Error: rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
File:                     M03n0uuGIBi7lXSbZI3Lr1DRPag.mft (raw, json)
Hash identifier:          yNqE9Dg/xDMEwj3WeDmTKk9yeFZOZ0SU+SxsA5Ey9xU=
Subject key identifier:   14:BA:9D:E7:A7:6E:4F:6F:94:B7:63:3F:55:78:7E:84:07:03:8D:25
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Certificate issuer:       /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial:       0F56
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
Manifest number:          0F50
Signing time:             Wed 23 Sep 2026 01:00:50 +0000
Manifest this update:     Wed 23 Sep 2026 01:00:49 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:49 +0000
Files and hashes:         1: M03n0uuGIBi7lXSbZI3Lr1DRPag.crl (hash: bOt13KUHNY+OhiPmTkvp75yHavNe+Xwk/bGGsk3gtz0=)
                          2: 27DC768CA2DB11F1B6223A13CF1D38B0.roa (hash: jy4r26xUOc8REFs1sp6Uhxq7c9j7wmwiV0e4g5o0vfI=)
                          3: EEDCD7B8874711F1B7959ADDCE1D38B0.roa (hash: zj+lVv65yLchsV3Pei38AK8L8pgPqkZ3OPkz3wu3q0k=)
                          4: 8EF222E0874711F19A7891D9CE1D38B0.roa (hash: PcLAG1NhERJx3czkCw2yFf0BI5X1CLRCJEac9uNxDiY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 01:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3926 (0xf56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623CAFAF, serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
        Validity
            Not Before: Sep 23 01:00:49 2026 GMT
            Not After : Sep 25 01:00:49 2026 GMT
        Subject: CN=6ab324c1-07f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:9b:12:b8:a2:18:33:52:75:a3:97:de:01:
                    11:73:97:01:d8:7f:66:b3:d1:db:d3:b3:5c:25:61:
                    31:32:4b:16:cc:7e:93:b2:24:f9:de:8e:eb:bf:ab:
                    53:d1:dd:93:c6:d9:d5:e0:e5:7b:f4:16:59:7d:a3:
                    1a:48:ec:7e:24:57:67:c6:47:08:13:b3:d6:33:ee:
                    38:37:f3:b8:ab:28:68:36:64:68:ec:fd:84:7c:5e:
                    c3:3b:37:82:f0:9e:f4:70:8d:1c:03:3b:1d:87:e7:
                    97:27:3b:82:4a:a2:54:38:5a:a2:49:39:f0:95:3f:
                    8f:1f:67:47:5e:5f:0c:f3:c3:b1:5d:60:71:e4:c6:
                    4c:2c:2a:70:c6:46:6d:88:1a:ca:d7:f9:a3:17:69:
                    9f:29:b4:3f:c2:fa:fc:e8:c4:03:02:dc:f5:18:86:
                    44:e0:4a:9a:05:d5:5c:14:b0:1e:91:5c:dd:e2:3b:
                    49:08:33:f4:44:99:fb:4c:0c:43:9d:d7:1a:5b:ba:
                    ab:2d:60:3c:1a:17:e9:45:9b:f0:e5:f1:f2:f2:fc:
                    7f:26:a4:c2:f0:01:e3:c7:34:49:75:9b:74:03:4b:
                    56:7c:5d:f4:09:b2:4a:e5:74:2e:8d:28:eb:d8:bb:
                    3c:19:c4:35:0b:26:80:d0:62:f5:81:d4:f5:07:0f:
                    9e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BA:9D:E7:A7:6E:4F:6F:94:B7:63:3F:55:78:7E:84:07:03:8D:25
            X509v3 Authority Key Identifier:
                keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:ba:c1:3f:a5:41:e6:dd:a1:9f:49:12:48:9d:4c:5e:d5:
         c0:e7:39:7a:81:7a:e0:90:e0:47:83:2c:1e:19:b7:32:15:ae:
         2f:69:95:8b:d4:d9:29:7a:2e:4a:f8:00:a8:75:39:ec:05:1f:
         2a:01:db:57:15:de:7c:6e:21:9f:48:2d:a9:b5:2b:ba:d4:50:
         9e:7f:35:02:c8:11:a1:e7:86:6a:4b:a8:40:15:c0:46:14:15:
         87:ad:62:ca:2a:20:76:fa:ca:dc:89:66:a7:32:c7:1a:bc:7e:
         ee:33:a5:da:42:30:53:41:92:f7:58:cf:f6:81:2e:41:5d:66:
         ef:88:21:79:a8:b6:bc:6f:75:5d:e9:f6:fa:70:5a:01:98:0f:
         57:46:91:79:de:73:6c:b9:13:96:8a:72:04:59:b6:f4:e5:79:
         21:07:9a:22:09:08:74:59:80:98:3d:6f:4e:e7:d9:15:3f:77:
         00:97:c7:c0:fd:35:89:a9:e4:50:2b:29:3f:03:7e:6f:4e:5f:
         2a:11:84:16:cc:64:e7:3d:2f:52:99:01:15:76:d6:68:d0:c5:
         3d:2c:63:5c:a3:7a:a8:76:a2:b8:68:63:f2:2a:4b:0b:26:4b:
         b6:cf:c1:30:14:36:72:84:c2:46:a7:41:d3:69:c0:5f:31:21:
         77:3d:58:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:50:33 2026 by rpki-client