Error: rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
File:                     CfsxNuzV49fPALMsEh8S6K_QpgE.mft (raw, json)
Hash identifier:          BrY4X8iUsXkZIm3bKVdwTr8BkfLm9Lohg9M/uMTtu20=
Subject key identifier:   3C:84:58:6D:D5:3F:5D:E6:2B:10:53:42:10:75:25:09:F8:AC:8C:6B
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       06A8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
Manifest number:          0630
Signing time:             Sun 20 Sep 2026 03:05:20 +0000
Manifest this update:     Sun 20 Sep 2026 03:05:19 +0000
Manifest next update:     Tue 22 Sep 2026 03:05:19 +0000
Files and hashes:         1: CfsxNuzV49fPALMsEh8S6K_QpgE.crl (hash: sgPmU5TjsjTPy1IWEI/H8JSLQ15ytbrEzvfcaMFNbrw=)
                          2: 24386CEE7E2C11F1A1DB8B0BCF1D38B0.roa (hash: S2U9uds7Cld2AWKqvudZAdjph2xQxW8yaq1n4PfigRc=)
                          3: CD0215CA7E2F11F1BD5E22A2CE1D38B0.roa (hash: RIIqMS2K8WI/4vMiOqzeVI78FQ33zf2FyhdAYL4i/0U=)
                          4: 7B0E03D07E2C11F1891C990FCF1D38B0.roa (hash: H5ZqBfAUkoo2kyPOpuK5FGQS9v/LC3fkqvaCdMvWPN8=)
                          5: 326EDB067E2F11F1B541811CCF1D38B0.roa (hash: 1XIr2PJb94zxYZkffWRict/jrq9o05Vf+fzVAjTqwcQ=)
                          6: FA491FB47E2B11F1AA23710BCF1D38B0.roa (hash: YwuLni5xYVgslLLIMW/8r5dsr7/o2nw39a6iQKFwzQ0=)
                          7: C16E39AE7E2B11F18CB65D0BCF1D38B0.roa (hash: 6hdrj1CVtZtpiPX/L7oySM4TmwrCRUJhITvON8iokTQ=)
                          8: E684858E414211F1A3CDCEB6CE1D38B0.roa (hash: trSZRMDESmLqpeuxtkhZM3kKOXj5AdcD0bd/niQbcss=)
                          9: C90158C27E3011F1A42C28AACE1D38B0.roa (hash: m37ozqGBclmMtWZutuE+QOnY9ewZNLKPVysEuj18YUk=)
                          10: D919A6407E2D11F1A051C317CF1D38B0.roa (hash: e5ge7hY54JAZ4ZhJ4t2XQo6wq5JaLcniIddSVYTp1Ac=)
                          11: 4849F37E7E2B11F1AE846107CF1D38B0.roa (hash: sxDDEBpdr+bnORECpkJaiHwwOSZML6kx6uvqpMOhO7E=)
                          12: 3943014C7E2E11F1B899F517CF1D38B0.roa (hash: Ld72qTQ+RiSgzBnyA5W/7X5KKgV11K1UIxJd9Z50BXg=)
                          13: 488CA7267E3211F1B91182B2CE1D38B0.roa (hash: uOndVz+lHryR8XE8e4ZXXLo6tsFA/wxx3lbZ6lqxsJg=)
                          14: 1A9CC1767E3111F1BAA359AACE1D38B0.roa (hash: sri8YlprmjTFTKhiBNsUHI55PNlpSbIzcKUcDqn8R3A=)
                          15: 56E2A1FC7E2F11F197B081A1CE1D38B0.roa (hash: MLMn7DgcjC9kJt10C+ajiAUd9w+iQTq8t0+fDA7JRrw=)
                          16: 70C67A1C414411F1AC2C25BFCE1D38B0.roa (hash: pVvqCth+pldb5aKJXaW4cjCwqqFCFtgpnyzwqX0KUAQ=)
                          17: 8883F6EC7E2B11F18F1F7D07CF1D38B0.roa (hash: Tr4D5pt4LHUCrCX12+e8T2S6F12WbJfrTGDAIHe/y1w=)
                          18: 5CBD50B47E2E11F1A0890D18CF1D38B0.roa (hash: Q7c0Ul63V8lCAYTN/5wp6Pif/Y/osWhWIIbpU+DnH0U=)
                          19: C2F4A7D87E2E11F19604F41BCF1D38B0.roa (hash: cs/k7hseOXiz7ZW07irORKXogIQDAeN4IB3fj0rnKto=)
                          20: A6E945927E3011F1831F23AACE1D38B0.roa (hash: tMBH4yH/vyaqmyTg5oqoqN2L1sc0SQ7zSXaSeRyPXcU=)
                          21: 0E5ADA5C7E3011F1A391E6A5CE1D38B0.roa (hash: dhaluCj7RnDZ7PYio53jEw/KHG7gePKgaeCadPKC+2w=)
                          22: 7C1C231C7E2F11F18E12A3A1CE1D38B0.roa (hash: hpMHDcjC1T2JibIM96t8LRRDibJaiQLPCpykNcHGTl0=)
                          23: A24D20907E2F11F1BEDCC4A1CE1D38B0.roa (hash: qmBWpFsSlfzNnJuEa1VYKxig2bfInifSAqE34JzwVlc=)
                          24: 4772158C414311F1B6D401B9CE1D38B0.roa (hash: 2QkUZI76kgSfjHqaizbFIrW983lIVl7zlWeJR1DkrZc=)
                          25: ECE516527E3011F190D646AACE1D38B0.roa (hash: OoWGktBOhUONH0OmAm4vSQkEZZW+eN/qB+Ia0BErvBg=)
