Error: rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier:          wAEydj9pjKwpmf2fuhJuSah+zkqZzrhkGT9+InziwKs=
Subject key identifier:   3E:6A:52:3E:AA:90:BD:D2:10:C3:2C:09:AE:2D:C1:2D:89:D0:17:8F
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer:       /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial:       0490
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number:          048E
Signing time:             Wed 23 Sep 2026 03:38:49 +0000
Manifest this update:     Wed 23 Sep 2026 03:38:48 +0000
Manifest next update:     Fri 25 Sep 2026 03:38:48 +0000
Files and hashes:         1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: +b6ZSsgM5F1PUdMWGfdGjRV6RgyzXVopN+v7oCmQ//M=)
                          2: 046CF67872E311F0A86CB7A7DAE4EC9C.roa (hash: RxZ6zJwwPB1hMFI2/FMmvPsAjrVlDL8yDDweU2BNpDw=)
                          3: 308911DA72E111F086A6389EDAE4EC9C.roa (hash: tYlSqnPCB7Kv8awS73OBDNcKa9Ut1iPvCF4nylTCo2o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                          rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAR, serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Validity
            Not Before: Sep 23 03:38:48 2026 GMT
            Not After : Sep 25 03:38:48 2026 GMT
        Subject: CN=6ab349c9-bb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:1a:d2:e9:40:41:4d:82:b6:db:a6:27:99:
                    26:99:fa:4a:09:44:98:24:83:40:c0:61:b1:91:28:
                    79:8d:d4:85:1e:49:10:3e:fa:02:20:02:48:f0:bc:
                    e7:4c:f2:a2:57:d8:be:01:96:18:e6:09:da:00:7b:
                    c7:75:27:82:74:cf:72:67:51:30:9b:4a:55:7d:8a:
                    28:01:b9:86:a0:ec:6e:fa:94:dd:cc:b2:bd:73:d2:
                    db:8e:98:06:d6:00:d3:b9:c1:51:9b:4e:a6:54:1a:
                    e0:f7:92:ff:43:fc:fa:b9:c2:fe:76:45:b1:10:18:
                    14:25:f1:50:9f:ea:ff:2a:c2:b1:9c:b7:d5:3b:f8:
                    e1:90:20:28:fa:7f:22:9c:ad:ed:83:79:76:88:1e:
                    f8:99:7d:2e:65:06:5d:67:5a:87:61:ee:1a:2d:a0:
                    71:e4:9a:85:be:02:c9:df:b4:04:ff:71:a5:7f:01:
                    07:0f:ee:94:0c:c2:59:fd:4f:6f:6c:67:aa:48:cb:
                    81:6b:50:55:e8:5c:5f:f6:61:5f:fd:8a:0e:65:6b:
                    7b:d0:ee:ae:91:2d:ed:32:6c:13:30:0a:95:a1:26:
                    ef:22:4e:d0:c0:69:7a:92:74:8c:23:a5:95:27:cb:
                    6d:9b:dd:95:66:d6:39:af:d4:99:d5:cb:05:15:25:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6A:52:3E:AA:90:BD:D2:10:C3:2C:09:AE:2D:C1:2D:89:D0:17:8F
            X509v3 Authority Key Identifier:
                keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:86:9d:5d:18:6d:5f:76:33:44:ec:00:e4:d9:c5:ea:00:ed:
         b1:07:7a:f8:12:29:a0:51:02:c5:e5:f3:89:8e:17:a5:e6:f3:
         b9:3a:50:11:49:45:73:b3:7a:90:18:3c:ec:ae:b4:95:00:d0:
         b1:d3:69:12:dc:01:8b:bb:e6:2c:33:96:73:9a:7d:43:f6:e6:
         0d:75:38:9b:71:18:b5:83:07:5d:6a:5b:46:70:de:7a:b8:15:
         89:39:04:cb:80:0a:27:fc:6e:e5:85:e8:ec:3d:f8:ae:b6:05:
         09:b9:3a:ef:9d:5b:55:ac:17:dc:fa:d7:b7:6d:6f:f3:51:13:
         22:9e:9a:13:27:02:4e:9d:0b:f5:6c:3e:5f:3c:1a:85:63:1f:
         d6:dc:8f:3e:30:bb:09:df:0a:69:fc:70:19:8e:92:e9:ee:24:
         2c:75:f4:bc:db:f3:18:b9:fb:61:c6:19:17:ec:a2:22:d2:10:
         bb:8e:af:a1:05:74:35:39:97:ba:ba:f8:40:29:63:a0:a0:de:
         1e:b5:7a:01:1d:f5:af:55:dd:3b:80:14:0f:29:63:80:d2:37:
         2b:80:b1:59:20:63:af:de:fc:1b:e3:84:c6:23:cd:68:33:80:
         70:14:44:9e:b3:9a:6c:7c:65:64:89:a2:d5:08:e5:0b:ed:ad:
         61:b6:28:88
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBJAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjczMUZBUjExMC8GA1UEBRMoQzY0NzM2MjVFQUVGRDY3MzZDOTA3RDIzMUREOUM1
REJEQjlGNUVBQjAeFw0yNjA5MjMwMzM4NDhaFw0yNjA5MjUwMzM4NDhaMBgxFjAU
BgNVBAMTDTZhYjM0OWM5LWJiNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLDBrS6UBBTYK226YnmSaZ+koJRJgkg0DAYbGRKHmN1IUeSRA++gIgAkjw
vOdM8qJX2L4BlhjmCdoAe8d1J4J0z3JnUTCbSlV9iigBuYag7G76lN3Msr1z0tuO
mAbWANO5wVGbTqZUGuD3kv9D/Pq5wv52RbEQGBQl8VCf6v8qwrGct9U7+OGQICj6
fyKcre2DeXaIHviZfS5lBl1nWodh7hotoHHkmoW+AsnftAT/caV/AQcP7pQMwln9
T29sZ6pIy4FrUFXoXF/2YV/9ig5la3vQ7q6RLe0ybBMwCpWhJu8iTtDAaXqSdIwj
pZUny22b3ZVm1jmv1JnVywUVJQ8vAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUPmpS
PqqQvdIQwywJri3BLYnQF48wHwYDVR0jBBgwFoAUxkc2Jerv1nNskH0jHdnF29uf
XqswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY3MzFGLzkzNDBEODI2Mzc5NzExRUU5NkZCN0EzMTRBRDlFNkZDL3hrYzJK
ZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3hrYzJKZXJ2MW5Oc2tIMGpIZG5GMjl1Zlhxcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RjczMUYvOTM0MEQ4MjYzNzk3MTFFRTk2RkI3QTMxNEFEOUU2
RkMveGtjMkplcnYxbk5za0gwakhkbkYyOXVmWHFzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBUhp1dGG1fdjNE7ADk2cXqAO2xB3r4Eimg
UQLF5fOJjhel5vO5OlARSUVzs3qQGDzsrrSVANCx02kS3AGLu+YsM5Zzmn1D9uYN
dTibcRi1gwddaltGcN56uBWJOQTLgAon/G7lhejsPfiutgUJuTrvnVtVrBfc+te3
bW/zURMinpoTJwJOnQv1bD5fPBqFYx/W3I8+MLsJ3wpp/HAZjpLp7iQsdfS82/MY
ufthxhkX7KIi0hC7jq+hBXQ1OZe6uvhAKWOgoN4etXoBHfWvVd07gBQPKWOA0jcr
gLFZIGOv3vwb44TGI81oM4BwFESes5psfGVkiaLVCOUL7a1htiiI
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:34:11 2026 by rpki-client