Error: rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
File:                     JrOnWLLY0r61xvaBylvZJYx593c.mft (raw, json)
Hash identifier:          U8Y/D+Cdc/qkSWStNpYY5/edXCsv8K+jD+PH3NTsbP4=
Subject key identifier:   8B:CE:2C:6C:ED:2F:B8:88:7C:40:C8:07:AE:AE:74:96:17:78:0F:00
Authority key identifier: 26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77
Certificate issuer:       /CN=F36D8ADDAF/serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
Certificate serial:       083B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
Manifest number:          0838
Signing time:             Thu 24 Sep 2026 02:01:38 +0000
Manifest this update:     Thu 24 Sep 2026 02:01:37 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:37 +0000
Files and hashes:         1: JrOnWLLY0r61xvaBylvZJYx593c.crl (hash: C5hAyYzP3ptOiFCSnHlAhjOAZMqSeiOquPJuh1ktZbs=)
                          2: 8725BB28177111EF81A9096D017001B1.roa (hash: 88veSwgimt5nxNF8bDTfkfTQkyjEIh0wtn0t0fyF6v4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107 (0x83b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8ADDAF, serialNumber=26B3A758B2D8D2BEB5C6F681CA5BD9258C79F777
        Validity
            Not Before: Sep 24 02:01:37 2026 GMT
            Not After : Sep 26 02:01:37 2026 GMT
        Subject: CN=6ab48482-f091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:b0:51:0c:d2:5a:5e:74:51:ac:cf:ee:b6:
                    35:a6:cd:3a:f6:c3:dd:4b:c2:5b:03:b6:25:e4:55:
                    91:40:87:e1:92:31:eb:49:49:22:22:90:a7:90:93:
                    c4:ef:a0:15:9f:1d:54:df:ae:d4:d7:04:03:2b:15:
                    45:41:8d:06:20:45:86:61:72:fe:98:ae:b6:7b:64:
                    c0:4e:6b:3b:e1:ff:1f:a5:78:0b:70:19:0e:8f:9a:
                    cf:73:9b:a0:df:29:76:33:ee:cf:28:09:5a:8d:ef:
                    83:37:07:40:c7:05:8d:4f:61:e6:e7:0b:ee:1c:d0:
                    da:fb:8a:cc:06:55:d8:7e:ad:76:e9:cc:ed:59:b5:
                    5f:fe:f9:1c:b8:78:3f:03:56:01:2f:9d:7e:64:bc:
                    e5:80:84:a0:2d:15:03:02:18:a5:07:fc:07:03:ac:
                    44:44:72:fa:47:8d:23:fd:fd:1f:a7:32:c3:34:38:
                    ce:fa:80:91:74:c5:73:54:a7:a9:bf:e9:d4:3a:dd:
                    11:bd:de:b9:44:08:62:48:5f:0d:59:4d:03:81:4a:
                    78:3b:a7:1d:d6:53:4e:c2:6b:20:4d:c2:60:6c:4c:
                    6e:8d:24:53:25:9c:84:f0:c5:9d:af:cf:6a:7f:b9:
                    1b:5b:a7:82:4a:38:74:f1:56:74:c7:eb:b5:3b:b7:
                    cd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CE:2C:6C:ED:2F:B8:88:7C:40:C8:07:AE:AE:74:96:17:78:0F:00
            X509v3 Authority Key Identifier:
