Error: rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
File:                     4u30RuwlLhL_hY7r4xim2a4EMbA.mft (raw, json)
Hash identifier:          bUFV1Lk26wxEZq/6w9iWknMf3jutuYtZzJ/16XKi8fE=
Subject key identifier:   DA:3A:A2:4F:EC:EF:93:C2:9D:47:77:54:CF:21:61:74:4A:3A:A3:0F
Authority key identifier: E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0
Certificate issuer:       /CN=F36F61A5AF/serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
Certificate serial:       0767
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
Manifest number:          0763
Signing time:             Wed 23 Sep 2026 02:22:33 +0000
Manifest this update:     Wed 23 Sep 2026 02:22:33 +0000
Manifest next update:     Fri 25 Sep 2026 02:22:33 +0000
Files and hashes:         1: 4u30RuwlLhL_hY7r4xim2a4EMbA.crl (hash: TRE6tXlp7PcxSIcDAkDK8RQnPA9f1fB+BvJM0RcVBFU=)
                          2: BC7938E258D611F1B4FC68AFCE1D38B0.roa (hash: 7f8KI6rxDfxMqODzde75RMP2FvyjEgwgMeCyQOzN36g=)
                          3: 3205938460DA11F18CDCC1DCCE1D38B0.roa (hash: Z2Rj2kCALra6smsTiaj7JhFm7dUvTIxKaqfHUdO/9Bs=)
                          4: 90F79C7C60D811F19F96B0D2CE1D38B0.roa (hash: T65kjrw8rJ3A6xr2pSO5MnSqwbL9mSOLIEsI6tFtcqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1895 (0x767)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F61A5AF, serialNumber=E2EDF446EC252E12FF858EEBE318A6D9AE0431B0
        Validity
            Not Before: Sep 23 02:22:33 2026 GMT
            Not After : Sep 25 02:22:33 2026 GMT
        Subject: CN=6ab337e9-704e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:d9:38:85:98:17:fd:94:83:f5:c2:17:b9:
                    ac:bd:f5:e6:e7:7e:da:8b:3b:4d:93:7a:33:47:8e:
                    2b:02:13:ca:5a:e6:8e:0f:ba:9f:ad:93:a4:d3:0c:
                    95:a8:f2:37:cc:db:07:b8:be:d8:0d:5c:54:96:69:
                    b1:d5:47:bf:9e:37:b0:9c:cd:64:bd:8b:86:df:e2:
                    26:83:43:55:ae:4f:d6:f9:87:4e:17:c4:de:b0:44:
                    37:e0:7b:07:df:0c:34:bd:b7:94:5c:34:08:f4:a2:
                    d2:c3:29:55:bc:a3:13:21:94:4e:4a:ff:b5:ab:d4:
                    c7:37:1f:d9:f7:87:b1:18:32:48:e8:81:b3:bd:c2:
                    50:d2:89:48:23:48:fc:d8:b0:4b:48:87:08:48:bc:
                    d2:13:bd:2f:e8:b7:a7:86:fb:62:e4:99:10:77:3d:
                    5c:99:c4:8f:cd:5e:88:c4:e8:41:78:f8:fd:3b:50:
                    52:ce:42:5d:e1:28:b5:c9:48:fd:7d:76:32:29:68:
                    2b:7e:03:c8:c0:3a:32:ad:94:63:76:3d:9f:12:5d:
                    52:8b:c7:0f:21:20:97:8d:2d:20:50:dc:c9:ff:20:
                    04:d0:c7:97:4f:2e:bf:0c:0e:da:03:e1:28:16:2d:
                    87:90:e7:a6:d3:c3:de:f3:52:89:27:64:7f:65:36:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:3A:A2:4F:EC:EF:93:C2:9D:47:77:54:CF:21:61:74:4A:3A:A3:0F
            X509v3 Authority Key Identifier:
