Error: rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
File:                     jipNb8UYDX1HWKp5jDiYAu7zv7M.mft (raw, json)
Hash identifier:          zL3Mv/Er2wOHU+F3XFqyRNMFyZN2bm0jzQtsS87D58g=
Subject key identifier:   68:91:82:E2:71:D1:D4:E0:6A:18:73:E7:A3:04:EE:C3:EC:22:E9:AA
Authority key identifier: 8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3
Certificate issuer:       /CN=F36F4212AF/serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
Certificate serial:       03D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
Manifest number:          03CF
Signing time:             Mon 05 Oct 2026 04:03:05 +0000
Manifest this update:     Mon 05 Oct 2026 04:03:04 +0000
Manifest next update:     Wed 07 Oct 2026 04:03:04 +0000
Files and hashes:         1: jipNb8UYDX1HWKp5jDiYAu7zv7M.crl (hash: HExOmr/MoXtwpg5zqUA00wT1xh9CrFuxtxAke7cyS+4=)
                          2: BDA909CACFB911EEA2EBAB6A775412E6.roa (hash: oOsN7fS/FRC6cCK/W7sGcZ0zEfirLAaFD65Y5zMuPNM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 04:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F4212AF, serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
        Validity
            Not Before: Oct  5 04:03:04 2026 GMT
            Not After : Oct  7 04:03:04 2026 GMT
        Subject: CN=6ac32179-0ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:36:b9:b7:c1:96:e1:5c:dd:a2:0c:cc:e6:13:
                    74:74:f5:68:e1:bf:ab:03:a8:1d:83:43:91:b0:f4:
                    27:7d:b7:80:1a:ce:ea:60:ea:18:92:7d:50:6c:fc:
                    e1:97:5c:00:88:64:65:b8:0e:24:fe:5f:65:f3:f5:
                    21:e2:83:fd:30:c5:91:c7:1f:d6:7e:62:cd:dc:9f:
                    ef:5f:e1:15:9c:b2:75:0e:cc:23:e6:3b:7b:7d:37:
                    88:44:32:1c:bb:fb:ee:29:e0:9e:32:9e:6b:44:c8:
                    82:a1:76:ff:9a:80:3c:54:0c:aa:1f:61:53:37:b6:
                    f9:b8:56:24:0a:09:e5:28:95:0b:a7:e9:b1:1f:90:
                    cf:5d:ed:67:e5:dc:2f:6c:49:eb:e6:cb:b8:b4:c2:
                    33:1d:c8:79:7f:0c:1a:c6:13:a3:26:76:f1:70:09:
                    fa:c1:55:7f:75:8b:a4:c8:ba:1f:85:4e:c6:2a:89:
                    d6:72:85:66:a4:3a:e6:a3:55:fd:10:90:c9:13:f1:
                    98:b8:79:77:35:1f:d2:16:99:7f:bc:7e:85:ac:a3:
                    da:29:c2:87:d4:7f:06:c6:ef:23:23:62:22:3c:f0:
                    ba:67:38:03:dc:67:b3:c6:ba:52:b1:0c:15:0b:ad:
                    53:ed:27:d0:dc:90:c7:89:7b:67:4b:94:38:d8:b2:
                    68:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:91:82:E2:71:D1:D4:E0:6A:18:73:E7:A3:04:EE:C3:EC:22:E9:AA
