Error: rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft
File:                     EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft (raw, json)
Hash identifier:          VjBlXBYqqb7AJqa/01fF3j2qWFzXdXIbqKs7YNTYeC4=
Subject key identifier:   B9:8D:FA:41:BA:13:66:91:51:37:79:F1:EC:B5:A7:3D:AE:81:07:D7
Authority key identifier: 11:8B:1D:26:BC:17:44:2D:1C:9C:CF:81:92:CC:72:DC:29:3B:60:4F
Certificate issuer:       /CN=F362E790AF/serialNumber=118B1D26BC17442D1C9CCF8192CC72DC293B604F
Certificate serial:       52
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft
Manifest number:          51
Signing time:             Wed 14 Oct 2026 05:45:22 +0000
Manifest this update:     Wed 14 Oct 2026 05:45:21 +0000
Manifest next update:     Fri 16 Oct 2026 05:45:21 +0000
Files and hashes:         1: EYsdJrwXRC0cnM-Bksxy3Ck7YE8.crl (hash: iaL97YaXkiyg11+Bxw6FcbQwpI5ZLchB5p0qpyf5OsM=)
                          2: 62EEBDC889A111F1A36CB2B1CE1D38B0.roa (hash: /m459TdRSRWfbJUxttNufqFolcq3/ed96zb6shny69E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 05:45:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E790AF, serialNumber=118B1D26BC17442D1C9CCF8192CC72DC293B604F
        Validity
            Not Before: Oct 14 05:45:21 2026 GMT
            Not After : Oct 16 05:45:21 2026 GMT
        Subject: CN=6acf16f2-5247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:09:69:48:a6:0e:2c:69:c5:b9:c0:a0:d9:
                    42:d1:d6:92:fa:d7:45:53:89:8f:ce:24:32:23:bd:
                    a5:e4:5e:7d:a0:71:42:d4:92:ea:9c:34:6c:3e:b6:
                    32:ef:97:f2:7a:9d:c6:ef:8f:1b:9d:30:05:ac:36:
                    92:39:e6:d1:c4:1f:d5:a9:c0:d3:df:e0:fe:e0:f2:
                    9b:40:92:c3:4d:32:f7:3d:ac:d4:07:b0:fb:52:da:
                    d0:37:94:40:76:36:de:4e:69:6e:bb:21:74:14:4e:
                    9c:2e:3c:45:77:85:f5:2d:a8:43:a0:82:05:e7:41:
                    eb:3c:cb:ae:37:18:d8:13:a3:5f:de:39:3a:c6:59:
                    77:01:6b:14:38:2d:b9:60:a0:07:d5:f7:88:3a:ab:
                    8e:df:cc:73:80:46:f7:8d:20:ad:73:bb:d8:87:4b:
                    be:4b:83:01:75:f3:5b:e0:36:5d:a1:88:54:f4:88:
                    98:62:af:12:b4:fb:39:3f:39:af:22:41:67:58:de:
                    17:a6:f1:8e:99:7c:dd:6b:44:b9:7d:48:98:7c:70:
                    f8:be:32:e4:c0:45:34:65:cf:1f:3a:f4:91:3b:31:
                    4a:82:43:d4:1d:64:aa:d9:3f:4f:d6:9d:e1:f8:dc:
                    45:36:ab:4d:62:05:3d:03:ef:33:17:da:1b:ea:3c:
                    23:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8D:FA:41:BA:13:66:91:51:37:79:F1:EC:B5:A7:3D:AE:81:07:D7
            X509v3 Authority Key Identifier:
