Error: rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
File:                     DZvooDz0-SG-roASCfDNqfpcKKk.mft (raw, json)
Hash identifier:          TvE/mAFCLdrq3gbYvRVJjWSwJpdWTEAg6MedCgEa7Bo=
Subject key identifier:   DA:31:47:A0:A8:81:7E:F4:2C:37:AC:3F:E2:3C:23:EE:1B:6A:C6:8B
Authority key identifier: 0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9
Certificate issuer:       /CN=F36E3A59AF/serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
Certificate serial:       01C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
Manifest number:          01C2
Signing time:             Thu 24 Sep 2026 04:59:37 +0000
Manifest this update:     Thu 24 Sep 2026 04:59:36 +0000
Manifest next update:     Sat 26 Sep 2026 04:59:36 +0000
Files and hashes:         1: DZvooDz0-SG-roASCfDNqfpcKKk.crl (hash: mssuJj5xyVCqL3ON4xdFgQvPfzc3LZAO0RkDtEc8Q5c=)
                          2: 61276BBA8FE211F1A322B3D5CE1D38B0.roa (hash: ZgYi187X+5Outlah/ax0NZjZ4kzN2fXozzCC/u2qZ/I=)
                          3: 481A94F88FE211F196C1ACD5CE1D38B0.roa (hash: /b4HJPRNHI6xpg0bDUmbfP0kip9OmM0xcDOIsyuagII=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 04:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3A59AF, serialNumber=0D9BE8A03CF4F921BEAE801209F0CDA9FA5C28A9
        Validity
            Not Before: Sep 24 04:59:36 2026 GMT
            Not After : Sep 26 04:59:36 2026 GMT
        Subject: CN=6ab4ae38-aac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a3:d2:d9:c1:06:50:82:b2:59:c6:f5:35:7c:
                    73:1e:a9:5b:51:86:97:d5:fa:74:80:83:63:1d:34:
                    52:a4:46:e2:2b:40:dc:b7:01:f4:37:cd:70:e2:4f:
                    b5:f3:b4:8a:4a:2b:15:7a:49:6e:f0:b1:83:63:7b:
                    34:69:16:71:96:33:0b:b0:43:03:8a:a1:1d:cb:44:
                    d5:01:f0:15:96:dd:cd:44:7a:98:41:b9:02:b9:47:
                    61:8e:cf:4e:84:1d:74:bf:47:88:0d:13:9b:6d:5e:
                    82:51:9a:76:5c:ff:98:9b:8f:d8:58:dd:6e:21:2e:
                    10:80:e6:1a:40:79:38:ad:0d:cf:27:82:2b:45:83:
                    bf:fe:90:cf:12:f9:46:19:f5:22:7e:ba:a3:40:0b:
                    bc:a0:45:23:a2:a6:fb:df:7d:35:9a:3c:15:77:a7:
                    53:a0:85:ad:e0:79:18:9a:3a:f9:a2:fb:7c:a6:24:
                    8d:7d:bd:b5:18:dd:f9:62:e7:69:80:65:f9:61:46:
                    0a:51:8b:2d:9b:d4:e3:6c:4a:b7:be:31:df:7d:2d:
                    2e:bd:ce:61:bd:ee:da:bf:8f:d9:36:b2:9c:b6:da:
                    9b:41:ed:29:85:00:e7:cb:97:ac:0d:40:72:a0:91:
                    93:5e:10:48:dd:ea:ea:19:74:34:76:3d:39:72:5b:
                    d1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:31:47:A0:A8:81:7E:F4:2C:37:AC:3F:E2:3C:23:EE:1B:6A:C6:8B
            X509v3 Authority Key Identifier:
