Error: rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
File:                     kOiZk2355ouadQW_vmO4r6Cneuk.mft (raw, json)
Hash identifier:          nhnlmHCHUTTVnoLh+oHDmtsUTrZqanbIBRwRQMj5h6s=
Subject key identifier:   B3:74:60:CE:02:3C:E6:EB:2D:7F:8A:0E:4D:3A:3B:92:86:F5:34:D3
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Certificate issuer:       /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial:       0923
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
Manifest number:          090C
Signing time:             Sun 11 Oct 2026 01:54:24 +0000
Manifest this update:     Sun 11 Oct 2026 01:54:23 +0000
Manifest next update:     Tue 13 Oct 2026 01:54:23 +0000
Files and hashes:         1: kOiZk2355ouadQW_vmO4r6Cneuk.crl (hash: rvzib43t19eBDIOtoBkXWt4JF6Eh6wT9/zgCoi4Xs/E=)
                          2: D318CC8C60AD11F1834B33D2CE1D38B0.roa (hash: vytVxGQ5+3+xcP2yd2fLQ/SusudZIXkMM5vt1VWGOmM=)
                          3: 897EC16E60AB11F1A8C053C5CE1D38B0.roa (hash: cOUky0Q6559nAr4pPlLRgn5KmQ7ELu+a9eo4lRfn4Mg=)
                          4: 6748080C60AC11F1928CA7C9CE1D38B0.roa (hash: aiq8sw3U5IVlccJ2GnivuZdBAxpg4+7vp5rz3mmOjQc=)
                          5: 1394835A60AE11F1B76EE6D5CE1D38B0.roa (hash: qfAk6epq64XJP4NhzfTGD3cJAx9bl2U959tuTFQxuXE=)
                          6: FABD169A60AC11F1BE76D3CDCE1D38B0.roa (hash: k55PhIufq/MeyxvA1lamTZ3k66D8nz3zhmTmmjbZpLk=)
                          7: 5EA59BFA60AD11F1AF689ED1CE1D38B0.roa (hash: cdEai7Ee3CZvUvc9U/SJDi4Blq+Yz12d2wfaw2JZgC0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2339 (0x923)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F2B14AF, serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
        Validity
            Not Before: Oct 11 01:54:23 2026 GMT
            Not After : Oct 13 01:54:23 2026 GMT
        Subject: CN=6acaec50-39c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:e1:e2:9c:b4:2c:61:d1:11:b6:fe:40:1e:
                    2c:0f:4e:f2:49:a6:1b:77:6e:fb:49:b1:fe:cc:34:
                    69:63:a7:3d:75:ee:88:e6:69:f3:d4:46:a0:30:74:
                    fb:44:47:91:19:a2:0a:f4:32:9b:4a:b7:29:ce:ac:
                    31:3b:9f:36:9f:66:aa:63:d8:6c:64:1c:5e:03:b0:
                    a0:40:82:1f:74:ea:5d:15:e0:b8:ff:c5:4b:9d:c2:
                    a0:bd:51:66:1f:7e:e5:6b:de:c9:3c:c8:70:fa:9e:
                    d1:ad:1e:5d:3a:fe:b1:ab:b8:c2:6d:39:8a:c0:a1:
                    6f:92:21:04:7d:00:df:f2:d1:81:a6:39:09:eb:0b:
                    7a:29:c3:0b:0d:29:50:3e:18:6f:cb:6e:41:61:8d:
                    74:7c:84:5f:13:cb:bf:7d:a2:a4:fb:2d:91:25:d6:
                    99:04:5e:4d:03:56:94:9c:2a:0d:6f:87:a3:62:fb:
                    55:8c:92:8b:10:00:78:79:2b:3f:7d:4b:ed:b4:45:
                    61:33:7d:e5:41:a6:32:73:5b:32:50:66:df:5b:c2:
                    c2:ca:de:1b:1c:1b:f1:be:b1:2f:e3:a0:78:35:49:
