Error: rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
File:                     g90Sbl5YX_qT9fH_Xe72__27_6Y.mft (raw, json)
Hash identifier:          Ztlc4i02j6hmLeARUO0E3uJk2nLTJAaE4YobNrXmei8=
Subject key identifier:   6C:ED:B1:A5:B8:6E:2E:D7:78:A4:3A:3F:5F:4C:76:EB:99:AB:E0:DF
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Certificate issuer:       /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial:       05DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
Manifest number:          05D1
Signing time:             Wed 30 Sep 2026 03:05:04 +0000
Manifest this update:     Wed 30 Sep 2026 03:05:03 +0000
Manifest next update:     Fri 02 Oct 2026 03:05:03 +0000
Files and hashes:         1: g90Sbl5YX_qT9fH_Xe72__27_6Y.crl (hash: iEdsT0L5kbidSDMoJuI5GbLPgoeTevBumpI9fj6wOHY=)
                          2: 68EDAB98927111F186EB3CD4CE1D38B0.roa (hash: kTnWk3m5q5/QJ4PYY6Jp+oga71lyxSS8SvYf7padrxY=)
                          3: 3A8303D0927011F1B38B24CCCE1D38B0.roa (hash: ARSQ479hTds7f4R2wC4oFh5+D2OTaRvG5A9HR5RJPoQ=)
                          4: 5EFA3278F0CA11EEA9DC16BC775412E6.roa (hash: 3auDBpHpM3kdULnRRSm/mIzDvmza9Nwt6gL4Un18lvA=)
                          5: 44AA2642DD5211EFB4022CA6762E951A.roa (hash: YLlkpcwgvPAJRBxib2dLmg6by1FzGd47JbcV2KYgirg=)
                          6: AD052FB4927011F19BEA12D0CE1D38B0.roa (hash: e5QI8zuY7761TaGfjSjT7NI7oSIl2les1Ndd02M0R5U=)
                          7: 55658E129FF011EF840C519B762E951A.roa (hash: SQ6x/8wlXxQQhSUXwwgi7zRj4j3gnNlbtGPHAue35w4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1501 (0x5dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E7CAF, serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
        Validity
            Not Before: Sep 30 03:05:03 2026 GMT
            Not After : Oct  2 03:05:03 2026 GMT
        Subject: CN=6abc7c60-02f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:d6:aa:41:bb:31:1c:35:ed:9c:63:a7:59:
                    98:c3:6a:99:d8:4e:b7:f9:88:c1:1d:04:8b:32:bf:
                    8a:5e:97:37:12:7f:63:61:49:e3:bc:37:3e:af:b7:
                    ac:bb:fb:48:f1:0f:92:a2:a0:e3:7a:04:d5:11:91:
                    21:ff:5d:00:e1:5d:52:62:90:92:b0:6c:37:13:ce:
                    9e:0b:09:11:03:7b:f7:d5:fc:f6:85:ac:3b:d4:eb:
                    18:da:60:95:96:a0:4d:dc:10:fd:df:5d:3b:3c:74:
                    cf:54:b1:49:c8:ec:fa:33:3e:43:4d:8d:f3:4b:a3:
                    91:3e:b5:25:91:0e:8f:1c:5d:36:8e:c1:29:43:e7:
                    3f:25:cf:86:d8:33:6e:7b:7b:ac:86:c6:d9:a0:f2:
                    35:7f:89:d4:d2:56:33:17:f6:f2:80:89:d4:f3:ec:
                    a8:89:d3:5f:ee:b7:b1:f8:fa:fd:16:5b:72:50:68:
                    fd:dc:2d:33:54:ac:06:a4:ce:ee:7e:66:20:29:3e:
                    96:da:00:6c:6a:7f:5f:97:6d:be:97:df:38:9a:30:
                    84:eb:43:67:01:10:39:32:29:ea:3f:89:76:cd:3b:
