Error: rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
File:                     3eQFo7njLL0ZkIdZfW8pC2w0G80.mft (raw, json)
Hash identifier:          f3fXN3DTCKVIwOKFfv81MrqYnQfFB5YcFWwboCCoo/s=
Subject key identifier:   F7:55:E7:EB:A1:45:06:28:60:62:0C:06:91:E8:E9:B5:C5:69:9C:49
Authority key identifier: DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD
Certificate issuer:       /CN=F3663954AF/serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
Certificate serial:       04A8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
Manifest number:          04A3
Signing time:             Sun 20 Sep 2026 03:34:55 +0000
Manifest this update:     Sun 20 Sep 2026 03:34:55 +0000
Manifest next update:     Tue 22 Sep 2026 03:34:55 +0000
Files and hashes:         1: 3eQFo7njLL0ZkIdZfW8pC2w0G80.crl (hash: jXqW47W8PZiogFYhYfyQ1YDCbFg2J+urvDLf+PxBw1U=)
                          2: 3B3C94A8355611F0A72D5BD3DAE4EC9C.roa (hash: dNkXrkMo29JWmN/2Fiah29iTZ9KKxjxmwXwttQ5e+fY=)
                          3: 92455510355511F09A3F8ED0DAE4EC9C.roa (hash: EzKU6CQxGZwi822liJZKhnE2Wswv1oKziheTE/2ZwuU=)
                          4: AA85EAE4360F11F08E7B1CAFDAE4EC9C.roa (hash: KqakcfmbrA2BIbq/4uC8DnJ5j63ssavBmkP7waw6iDc=)
                          5: 621AA83C2CED11F1BD66A280DAE4EC9C.roa (hash: aW8sKhCXcHPjuzp5UNhH+Nw6XIrL1+PMzKJWjjR5zDM=)
                          6: F826BE522CEC11F1B5DF3280DAE4EC9C.roa (hash: fi+fPzRV49+4XUClZdX633bw6RHfPVBTJln+gH9qYnw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1192 (0x4a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663954AF, serialNumber=DDE405A3B9E32CBD199087597D6F290B6C341BCD
        Validity
            Not Before: Sep 20 03:34:55 2026 GMT
            Not After : Sep 22 03:34:55 2026 GMT
        Subject: CN=6aaf545f-7c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:d8:f6:20:9e:9b:59:28:5a:42:39:db:f0:c0:
                    14:f4:51:f1:46:d0:46:7e:62:11:13:1a:c9:9d:ff:
                    c2:5d:4c:8a:b3:dd:13:35:c0:f5:9c:2d:48:c9:84:
                    87:57:e9:a1:7d:ff:19:7f:d0:a2:ae:b4:35:a9:8d:
                    1f:39:f1:32:ce:5d:ba:f6:cc:a2:ad:e8:6a:61:3c:
                    66:d1:c6:dd:57:16:ee:ad:3b:93:90:d9:1e:b3:3d:
                    4e:aa:6d:35:ed:ef:74:63:f4:68:7b:5c:5c:da:04:
                    66:fb:c8:50:0d:77:38:e1:e0:68:f9:ab:aa:1a:da:
                    b6:4f:40:d7:09:d6:0b:73:6b:78:1f:0a:4c:17:70:
                    11:82:9a:7b:15:c7:c5:97:76:ab:76:53:55:77:da:
                    db:87:d6:55:62:96:06:6a:8d:1f:d9:91:3c:28:08:
                    4a:c8:b0:d6:12:b8:a6:a9:78:c6:f3:4b:d5:47:cb:
                    b3:7b:91:e4:1b:e1:6b:47:7e:2a:ce:23:53:ff:fd:
                    f3:6f:c3:9a:3d:30:59:e8:65:24:b4:2c:b3:48:a1:
                    58:c1:dd:a3:8e:81:d8:55:dd:8f:b1:85:a3:7e:ee:
                    e0:7f:88:65:53:e5:2c:cc:1a:bd:8c:76:8b:83:79:
                    20:56:5a:df:af:ca:b1:a0:74:28:eb:a9:d3:ca:19:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:55:E7:EB:A1:45:06:28:60:62:0C:06:91:E8:E9:B5:C5:69:9C:49
            X509v3 Authority Key Identifier:
                keyid:DD:E4:05:A3:B9:E3:2C:BD:19:90:87:59:7D:6F:29:0B:6C:34:1B:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3eQFo7njLL0ZkIdZfW8pC2w0G80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663954/B2FDE4A22A2611EE864DCA484AD9E6FC/3eQFo7njLL0ZkIdZfW8pC2w0G80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:b8:78:a3:63:58:05:c6:60:83:c1:82:e0:59:ce:2d:f7:af:
         75:05:4c:c4:cf:73:82:e4:7e:91:7e:6b:a7:96:68:d5:f1:34:
         78:f9:df:2f:b3:01:62:bf:06:5f:36:c7:8b:36:9c:94:b9:80:
         ce:a4:26:a9:c7:e9:a9:f0:bb:88:4f:64:0b:5a:a0:89:24:d7:
         09:75:2b:62:4c:48:7e:58:d2:bc:08:f4:1a:ba:a1:a2:40:ca:
         52:87:e1:80:f0:06:03:de:ed:ac:ed:82:ce:21:12:f8:ef:5d:
         06:da:34:85:89:4c:42:55:df:61:4c:3f:af:21:18:e7:f1:de:
         b6:4a:fa:24:f3:fc:92:c0:ac:b2:96:09:be:bc:e7:58:bd:72:
         c1:8a:c8:8a:b9:57:a9:c1:f9:dc:1a:56:ab:f6:43:ab:40:89:
         7d:88:bc:f5:ee:11:aa:88:13:d5:34:de:73:6e:77:75:38:20:
         f8:46:52:ac:e9:03:44:27:07:fe:4a:89:22:d6:fe:bb:81:df:
         f3:89:14:45:0e:89:92:96:e0:b2:ff:4e:81:42:e8:64:51:b4:
         7a:45:4e:46:7b:8a:f4:46:95:28:23:61:37:17:b3:38:07:79:
         4a:0e:7e:f9:f6:c4:cf:7c:ce:f3:15:6d:26:54:06:de:96:bc:
         e2:d9:5d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:17:29 2026 by rpki-client