Error: rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
File:                     ycEp-8PIJzpGKVWpUo4KrC8umCw.mft (raw, json)
Hash identifier:          g9q9inVJ9a0fG1M105JeT12cJ1ukvFG2Ro98CMMUCBk=
Subject key identifier:   9E:9C:7B:A1:54:D4:E0:54:43:13:09:57:56:E7:8A:B8:40:4E:C5:DD
Authority key identifier: C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C
Certificate issuer:       /CN=F36337E5AF/serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
Certificate serial:       031E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
Manifest number:          030F
Signing time:             Sat 24 Oct 2026 04:33:55 +0000
Manifest this update:     Sat 24 Oct 2026 04:33:54 +0000
Manifest next update:     Mon 26 Oct 2026 04:33:54 +0000
Files and hashes:         1: ycEp-8PIJzpGKVWpUo4KrC8umCw.crl (hash: eMxrfvr/oYDNetVsi1cQQPP6YWeZAAJGvS5cJatv2ZA=)
                          2: 04AE355E412711F0A7E4287CDAE4EC9C.roa (hash: ENLeza9xray0l264BMW02TQidzUw/ZtvZxWMod5FZ6s=)
                          3: 2766BE02B27011F18DB950EDCE1D38B0.roa (hash: jRPiAT3GNUZhJyV9YyaFmwomitbSTPPwzqLOeUIGVQw=)
                          4: C37DC01C412711F08A72D080DAE4EC9C.roa (hash: qs6TE4JP060hv/0pYpvsSx8iQ0sA281FwGL4dlEI/3w=)
                          5: 93EF9424412711F09F2CC980DAE4EC9C.roa (hash: oONnRnrDfB0ZG1UHPPGQ0dp5NPJf1dST08ulaRQGOC0=)
                          6: 5C73A576412711F08AAAB37EDAE4EC9C.roa (hash: jjxXl0x/+co3gFlsdpdDQTKqw1d56AFQuCJMO0O5h0U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798 (0x31e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36337E5AF, serialNumber=C9C129FBC3C8273A462955A9528E0AAC2F2E982C
        Validity
            Not Before: Oct 24 04:33:54 2026 GMT
            Not After : Oct 26 04:33:54 2026 GMT
        Subject: CN=6adc3533-d966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5f:b8:69:b1:7c:35:ea:cd:bf:00:2c:a7:e6:
                    19:be:fc:82:0f:e4:bd:f0:ba:3c:c5:1b:53:94:9a:
                    0b:7b:3b:50:8b:97:2e:57:48:aa:f2:29:dc:3f:8c:
                    e8:0d:32:d6:42:df:df:a4:38:f7:13:d8:4b:47:c2:
                    a3:a2:5c:88:de:22:8b:42:44:e5:07:86:33:0d:28:
                    c2:0f:93:22:f7:d3:65:1d:31:15:33:1a:c6:14:ce:
                    ca:35:99:d0:e0:7b:45:6f:ea:21:85:e6:b5:47:ba:
                    98:f8:2e:62:97:12:5a:48:77:7a:0d:53:60:14:01:
                    ee:fd:3a:de:68:69:15:fc:62:dc:d2:3c:c9:e9:e6:
                    4a:9b:90:d8:ce:d3:21:f6:82:28:45:39:59:14:64:
                    1b:82:a8:2e:4f:bf:d7:48:09:10:83:b4:a6:b5:b9:
                    3d:9c:f7:f2:a8:95:a1:f0:d4:32:62:bd:76:0e:0b:
                    51:30:f0:c5:63:60:90:68:cf:33:bd:cc:9b:6f:6a:
                    5a:34:3a:0d:62:07:dc:ff:3d:8a:16:65:7f:d5:4b:
                    3d:1c:4d:d8:bd:20:41:2e:41:59:cd:ed:bb:0f:eb:
                    df:c1:d5:4f:83:66:73:bd:9d:2a:23:b8:de:1a:08:
                    aa:26:f9:cc:df:0b:05:ff:ef:3d:6a:9e:a3:a6:94:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9C:7B:A1:54:D4:E0:54:43:13:09:57:56:E7:8A:B8:40:4E:C5:DD
            X509v3 Authority Key Identifier:
                keyid:C9:C1:29:FB:C3:C8:27:3A:46:29:55:A9:52:8E:0A:AC:2F:2E:98:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ycEp-8PIJzpGKVWpUo4KrC8umCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36337E5/979BA6407FE311EF83475586762E951A/ycEp-8PIJzpGKVWpUo4KrC8umCw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:1c:7a:cf:52:e1:65:f8:48:1f:13:31:2e:61:d4:f8:2b:f1:
         bd:3a:62:7f:ed:3a:7e:64:a4:35:b0:64:75:05:2a:13:eb:ba:
         fc:d4:62:41:1b:64:2b:96:f8:27:b1:0c:af:2c:85:e2:4e:ce:
         9c:ab:d6:76:2d:cb:86:4b:0e:51:f0:42:a5:66:cd:e7:15:d7:
         a1:2f:57:1b:60:c5:6e:c1:f6:88:96:a0:74:ca:18:3b:55:c1:
         38:85:4d:be:ea:54:ea:09:a6:9d:10:ff:85:bd:e5:12:79:96:
         c8:92:56:cd:17:1f:1f:53:ac:84:26:e7:d7:7a:08:8f:e2:39:
         b0:b2:8a:08:9b:c6:0f:88:f9:82:fe:fb:8b:e3:5a:28:bf:d2:
         ee:1e:7a:a9:07:04:b0:a0:6a:bb:23:ca:a5:9c:a7:13:81:23:
         eb:64:ab:96:a3:c6:63:74:e7:16:a1:dd:39:e1:32:27:ef:5d:
         40:f5:a1:25:4c:88:4c:e9:16:f7:b2:5a:9c:78:05:44:6b:e3:
         3e:c3:dd:68:e4:05:e8:2a:6f:4d:ff:4a:a4:5a:d0:75:33:bf:
         a0:81:45:c2:ac:a0:f2:4e:a0:bc:f5:35:01:35:0d:60:b4:a9:
         38:9c:ee:0a:2c:98:0b:3d:16:58:0b:ea:fe:75:60:5f:6d:16:
         cc:f2:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:11:20 2026 by rpki-client