Error: rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
File:                     wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft (raw, json)
Hash identifier:          FsmVj75XDN2os9J21JbU6IRcqyJTGeekCetkOXIwULo=
Subject key identifier:   19:1D:6B:4E:CA:D5:A7:71:48:14:6D:D9:52:A0:B4:A9:BF:94:41:26
Authority key identifier: C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66
Certificate issuer:       /CN=F3625D7BRI/serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
Certificate serial:       016E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
Manifest number:          0161
Signing time:             Sat 03 Oct 2026 05:11:18 +0000
Manifest this update:     Sat 03 Oct 2026 05:11:17 +0000
Manifest next update:     Mon 05 Oct 2026 05:11:17 +0000
Files and hashes:         1: wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl (hash: Mr7iXAs9ZvSaKizZ/eG3m/8my18H3C7kF0Sd8ci+6K8=)
                          2: 1CB58EB0E64811F0B101CE82DAE4EC9C.roa (hash: GmVFU5Fj3JlQpS5TQySgt0n+nxZd6U1yLmPCADpRfXI=)
                          3: 41D32A18E64811F0ACFAB484DAE4EC9C.roa (hash: 5V7TJLQLLojrh3rp4usM3FHkPrvqeC97To9U71gTLO4=)
                          4: C80E96CCE64711F0B1A25782DAE4EC9C.roa (hash: Xp3ShwYXtvWjA34x0AJ/ol0TX61I2QAtRd3rhcxGiEY=)
                          5: 5C3C5D08E64711F0B893737EDAE4EC9C.roa (hash: nyLTo0rixLCs/a1IenOrfxepHmexkFvnayqGIGvxXKM=)
                          6: 66763C34E64811F09B639186DAE4EC9C.roa (hash: i+w6opL2Ipyqtzv1lD31vRg6ZPrTeRTbmSF8OnbTJXo=)
                          7: 840DD0AAE64711F084488A80DAE4EC9C.roa (hash: LEJhspwfo4P35G4GsyqKcA7wSNxsuLJZrV6m0oln0v0=)
                          8: 85C8DB5AE64811F0B8289886DAE4EC9C.roa (hash: Vnz8rTgtBR9ak9loA7xtyo4H19LHXg7iUEMpR1fptZY=)
                          9: EECB2F1EE64711F09EF7A882DAE4EC9C.roa (hash: 6+EHSpYkLMZkNikFTUcxHrLnTv0tuncTsjXIBMarg3U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                          rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BRI, serialNumber=C32497B2A257FA6726FD9E069F05825ADA70F966
        Validity
            Not Before: Oct  3 05:11:17 2026 GMT
            Not After : Oct  5 05:11:17 2026 GMT
        Subject: CN=6ac08e76-101e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e2:7d:ec:bc:f9:e1:0c:3e:92:d2:11:3e:8a:
                    97:92:90:cd:c0:6f:6f:d6:ee:5f:36:6c:df:d9:a3:
                    b1:8e:55:03:e2:4e:78:6e:49:d5:31:bb:69:8f:0f:
                    65:6d:a0:95:03:03:5e:38:c5:b5:d5:41:f2:b5:98:
                    3e:c6:8b:a2:41:79:5c:92:59:cb:18:f1:5c:5a:28:
                    74:37:d3:4d:8d:58:2f:24:70:cb:a7:f1:ed:06:e3:
                    52:5e:75:ba:75:35:da:29:f2:50:e4:81:5f:a5:1a:
                    2c:89:98:41:82:81:f7:e1:f0:22:c6:77:68:14:e6:
                    de:58:f0:a7:4b:4d:a8:5b:53:99:3c:5c:b7:1d:ba:
                    1e:df:f5:85:b9:8e:26:10:87:74:90:78:23:d6:47:
                    92:ae:9e:fd:8b:e1:fa:e2:8b:5f:5a:ec:b6:bd:04:
                    2c:25:f6:03:60:79:b8:b4:15:64:4c:76:1c:9e:f6:
                    bc:7a:38:7d:ac:8f:26:f9:8e:09:79:e5:a5:db:ce:
                    f4:0c:84:bf:1a:38:e1:95:03:00:db:1d:1f:67:0a:
                    d0:f3:3a:b2:b9:e4:0d:70:c7:36:93:fa:67:aa:70:
                    64:0a:df:98:13:58:e9:17:7f:e2:5c:05:d4:df:90:
                    53:a0:db:16:aa:cc:5e:5c:ad:07:70:83:f0:26:b5:
                    c6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1D:6B:4E:CA:D5:A7:71:48:14:6D:D9:52:A0:B4:A9:BF:94:41:26
            X509v3 Authority Key Identifier:
                keyid:C3:24:97:B2:A2:57:FA:67:26:FD:9E:06:9F:05:82:5A:DA:70:F9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/2AD29CFCBDAA11F08931297FDAE4EC9C/wySXsqJX-mcm_Z4GnwWCWtpw-WY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:dc:27:a1:ce:0d:0f:d3:d4:4a:0c:69:67:22:47:13:17:9a:
         22:28:6f:3c:8f:f4:4f:49:af:75:22:78:24:8b:20:e2:92:e4:
         11:ab:9e:6f:2e:26:29:bd:89:53:5e:02:12:bf:b6:1d:e4:cf:
         4b:75:68:2e:eb:f0:0e:78:90:9f:49:e9:c6:68:bf:29:dc:32:
         38:a9:1e:72:b1:f7:e3:55:1d:ca:3f:f3:1f:ab:eb:ad:d1:71:
         a7:b5:41:65:4a:86:06:3d:f3:27:46:a6:0d:71:53:cf:44:22:
         02:f3:16:37:6b:7b:d6:82:d2:7d:3f:ba:9d:ce:27:7f:c9:6a:
         f1:13:16:be:83:c6:f9:b0:2b:40:39:c3:ad:b8:38:7d:aa:5a:
         ad:ab:55:43:0b:55:79:ef:33:cb:24:0f:36:78:7e:33:7e:45:
         a9:4c:5a:ef:da:87:47:c9:6f:b7:1b:cb:bd:14:13:dd:af:c2:
         cd:7b:0f:af:83:57:b5:b5:06:a6:db:48:a5:63:d6:4e:67:cc:
         bf:5d:c8:dd:29:40:68:40:d9:6e:8b:24:72:c6:2f:09:fd:f9:
         44:5b:c1:3e:ca:7d:fb:ad:9b:0b:65:32:52:95:a9:ef:20:48:
         7d:42:61:fc:39:19:2a:bc:2e:bb:1e:76:b9:af:7e:dd:c0:ab:
         86:46:df:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 16:12:47 2026 by rpki-client