Error: rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
File:                     9s_tdm0YWlpEFVDpcITTe-KcA-s.mft (raw, json)
Hash identifier:          wjNEP7cI4RycJ7wWUZmq3ZnydKeFcvRBnPHmZBHmv64=
Subject key identifier:   41:5C:CF:D5:2F:41:CA:27:92:7D:D7:92:2F:15:4E:74:54:CE:85:44
Authority key identifier: F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
Certificate issuer:       /CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Certificate serial:       06E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
Manifest number:          06DD
Signing time:             Mon 21 Sep 2026 02:34:50 +0000
Manifest this update:     Mon 21 Sep 2026 02:34:49 +0000
Manifest next update:     Wed 23 Sep 2026 02:34:49 +0000
Files and hashes:         1: 9s_tdm0YWlpEFVDpcITTe-KcA-s.crl (hash: C49WO8xVBFoHGir1YZPMyZGf0iPDH2+xxekjcxJSZ64=)
                          2: C813B5AC898B11F1BF7808B0CE1D38B0.roa (hash: sIuS3dFb0ljNs/CTOnl8n6H7ZV0rY+ovWMrRtUWyQDg=)
                          3: E6BE8514847B11F1BA44D4BBCE1D38B0.roa (hash: tauOOSFJltY6KG4MJlrCmt0lohbXb9OdzTR2QMoclwc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1761 (0x6e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DDF3AF, serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
        Validity
            Not Before: Sep 21 02:34:49 2026 GMT
            Not After : Sep 23 02:34:49 2026 GMT
        Subject: CN=6ab097ca-daf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:8d:95:a2:3f:73:76:76:0c:89:ba:4a:44:
                    f3:10:66:6e:25:f3:53:e3:f2:ab:ee:82:94:c5:8f:
                    ec:6d:95:73:34:fe:29:bb:7d:dc:76:8b:9b:42:b8:
                    97:80:8c:c7:cb:27:93:da:7d:e4:a0:8d:ee:21:aa:
                    2a:97:ae:a5:a8:3a:f7:0c:32:bb:df:d6:81:ff:d9:
                    d1:c3:e3:93:37:a5:83:c1:56:18:a7:83:17:48:3a:
                    3e:e5:82:e0:74:0e:f0:f8:e8:9a:4d:7d:ac:55:c9:
                    99:49:c6:7e:90:80:ad:9e:a3:b7:b8:3a:df:5c:74:
                    0a:d2:f3:39:4b:42:0c:0e:b1:43:e6:d7:af:1b:c5:
                    b2:16:4a:c0:39:23:ac:21:12:86:64:6f:61:8e:4d:
                    aa:05:74:7c:62:03:3f:51:52:4b:34:d0:af:50:3e:
                    16:29:65:99:cb:d6:e1:cb:f1:72:4e:8f:46:c0:58:
                    1e:82:4d:5e:49:af:43:b1:be:7b:94:40:07:42:1c:
                    0d:bf:2b:c1:dd:66:78:5a:8c:b9:cb:db:22:49:02:
                    1a:73:6e:d3:fa:32:0e:bf:a6:7d:dc:a4:f4:b6:02:
                    51:71:ee:89:b0:c7:a4:c2:dc:5c:83:3a:08:9f:b5:
                    bb:31:80:8d:25:33:d3:a2:55:2d:30:49:b3:b7:7a:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:5C:CF:D5:2F:41:CA:27:92:7D:D7:92:2F:15:4E:74:54:CE:85:44
            X509v3 Authority Key Identifier:
                keyid:F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a8:9a:7c:9b:97:c3:12:f1:5a:9c:2e:cf:fa:83:00:9d:f6:
         22:09:5c:f8:8b:3c:0a:41:a7:15:ef:d3:56:d2:7f:10:20:66:
         4e:22:d5:42:bc:9c:cf:a9:1d:b8:58:11:75:33:12:28:63:43:
         10:92:8c:45:eb:16:d5:48:c8:89:a6:74:57:0c:52:74:60:49:
         a0:53:90:b3:15:df:44:0f:c3:9a:6b:4f:34:85:60:ab:4f:ee:
         77:94:12:59:d6:7b:24:da:df:e6:9c:d9:cd:f0:bb:6d:5e:50:
         c1:ce:bf:cf:cc:d0:ce:1e:3f:aa:71:5a:14:3f:ae:5d:9f:76:
         34:13:95:c1:ae:13:a1:ea:9a:5e:20:0f:1a:88:da:e7:9e:39:
         d4:cd:12:74:78:7c:61:10:ee:75:45:de:81:12:06:4d:b0:49:
         51:de:e4:66:b1:82:ad:bf:59:2c:91:26:fe:ba:30:8e:19:23:
         32:ca:98:39:3d:bb:6b:3a:f3:3a:fa:a8:ff:1b:9d:2a:4f:33:
         e9:bf:87:29:5f:64:58:bd:aa:e2:c1:5b:50:be:3f:82:c6:3c:
         3d:95:e3:af:95:87:b7:87:79:f0:5a:62:15:d8:75:6e:c9:ea:
         b4:6e:38:6d:c9:d9:ff:cb:a7:e6:a2:38:71:1a:4c:74:11:de:
         42:ce:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:25 2026 by rpki-client