                keyid:26:B3:A7:58:B2:D8:D2:BE:B5:C6:F6:81:CA:5B:D9:25:8C:79:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JrOnWLLY0r61xvaBylvZJYx593c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8ADD/99DB6EFC6AC711EBB90AF548F8AEA228/JrOnWLLY0r61xvaBylvZJYx593c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:36:8e:f8:6e:4f:83:49:cb:de:d4:f4:67:9a:20:9e:d8:92:
         63:92:52:65:b9:17:ee:79:f7:71:41:63:21:da:be:76:f5:da:
         1e:ab:e8:fa:fd:6d:46:46:de:7c:eb:f8:76:8f:05:91:72:5d:
         7d:7b:77:37:d6:62:16:2b:c8:47:5a:75:f6:97:c2:68:8b:d3:
         9f:68:96:8c:ee:dd:5f:c8:c9:df:d8:11:15:e1:97:5b:e2:53:
         1b:a1:de:e0:fa:8b:a9:88:06:58:e2:fc:db:a1:ad:b8:6e:34:
         3e:d2:db:18:87:19:8b:2f:6b:14:ed:5e:c8:72:1a:95:9b:28:
         40:94:e1:4d:25:aa:c4:16:82:38:b7:25:fc:31:f6:89:0d:0d:
         b9:fb:82:eb:9e:2e:98:27:bb:8b:1c:df:eb:11:43:d6:0c:b4:
         c1:2d:11:07:8b:05:88:a6:34:40:d4:fa:ec:9c:ca:95:bb:bf:
         38:b2:a4:db:43:54:65:f5:0f:c9:e7:f3:eb:8d:b2:cb:9e:8a:
         b6:71:20:0e:3b:98:8b:2f:ff:46:3e:ec:50:4f:32:ce:bc:da:
         e6:63:d8:76:45:c1:6e:ad:70:7a:4e:9d:56:7b:cf:90:21:52:
         be:64:b5:37:7d:e9:20:44:0d:2c:8c:4d:6f:af:39:86:28:1e:
         0f:9a:38:7e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCDswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDhBRERBRjExMC8GA1UEBRMoMjZCM0E3NThCMkQ4RDJCRUI1QzZGNjgxQ0E1QkQ5
MjU4Qzc5Rjc3NzAeFw0yNjA5MjQwMjAxMzdaFw0yNjA5MjYwMjAxMzdaMBgxFjAU
BgNVBAMTDTZhYjQ4NDgyLWYwOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNIrBRDNJaXnRRrM/utjWmzTr2w91LwlsDtiXkVZFAh+GSMetJSSIikKeQ
k8TvoBWfHVTfrtTXBAMrFUVBjQYgRYZhcv6YrrZ7ZMBOazvh/x+leAtwGQ6Pms9z
m6DfKXYz7s8oCVqN74M3B0DHBY1PYebnC+4c0Nr7iswGVdh+rXbpzO1ZtV/++Ry4
eD8DVgEvnX5kvOWAhKAtFQMCGKUH/AcDrEREcvpHjSP9/R+nMsM0OM76gJF0xXNU
p6m/6dQ63RG93rlECGJIXw1ZTQOBSng7px3WU07CayBNwmBsTG6NJFMlnITwxZ2v
z2p/uRtbp4JKOHTxVnTH67U7t80/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUi84s
bO0vuIh8QMgHrq50lhd4DwAwHwYDVR0jBBgwFoAUJrOnWLLY0r61xvaBylvZJYx5
93cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4QURELzk5REI2RUZDNkFDNzExRUJCOTBBRjU0OEY4QUVBMjI4L0pyT25X
TExZMHI2MXh2YUJ5bHZaSll4NTkzYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pyT25XTExZMHI2MXh2YUJ5bHZaSll4NTkzYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDhBREQvOTlEQjZFRkM2QUM3MTFFQkI5MEFGNTQ4RjhB
RUEyMjgvSnJPbldMTFkwcjYxeHZhQnlsdlpKWXg1OTNjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtNo74bk+DScve1PRnmiCe2JJjklJl
uRfuefdxQWMh2r529doeq+j6/W1GRt586/h2jwWRcl19e3c31mIWK8hHWnX2l8Jo
i9OfaJaM7t1fyMnf2BEV4Zdb4lMbod7g+oupiAZY4vzboa24bjQ+0tsYhxmLL2sU
7V7IchqVmyhAlOFNJarEFoI4tyX8MfaJDQ25+4Lrni6YJ7uLHN/rEUPWDLTBLREH
iwWIpjRA1PrsnMqVu784sqTbQ1Rl9Q/J5/PrjbLLnoq2cSAOO5iLL/9GPuxQTzLO
vNrmY9h2RcFurXB6Tp1We8+QIVK+ZLU3fekgRA0sjE1vrzmGKB4Pmjh+
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:46:18 2026 by rpki-client