                keyid:E2:ED:F4:46:EC:25:2E:12:FF:85:8E:EB:E3:18:A6:D9:AE:04:31:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4u30RuwlLhL_hY7r4xim2a4EMbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F61A5/06F7F66C0FC911EC8545E973D8A014CE/4u30RuwlLhL_hY7r4xim2a4EMbA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:84:81:f4:ec:04:e3:0b:6b:7c:32:7c:c2:a6:da:d4:8a:c2:
         93:77:91:a8:48:3a:d0:e9:44:f0:a8:3e:d3:8e:a4:db:f7:10:
         26:b5:4a:09:d4:d0:a4:68:c1:73:8c:e0:b8:76:d8:59:4e:7f:
         97:10:43:48:f9:22:bd:1a:d5:d3:4d:c3:21:77:cf:76:1a:bf:
         a4:1c:77:c6:86:c4:85:97:43:6e:ee:b4:01:8f:d7:97:e7:54:
         7f:76:9a:30:20:4c:f6:45:67:17:07:e5:fa:17:93:40:cd:9c:
         9d:7c:11:ce:94:90:7e:74:23:c5:a9:71:30:d6:3a:81:12:99:
         22:9d:11:3f:00:a0:03:4c:9c:b8:90:30:13:17:5d:82:35:27:
         82:18:cb:fb:3e:c2:19:61:99:fb:a2:3a:18:28:f7:31:02:24:
         83:a0:44:a7:67:69:73:f7:4e:17:69:59:c3:8f:ab:38:d4:4e:
         ed:13:a2:65:0e:65:ad:c7:06:30:da:e9:96:10:48:45:f6:15:
         6b:d8:99:70:35:51:45:ff:34:e8:12:c2:90:77:45:dc:96:a5:
         50:7a:3b:36:14:f9:79:b9:fb:ed:6d:0c:b3:04:a7:ac:c1:92:
         2a:4e:5c:6c:41:01:2d:96:40:04:04:7a:4d:ef:7b:c3:1a:da:
         0c:92:ce:75
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB2cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjYxQTVBRjExMC8GA1UEBRMoRTJFREY0NDZFQzI1MkUxMkZGODU4RUVCRTMxOEE2
RDlBRTA0MzFCMDAeFw0yNjA5MjMwMjIyMzNaFw0yNjA5MjUwMjIyMzNaMBgxFjAU
BgNVBAMTDTZhYjMzN2U5LTcwNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyrNk4hZgX/ZSD9cIXuay99ebnftqLO02TejNHjisCE8pa5o4Pup+tk6TT
DJWo8jfM2we4vtgNXFSWabHVR7+eN7CczWS9i4bf4iaDQ1WuT9b5h04XxN6wRDfg
ewffDDS9t5RcNAj0otLDKVW8oxMhlE5K/7Wr1Mc3H9n3h7EYMkjogbO9wlDSiUgj
SPzYsEtIhwhIvNITvS/ot6eG+2LkmRB3PVyZxI/NXojE6EF4+P07UFLOQl3hKLXJ
SP19djIpaCt+A8jAOjKtlGN2PZ8SXVKLxw8hIJeNLSBQ3Mn/IATQx5dPLr8MDtoD
4SgWLYeQ56bTw97zUoknZH9lNmupAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2jqi
T+zvk8KdR3dUzyFhdEo6ow8wHwYDVR0jBBgwFoAU4u30RuwlLhL/hY7r4xim2a4E
MbAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2MUE1LzA2RjdGNjZDMEZDOTExRUM4NTQ1RTk3M0Q4QTAxNENFLzR1MzBS
dXdsTGhMX2hZN3I0eGltMmE0RU1iQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzR1MzBSdXdsTGhMX2hZN3I0eGltMmE0RU1iQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjYxQTUvMDZGN0Y2NkMwRkM5MTFFQzg1NDVFOTczRDhB
MDE0Q0UvNHUzMFJ1d2xMaExfaFk3cjR4aW0yYTRFTWJBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBahIH07ATjC2t8MnzCptrUisKTd5Go
SDrQ6UTwqD7TjqTb9xAmtUoJ1NCkaMFzjOC4dthZTn+XEENI+SK9GtXTTcMhd892
Gr+kHHfGhsSFl0Nu7rQBj9eX51R/dpowIEz2RWcXB+X6F5NAzZydfBHOlJB+dCPF
qXEw1jqBEpkinRE/AKADTJy4kDATF12CNSeCGMv7PsIZYZn7ojoYKPcxAiSDoESn
Z2lz904XaVnDj6s41E7tE6JlDmWtxwYw2umWEEhF9hVr2JlwNVFF/zToEsKQd0Xc
lqVQejs2FPl5ufvtbQyzBKeswZIqTlxsQQEtlkAEBHpN73vDGtoMks51
-----END CERTIFICATE-----
Generated at Wed Sep 23 19:48:02 2026 by rpki-client