Error: rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          EZUHCAYOarCXUzHyrrgg4ih+7yHWPpwZy/KNdQJy+54=
Subject key identifier:   41:1B:EE:37:1B:26:E2:35:D4:E0:8E:5C:62:EA:A3:E0:43:48:E3:B4
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       0691
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          068F
Signing time:             Tue 22 Sep 2026 02:39:47 +0000
Manifest this update:     Tue 22 Sep 2026 02:39:46 +0000
Manifest next update:     Thu 24 Sep 2026 02:39:46 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: BsNL2rnrrqLF8BIMV/0h66UdKrzWyLD4cAh8picLtQg=)
                          2: CFF7610289D511F1BB657AE8CE1D38B0.roa (hash: WV9x2VI1s6Dp52p1mAl/nv0lnXkxmuZLfjrdawVPNEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: Sep 22 02:39:46 2026 GMT
            Not After : Sep 24 02:39:46 2026 GMT
        Subject: CN=6ab1ea73-8435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:95:16:dd:0f:0c:1a:c4:5f:f1:de:58:24:68:
                    77:1d:1b:82:7f:1d:bb:54:11:0f:18:0a:f3:79:c9:
                    f9:c9:cd:de:9d:81:fe:0b:e8:ab:a1:58:62:6e:4e:
                    e8:74:69:cd:02:39:c5:17:79:fe:f3:90:80:b8:d4:
                    68:3c:5c:0e:42:3b:d8:da:73:0f:07:94:a1:6b:c8:
                    60:3e:59:15:a4:e4:9c:da:ff:54:a8:0a:63:ca:a5:
                    c1:4f:ee:52:d3:40:f3:2f:16:0f:6e:b4:91:21:94:
                    e9:8c:89:b0:84:67:3c:4a:9d:06:bd:24:98:23:07:
                    6b:95:bc:ac:ec:3b:66:9e:ce:d6:6c:10:88:97:b3:
                    51:b1:50:fc:b0:4f:3b:43:64:51:e7:bd:21:6c:86:
                    a5:d8:98:b9:a8:b7:f1:c3:7f:18:12:70:43:91:58:
                    fa:bb:be:0f:19:d7:36:ec:90:78:a1:e4:9e:15:d1:
                    b4:cf:78:76:1d:53:59:bd:18:02:3e:c9:29:19:0e:
                    42:98:ea:2c:cb:8e:7a:5c:72:33:0a:27:6b:a3:36:
                    5d:75:4a:c4:04:81:f7:24:9c:16:01:9a:14:af:b9:
                    b3:ca:1e:a3:25:38:9b:5e:8d:a7:db:86:eb:85:17:
                    33:27:a8:40:ca:da:fa:5d:88:a3:3a:03:22:fa:e9:
                    3a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:EE:37:1B:26:E2:35:D4:E0:8E:5C:62:EA:A3:E0:43:48:E3:B4
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:a3:5a:90:25:83:06:59:69:04:cd:07:1e:39:3a:c1:34:ad:
         b0:38:62:b2:6a:64:af:8b:70:30:42:a1:57:5d:37:7d:b0:bc:
         b7:f9:66:e9:57:f5:e5:12:b5:47:39:4a:fb:d6:66:2a:3a:6c:
         10:42:54:f1:f7:e1:6d:41:41:01:f1:1a:4d:7b:42:99:bf:8c:
         56:6d:18:bd:8b:63:26:11:d8:16:b2:9a:ab:a9:5f:17:b8:c9:
         69:23:c4:2c:91:73:a5:ca:ee:4b:04:39:7e:12:2e:e8:69:c4:
         96:87:7e:f0:2a:cc:7b:0a:54:11:30:a3:e6:f0:75:18:63:8e:
         49:f5:d5:9a:84:2e:58:a4:30:f7:44:ea:0d:cb:04:a8:db:11:
         e6:ac:62:1d:ff:0c:5e:02:87:85:13:e6:ef:0f:44:50:d5:da:
         d8:31:a8:be:76:e6:54:3c:65:33:28:3f:99:9a:e5:30:04:f9:
         fc:08:a6:d1:79:12:b3:92:02:e9:f9:63:b7:f0:8f:26:fb:e9:
         b4:d0:62:e7:4a:6b:ed:f7:d2:69:42:db:49:f3:02:29:21:bb:
         7c:8d:19:ec:30:55:ab:eb:28:e9:d4:67:12:14:e0:f6:43:0b:
         3b:0c:7e:1e:51:a0:c1:2a:30:a5:19:e8:30:22:5a:89:06:dc:
         bb:2f:64:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:22:23 2026 by rpki-client