                          26: EE1B97FE7E2F11F1B12BE1A5CE1D38B0.roa (hash: 6Za0LpirtMkr1W1FS+msJJ0aWJ7QuNPWNejT9fg3T0Q=)
                          27: 12CF5EF67E2F11F18370421CCF1D38B0.roa (hash: 4UuN4QLfMxXPy2HM2/BEelU9Bv4KfkAHor15wsAKv1M=)
                          28: E77C5C227E2E11F18C2F0A1CCF1D38B0.roa (hash: XLugb+ewySxCjGyLpAA8rZeHG0XeiKI6hnWqmfdgYAk=)
                          29: 312940B47E3011F199C902A6CE1D38B0.roa (hash: vag9WcuAOrF3+1EYVtHiJogvCIGwdfxrLrNAvVorVHQ=)
                          30: 4D8965EE7E2C11F1AD65030CCF1D38B0.roa (hash: im27BEXtZMCxHYCtlYuIYnBk5vy5TS9xuR5cBwFGxvk=)
                          31: 7F089C627E3011F191A271A6CE1D38B0.roa (hash: Vhqvt4z82xrmy8Nw0nz6rCCISSc2qFuWV9BTD2ciiBE=)
                          32: ED6D064C7E2C11F18D4BCE0FCF1D38B0.roa (hash: z0x2yJJ+yAojdrKAg7NLloTHQmOrtUMDv1pC3BKiJ2o=)
                          33: 5B43754A7E3011F1B6C216A6CE1D38B0.roa (hash: 0hAe/QtewAi2sMOEQpa0fwfSQe7kQWIzxoUKxq88RUs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                          rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1704 (0x6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR, serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Sep 20 03:05:19 2026 GMT
            Not After : Sep 22 03:05:19 2026 GMT
        Subject: CN=6aaf4d70-404b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a8:31:91:37:58:fc:92:71:9c:aa:a4:98:f5:
                    fc:99:de:41:a0:db:b7:75:50:dc:35:78:32:cd:b7:
                    6f:4f:c1:de:a4:61:33:5c:10:4c:77:73:85:ad:32:
                    d9:33:46:85:b4:d0:3a:43:6e:38:f9:13:f9:92:87:
                    10:13:d1:2e:ff:7c:7f:aa:1b:21:e6:8d:28:f7:49:
                    a5:dc:f4:d7:17:25:12:b7:c7:27:23:c4:c6:1e:f8:
                    6e:4f:7b:89:4c:7e:1e:71:3b:fa:ea:fc:59:45:3b:
                    bd:08:e0:3d:b1:ea:97:1f:9b:bd:70:fa:83:8a:5a:
                    c3:68:33:4e:c7:9d:43:9a:8d:0e:5c:6c:d4:6f:ef:
                    9a:e7:3d:bc:92:21:42:62:51:7b:50:c0:ff:1c:ff:
                    23:53:47:30:0d:a6:62:55:5d:c1:80:ea:90:d3:6f:
                    10:12:06:42:fb:db:c1:e9:57:08:94:60:43:3e:df:
                    3c:82:d1:c6:d6:ac:11:5e:0b:82:03:07:d4:2d:a2:
                    00:8a:1f:94:7e:58:79:cc:33:31:36:e9:27:51:3a:
                    e7:c4:fd:d6:85:f2:f9:81:92:91:db:fc:5a:0d:1f:
                    87:6e:55:fb:81:da:b4:5d:d8:6a:24:7d:13:66:14:
                    70:6c:5c:1b:c4:a1:70:78:ef:f5:b6:90:32:28:7e:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:84:58:6D:D5:3F:5D:E6:2B:10:53:42:10:75:25:09:F8:AC:8C:6B
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:21:a2:79:82:d2:0b:fb:76:b8:e0:67:f3:d8:d4:17:4d:cb:
         f3:23:74:2d:7c:e9:0b:74:c1:7d:71:89:fa:02:20:e4:b4:54:
         45:88:1d:29:d2:af:fb:fc:8f:6b:66:fc:2c:7f:7f:1a:af:3a:
         fc:86:48:80:e8:a4:27:ed:6a:01:52:cc:f2:24:ed:10:06:4c:
         ba:ba:ab:2e:c2:f5:b7:a9:36:31:b3:c2:da:f0:22:9c:d9:0a:
         09:92:7c:7b:71:31:f6:25:eb:4b:7d:83:06:8e:27:f2:af:cc:
         de:5b:aa:b5:79:e3:1f:b8:ec:e2:a2:39:cd:5b:7f:ba:78:68:
         40:b4:d5:5f:67:a6:c2:2e:73:48:30:4e:7f:ce:74:9d:47:55:
         66:d9:56:43:79:ef:63:b8:38:ac:bf:76:af:2c:c8:4a:4d:1b:
         9d:de:66:d2:75:d3:94:b1:02:02:a7:15:dc:48:18:1b:e6:cf:
         4a:1b:33:4f:23:57:4e:94:83:25:a0:f4:a6:4a:6c:5d:a3:8e:
         c4:a5:a2:bf:e8:88:e2:54:7d:86:4d:a7:23:e0:b4:9c:b2:18:
         1e:8a:8e:61:27:8d:07:f7:44:15:4c:f5:1e:74:ce:6c:22:6e:
         f7:a2:11:a3:75:ba:86:dc:49:79:35:8f:63:26:89:73:85:f4:
         9c:fd:37:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:58:22 2026 by rpki-client