Error: rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
File:                     KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft (raw, json)
Hash identifier:          oYArJRtE6qsMNczMNv3LiGzlFcuAPBhRUQ9tUIzLQTo=
Subject key identifier:   46:0A:67:AE:67:09:5D:12:0E:93:52:73:51:CF:3A:F0:8C:D6:EC:50
Authority key identifier: 29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA
Certificate issuer:       /CN=F36389A7AF/serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
Certificate serial:       9B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
Manifest number:          99
Signing time:             Sun 20 Sep 2026 05:35:24 +0000
Manifest this update:     Sun 20 Sep 2026 05:35:23 +0000
Manifest next update:     Tue 22 Sep 2026 05:35:23 +0000
Files and hashes:         1: KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl (hash: AaFkziCFD7eZlCuG8jHlyxgrNFk4CuyR+gMwNmAJKH8=)
                          2: 7E30C2D43F0A11F19414901BCF1D38B0.roa (hash: a3fLxBrz8eR53/R7V1Vq4Dtsvla7z1WL/GBJqhWYWag=)
                          3: CCFE35183F0A11F181E5E91BCF1D38B0.roa (hash: E47585gvu1JN7Cv2RL9H7/HF9eVQoG0TjloqbMPCF0I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36389A7AF, serialNumber=291E8D958C162120443873BE45CA7DA385DEA2DA
        Validity
            Not Before: Sep 20 05:35:23 2026 GMT
            Not After : Sep 22 05:35:23 2026 GMT
        Subject: CN=6aaf709c-0d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3a:9b:dd:4c:bf:62:3e:c6:66:c2:7a:da:2f:
                    8d:ea:46:ec:d7:fb:ce:06:17:fc:60:04:2b:f9:3b:
                    4d:19:ef:50:6b:23:e4:33:04:96:3f:05:01:61:74:
                    31:5f:d5:fd:37:6a:39:17:69:f2:cd:4f:44:fd:4b:
                    98:cb:1d:20:32:1b:50:e0:1e:37:d2:ca:e8:02:ab:
                    6d:1f:d5:31:d6:c7:30:2c:a0:75:f9:02:94:4e:25:
                    00:59:ed:d9:82:a1:ff:7f:5c:0f:24:1b:80:80:59:
                    8f:55:d6:e6:b7:c3:4a:17:a4:10:5a:73:10:cb:3c:
                    42:0c:97:77:71:1e:22:de:1e:51:c5:60:de:91:c7:
                    39:cc:18:7f:51:2a:dd:68:1e:3a:25:9d:d0:79:e1:
                    51:8a:48:a8:a1:58:77:e4:60:aa:4e:52:7e:74:18:
                    85:f1:d0:4f:25:a3:10:67:3d:bb:7f:3e:8b:4b:b4:
                    ba:37:27:88:83:76:5e:0f:ab:22:3a:1f:3f:11:be:
                    6b:e6:a8:f9:c3:45:21:df:01:d3:31:7f:35:59:3e:
                    30:21:2b:6f:ef:b6:f2:b5:52:dd:2c:15:05:d5:d6:
                    ba:dc:bd:e8:d7:20:a7:53:c3:a3:f0:bf:b6:1c:1c:
                    b9:d2:64:58:ca:0b:00:da:f8:cc:30:d7:93:aa:ba:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0A:67:AE:67:09:5D:12:0E:93:52:73:51:CF:3A:F0:8C:D6:EC:50
            X509v3 Authority Key Identifier:
                keyid:29:1E:8D:95:8C:16:21:20:44:38:73:BE:45:CA:7D:A3:85:DE:A2:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KR6NlYwWISBEOHO-Rcp9o4Xeoto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36389A7/817DE7503F0511F1A8B3FDFECE1D38B0/KR6NlYwWISBEOHO-Rcp9o4Xeoto.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:74:60:5d:ca:3b:a5:4f:4a:7f:b5:ee:87:1a:19:af:b4:01:
         68:ee:a2:e9:ca:24:cf:8b:52:b6:c9:ef:54:80:25:b7:94:af:
         9c:c4:dd:1e:1d:71:a5:42:fb:32:0e:bd:b7:7c:9b:76:c3:dd:
         7d:24:04:92:95:3a:54:bd:07:81:58:27:2a:da:95:61:af:c1:
         0e:93:24:e2:8d:ee:90:4e:8c:56:59:5e:1a:5b:5d:45:42:f0:
         1f:56:5f:bc:ed:af:0e:02:88:8d:4f:47:20:82:b2:4a:73:06:
         b8:9b:44:24:be:2f:98:03:1b:6b:8d:79:98:b4:d0:c1:95:8f:
         49:86:62:bd:40:dd:54:70:7d:97:be:19:6c:40:bb:84:29:80:
         2a:7a:a8:9b:0b:b8:e9:d3:26:ec:ca:c6:92:de:bf:d8:55:44:
         42:55:3d:26:aa:e6:78:ba:10:1b:76:a9:ca:c0:b4:9e:23:37:
         7b:3d:05:34:dd:26:4b:7d:50:f8:08:a7:7f:dc:36:09:5f:df:
         76:af:99:be:ed:d7:d0:70:b2:d4:38:aa:a3:70:82:d1:49:ca:
         76:a1:02:e7:57:ea:a1:a6:28:ad:3a:53:1d:2c:70:1e:7b:31:
         fd:51:34:bc:ca:ef:2c:cf:58:20:c9:46:35:c1:c3:45:2e:22:
         b8:d2:0d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:18:12 2026 by rpki-client