Error: rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
File:                     Wob5iKEjH4bJcjMShVh-z4ZL25A.mft (raw, json)
Hash identifier:          ApOtWIIVTy6XfUFO2SleAcEtxPLr66JqQmkamSqmOkI=
Subject key identifier:   57:8A:AF:79:F5:43:D1:01:35:25:39:26:61:31:E8:11:3D:99:7C:AA
Authority key identifier: 5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90
Certificate issuer:       /CN=F36FA13FAF/serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
Certificate serial:       0A7A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
Manifest number:          0A71
Signing time:             Sat 03 Oct 2026 01:33:03 +0000
Manifest this update:     Sat 03 Oct 2026 01:33:02 +0000
Manifest next update:     Mon 05 Oct 2026 01:33:02 +0000
Files and hashes:         1: Wob5iKEjH4bJcjMShVh-z4ZL25A.crl (hash: kG6rXwRFjF5sa8Qt9UMWEDufOHkVd3lAD/m3NqCVJsk=)
                          2: 22D54F2A873211F1A1DD25DBCE1D38B0.roa (hash: 6YJKt+6KEiWJEqvrJ2OOcpZGMxLBjGJJceHlPGGeI9A=)
                          3: CA99C59C873211F1921B7CDDCE1D38B0.roa (hash: J8mkXybFE9u2dG4g/6rMiX/R0vnwSK7ht7HLC5KmFUo=)
                          4: F7E20784873311F1B7E9E2E3CE1D38B0.roa (hash: z+CNLO3NbOZrGtfxZOkyGy0Et3xGLuxNkIJsF5sFrbs=)
                          5: 5F85225A873311F19C71D2DFCE1D38B0.roa (hash: FLClJViDm2ygpv43e3sB4wxskOHtddicfBdPxrJHMUo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2682 (0xa7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA13FAF, serialNumber=5A86F988A1231F86C972331285587ECF864BDB90
        Validity
            Not Before: Oct  3 01:33:02 2026 GMT
            Not After : Oct  5 01:33:02 2026 GMT
        Subject: CN=6ac05b4f-e599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:11:88:d6:0c:26:5e:67:c8:af:cc:e1:10:b8:
                    60:ad:df:fc:6d:c4:f4:69:ba:0d:e8:98:80:48:23:
                    da:48:c7:e8:43:37:68:13:96:95:55:8e:4c:b6:f5:
                    f8:90:9d:88:e9:9b:c7:88:9d:1a:1b:54:66:60:b9:
                    91:ad:5a:da:0b:20:64:c8:5a:04:4d:5a:04:1a:af:
                    c9:06:63:b2:27:a6:9a:d4:5b:39:b4:ed:d0:c2:a1:
                    2e:a8:cf:d5:c2:5a:fc:74:ad:3e:a6:ed:fd:4e:e4:
                    fa:41:fd:b3:45:12:f4:45:46:50:4f:46:64:28:3d:
                    06:55:35:a3:d4:51:e3:fe:ba:ff:a6:68:a4:50:c3:
                    c5:3c:23:6e:53:0c:6c:17:fe:82:fe:59:c0:fd:4c:
                    77:4e:34:cb:93:69:12:e9:71:79:1d:91:a1:f7:da:
                    dc:69:b4:f6:fc:1e:ce:4e:ae:87:bc:ae:04:f9:67:
                    34:e9:83:23:60:ce:c0:fe:51:c0:92:c6:d4:ef:c0:
                    4b:d1:3a:12:f8:23:d1:ab:60:e1:bd:fb:28:f6:bf:
                    3f:ba:0e:81:30:29:3c:83:1d:33:44:83:04:7e:d8:
                    85:79:38:7a:37:a4:1d:2a:f3:6b:b3:a6:2f:33:93:
                    2f:7b:32:62:6a:7a:00:1a:de:d2:ec:95:8c:92:72:
                    e4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8A:AF:79:F5:43:D1:01:35:25:39:26:61:31:E8:11:3D:99:7C:AA