            X509v3 Authority Key Identifier:
                keyid:8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e5:37:55:46:0b:6c:22:5c:08:e7:0b:67:0a:96:ce:bd:b5:
         c0:92:a2:29:b7:b2:93:d4:52:85:ae:d6:ec:dc:c6:6a:5a:4d:
         fd:d0:db:f1:f5:96:44:38:a0:da:2e:a7:4d:3d:fb:c6:44:c9:
         b7:dc:37:37:97:09:f2:8f:d9:9d:ea:70:45:39:7e:20:7b:60:
         a0:bb:a7:f7:f5:f2:6e:2a:0f:98:d8:b5:36:f5:ad:3f:55:e5:
         c6:d8:e0:3f:9e:85:9d:e3:a8:58:eb:c9:6d:ea:f1:f4:07:11:
         8e:92:d0:ee:ec:f7:00:df:bc:b9:0d:a0:fe:a9:e0:06:9e:13:
         94:e5:83:77:5e:20:15:49:36:f6:eb:b6:3c:03:b6:1d:81:bd:
         d9:c9:81:80:b2:e1:e5:9c:4e:89:f3:d0:2b:6d:ea:c5:10:a5:
         4c:1f:dc:ef:92:25:db:97:2c:76:c4:fe:c9:1e:e9:fc:34:a8:
         2d:9f:7a:e0:3a:89:e1:2c:7b:bd:8e:b2:4d:fd:85:ba:c8:ca:
         77:44:ff:47:7d:b6:be:10:14:30:ef:51:fb:ca:3a:75:2f:f5:
         0c:6a:f4:e1:3e:f5:e9:e0:ce:8f:54:52:9f:76:c5:22:0f:92:
         db:12:2d:47:7a:12:fa:81:b5:5b:1c:89:eb:c1:e5:f6:7f:85:
         8b:5c:d8:a2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjQyMTJBRjExMC8GA1UEBRMoOEUyQTRENkZDNTE4MEQ3RDQ3NThBQTc5OEMzODk4
MDJFRUYzQkZCMzAeFw0yNjEwMDUwNDAzMDRaFw0yNjEwMDcwNDAzMDRaMBgxFjAU
BgNVBAMTDTZhYzMyMTc5LTBmZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvNrm3wZbhXN2iDMzmE3R09Wjhv6sDqB2DQ5Gw9Cd9t4Aazupg6hiSfVBs
/OGXXACIZGW4DiT+X2Xz9SHig/0wxZHHH9Z+Ys3cn+9f4RWcsnUOzCPmO3t9N4hE
Mhy7++4p4J4ynmtEyIKhdv+agDxUDKofYVM3tvm4ViQKCeUolQun6bEfkM9d7Wfl
3C9sSevmy7i0wjMdyHl/DBrGE6MmdvFwCfrBVX91i6TIuh+FTsYqidZyhWakOuaj
Vf0QkMkT8Zi4eXc1H9IWmX+8foWso9opwofUfwbG7yMjYiI88LpnOAPcZ7PGulKx
DBULrVPtJ9DckMeJe2dLlDjYsmglAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaJGC
4nHR1OBqGHPnowTuw+wi6aowHwYDVR0jBBgwFoAUjipNb8UYDX1HWKp5jDiYAu7z
v7MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY0MjEyLzUzQkQ3ODUyQ0ZCOTExRUVCQURGMUE2QTc3NTQxMkU2L2ppcE5i
OFVZRFgxSFdLcDVqRGlZQXU3enY3TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ppcE5iOFVZRFgxSFdLcDVqRGlZQXU3enY3TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjQyMTIvNTNCRDc4NTJDRkI5MTFFRUJBREYxQTZBNzc1
NDEyRTYvamlwTmI4VVlEWDFIV0twNWpEaVlBdTd6djdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBq5TdVRgtsIlwI5wtnCpbOvbXAkqIp
t7KT1FKFrtbs3MZqWk390Nvx9ZZEOKDaLqdNPfvGRMm33Dc3lwnyj9md6nBFOX4g
e2Cgu6f39fJuKg+Y2LU29a0/VeXG2OA/noWd46hY68lt6vH0BxGOktDu7PcA37y5
DaD+qeAGnhOU5YN3XiAVSTb267Y8A7Ydgb3ZyYGAsuHlnE6J89ArberFEKVMH9zv
kiXblyx2xP7JHun8NKgtn3rgOonhLHu9jrJN/YW6yMp3RP9Hfba+EBQw71H7yjp1
L/UMavThPvXp4M6PVFKfdsUiD5LbEi1HehL6gbVbHInrweX2f4WLXNii
-----END CERTIFICATE-----
Generated at Tue Oct 6 05:14:28 2026 by rpki-client