Error: rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
File:                     25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft (raw, json)
Hash identifier:          LC/v5b1HSBRdWBtR9DHyno97jKBQ51Pe2Jce8s6vDjw=
Subject key identifier:   E1:12:7E:0D:7A:3E:1D:5F:F5:F1:26:04:7E:EC:A4:D9:B8:41:C9:34
Authority key identifier: DB:9F:E3:74:7F:EB:84:26:8D:60:49:9E:0B:BE:0F:9B:F4:3B:2E:A3
Certificate issuer:       /CN=F361D9FBAF/serialNumber=DB9FE3747FEB84268D60499E0BBE0F9BF43B2EA3
Certificate serial:       0180
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
Manifest number:          017F
Signing time:             Sat 03 Oct 2026 05:08:09 +0000
Manifest this update:     Sat 03 Oct 2026 05:08:08 +0000
Manifest next update:     Mon 05 Oct 2026 05:08:08 +0000
Files and hashes:         1: 25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl (hash: zFJidNtmtfWEEXzn2wPYY6r8vJu/iXNxEUGACs7UIQ4=)
                          2: F0E25D4296D111F0B15D59B9DAE4EC9C.roa (hash: vnm/ifaL7Ebf2vByDeiWlvUsn0dciMWBz8R2eRYAChk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D9FBAF, serialNumber=DB9FE3747FEB84268D60499E0BBE0F9BF43B2EA3
        Validity
            Not Before: Oct  3 05:08:08 2026 GMT
            Not After : Oct  5 05:08:08 2026 GMT
        Subject: CN=6ac08db9-2db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9b:f6:9a:94:c4:c1:5c:17:07:90:9b:f0:25:
                    b7:d5:53:ad:ab:92:b3:0f:82:70:63:c1:d0:46:ee:
                    73:ae:30:e8:9a:da:0b:52:9f:10:b9:8a:8f:ea:1d:
                    17:3b:a2:85:fe:f7:c8:06:07:1f:71:1e:67:40:88:
                    86:6b:b8:e2:59:b1:c6:b0:60:ae:41:5b:23:d4:b8:
                    f2:c0:53:e6:40:e6:5c:08:a8:c2:17:19:cb:a0:f7:
                    bb:74:6e:53:71:8e:a6:eb:ea:5c:73:6a:4a:ac:67:
                    34:e2:97:d2:e1:df:05:ae:be:ac:b4:05:e3:d1:76:
                    d2:11:2f:cd:74:06:32:e5:3a:a9:10:67:05:08:5c:
                    cc:14:a4:44:28:f8:02:71:17:b0:dc:77:ff:6c:27:
                    14:7e:89:3c:8b:84:39:a8:8a:92:04:d6:cd:09:d8:
                    0e:83:94:ad:8f:90:ce:86:c4:fe:79:44:8b:2e:33:
                    d7:e2:bd:f5:c4:24:8b:42:b6:80:3f:71:2d:94:d2:
                    c0:ef:73:82:46:a4:78:74:96:3c:a9:7e:39:84:63:
                    65:0a:15:4a:a1:e8:4f:c3:32:1e:75:20:19:e9:87:
                    dc:de:dd:16:ef:62:ad:72:b0:f5:15:bf:36:ec:1b:
                    e3:36:72:bd:01:c9:3a:00:5e:98:e2:c0:d0:98:8b:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:12:7E:0D:7A:3E:1D:5F:F5:F1:26:04:7E:EC:A4:D9:B8:41:C9:34
            X509v3 Authority Key Identifier:
                keyid:DB:9F:E3:74:7F:EB:84:26:8D:60:49:9E:0B:BE:0F:9B:F4:3B:2E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/25_jdH_rhCaNYEmeC74Pm_Q7LqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D9FB/0B03F3D696D011F0857559ACDAE4EC9C/25_jdH_rhCaNYEmeC74Pm_Q7LqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:57:a1:02:92:6d:0e:76:e4:7a:4a:99:e3:46:f3:5a:3f:04:
         79:98:ec:6f:61:9a:fe:ec:ee:e9:2f:a3:3e:b6:fb:7a:8e:d0:
         cb:7f:47:bb:a2:9d:ff:b0:e2:c7:e2:ff:bf:42:d2:2c:61:44:
         09:e9:43:c1:14:24:16:87:d9:62:9a:4a:fc:20:97:bc:d1:f1:
         d3:a8:2d:cd:71:fe:65:ef:75:51:93:19:a7:00:17:19:39:74:
         7c:5f:a4:81:32:41:34:a7:26:d3:47:07:e9:45:36:15:52:02:
         2b:cd:0d:c8:e8:39:0e:a1:25:84:0c:66:c1:76:c5:a9:7b:7f:
         84:cd:15:12:5c:c0:fa:13:91:94:b8:f4:76:19:41:7a:c8:30:
         36:47:1f:b3:8f:cd:73:4e:48:da:4e:f4:06:c6:d1:a8:96:57:
         f4:44:17:f8:75:51:cd:cb:1d:74:3f:41:56:69:d4:40:55:b1:
         b5:f6:aa:2f:19:62:7e:86:51:f1:fa:97:25:5d:fe:ab:3e:f4:
         4f:45:73:23:05:4a:ff:1f:d6:8c:20:25:8d:2a:70:a7:f6:c6:
         ef:45:f3:c9:f9:45:b7:0a:89:57:54:bd:1f:7d:71:03:b3:4d:
         93:83:74:7c:aa:77:46:05:a5:31:b6:47:9a:fd:d6:25:5d:a7:
         07:46:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:30:13 2026 by rpki-client