                    31:39:93:24:40:6a:a8:1c:54:0d:fb:21:65:39:4d:
                    3d:1e:4a:db:d8:f4:e9:51:ad:e0:09:f7:4c:62:f7:
                    97:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:74:60:CE:02:3C:E6:EB:2D:7F:8A:0E:4D:3A:3B:92:86:F5:34:D3
            X509v3 Authority Key Identifier:
                keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:28:ff:90:0f:88:e5:07:23:a3:57:fa:77:7f:b2:9c:4a:25:
         05:62:f0:1a:64:9c:21:e1:c1:4b:89:fc:40:93:69:31:c6:1f:
         a9:d8:4f:1c:46:66:50:f8:f7:19:f5:86:5f:92:e0:56:a6:71:
         97:fa:65:94:8c:be:12:5d:a6:f9:46:05:ff:ab:57:94:d5:7b:
         54:46:fd:5d:96:8d:75:70:5b:c6:69:9f:27:69:da:cf:dc:76:
         1e:a1:19:f6:12:7e:69:d2:21:7f:e6:09:d6:46:82:16:54:d9:
         67:dd:65:b4:c2:27:ca:b8:57:bf:e8:64:43:dc:45:2f:e3:1e:
         3f:13:d9:4b:10:62:d0:9f:73:b7:72:e2:b7:1b:a5:b0:d7:ab:
         5b:56:61:c1:f0:ac:c7:5b:09:1e:82:0a:34:c3:37:f9:90:d6:
         d8:24:97:4b:af:83:80:c7:bf:5e:e3:5d:c0:a2:83:c2:9a:94:
         ff:3e:1b:22:49:4d:92:93:b9:d3:87:f4:72:28:77:f6:9f:84:
         2c:c8:a7:56:19:d8:b1:8d:91:d6:c1:21:6e:6b:59:5c:52:70:
         a1:d3:32:3e:be:2d:4b:be:11:a5:43:a8:4f:c6:20:4a:6e:51:
         1d:ab:49:ab:29:67:00:2c:4d:69:9b:31:d1:77:65:f9:a4:84:
         76:ee:cb:8a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCSMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjJCMTRBRjExMC8GA1UEBRMoOTBFODk5OTM2REY5RTY4QjlBNzUwNUJGQkU2M0I4
QUZBMEE3N0FFOTAeFw0yNjEwMTEwMTU0MjNaFw0yNjEwMTMwMTU0MjNaMBgxFjAU
BgNVBAMTDTZhY2FlYzUwLTM5YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEzuHinLQsYdERtv5AHiwPTvJJpht3bvtJsf7MNGljpz117ojmafPURqAw
dPtER5EZogr0MptKtynOrDE7nzafZqpj2GxkHF4DsKBAgh906l0V4Lj/xUudwqC9
UWYffuVr3sk8yHD6ntGtHl06/rGruMJtOYrAoW+SIQR9AN/y0YGmOQnrC3opwwsN
KVA+GG/LbkFhjXR8hF8Ty799oqT7LZEl1pkEXk0DVpScKg1vh6Ni+1WMkosQAHh5
Kz99S+20RWEzfeVBpjJzWzJQZt9bwsLK3hscG/G+sS/joHg1STE5kyRAaqgcVA37
IWU5TT0eStvY9OlRreAJ90xi95cFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUs3Rg
zgI85ustf4oOTTo7kob1NNMwHwYDVR0jBBgwFoAUkOiZk2355ouadQW/vmO4r6Cn
eukwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYyQjE0LzQzRjgxQjU4RUQxQzExRUE5RjgzOEM1NUY4QUVBMjI4L2tPaVpr
MjM1NW91YWRRV192bU80cjZDbmV1ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tPaVprMjM1NW91YWRRV192bU80cjZDbmV1ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjJCMTQvNDNGODFCNThFRDFDMTFFQTlGODM4QzU1RjhB
RUEyMjgva09pWmsyMzU1b3VhZFFXX3ZtTzRyNkNuZXVrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJKP+QD4jlByOjV/p3f7KcSiUFYvAa
ZJwh4cFLifxAk2kxxh+p2E8cRmZQ+PcZ9YZfkuBWpnGX+mWUjL4SXab5RgX/q1eU
1XtURv1dlo11cFvGaZ8nadrP3HYeoRn2En5p0iF/5gnWRoIWVNln3WW0wifKuFe/
6GRD3EUv4x4/E9lLEGLQn3O3cuK3G6Ww16tbVmHB8KzHWwkeggo0wzf5kNbYJJdL
r4OAx79e413AooPCmpT/PhsiSU2Sk7nTh/RyKHf2n4QsyKdWGdixjZHWwSFua1lc
UnCh0zI+vi1LvhGlQ6hPxiBKblEdq0mrKWcALE1pmzHRd2X5pIR27suK
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:54:19 2026 by rpki-client