Error: rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
File:                     IlhakHPb2Nx6VQRFf_nceJcpdE4.mft (raw, json)
Hash identifier:          7V65M+L11ON1hT+NEFuJvZi51GSroOUtSjoHihnTthA=
Subject key identifier:   91:0F:F6:14:56:3A:84:2B:8D:3B:E3:A2:E8:38:A7:32:B2:F1:A2:2D
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Certificate issuer:       /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial:       05A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
Manifest number:          05A4
Signing time:             Mon 21 Sep 2026 03:04:32 +0000
Manifest this update:     Mon 21 Sep 2026 03:04:31 +0000
Manifest next update:     Wed 23 Sep 2026 03:04:31 +0000
Files and hashes:         1: IlhakHPb2Nx6VQRFf_nceJcpdE4.crl (hash: lhszYVcAICW6HPG95+WO3mVdMvGuiBpbt0QjQFTIEl8=)
                          2: 927918B47E9211F1B10E100BCF1D38B0.roa (hash: t1dmJ5rTWfJPttLndRXr3M5OZ9VvePtT9qEnQGPsMKA=)
                          3: 8CE3B23E846D11F1A56407E7CE1D38B0.roa (hash: Nw6b5ero/wWuFYNopyGbuS9j7QQwO11rcoEZb6aRGW0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
        Validity
            Not Before: Sep 21 03:04:31 2026 GMT
            Not After : Sep 23 03:04:31 2026 GMT
        Subject: CN=6ab09ec0-d04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:a2:c1:0a:bb:f9:77:83:53:1c:fc:f9:67:
                    8f:3e:18:4c:f2:e9:a4:6d:5d:32:d8:b2:47:6d:f6:
                    7d:fb:f9:f5:e4:6f:9d:29:ee:5f:bc:68:f7:69:47:
                    1e:a8:d5:12:6c:85:a3:a1:49:9c:f6:38:c8:d5:d2:
                    2f:2f:52:2a:70:82:83:2b:ef:0c:4a:1e:b4:67:ea:
                    f2:81:e9:65:b4:e6:cd:2f:2f:53:af:ae:15:e5:aa:
                    bd:f6:bf:b9:85:e5:b2:26:39:71:d3:23:21:19:42:
                    29:45:87:e2:24:31:3e:1b:d9:cc:17:f3:fc:f7:34:
                    99:1d:b5:e4:19:40:0b:09:fc:d5:17:55:ca:06:80:
                    65:fa:d3:fa:ca:4b:94:d3:98:1b:60:d3:5b:8b:7c:
                    27:70:a7:b5:3d:27:a6:94:48:42:a1:a7:b9:db:f6:
                    37:64:5f:47:ac:ee:de:4b:f2:c2:4c:6a:d6:39:4f:
                    bc:c8:7c:82:2b:2a:25:2b:86:fc:6c:fa:a8:6f:75:
                    99:9b:be:a1:64:84:35:02:b0:3b:f9:d4:e1:1d:19:
                    00:df:d4:ba:56:58:c4:87:b9:40:cc:9c:21:a4:c7:
                    70:2b:62:95:de:c9:4b:3f:72:33:57:73:74:69:0e:
                    bb:3d:1e:c4:58:85:4c:44:c9:b3:e9:46:8f:b0:0c:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0F:F6:14:56:3A:84:2B:8D:3B:E3:A2:E8:38:A7:32:B2:F1:A2:2D
            X509v3 Authority Key Identifier:
                keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b3:30:c7:dd:8d:d6:28:ca:7c:20:7e:e4:f4:0c:06:2c:72:
         a5:c9:fc:13:37:23:a5:02:bd:a7:e3:2c:fd:d0:e2:8c:35:e7:
         8b:af:85:6d:f8:77:91:7a:f8:19:84:aa:82:7f:9f:5c:0f:f1:
         8d:6a:4f:74:22:07:78:a3:ad:8e:7f:16:4f:74:53:6f:0a:40:
         f1:01:fe:84:01:b6:ab:f0:ba:06:dd:e9:d6:0a:25:bd:dd:f4:
         a4:d4:0a:20:da:26:b6:94:b7:04:19:85:55:df:8b:64:ad:53:
         a9:40:b1:db:35:0e:09:1d:bf:69:3f:7f:c1:bc:47:a4:e8:9b:
         b0:7d:37:af:94:ff:59:25:e8:38:9e:8f:6c:f7:69:65:cd:30:
         81:9b:71:b1:b0:61:1b:b6:af:91:da:b8:4d:5f:d0:e7:ab:02:
         5d:92:6a:e1:c7:7e:51:7c:be:ec:da:ff:19:f2:4e:cb:e8:17:
         95:13:39:f6:69:be:31:75:e0:ce:eb:65:c4:7b:eb:95:98:79:
         3f:90:87:d5:42:e5:83:ae:5f:92:a7:e9:af:7a:26:70:73:a4:
         8d:72:c2:14:d0:ca:7c:a4:13:b2:a5:82:55:da:40:57:a1:a5:
         5b:d5:bf:3a:91:e8:87:4d:0d:72:e4:ca:11:34:3d:dd:6e:ae:
         69:29:0f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:04:09 2026 by rpki-client