Error: rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
File:                     x4zcO11LE2dctIrTtjvgHsWoB_g.mft (raw, json)
Hash identifier:          WwPk17k4Kps01+ivp8uD8dnz16JiWgA8s43HVgvC6bE=
Subject key identifier:   B8:88:5D:45:56:71:CB:02:D1:2D:4A:6D:BC:D2:FC:3B:41:89:83:7B
Authority key identifier: C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8
Certificate issuer:       /CN=F36FE19EAF/serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
Certificate serial:       0621
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
Manifest number:          060A
Signing time:             Thu 24 Sep 2026 03:01:58 +0000
Manifest this update:     Thu 24 Sep 2026 03:01:57 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:57 +0000
Files and hashes:         1: x4zcO11LE2dctIrTtjvgHsWoB_g.crl (hash: UzDu/VpoYwvSV+7ox5lqVtgKPtYvW7QHkeJ3wOUtmgg=)
                          2: D8944328C5EC11F0B41AAAABDAE4EC9C.roa (hash: Fjwc0xIHqScPLRKiXAl4zDy6FapkQ9nvR3i7UFFo5zU=)
                          3: 99986272498611F0BE1E23EEDAE4EC9C.roa (hash: Z4gQzojiEKX5fZtqwTgoYBRKXPibvfeQJQnSktukfUM=)
                          4: 88A5B71428C311F0BEF0A0B4DAE4EC9C.roa (hash: ePq4EbCDmWiOxXuBQCEii4Bej/F9RXahE4beV/zVjQ0=)
                          5: 24769B8AC01B11EE87488562775412E6.roa (hash: Juiav7EMo7UB6/g3W5W1dR2kpf5FMViakz+hnSTb9pI=)
                          6: C61BC18E0CE711F19124F4DBDAE4EC9C.roa (hash: OxCqiLGEa5tDiR9RkcaOTV33/7NhbzfIsb8BnoJQja8=)
                          7: BA5646848B9311EFB18C87BF762E951A.roa (hash: JPWhpnri236k1i+Gn96J/0YOtSYJC79c9FGJpIaebkg=)
                          8: 76506164C45911EFBD701FB3762E951A.roa (hash: 99UKUf4fnRe0MO3HcCv5JDIcqSTWLiXWxRxR3pGatmc=)
                          9: C4CEB8AC398711EF843D2E9D762E951A.roa (hash: h7S0JCwsO3r6rweJjX0edCYo6Cy5Pss43I07DZlAHq8=)
                          10: C344D7B886D411F19995CB11CF1D38B0.roa (hash: g0atapPUjho3Gfa8TRDQpf+KufFAmvHSn9sPaUKwzok=)
                          11: 61F3ED46A71011EFA4F58993762E951A.roa (hash: S/a4NOGDMCYqavfy2n6nHPuJWnA8uLXKDGrhZokqBOA=)
                          12: 8659D352A86411F0B9650C85DAE4EC9C.roa (hash: IiumYV39jtmaUlyhcB4ETxNnW6cIU6D31mSGz7y4M0U=)
                          13: 0CBFE8A6041C11F1889BA7D4DAE4EC9C.roa (hash: 87mot8x5Mu5pUJnIoZZaYqHp2VbPJKid7xkzCS48RQ8=)
                          14: 25BDC3AE3FB911F1BD7B28CDCE1D38B0.roa (hash: 8iJ7yW5XnyT3qfUzhM1+krXrrLvXpZD+4buY4Oi6Q7k=)
                          15: 73CC053C4EB611F0AE15C1C8DAE4EC9C.roa (hash: SQV1YsdD1Ajwa0W56ES+0u6UJCxHEKEeYvpdGKFa0ZE=)
                          16: A278A9AC60E211EF938734A9762E951A.roa (hash: z1Jlw/yZ++yZq2QaqkGqkTifs65T2BP5GQxHjafo/Nk=)
                          17: 08DB71BC53EA11EF98E06585762E951A.roa (hash: 9y2Xf3yrmOHpN9GrNuG3T4PeZPIw6BfSrZ7oAs2gMlE=)
                          18: 8390093077E011EF94B4F59C762E951A.roa (hash: /gwS+GQo/DPLk6XCYBj5Tt7o/4lhGYntAWZgy7TgGi0=)
                          19: 02E2A57C23BA11F1BD7B6798DAE4EC9C.roa (hash: Yks0DyjCdLquy/2KkugOfEpYouFNGrBjaXW7Ge2n2Ac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE19EAF, serialNumber=C78CDC3B5D4B13675CB48AD3B63BE01EC5A807F8
        Validity
            Not Before: Sep 24 03:01:57 2026 GMT
            Not After : Sep 26 03:01:57 2026 GMT
        Subject: CN=6ab492a6-7614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:c9:77:1c:b9:95:7e:43:74:0d:72:e9:22:
                    48:a3:a3:9e:9d:61:6b:46:60:87:a0:81:5a:d7:7d:
                    ad:a3:d0:17:04:21:bf:85:ae:94:c5:57:e0:09:33:
                    fe:14:93:59:d4:a7:5f:38:fc:c9:ec:36:1e:a2:63:
                    84:40:51:97:e5:cf:26:33:e6:f4:36:9f:2e:7a:d4:
                    11:5e:11:62:ea:0e:8d:38:2b:58:24:9a:7a:dd:6c:
                    c8:85:f1:0b:0b:8f:ac:2f:7f:15:da:52:f2:da:be:
                    cb:11:7f:aa:3f:c1:7c:30:71:6b:33:5b:af:d1:04:
                    4e:0b:ab:7f:d0:4b:24:50:28:de:35:dd:17:94:5f:
                    d1:e8:78:2f:71:f5:79:e1:8d:7f:a8:58:06:2e:06:
                    b8:ca:cc:bf:31:cd:be:03:5a:f0:34:99:fb:89:22:
                    84:f9:d8:be:60:af:c8:88:dd:21:b6:4c:a3:15:66:
                    2a:0f:a8:b3:b0:c6:a0:7e:2c:d2:ea:06:87:31:94:
                    b5:27:a0:4e:51:55:a6:ae:4c:45:11:87:47:8f:5c:
                    fa:08:fd:60:85:92:3c:d2:41:6a:08:1b:24:7a:f0:
                    0f:97:49:d5:0c:a5:3a:4b:bb:f7:d0:5c:9c:91:cf:
                    e6:b6:27:21:7f:ff:3a:76:db:01:5d:e3:8f:86:03:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:88:5D:45:56:71:CB:02:D1:2D:4A:6D:BC:D2:FC:3B:41:89:83:7B
            X509v3 Authority Key Identifier:
                keyid:C7:8C:DC:3B:5D:4B:13:67:5C:B4:8A:D3:B6:3B:E0:1E:C5:A8:07:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x4zcO11LE2dctIrTtjvgHsWoB_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE19E/AB7E78BE48DF11EDA761B29CF1222468/x4zcO11LE2dctIrTtjvgHsWoB_g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:8e:a0:88:ee:f9:73:1b:16:b0:e9:ce:15:6c:74:f2:05:
         4c:81:31:de:bf:32:6e:70:00:66:74:14:94:1b:19:95:1d:7c:
         5e:9d:98:6e:be:1c:cf:00:47:71:ff:65:10:0a:d5:12:17:db:
         05:e7:34:9f:94:17:46:b1:1b:51:b4:e4:58:a9:f6:e1:fa:fe:
         38:59:c4:3f:11:f2:83:61:9d:20:72:5d:1e:71:65:84:d6:6b:
         2d:07:56:97:3d:68:62:c3:e7:48:5e:62:66:d3:d9:62:d6:94:
         90:e1:23:b2:e1:29:93:f9:37:9f:66:6e:fc:5b:9d:9f:8e:09:
         cd:fa:08:19:87:76:e4:73:45:05:97:ab:23:aa:89:80:91:29:
         cd:00:f2:b7:d0:4e:a9:8c:71:96:79:1e:3f:7e:a9:71:9d:19:
         5e:77:54:16:3e:d7:67:5d:85:a5:5c:e2:86:06:3d:80:91:49:
         8d:b7:22:2b:3c:43:3d:03:99:a7:91:9d:71:76:6c:7e:41:20:
         c3:48:2a:f9:8f:95:97:2d:2d:7e:4a:58:ee:56:90:c2:67:24:
         7b:32:92:44:ca:02:6e:a2:0f:64:1d:94:ce:02:8d:57:e2:32:
         93:20:50:62:16:b1:03:7b:41:45:13:67:86:3c:3c:4d:c6:78:
         b2:d2:eb:c6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkUxOUVBRjExMC8GA1UEBRMoQzc4Q0RDM0I1RDRCMTM2NzVDQjQ4QUQzQjYzQkUw
MUVDNUE4MDdGODAeFw0yNjA5MjQwMzAxNTdaFw0yNjA5MjYwMzAxNTdaMBgxFjAU
BgNVBAMTDTZhYjQ5MmE2LTc2MTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDFesl3HLmVfkN0DXLpIkijo56dYWtGYIeggVrXfa2j0BcEIb+FrpTFV+AJ
M/4Uk1nUp184/MnsNh6iY4RAUZflzyYz5vQ2ny561BFeEWLqDo04K1gkmnrdbMiF
8QsLj6wvfxXaUvLavssRf6o/wXwwcWszW6/RBE4Lq3/QSyRQKN413ReUX9HoeC9x
9XnhjX+oWAYuBrjKzL8xzb4DWvA0mfuJIoT52L5gr8iI3SG2TKMVZioPqLOwxqB+
LNLqBocxlLUnoE5RVaauTEURh0ePXPoI/WCFkjzSQWoIGyR68A+XSdUMpTpLu/fQ
XJyRz+a2JyF//zp22wFd44+GAyzdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuIhd
RVZxywLRLUptvNL8O0GJg3swHwYDVR0jBBgwFoAUx4zcO11LE2dctIrTtjvgHsWo
B/gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZFMTlFL0FCN0U3OEJFNDhERjExRURBNzYxQjI5Q0YxMjIyNDY4L3g0emNP
MTFMRTJkY3RJclR0anZnSHNXb0JfZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3g0emNPMTFMRTJkY3RJclR0anZnSHNXb0JfZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkUxOUUvQUI3RTc4QkU0OERGMTFFREE3NjFCMjlDRjEy
MjI0NjgveDR6Y08xMUxFMmRjdElyVHRqdmdIc1dvQl9nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4yo6giO75cxsWsOnOFWx08gVMgTHe
vzJucABmdBSUGxmVHXxenZhuvhzPAEdx/2UQCtUSF9sF5zSflBdGsRtRtORYqfbh
+v44WcQ/EfKDYZ0gcl0ecWWE1mstB1aXPWhiw+dIXmJm09li1pSQ4SOy4SmT+Tef
Zm78W52fjgnN+ggZh3bkc0UFl6sjqomAkSnNAPK30E6pjHGWeR4/fqlxnRled1QW
PtdnXYWlXOKGBj2AkUmNtyIrPEM9A5mnkZ1xdmx+QSDDSCr5j5WXLS1+SljuVpDC
ZyR7MpJEygJuog9kHZTOAo1X4jKTIFBiFrEDe0FFE2eGPDxNxniy0uvG
-----END CERTIFICATE-----
Generated at Thu Sep 24 14:23:04 2026 by rpki-client