Error: rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
File:                     Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft (raw, json)
Hash identifier:          c+UfwxaXih8iekZy9W9WZ2Cq7jpc3ksVpVp+hXkT7M4=
Subject key identifier:   DC:93:78:29:00:6F:A0:DE:24:FB:36:ED:B2:A7:9E:7D:2F:FC:B7:3B
Authority key identifier: 0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE
Certificate issuer:       /CN=F36F8434AF/serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
Certificate serial:       03BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
Manifest number:          03BA
Signing time:             Wed 23 Sep 2026 04:05:09 +0000
Manifest this update:     Wed 23 Sep 2026 04:05:08 +0000
Manifest next update:     Fri 25 Sep 2026 04:05:08 +0000
Files and hashes:         1: Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl (hash: 6xFwzLVd4TSKVpqwnJqLM0M+OrIyFJhML9mDAuI3+xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8434AF, serialNumber=0A1D1D4E3B170F94F8AE70AE42A94BE1BE9BA1DE
        Validity
            Not Before: Sep 23 04:05:08 2026 GMT
            Not After : Sep 25 04:05:08 2026 GMT
        Subject: CN=6ab34ff5-04c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:b6:37:16:ae:40:47:3b:04:cd:cd:af:d0:
                    42:89:87:55:1d:74:5d:7d:74:fe:87:01:c8:57:4f:
                    a6:d4:11:b4:1b:8a:02:87:54:0b:6b:51:72:50:95:
                    3d:4e:d2:d6:be:8f:7e:ef:f6:c8:70:1d:fe:cd:5f:
                    c6:39:4c:5f:a6:f1:95:2d:f1:1d:ee:ca:80:9e:94:
                    8a:7a:f4:c2:53:c8:c0:81:d5:a9:6d:4d:34:c4:0d:
                    d9:ec:dc:97:f0:85:0f:43:12:0a:66:1c:c8:ef:08:
                    8f:d3:20:33:cb:52:93:12:24:57:49:ac:8d:dc:c2:
                    2a:b3:c9:92:64:c6:f3:77:df:cf:bc:70:f8:ee:77:
                    4a:1c:30:05:e1:b8:92:8b:da:23:b7:ea:6d:99:79:
                    6f:c1:bd:3e:5b:74:bb:53:16:00:68:0e:a6:48:33:
                    97:9c:4c:3e:bd:db:74:b4:1a:0f:0d:35:28:4d:b6:
                    5e:eb:84:ef:00:76:a6:60:43:c2:35:09:23:54:95:
                    9e:a7:34:5e:70:71:5f:46:56:2e:0c:da:e8:83:22:
                    ad:b2:e9:b2:49:78:67:c5:45:db:07:3a:f8:6d:48:
                    2a:f4:5f:84:45:ce:b6:5e:77:90:ae:44:3e:00:d5:
                    0a:51:a5:eb:1d:2e:39:af:c3:1a:d3:3b:a9:28:cf:
                    8d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:93:78:29:00:6F:A0:DE:24:FB:36:ED:B2:A7:9E:7D:2F:FC:B7:3B
            X509v3 Authority Key Identifier:
                keyid:0A:1D:1D:4E:3B:17:0F:94:F8:AE:70:AE:42:A9:4B:E1:BE:9B:A1:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ch0dTjsXD5T4rnCuQqlL4b6bod4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8434/B0F319E6DF8111EE8B5FEA6D775412E6/Ch0dTjsXD5T4rnCuQqlL4b6bod4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:cd:bf:2e:26:69:38:61:bb:f3:49:d0:22:c4:68:61:15:f4:
         d9:36:b8:ae:c3:50:d1:57:d5:12:ce:83:0e:59:2f:02:99:24:
         dc:4c:21:33:de:3d:27:54:b2:49:a9:1a:5a:d9:4c:cc:a7:fa:
         ff:c8:af:1a:aa:fc:b2:6a:d9:05:c0:79:39:59:d2:a4:b8:f6:
         16:43:4c:79:f8:37:79:30:21:9a:54:16:58:f0:7d:3e:b4:48:
         49:fd:6a:78:85:20:84:3a:48:b4:76:94:e3:5e:44:a5:47:bf:
         7e:92:d4:78:10:99:4d:8b:d9:ad:ef:74:da:1f:81:23:16:55:
         1b:f0:42:23:da:ec:ed:1b:59:34:7e:0e:30:9b:02:eb:01:65:
         5b:bf:70:b8:65:e8:95:d6:86:73:a2:98:42:d8:51:bd:cc:21:
         85:d4:1e:bc:3d:9c:cc:3c:d5:2b:7e:d9:cc:e2:02:f7:ef:8f:
         fb:4f:fa:b3:bd:e0:34:8b:64:3a:56:2c:f4:54:7c:03:50:04:
         ab:b1:60:79:4e:4f:74:64:c7:3d:07:eb:34:8b:39:4a:de:71:
         6c:77:48:33:aa:f9:a8:2a:72:ec:53:b3:0b:70:90:82:ce:f1:
         96:60:82:08:48:7f:8a:ac:66:d3:69:27:d1:59:46:ba:4d:bc:
         6a:9a:68:91
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA78wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Rjg0MzRBRjExMC8GA1UEBRMoMEExRDFENEUzQjE3MEY5NEY4QUU3MEFFNDJBOTRC
RTFCRTlCQTFERTAeFw0yNjA5MjMwNDA1MDhaFw0yNjA5MjUwNDA1MDhaMBgxFjAU
BgNVBAMTDTZhYjM0ZmY1LTA0YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2OrY3Fq5ARzsEzc2v0EKJh1UddF19dP6HAchXT6bUEbQbigKHVAtrUXJQ
lT1O0ta+j37v9shwHf7NX8Y5TF+m8ZUt8R3uyoCelIp69MJTyMCB1altTTTEDdns
3JfwhQ9DEgpmHMjvCI/TIDPLUpMSJFdJrI3cwiqzyZJkxvN338+8cPjud0ocMAXh
uJKL2iO36m2ZeW/BvT5bdLtTFgBoDqZIM5ecTD6923S0Gg8NNShNtl7rhO8AdqZg
Q8I1CSNUlZ6nNF5wcV9GVi4M2uiDIq2y6bJJeGfFRdsHOvhtSCr0X4RFzrZed5Cu
RD4A1QpRpesdLjmvwxrTO6koz42LAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3JN4
KQBvoN4k+zbtsqeefS/8tzswHwYDVR0jBBgwFoAUCh0dTjsXD5T4rnCuQqlL4b6b
od4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY4NDM0L0IwRjMxOUU2REY4MTExRUU4QjVGRUE2RDc3NTQxMkU2L0NoMGRU
anNYRDVUNHJuQ3VRcWxMNGI2Ym9kNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NoMGRUanNYRDVUNHJuQ3VRcWxMNGI2Ym9kNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Rjg0MzQvQjBGMzE5RTZERjgxMTFFRThCNUZFQTZENzc1
NDEyRTYvQ2gwZFRqc1hENVQ0cm5DdVFxbEw0YjZib2Q0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAIzb8uJmk4YbvzSdAixGhhFfTZNriu
w1DRV9USzoMOWS8CmSTcTCEz3j0nVLJJqRpa2UzMp/r/yK8aqvyyatkFwHk5WdKk
uPYWQ0x5+Dd5MCGaVBZY8H0+tEhJ/Wp4hSCEOki0dpTjXkSlR79+ktR4EJlNi9mt
73TaH4EjFlUb8EIj2uztG1k0fg4wmwLrAWVbv3C4ZeiV1oZzophC2FG9zCGF1B68
PZzMPNUrftnM4gL374/7T/qzveA0i2Q6Viz0VHwDUASrsWB5Tk90ZMc9B+s0izlK
3nFsd0gzqvmoKnLsU7MLcJCCzvGWYIIISH+KrGbTaSfRWUa6TbxqmmiR
-----END CERTIFICATE-----
Generated at Wed Sep 23 11:33:35 2026 by rpki-client