                keyid:0D:9B:E8:A0:3C:F4:F9:21:BE:AE:80:12:09:F0:CD:A9:FA:5C:28:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DZvooDz0-SG-roASCfDNqfpcKKk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3A59/29E748185D4E11F0AB0058C9DAE4EC9C/DZvooDz0-SG-roASCfDNqfpcKKk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:2c:66:16:f4:d6:a1:a1:9c:8c:53:3d:ec:ad:59:5d:7b:60:
         1e:2c:01:0c:1a:c8:b5:ad:fc:4d:e8:52:0f:53:77:c9:31:8c:
         f4:e4:b7:68:c4:97:8b:5f:10:c3:a3:87:fb:d5:64:33:b1:f9:
         eb:2f:c7:0e:5f:23:0e:f6:36:94:47:32:ef:0b:17:77:1f:43:
         93:fd:b0:20:a5:9a:05:12:05:32:3c:96:ea:04:67:30:31:1e:
         30:9b:77:53:a9:9c:57:c7:5c:85:b5:43:91:ae:d2:6d:bb:07:
         cb:96:ad:1f:68:00:57:68:d7:7b:ac:e8:1e:f3:ea:43:6b:fc:
         56:ba:b6:25:a5:1e:6d:b4:a6:db:1c:0f:11:5d:23:9f:a8:84:
         13:2a:38:ed:66:db:a9:fa:2c:4e:25:61:ed:e0:60:c4:96:01:
         ec:94:10:21:e6:20:0b:a5:25:ba:db:58:3c:89:7d:a2:f3:1c:
         9b:9e:d6:f1:3b:77:44:55:69:7f:cb:5f:de:de:37:bd:f1:17:
         c0:3b:08:e8:3f:e5:4c:c9:5c:c1:b9:c4:a3:41:4f:56:33:a8:
         e2:63:43:a5:aa:15:73:35:b3:84:c9:cb:1a:56:92:3e:bf:61:
         fa:9c:94:cb:13:c8:e9:d8:59:4d:48:61:ff:c1:43:94:bf:a6:
         f7:7c:04:76
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTNBNTlBRjExMC8GA1UEBRMoMEQ5QkU4QTAzQ0Y0RjkyMUJFQUU4MDEyMDlGMENE
QTlGQTVDMjhBOTAeFw0yNjA5MjQwNDU5MzZaFw0yNjA5MjYwNDU5MzZaMBgxFjAU
BgNVBAMTDTZhYjRhZTM4LWFhYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLo9LZwQZQgrJZxvU1fHMeqVtRhpfV+nSAg2MdNFKkRuIrQNy3AfQ3zXDi
T7XztIpKKxV6SW7wsYNjezRpFnGWMwuwQwOKoR3LRNUB8BWW3c1EephBuQK5R2GO
z06EHXS/R4gNE5ttXoJRmnZc/5ibj9hY3W4hLhCA5hpAeTitDc8ngitFg7/+kM8S
+UYZ9SJ+uqNAC7ygRSOipvvffTWaPBV3p1Ogha3geRiaOvmi+3ymJI19vbUY3fli
52mAZflhRgpRiy2b1ONsSre+Md99LS69zmG97tq/j9k2spy22ptB7SmFAOfLl6wN
QHKgkZNeEEjd6uoZdDR2PTlyW9GPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2jFH
oKiBfvQsN6w/4jwj7htqxoswHwYDVR0jBBgwFoAUDZvooDz0+SG+roASCfDNqfpc
KKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzQTU5LzI5RTc0ODE4NUQ0RTExRjBBQjAwNThDOURBRTRFQzlDL0Radm9v
RHowLVNHLXJvQVNDZkROcWZwY0tLay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0Radm9vRHowLVNHLXJvQVNDZkROcWZwY0tLay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTNBNTkvMjlFNzQ4MTg1RDRFMTFGMEFCMDA1OEM5REFF
NEVDOUMvRFp2b29EejAtU0ctcm9BU0NmRE5xZnBjS0trLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfLGYW9NahoZyMUz3srVlde2AeLAEM
Gsi1rfxN6FIPU3fJMYz05LdoxJeLXxDDo4f71WQzsfnrL8cOXyMO9jaURzLvCxd3
H0OT/bAgpZoFEgUyPJbqBGcwMR4wm3dTqZxXx1yFtUORrtJtuwfLlq0faABXaNd7
rOge8+pDa/xWurYlpR5ttKbbHA8RXSOfqIQTKjjtZtup+ixOJWHt4GDElgHslBAh
5iALpSW621g8iX2i8xybntbxO3dEVWl/y1/e3je98RfAOwjoP+VMyVzBucSjQU9W
M6jiY0OlqhVzNbOEycsaVpI+v2H6nJTLE8jp2FlNSGH/wUOUv6b3fAR2
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:15:44 2026 by rpki-client