Error: rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
File:                     YAxslYLhTzef1aWysY2CLjZRry4.mft (raw, json)
Hash identifier:          BY6H+LXU2Mg4v+QfL8WmxMdWC1gWVJLOMik3ZcShm/4=
Subject key identifier:   53:8C:8E:E6:41:65:DB:D1:26:B0:D7:BB:C3:97:83:6B:99:67:06:98
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       07F1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
Manifest number:          077C
Signing time:             Mon 21 Sep 2026 02:36:50 +0000
Manifest this update:     Mon 21 Sep 2026 02:36:49 +0000
Manifest next update:     Wed 23 Sep 2026 02:36:49 +0000
Files and hashes:         1: YAxslYLhTzef1aWysY2CLjZRry4.crl (hash: YYqMuOiQjvtVM/rxmXp3C3RDuujB2i+cmvd9Kj6Bwk8=)
                          2: 857E4CA2244111F1A8C6B2B2DAE4EC9C.roa (hash: m5OtoTpW6phlm0aXdZoDM0YYNH3uQ6eY7U5iJ1biBMw=)
                          3: 4DF66326D83511F0A06E9EECDAE4EC9C.roa (hash: Mt30U+3JekQtJlgL5One9QbNJOW56mjt7rAXjtb9ne0=)
                          4: 39F5FCEEAEB611F1A94A02D7CE1D38B0.roa (hash: uUpW1zRoEgp1RiJKf009AHqYCCXTXmyqam22rwbRZso=)
                          5: C80B2372D10A11F0B5B7C089DAE4EC9C.roa (hash: Ogf85IZ2aBBn88U4P8dUY/MHy4VLrhlT9S9HUIQR9qg=)
                          6: 6E6378307A9F11F1A7102FC8CE1D38B0.roa (hash: DhcNXqZdrARutT4oYhOcfeE8a505EkJuKdTIxF2JBmg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2033 (0x7f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Sep 21 02:36:49 2026 GMT
            Not After : Sep 23 02:36:49 2026 GMT
        Subject: CN=6ab09842-b028
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:a6:a3:6d:f9:1a:00:a9:f1:58:fd:be:96:
                    4d:bc:28:34:28:ed:33:cc:97:c2:7f:61:ce:6f:db:
                    e4:bb:c9:f2:06:ab:3d:4b:8a:10:8c:d7:81:70:4d:
                    62:5e:bd:21:9e:d3:6e:8a:41:3c:1c:60:42:0c:c7:
                    d6:38:3a:4e:9b:56:c5:18:ff:ec:2c:5f:77:08:63:
                    fe:89:43:6f:95:a5:05:78:ee:2a:af:0b:14:16:f5:
                    b6:dd:c9:27:0e:5f:50:23:ea:71:e0:0b:03:19:af:
                    6c:cf:c0:26:e9:cb:2f:9c:ab:3e:8f:dc:91:80:75:
                    46:52:b8:d0:f1:23:01:32:59:55:17:37:64:e7:3e:
                    06:9b:9a:63:11:85:cd:6a:23:a5:90:cd:f8:b8:81:
                    a9:65:4f:fd:c3:33:53:69:47:fd:70:bd:68:77:d6:
                    08:27:c1:e3:4e:6c:d5:2f:c6:b2:f9:33:14:6e:8f:
                    d4:55:6c:c4:2a:29:19:e8:07:e0:34:8e:bb:c3:cd:
                    ff:72:17:fc:28:1b:61:49:15:fb:bd:1a:e0:e6:3c:
                    52:ca:58:e8:94:13:c1:a7:d0:c6:13:04:54:de:99:
                    dc:ef:08:de:ca:06:68:25:06:34:1a:25:b1:f6:59:
                    51:a4:e7:3b:88:14:3b:de:36:9a:77:4f:cf:78:01:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8C:8E:E6:41:65:DB:D1:26:B0:D7:BB:C3:97:83:6B:99:67:06:98
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7d:49:12:c9:fa:13:37:72:59:62:12:03:fe:cc:68:96:36:
         fd:c1:6b:02:26:b2:c9:12:c2:dd:75:4b:46:e9:e2:32:5a:1f:
         1f:c1:71:35:61:5c:35:36:f7:9d:57:2c:8d:3c:1b:ed:25:86:
         20:ac:7e:cc:db:06:19:9d:a9:70:49:8d:1a:01:eb:ed:5f:5f:
         8a:b5:a2:df:a0:ec:92:db:d0:ab:4a:c1:3e:59:5f:a6:08:b8:
         fd:b2:52:64:72:ef:d6:4c:0f:c3:c3:b9:de:7d:2d:9f:25:e5:
         c0:42:f4:ae:a7:29:70:6a:42:fb:c6:8b:96:93:2f:f2:f4:f3:
         47:db:31:ac:c2:c4:56:bb:23:06:33:dd:e9:12:b6:6f:b6:d5:
         61:61:bf:5c:82:57:86:96:d8:80:48:64:c9:a6:18:a9:33:bc:
         bc:9d:ff:c9:e6:cb:08:3e:0b:c3:6c:b0:00:1e:9a:72:9c:0e:
         37:df:13:94:70:23:ac:cd:d2:02:1b:a1:d4:25:33:42:e5:b7:
         f5:28:9b:c3:37:b8:1c:fe:e2:0f:9d:d3:57:c0:30:33:52:ed:
         ee:90:1c:e9:16:2e:04:ed:54:57:b0:69:fd:d8:8c:a8:0a:3b:
         b3:15:25:b8:bd:21:21:42:14:c6:a4:34:7e:bd:eb:9d:19:93:
         bb:29:ae:2e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNjA5MjEwMjM2NDlaFw0yNjA5MjMwMjM2NDlaMBgxFjAU
BgNVBAMTDTZhYjA5ODQyLWIwMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1X6ajbfkaAKnxWP2+lk28KDQo7TPMl8J/Yc5v2+S7yfIGqz1LihCM14Fw
TWJevSGe026KQTwcYEIMx9Y4Ok6bVsUY/+wsX3cIY/6JQ2+VpQV47iqvCxQW9bbd
yScOX1Aj6nHgCwMZr2zPwCbpyy+cqz6P3JGAdUZSuNDxIwEyWVUXN2TnPgabmmMR
hc1qI6WQzfi4gallT/3DM1NpR/1wvWh31ggnweNObNUvxrL5MxRuj9RVbMQqKRno
B+A0jrvDzf9yF/woG2FJFfu9GuDmPFLKWOiUE8Gn0MYTBFTemdzvCN7KBmglBjQa
JbH2WVGk5zuIFDveNpp3T894AcE9AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUU4yO
5kFl29EmsNe7w5eDa5lnBpgwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2M0JBMTkvRkJDQzczQjY5NjI5MTFFQzk1QjdCMUUwNUE0MEQ1
NzcvWUF4c2xZTGhUemVmMWFXeXNZMkNMalpScnk0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGfUkSyfoTN3JZYhID/sxoljb9wWsCJrLJ
EsLddUtG6eIyWh8fwXE1YVw1NvedVyyNPBvtJYYgrH7M2wYZnalwSY0aAevtX1+K
taLfoOyS29CrSsE+WV+mCLj9slJkcu/WTA/Dw7nefS2fJeXAQvSupylwakL7xouW
ky/y9PNH2zGswsRWuyMGM93pErZvttVhYb9cgleGltiASGTJphipM7y8nf/J5ssI
PgvDbLAAHppynA433xOUcCOszdICG6HUJTNC5bf1KJvDN7gc/uIPndNXwDAzUu3u
kBzpFi4E7VRXsGn92IyoCjuzFSW4vSEhQhTGpDR+veudGZO7Ka4u
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:07:14 2026 by rpki-client