Error: rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
File:                     yDmJhjJn0TZLxz9143zW0rf-yYc.mft (raw, json)
Hash identifier:          3ZUd+OJlYDQ2PT48ezwUnQ/PckPKdWM+Kab0lntr5Ik=
Subject key identifier:   4F:33:AA:2B:A9:75:0A:47:58:D1:B4:BB:BC:4B:A8:44:A2:60:1C:00
Authority key identifier: C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87
Certificate issuer:       /CN=F361F0D8AF/serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
Certificate serial:       0166
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
Manifest number:          0164
Signing time:             Mon 21 Sep 2026 05:11:09 +0000
Manifest this update:     Mon 21 Sep 2026 05:11:08 +0000
Manifest next update:     Wed 23 Sep 2026 05:11:08 +0000
Files and hashes:         1: yDmJhjJn0TZLxz9143zW0rf-yYc.crl (hash: ItQ0uZw0Iaz5iCvGLj4ukpeDfbI1u27KX26qJdn66+8=)
                          2: 8FDC3D26A3BD11F0B640C8E9DAE4EC9C.roa (hash: z+EMCGVRvbS1M60Ygkphk04UU0Xnx+NfxQ7EP0ilmi0=)
                          3: 5598B34AA8D311F09951D4DFDAE4EC9C.roa (hash: ekkmLGUII3HkbjQJ5DqbrnE5zNaEvepsyMeJezGqRJY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F0D8AF, serialNumber=C83989863267D1364BC73F75E37CD6D2B7FEC987
        Validity
            Not Before: Sep 21 05:11:08 2026 GMT
            Not After : Sep 23 05:11:08 2026 GMT
        Subject: CN=6ab0bc6d-aec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:d2:a1:26:c5:0c:02:2c:86:22:3c:71:f7:
                    ee:80:ba:a3:e2:63:e6:9f:eb:43:96:c9:67:e1:aa:
                    4b:d4:3f:84:aa:81:32:2b:5c:9b:e4:cf:d5:99:a4:
                    18:40:07:eb:d4:70:cc:d2:c8:e4:a7:18:31:d2:eb:
                    90:63:cc:cb:14:99:bc:bc:52:9e:6a:df:0d:ee:86:
                    40:f4:34:5a:56:8d:47:1f:39:68:73:28:5a:db:68:
                    18:85:35:43:5d:fd:08:d8:5b:2c:94:d5:0f:a6:fe:
                    42:a0:f7:1e:3d:88:e9:ee:8e:67:d3:65:29:3d:7d:
                    15:ba:73:4e:11:af:d7:99:03:1a:ea:43:45:54:cf:
                    a0:40:11:39:6a:fa:9c:28:b9:0e:0c:2c:d0:2c:5b:
                    9e:8f:34:e4:2e:65:87:0e:1f:26:cf:29:15:29:b5:
                    d3:8d:fc:04:91:89:fe:c5:e2:c3:a7:0d:8d:53:97:
                    3b:0f:05:e0:03:82:cf:bc:14:13:14:c1:34:b8:b7:
                    6c:ab:d2:00:36:76:b6:ec:c7:98:14:d6:35:e7:96:
                    ac:1d:06:3a:a9:3c:b7:29:15:8f:af:6d:0b:9e:27:
                    f6:94:d6:ad:be:42:2a:61:87:33:03:a9:7d:82:5a:
                    7e:30:35:b7:91:72:d9:56:b4:5a:ff:2b:58:58:64:
                    83:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:33:AA:2B:A9:75:0A:47:58:D1:B4:BB:BC:4B:A8:44:A2:60:1C:00
            X509v3 Authority Key Identifier:
