr3TQjNuyB80ol2kbl
tWCxJoieHyr431FK/AkLMPO/M8ZD3PqfBJ19VLatDhQtYSSh7OVU2OUv
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:35:16 2026 by rpki-client