Error: rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
File:                     kp7No4BWDKPskIVIcnhYFN9ixFA.mft (raw, json)
Hash identifier:          z03XbicERXAKxlXSFFQ4JqA50HMBIQS37mY2mCpguSc=
Subject key identifier:   7F:AC:20:F3:C9:11:9E:6C:B8:51:12:10:31:15:B2:83:AB:4E:97:D0
Authority key identifier: 92:9E:CD:A3:80:56:0C:A3:EC:90:85:48:72:78:58:14:DF:62:C4:50
Certificate issuer:       /CN=F365FF1AAF/serialNumber=929ECDA380560CA3EC90854872785814DF62C450
Certificate serial:       AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
Manifest number:          A9
Signing time:             Mon 21 Sep 2026 05:32:24 +0000
Manifest this update:     Mon 21 Sep 2026 05:32:23 +0000
Manifest next update:     Wed 23 Sep 2026 05:32:23 +0000
Files and hashes:         1: kp7No4BWDKPskIVIcnhYFN9ixFA.crl (hash: 4OTNfXh1PICPZWW1l8DxGJjOpnAAX0umco9TMZePl34=)
                          2: 4A1C51D0334C11F198B79CDACE1D38B0.roa (hash: MiCYmqOMJcOwUww3a0BQZWIqVrker46l5C67Rj9rwqs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:32:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FF1AAF, serialNumber=929ECDA380560CA3EC90854872785814DF62C450
        Validity
            Not Before: Sep 21 05:32:23 2026 GMT
            Not After : Sep 23 05:32:23 2026 GMT
        Subject: CN=6ab0c168-512b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d0:9b:2b:b0:88:1c:a0:dc:dd:92:8e:4c:60:
                    8b:b5:9b:b0:20:76:f8:79:3f:6b:05:41:bc:08:b1:
                    02:92:c8:c5:3b:10:70:2e:f7:d1:12:a3:6b:a2:f5:
                    57:63:ac:77:72:41:a2:b9:61:04:28:c5:58:a9:36:
                    93:40:19:2c:fd:95:03:64:f4:06:5f:23:6b:0d:c7:
                    ad:42:d5:94:b4:8b:de:11:71:e8:2c:f8:2a:88:7f:
                    dd:8b:4b:fe:20:e6:a5:46:46:cc:27:24:cc:12:34:
                    12:4e:ca:05:27:da:79:0b:67:b6:25:31:77:ed:72:
                    c8:cc:a9:58:9b:0a:ec:93:e9:06:4b:77:46:12:fb:
                    b8:63:e3:14:43:70:30:3d:9d:c0:57:2f:0b:07:df:
                    c5:10:7d:26:bf:09:5a:26:30:b5:01:47:69:cf:0f:
                    23:c1:f9:6f:14:da:ea:3c:d5:83:d1:04:39:42:5d:
                    c6:a4:1e:01:49:fb:fb:1b:7b:52:a9:dd:ac:22:9c:
                    bb:c0:4c:4f:3a:50:e2:37:b3:d8:ab:ef:79:d3:ea:
                    62:0f:f4:57:93:dc:5b:b2:b9:b0:15:9e:c6:88:67:
                    e8:4c:34:6c:81:38:24:55:ea:69:9a:2a:e4:4e:73:
                    3a:5e:72:3a:1b:2c:05:c5:0a:5a:ae:5f:dd:e1:b4:
                    1a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AC:20:F3:C9:11:9E:6C:B8:51:12:10:31:15:B2:83:AB:4E:97:D0
            X509v3 Authority Key Identifier:
                keyid:92:9E:CD:A3:80:56:0C:A3:EC:90:85:48:72:78:58:14:DF:62:C4:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp7No4BWDKPskIVIcnhYFN9ixFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FF1A/B6DD6526334B11F1B4EC4DD8CE1D38B0/kp7No4BWDKPskIVIcnhYFN9ixFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:42:c8:c9:1c:0f:52:25:74:71:03:f0:6a:d6:42:02:f3:7f:
         72:fd:6c:af:24:29:d4:00:bb:18:6e:0e:34:d7:53:b2:16:90:
         0b:e4:19:4e:f9:c1:77:c1:6d:f6:6f:d1:14:6b:91:a0:15:24:
         c3:54:3c:af:b7:ed:3a:bf:03:07:9d:99:4f:26:0c:59:3d:e9:
         06:60:98:c9:0f:e6:3a:63:8b:7f:8e:ac:05:d5:e0:4d:4e:70:
         87:22:b7:92:32:99:f3:b1:ec:d0:02:cc:aa:95:3a:75:be:6b:
         f9:05:26:33:18:49:52:d2:77:f5:29:66:55:1a:ad:a0:bd:c1:
         47:1c:22:07:a5:43:4f:46:df:c6:84:63:18:1c:e8:97:db:38:
         b2:83:2a:cf:74:da:38:37:da:04:f3:21:04:a7:f3:8c:bd:e0:
         a0:96:27:d4:fb:53:d2:2a:50:5c:06:84:0e:02:3f:df:c7:ed:
         c3:f2:c3:e0:a2:41:74:2a:93:5b:35:42:72:4b:4b:31:c6:18:
         98:79:c2:f9:ca:f5:e3:bf:43:09:61:76:23:8c:21:ff:77:4e:
         ae:95:08:5e:fb:b9:b3:2c:e2:11:ea:21:a0:73:eb:5a:6f:38:
         5c:96:56:f8:7e:5a:e2:e1:41:ca:0b:99:27:01:64:32:1f:6a:
         9e:8f:e2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:06:19 2026 by rpki-client