Error: rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft
File:                     6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft (raw, json)
Hash identifier:          DnWNCrYxr6xT/gYlSGMMvwTxat/XX2qGN/CGGc7qQ0M=
Subject key identifier:   87:3E:72:6A:D6:C0:2C:B6:57:6D:BA:43:A4:2D:20:61:E0:10:20:05
Authority key identifier: E9:72:3A:7B:30:48:29:D4:08:3B:F3:80:11:7A:46:BC:06:5A:9B:54
Certificate issuer:       /CN=F365ED10AF/serialNumber=E9723A7B304829D4083BF380117A46BC065A9B54
Certificate serial:       04A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6XI6ezBIKdQIO_OAEXpGvAZam1Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft
Manifest number:          04A6
Signing time:             Thu 08 Oct 2026 03:35:38 +0000
Manifest this update:     Thu 08 Oct 2026 03:35:37 +0000
Manifest next update:     Sat 10 Oct 2026 03:35:37 +0000
Files and hashes:         1: 6XI6ezBIKdQIO_OAEXpGvAZam1Q.crl (hash: +RoqDqn5l1nvQrLpQCiE9aM6FKnfI6XFC8IlbQFn5Jo=)
                          2: 18124C5428A811EFA0B943477DDC24C2.roa (hash: s7MJGFTxKCFeh5P3tTDfMzIcyIjDgLtZdDB92Tt1Ehs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6XI6ezBIKdQIO_OAEXpGvAZam1Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 03:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365ED10AF, serialNumber=E9723A7B304829D4083BF380117A46BC065A9B54
        Validity
            Not Before: Oct  8 03:35:37 2026 GMT
            Not After : Oct 10 03:35:37 2026 GMT
        Subject: CN=6ac70f8a-695c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:0d:10:bd:4f:f9:f4:cc:cd:92:c1:d1:c2:
                    6e:e5:3e:80:36:44:ce:68:8c:de:01:db:b2:44:d3:
                    08:2f:8e:c2:4d:fa:20:1f:de:c8:db:d3:9a:b4:cd:
                    1d:7d:e0:5d:49:9a:da:5a:8a:1f:27:cf:c1:17:89:
                    a8:e2:7a:95:f8:3c:1c:8e:a9:a6:db:36:98:7e:6c:
                    b1:26:d6:0e:07:da:75:ad:34:99:15:e9:2c:cc:05:
                    50:38:87:1e:1a:2c:ba:8a:76:41:e2:52:a3:bb:1e:
                    3c:d5:be:55:1c:52:52:6a:50:d7:10:5c:94:71:f8:
                    ac:13:f7:13:4c:0d:61:00:c3:cf:44:29:79:d3:5a:
                    fa:e8:09:47:c0:bc:cc:21:cc:42:d5:7e:ab:1d:c6:
                    b9:b5:0f:2a:4b:54:a7:26:33:3a:83:c0:20:97:0f:
                    22:3f:c4:4f:e3:02:b2:7c:44:e5:d6:d0:f5:00:3f:
                    fc:32:0f:25:cc:9a:60:f9:3f:91:eb:86:eb:25:6f:
                    3a:0f:92:22:99:a7:67:8e:3e:9d:d1:87:77:15:c3:
                    a5:7a:d0:b8:4d:bf:86:e6:da:f0:80:c0:df:34:08:
                    48:47:25:a3:1d:55:54:5c:ae:4f:31:36:e7:c0:1d:
                    b8:2a:15:b6:7f:7f:82:57:73:2f:29:96:5e:99:23:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:3E:72:6A:D6:C0:2C:B6:57:6D:BA:43:A4:2D:20:61:E0:10:20:05
            X509v3 Authority Key Identifier:
                keyid:E9:72:3A:7B:30:48:29:D4:08:3B:F3:80:11:7A:46:BC:06:5A:9B:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6XI6ezBIKdQIO_OAEXpGvAZam1Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365ED10/FE00E0E4303E11EEB24C1D294AD9E6FC/6XI6ezBIKdQIO_OAEXpGvAZam1Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:39:77:02:d6:c4:87:ee:41:97:f2:f1:a6:70:35:9d:02:66:
         1c:b2:6e:eb:25:6b:ae:fd:6c:40:ca:14:e4:6c:74:b2:f6:07:
         5c:18:b8:f3:76:03:b6:57:ee:d6:72:d6:ba:7b:2d:a6:b5:4c:
         45:95:b0:57:a6:bb:9f:c6:d9:fd:40:e8:47:34:2a:86:79:33:
         e5:30:17:bf:cd:16:95:74:3f:2f:04:c3:ff:63:6e:88:8b:4c:
         0e:35:90:9f:dd:fc:dc:7a:73:b1:53:1d:55:3a:bb:15:b2:ce:
         13:24:b8:6c:ad:2b:31:0b:cf:55:81:8d:78:00:1c:71:8c:93:
         e5:e4:94:78:d0:3e:4b:d7:51:59:c9:79:85:33:77:6a:95:12:
         b7:46:0f:9e:78:f2:c2:a8:cb:63:94:eb:e4:cc:39:e4:0a:a1:
         91:ad:2e:d9:68:02:a8:aa:c6:28:d7:30:fd:2a:0f:20:2a:57:
         05:ec:03:f3:86:b3:73:a0:7e:47:07:53:42:9f:fc:ff:aa:f7:
         15:21:7a:04:77:df:48:f0:01:65:a0:31:0f:73:c9:27:09:5a:
         09:84:2e:18:ee:fb:84:30:74:f6:5a:ff:c6:eb:39:68:fb:e2:
         29:7b:84:5b:8b:7e:24:13:22:d0:ec:26:5c:7f:b3:9a:3f:ac:
         e4:a0:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:10:36 2026 by rpki-client