                keyid:11:8B:1D:26:BC:17:44:2D:1C:9C:CF:81:92:CC:72:DC:29:3B:60:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E790/2BDD648E89A011F1B2A688A9CE1D38B0/EYsdJrwXRC0cnM-Bksxy3Ck7YE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ae:7f:b7:bb:33:29:54:95:a9:1b:1b:b2:7d:b5:13:43:6f:
         2b:25:d2:1e:0f:31:da:0f:17:8a:d8:fb:1a:39:bf:61:b4:b8:
         eb:2e:86:47:0c:a0:82:4f:5c:a3:32:33:9b:94:fe:cd:a9:9a:
         a6:ed:32:ce:79:74:07:84:3c:e0:ee:de:f7:7d:bf:d1:e4:3f:
         e2:84:0d:4d:74:9a:5d:c0:4b:51:d3:db:c1:90:2e:18:9a:f9:
         fc:21:7e:ab:0a:63:8f:e0:a8:5b:06:36:01:fd:15:b4:94:ce:
         bb:c6:9b:67:04:82:38:c0:4d:c0:59:6d:d6:46:0d:c6:aa:1f:
         71:4c:00:cb:eb:fd:c0:1a:54:35:34:b8:1e:76:c8:8a:3b:30:
         f6:96:d0:73:22:e9:c0:52:04:9a:f6:02:70:d1:17:20:3d:60:
         12:a1:89:30:e4:ab:09:ce:48:fb:d3:44:1f:d2:8e:96:40:51:
         28:00:48:59:be:a0:c9:9b:a2:22:ba:e0:b0:d5:f9:26:6d:22:
         1f:4c:92:15:d9:a5:c2:bc:f8:d8:cb:72:b6:2b:e4:29:ee:2d:
         c7:c6:aa:79:81:48:33:b5:b8:1e:48:cb:25:3e:78:44:4c:09:
         9c:ae:fc:c9:03:4a:d8:e3:83:45:2a:04:74:df:06:d1:eb:8c:
         f4:9f:b1:48
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBUjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
RTc5MEFGMTEwLwYDVQQFEygxMThCMUQyNkJDMTc0NDJEMUM5Q0NGODE5MkNDNzJE
QzI5M0I2MDRGMB4XDTI2MTAxNDA1NDUyMVoXDTI2MTAxNjA1NDUyMVowGDEWMBQG
A1UEAxMNNmFjZjE2ZjItNTI0NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKyACWlIpg4sacW5wKDZQtHWkvrXRVOJj84kMiO9peRefaBxQtSS6pw0bD62
Mu+X8nqdxu+PG50wBaw2kjnm0cQf1anA09/g/uDym0CSw00y9z2s1Aew+1La0DeU
QHY23k5pbrshdBROnC48RXeF9S2oQ6CCBedB6zzLrjcY2BOjX945OsZZdwFrFDgt
uWCgB9X3iDqrjt/Mc4BG940grXO72IdLvkuDAXXzW+A2XaGIVPSImGKvErT7OT85
ryJBZ1jeF6bxjpl83WtEuX1ImHxw+L4y5MBFNGXPHzr0kTsxSoJD1B1kqtk/T9ad
4fjcRTarTWIFPQPvMxfaG+o8I7MCAwEAAaOCArgwggK0MB0GA1UdDgQWBBS5jfpB
uhNmkVE3efHstac9roEH1zAfBgNVHSMEGDAWgBQRix0mvBdELRycz4GSzHLcKTtg
TzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkU3OTAvMkJERDY0OEU4OUEwMTFGMUIyQTY4OEE5Q0UxRDM4QjAvRVlzZEpy
d1hSQzBjbk0tQmtzeHkzQ2s3WUU4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRVlzZEpyd1hSQzBjbk0tQmtzeHkzQ2s3WUU4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYyRTc5MC8yQkRENjQ4RTg5QTAxMUYxQjJBNjg4QTlDRTFE
MzhCMC9FWXNkSnJ3WFJDMGNuTS1Ca3N4eTNDazdZRTgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBABuuf7e7MylUlakbG7J9tRNDbysl0h4P
MdoPF4rY+xo5v2G0uOsuhkcMoIJPXKMyM5uU/s2pmqbtMs55dAeEPODu3vd9v9Hk
P+KEDU10ml3AS1HT28GQLhia+fwhfqsKY4/gqFsGNgH9FbSUzrvGm2cEgjjATcBZ
bdZGDcaqH3FMAMvr/cAaVDU0uB52yIo7MPaW0HMi6cBSBJr2AnDRFyA9YBKhiTDk
qwnOSPvTRB/SjpZAUSgASFm+oMmboiK64LDV+SZtIh9MkhXZpcK8+NjLcrYr5Cnu
LcfGqnmBSDO1uB5IyyU+eERMCZyu/MkDStjjg0UqBHTfBtHrjPSfsUg=
-----END CERTIFICATE-----
Generated at Wed Oct 14 13:25:14 2026 by rpki-client