                    e5:f8:0b:f8:99:3b:74:32:81:5f:e4:5e:9c:fe:e7:
                    65:e5:c7:e2:4a:55:8e:9c:ff:8f:ce:7c:fa:9f:81:
                    c5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:ED:B1:A5:B8:6E:2E:D7:78:A4:3A:3F:5F:4C:76:EB:99:AB:E0:DF
            X509v3 Authority Key Identifier:
                keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:05:2a:c7:9f:a3:79:cd:3c:ab:61:35:dc:00:f1:b3:e6:b7:
         a8:c4:9d:84:ee:26:4a:6e:90:6b:d4:eb:86:cd:4b:75:51:03:
         65:32:f9:70:68:4c:51:a5:e1:80:59:13:f4:ca:e3:07:46:10:
         39:03:03:e7:19:d3:55:01:5a:66:77:d5:78:e4:9f:78:47:c1:
         b6:c7:8b:dc:d2:34:3e:5b:4e:dd:97:ae:6c:88:59:24:b8:94:
         26:b0:a0:2b:74:f1:29:21:51:17:b3:9e:18:cd:6f:1c:45:db:
         de:53:4b:bf:ee:e4:0f:1c:a9:db:ac:bc:02:e8:69:68:7d:13:
         b1:fb:47:20:cc:4b:63:11:6f:e4:c7:40:db:ef:5e:a4:f1:6e:
         22:68:24:49:34:66:df:69:65:68:7f:7d:2e:75:c6:48:b2:4e:
         6d:fc:18:88:29:75:de:48:44:e9:b0:d5:db:63:a1:9b:3a:13:
         25:d0:79:c7:9c:0a:e4:67:49:e4:bf:db:b6:ab:c6:89:74:6f:
         d1:77:80:ad:ac:80:dc:a0:62:93:f3:e9:fd:af:31:5a:ab:c7:
         00:98:25:83:f7:fd:55:75:93:3b:8b:42:58:47:83:42:93:27:
         63:bc:de:6d:15:a5:4b:b5:b9:10:51:fb:61:d0:7e:51:f4:e5:
         96:0e:97:4f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBd0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzZFN0NBRjExMC8GA1UEBRMoODNERDEyNkU1RTU4NUZGQTkzRjVGMUZGNURFRUY2
RkZGREJCRkZBNjAeFw0yNjA5MzAwMzA1MDNaFw0yNjEwMDIwMzA1MDNaMBgxFjAU
BgNVBAMTDTZhYmM3YzYwLTAyZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbQtaqQbsxHDXtnGOnWZjDapnYTrf5iMEdBIsyv4pelzcSf2NhSeO8Nz6v
t6y7+0jxD5KioON6BNURkSH/XQDhXVJikJKwbDcTzp4LCREDe/fV/PaFrDvU6xja
YJWWoE3cEP3fXTs8dM9UsUnI7PozPkNNjfNLo5E+tSWRDo8cXTaOwSlD5z8lz4bY
M257e6yGxtmg8jV/idTSVjMX9vKAidTz7KiJ01/ut7H4+v0WW3JQaP3cLTNUrAak
zu5+ZiApPpbaAGxqf1+Xbb6X3ziaMITrQ2cBEDkyKeo/iXbNO+X4C/iZO3QygV/k
Xpz+52Xlx+JKVY6c/4/OfPqfgcVzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbO2x
pbhuLtd4pDo/X0x265mr4N8wHwYDVR0jBBgwFoAUg90Sbl5YX/qT9fH/Xe72//27
/6YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2RTdDLzJCRDNGMUI2NTkwMTExRURBMDk3RjJGMEYxMjIyNDY4L2c5MFNi
bDVZWF9xVDlmSF9YZTcyX18yN182WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2c5MFNibDVZWF9xVDlmSF9YZTcyX18yN182WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZFN0MvMkJEM0YxQjY1OTAxMTFFREEwOTdGMkYwRjEy
MjI0NjgvZzkwU2JsNVlYX3FUOWZIX1hlNzJfXzI3XzZZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAXBSrHn6N5zTyrYTXcAPGz5reoxJ2E
7iZKbpBr1OuGzUt1UQNlMvlwaExRpeGAWRP0yuMHRhA5AwPnGdNVAVpmd9V45J94
R8G2x4vc0jQ+W07dl65siFkkuJQmsKArdPEpIVEXs54YzW8cRdveU0u/7uQPHKnb
rLwC6GlofROx+0cgzEtjEW/kx0Db716k8W4iaCRJNGbfaWVof30udcZIsk5t/BiI
KXXeSETpsNXbY6GbOhMl0HnHnArkZ0nkv9u2q8aJdG/Rd4CtrIDcoGKT8+n9rzFa
q8cAmCWD9/1VdZM7i0JYR4NCkydjvN5tFaVLtbkQUfth0H5R9OWWDpdP
-----END CERTIFICATE-----
Generated at Wed Sep 30 15:07:58 2026 by rpki-client