Error: rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          rJDyDPz4oMn+NWlXlVYf/W7/rV7DZV0DccnBN460gzo=
Subject key identifier:   A0:B8:24:5F:61:93:2F:AD:C7:4C:7C:BB:12:30:82:59:86:6F:BF:CB
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       034F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          034A
Signing time:             Sat 10 Oct 2026 04:19:56 +0000
Manifest this update:     Sat 10 Oct 2026 04:19:55 +0000
Manifest next update:     Mon 12 Oct 2026 04:19:55 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: 9I2rcojaSGcqaLJS1+lyK4ZW/NXcQMI6qL+hsD6HCio=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)
                          3: 8AE0C950CC5211F08901D0F0DAE4EC9C.roa (hash: p6vdnsJDN6upI5W/Ww4HUUN2q0hJo9P4coEtR26YSjc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Oct 10 04:19:55 2026 GMT
            Not After : Oct 12 04:19:55 2026 GMT
        Subject: CN=6ac9bcec-2034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2a:23:3f:0e:23:b4:2e:80:9f:a1:dc:99:eb:
                    88:8c:f8:6e:3e:55:c5:1e:a8:45:a5:0f:41:7d:92:
                    d0:dd:81:5c:0f:59:bb:78:65:8d:d4:6c:ec:83:91:
                    81:bc:55:81:3b:11:98:34:3f:d8:b1:eb:90:de:72:
                    5a:30:80:bb:ad:14:fa:e1:6e:65:c8:51:9b:de:80:
                    42:be:77:2c:19:96:a7:bc:88:60:05:af:62:70:10:
                    6a:83:db:90:26:97:02:6f:a4:ad:b2:a8:df:b9:b4:
                    f6:c6:36:7a:32:69:70:ba:fd:9f:cf:63:08:3e:89:
                    58:3a:c8:aa:30:ac:b3:16:d7:57:1e:d9:6a:83:51:
                    3e:34:eb:ea:b4:68:a0:29:a3:e1:27:72:8a:6c:97:
                    a7:30:f4:f3:b0:61:93:b0:81:58:1a:42:c2:69:b4:
                    49:e3:84:3f:1f:70:c0:bb:ee:ef:dc:db:00:4e:58:
                    44:e5:3c:60:f4:b6:79:93:0a:3f:cf:b8:9c:08:d5:
                    54:4b:56:eb:db:a2:b3:86:6e:fc:e8:1f:5b:ed:43:
                    cb:48:3f:5e:5d:52:d3:0b:2b:7b:c4:8c:31:7e:b2:
                    9b:82:9a:5a:28:6c:a9:21:74:ae:73:dd:a2:5d:68:
                    fd:04:c5:39:18:f5:19:dd:98:a7:c1:70:8c:a5:31:
                    11:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B8:24:5F:61:93:2F:AD:C7:4C:7C:BB:12:30:82:59:86:6F:BF:CB
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:74:4f:6b:cf:2e:30:a4:5f:ab:ad:da:af:fb:84:27:07:74:
         9a:7d:15:83:d6:87:56:38:ad:b5:64:3d:8d:f7:3b:56:f7:ed:
         2e:55:55:7d:f7:58:f8:2d:4f:0f:97:06:74:5e:7c:a5:d7:0f:
         ad:00:9b:cd:d2:c4:bb:fd:39:01:63:10:d2:7f:0d:09:bc:08:
         54:df:cc:6a:06:87:e8:eb:00:22:a2:33:d2:a3:64:70:be:70:
         4f:f3:7c:ba:15:5d:63:b0:65:c9:c2:c3:77:e1:b3:d7:ad:c2:
         11:33:80:b3:e9:1a:f6:54:0c:d6:eb:0d:63:16:47:f3:0f:d9:
         af:28:e1:64:95:63:5d:cd:a6:75:23:15:f7:e8:28:29:f9:1a:
         a5:9e:43:aa:92:c4:69:5c:b5:3b:37:49:2d:fd:e7:e3:c1:cd:
         a7:0c:37:4b:e5:dd:4d:c0:d5:3e:2f:02:6b:c8:00:ad:61:e9:
         ab:3d:17:63:fe:7e:0a:6a:7a:bc:31:55:06:ce:2c:66:47:b7:
         4c:38:b1:49:6e:46:c8:75:3e:1e:7f:ea:75:8f:05:09:f0:83:
         ff:a9:d9:f7:77:bd:df:f5:73:a7:e2:df:73:6b:4c:e3:dc:31:
         ae:68:af:e0:0f:8d:31:c1:7f:18:f1:00:1c:1d:48:98:00:e5:
         f4:44:6c:f8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA08wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTZCNzdBRjExMC8GA1UEBRMoRjVERkY2NEEzOUQ4MDA3MDQ0RDc2NzFDQkNBQUEx
RTE2MTU3NDVBMDAeFw0yNjEwMTAwNDE5NTVaFw0yNjEwMTIwNDE5NTVaMBgxFjAU
BgNVBAMTDTZhYzliY2VjLTIwMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtKiM/DiO0LoCfodyZ64iM+G4+VcUeqEWlD0F9ktDdgVwPWbt4ZY3UbOyD
kYG8VYE7EZg0P9ix65DeclowgLutFPrhbmXIUZvegEK+dywZlqe8iGAFr2JwEGqD
25AmlwJvpK2yqN+5tPbGNnoyaXC6/Z/PYwg+iVg6yKowrLMW11ce2WqDUT406+q0
aKApo+Encopsl6cw9POwYZOwgVgaQsJptEnjhD8fcMC77u/c2wBOWETlPGD0tnmT
Cj/PuJwI1VRLVuvborOGbvzoH1vtQ8tIP15dUtMLK3vEjDF+spuCmloobKkhdK5z
3aJdaP0ExTkY9RndmKfBcIylMRFLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoLgk
X2GTL63HTHy7EjCCWYZvv8swHwYDVR0jBBgwFoAU9d/2SjnYAHBE12ccvKqh4WFX
RaAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU2Qjc3LzNDRkZBMzgwNDJDQjExRUY4QjlBMzdBRTc2MkU5NTFBLzlkXzJT
am5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlkXzJTam5ZQUhCRTEyY2N2S3FoNFdGWFJhQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTZCNzcvM0NGRkEzODA0MkNCMTFFRjhCOUEzN0FFNzYy
RTk1MUEvOWRfMlNqbllBSEJFMTJjY3ZLcWg0V0ZYUmFBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYdE9rzy4wpF+rrdqv+4QnB3SafRWD
1odWOK21ZD2N9ztW9+0uVVV991j4LU8PlwZ0Xnyl1w+tAJvN0sS7/TkBYxDSfw0J
vAhU38xqBofo6wAiojPSo2RwvnBP83y6FV1jsGXJwsN34bPXrcIRM4Cz6Rr2VAzW
6w1jFkfzD9mvKOFklWNdzaZ1IxX36Cgp+RqlnkOqksRpXLU7N0kt/efjwc2nDDdL
5d1NwNU+LwJryACtYemrPRdj/n4Kanq8MVUGzixmR7dMOLFJbkbIdT4ef+p1jwUJ
8IP/qdn3d73f9XOn4t9za0zj3DGuaK/gD40xwX8Y8QAcHUiYAOX0RGz4
-----END CERTIFICATE-----
Generated at Sat Oct 10 17:57:21 2026 by rpki-client