                keyid:C8:39:89:86:32:67:D1:36:4B:C7:3F:75:E3:7C:D6:D2:B7:FE:C9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yDmJhjJn0TZLxz9143zW0rf-yYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F0D8/DFB88F80A3BC11F0AC8272E5DAE4EC9C/yDmJhjJn0TZLxz9143zW0rf-yYc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:43:8d:6b:77:3a:53:c3:d0:a5:86:a6:d1:95:c6:3e:98:6c:
         7d:84:87:88:a6:be:6e:ff:89:bb:43:70:81:91:08:ee:b0:3b:
         9d:25:75:38:08:5a:9b:88:fd:93:ac:ec:21:fc:6e:0a:3f:11:
         df:a7:19:00:89:a0:58:31:11:7c:15:08:08:9c:f3:38:fd:da:
         b4:1a:e1:66:52:4f:28:4f:f0:03:a6:41:8f:56:36:f6:45:e4:
         16:71:61:32:33:d2:d7:cd:f2:62:d6:17:43:89:39:0b:a3:a3:
         94:d7:91:c3:50:9a:bd:3f:9c:c8:58:b6:c5:cf:42:6e:28:76:
         2a:41:2c:7b:03:fc:c9:38:25:5a:90:0e:66:33:60:13:a9:62:
         b0:c2:da:77:59:c9:45:8c:e2:45:92:58:9f:48:e5:9a:92:d6:
         7e:d5:1f:c7:14:b7:20:83:7a:49:e8:1d:60:4a:20:d4:f2:e6:
         f2:1a:66:4d:d4:d8:0c:f7:6d:e2:95:b0:c9:cd:20:13:ca:e6:
         4b:01:47:8d:d2:9b:8d:52:bf:9a:a4:d1:91:f2:0c:f6:cf:32:
         a9:6e:36:d6:b8:82:7c:eb:f4:db:0e:83:01:a5:1e:b4:4f:85:
         74:dd:42:68:19:73:a4:1d:cb:0e:49:ce:97:f8:98:ab:47:45:
         56:93:3b:f5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAWYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MUYwRDhBRjExMC8GA1UEBRMoQzgzOTg5ODYzMjY3RDEzNjRCQzczRjc1RTM3Q0Q2
RDJCN0ZFQzk4NzAeFw0yNjA5MjEwNTExMDhaFw0yNjA5MjMwNTExMDhaMBgxFjAU
BgNVBAMTDTZhYjBiYzZkLWFlYzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXitKhJsUMAiyGIjxx9+6AuqPiY+af60OWyWfhqkvUP4SqgTIrXJvkz9WZ
pBhAB+vUcMzSyOSnGDHS65BjzMsUmby8Up5q3w3uhkD0NFpWjUcfOWhzKFrbaBiF
NUNd/QjYWyyU1Q+m/kKg9x49iOnujmfTZSk9fRW6c04Rr9eZAxrqQ0VUz6BAETlq
+pwouQ4MLNAsW56PNOQuZYcOHybPKRUptdON/ASRif7F4sOnDY1TlzsPBeADgs+8
FBMUwTS4t2yr0gA2drbsx5gU1jXnlqwdBjqpPLcpFY+vbQueJ/aU1q2+QiphhzMD
qX2CWn4wNbeRctlWtFr/K1hYZIPhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTzOq
K6l1CkdY0bS7vEuoRKJgHAAwHwYDVR0jBBgwFoAUyDmJhjJn0TZLxz9143zW0rf+
yYcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjFGMEQ4L0RGQjg4RjgwQTNCQzExRjBBQzgyNzJFNURBRTRFQzlDL3lEbUpo
akpuMFRaTHh6OTE0M3pXMHJmLXlZYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lEbUpoakpuMFRaTHh6OTE0M3pXMHJmLXlZYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MUYwRDgvREZCODhGODBBM0JDMTFGMEFDODI3MkU1REFF
NEVDOUMveURtSmhqSm4wVFpMeHo5MTQzelcwcmYteVljLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSQ41rdzpTw9ClhqbRlcY+mGx9hIeI
pr5u/4m7Q3CBkQjusDudJXU4CFqbiP2TrOwh/G4KPxHfpxkAiaBYMRF8FQgInPM4
/dq0GuFmUk8oT/ADpkGPVjb2ReQWcWEyM9LXzfJi1hdDiTkLo6OU15HDUJq9P5zI
WLbFz0JuKHYqQSx7A/zJOCVakA5mM2ATqWKwwtp3WclFjOJFklifSOWaktZ+1R/H
FLcgg3pJ6B1gSiDU8ubyGmZN1NgM923ilbDJzSATyuZLAUeN0puNUr+apNGR8gz2
zzKpbjbWuIJ86/TbDoMBpR60T4V03UJoGXOkHcsOSc6X+JirR0VWkzv1
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:43:19 2026 by rpki-client