            X509v3 Authority Key Identifier:
                keyid:5A:86:F9:88:A1:23:1F:86:C9:72:33:12:85:58:7E:CF:86:4B:DB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Wob5iKEjH4bJcjMShVh-z4ZL25A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA13F/CDDBC4C8C4D711E98A076325F8AEA228/Wob5iKEjH4bJcjMShVh-z4ZL25A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:84:a7:00:73:a8:74:3c:32:c3:f7:f6:1b:25:1b:ad:0e:a0:
         68:20:81:ed:52:bc:e6:6e:c0:50:16:65:f9:4a:ec:79:a9:07:
         f9:28:7b:a2:40:82:fd:f1:d2:4d:09:fb:42:74:92:26:91:22:
         99:39:cb:e4:3c:4c:0b:c0:65:92:8f:a0:fd:d8:80:9e:c2:65:
         04:23:af:95:fe:20:87:b2:5f:bf:57:09:15:8d:ec:aa:c7:ef:
         d7:2b:23:74:af:4b:3f:83:a2:21:4a:88:9f:8e:79:27:e2:da:
         22:0c:62:33:28:71:c1:c0:40:e6:6b:49:88:eb:f2:ac:27:d6:
         cc:8c:66:6f:e0:29:d1:32:02:aa:96:2c:5d:43:56:86:fb:84:
         1d:cc:50:fe:70:34:16:ed:3d:87:72:b0:e1:da:16:29:ca:33:
         d3:c5:d4:29:fc:c1:e9:91:e5:cc:eb:df:9f:85:ce:04:ca:84:
         a2:f4:9b:83:35:f5:e1:28:6a:b9:bd:39:7d:83:77:c5:97:1e:
         a5:9c:5a:51:cd:55:92:bb:bd:eb:1b:60:8f:07:5d:c4:38:0d:
         b6:6f:85:38:14:db:bb:22:5d:d0:e7:2d:a5:24:12:23:8a:e1:
         73:bc:bc:15:55:ad:af:d5:5b:f5:0f:11:ec:3a:6f:dd:d9:f4:
         cf:59:f1:07
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCnowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExM0ZBRjExMC8GA1UEBRMoNUE4NkY5ODhBMTIzMUY4NkM5NzIzMzEyODU1ODdF
Q0Y4NjRCREI5MDAeFw0yNjEwMDMwMTMzMDJaFw0yNjEwMDUwMTMzMDJaMBgxFjAU
BgNVBAMTDTZhYzA1YjRmLWU1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeEYjWDCZeZ8ivzOEQuGCt3/xtxPRpug3omIBII9pIx+hDN2gTlpVVjky2
9fiQnYjpm8eInRobVGZguZGtWtoLIGTIWgRNWgQar8kGY7InpprUWzm07dDCoS6o
z9XCWvx0rT6m7f1O5PpB/bNFEvRFRlBPRmQoPQZVNaPUUeP+uv+maKRQw8U8I25T
DGwX/oL+WcD9THdONMuTaRLpcXkdkaH32txptPb8Hs5Oroe8rgT5ZzTpgyNgzsD+
UcCSxtTvwEvROhL4I9GrYOG9+yj2vz+6DoEwKTyDHTNEgwR+2IV5OHo3pB0q82uz
pi8zky97MmJqegAa3tLslYyScuTfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUV4qv
efVD0QE1JTkmYTHoET2ZfKowHwYDVR0jBBgwFoAUWob5iKEjH4bJcjMShVh+z4ZL
25AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTNGL0NEREJDNEM4QzRENzExRTk4QTA3NjMyNUY4QUVBMjI4L1dvYjVp
S0VqSDRiSmNqTVNoVmgtejRaTDI1QS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1dvYjVpS0VqSDRiSmNqTVNoVmgtejRaTDI1QS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkExM0YvQ0REQkM0QzhDNEQ3MTFFOThBMDc2MzI1RjhB
RUEyMjgvV29iNWlLRWpINGJKY2pNU2hWaC16NFpMMjVBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQByhKcAc6h0PDLD9/YbJRutDqBoIIHt
UrzmbsBQFmX5Sux5qQf5KHuiQIL98dJNCftCdJImkSKZOcvkPEwLwGWSj6D92ICe
wmUEI6+V/iCHsl+/VwkVjeyqx+/XKyN0r0s/g6IhSoifjnkn4toiDGIzKHHBwEDm
a0mI6/KsJ9bMjGZv4CnRMgKqlixdQ1aG+4QdzFD+cDQW7T2HcrDh2hYpyjPTxdQp
/MHpkeXM69+fhc4EyoSi9JuDNfXhKGq5vTl9g3fFlx6lnFpRzVWSu73rG2CPB13E
OA22b4U4FNu7Il3Q5y2lJBIjiuFzvLwVVa2v1Vv1DxHsOm/d2fTPWfEH
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:05:06 2026 by rpki-client