Error: rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File:                     h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier:          i58hRp0Q6Y1WN3qGRCd+qEoazsS6fx2ifVa2dcfnDYs=
Subject key identifier:   4F:31:C5:4C:65:8F:1E:98:13:5C:74:D4:AC:57:F5:3C:1F:15:D4:0A
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer:       /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial:       0613
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number:          0605
Signing time:             Sat 26 Sep 2026 03:00:09 +0000
Manifest this update:     Sat 26 Sep 2026 03:00:08 +0000
Manifest next update:     Mon 28 Sep 2026 03:00:08 +0000
Files and hashes:         1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: PLM7kfKs4opEA73lq5bGwnBA7jt7y6gm1RtEYkksgSk=)
                          2: E930883CF5D411F08C13D08DDAE4EC9C.roa (hash: YuF0ZPXUrP/FErIbO1oG0qOrgfIUEuuBoE3/Li8gUZQ=)
                          3: 59AD6094F5D511F09117C492DAE4EC9C.roa (hash: tLC9mn7iIAWuyL5bTuMUM+l8+nADm3agRNyvn61Vsk4=)
                          4: D747D6E2F5D511F0B2621493DAE4EC9C.roa (hash: 4ZH2ONvWHUC5OJAskoe/2/7FyCm6fCYTywg5B4ILlVo=)
                          5: 548EDFBAD41611F09F8A6C9FDAE4EC9C.roa (hash: k8FRmBKTxWl53FchMRaZBeBDbnAPcS6cvBX3aUVupmA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1555 (0x613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
        Validity
            Not Before: Sep 26 03:00:08 2026 GMT
            Not After : Sep 28 03:00:08 2026 GMT
        Subject: CN=6ab73539-7b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:13:bf:a0:fd:09:25:43:c6:6b:ba:05:a7:22:
                    c4:de:44:e7:ee:2f:44:bb:6f:77:bf:da:d4:18:d6:
                    c3:48:65:68:5f:39:ff:19:29:df:ad:40:64:31:29:
                    35:18:48:c4:dc:d6:b4:17:94:b6:b2:7f:3a:89:ac:
                    ee:8f:39:6e:a7:6b:66:07:c3:e2:d5:36:b5:0a:6f:
                    f6:2c:6f:dc:16:30:94:31:28:e0:c5:ef:0e:bb:38:
                    09:8a:36:7d:b7:ae:13:9c:a6:fd:25:c6:b1:ce:a0:
                    2b:7f:65:ed:61:a1:af:a7:e0:75:55:0a:eb:4a:66:
                    28:d9:ba:69:37:fe:ef:05:0f:66:7b:1a:1d:a0:84:
                    37:f3:5e:02:6c:18:d1:b8:2f:26:99:1a:3a:17:9a:
                    fc:eb:bc:d9:7b:2f:29:32:0a:6b:a9:2a:f3:0f:05:
                    75:ab:00:19:0c:4c:84:7c:21:23:71:61:6e:c8:89:
                    28:92:49:bf:14:0d:23:0f:74:99:07:77:bc:26:4c:
                    05:b9:de:f9:f5:99:3d:64:70:3e:ac:70:c9:70:0d:
                    84:f5:37:14:81:28:ee:c8:1e:71:5f:ef:31:60:3d:
                    31:32:02:04:ab:00:18:54:a5:2c:91:55:7d:ee:fb:
                    17:72:5d:5e:40:dd:a4:a3:a4:58:f8:64:f4:33:f3:
                    28:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:31:C5:4C:65:8F:1E:98:13:5C:74:D4:AC:57:F5:3C:1F:15:D4:0A
            X509v3 Authority Key Identifier:
                keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:a8:31:32:c9:09:55:cd:a3:ec:60:ab:b4:2f:65:68:41:de:
         5c:c9:ac:78:25:c4:a0:3a:be:96:97:45:a3:2c:30:6e:8f:5c:
         a7:60:c1:85:8e:9e:51:01:e6:9b:c5:32:a6:40:a4:af:02:84:
         1e:7f:3f:2a:f0:ca:10:57:0a:08:5e:07:4a:38:86:2f:b3:4e:
         b0:76:30:7a:ab:1c:dd:d2:11:25:47:17:99:22:e3:80:87:bb:
         d2:c7:c9:94:aa:e6:07:ce:b1:c1:02:64:49:f7:47:2f:84:4c:
         63:06:38:47:b1:cb:94:e4:7b:57:7d:0a:11:8d:2f:08:41:2c:
         63:77:d2:62:4d:71:51:b0:70:af:32:f8:e7:3c:67:28:f0:b1:
         df:d1:08:00:19:5f:be:d6:f6:a3:18:0b:a6:3d:dc:e6:a5:cb:
         5b:bd:ad:f7:9c:e7:af:eb:db:a8:75:b0:46:a2:2d:3b:e2:6b:
         cb:20:63:bb:fa:32:bb:bc:1c:3a:e7:84:b4:03:96:43:8f:82:
         32:c4:ae:3e:4c:eb:24:75:df:de:21:6d:de:fe:e8:5e:bc:be:
         32:9d:07:d4:07:1f:b0:0e:b4:07:6f:3b:8f:30:e0:41:0e:88:
         eb:cd:16:68:33:ae:57:33:66:4f:7a:67:46:e8:5b:a8:fb:bb:
         72:80:58:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:16:25 2026 by rpki-client