Error: rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
File:                     9rZiLcWmAFKfv9HBwPfJi_yJClA.mft (raw, json)
Hash identifier:          G45XJIjRc/7PpAFRchN0o0HClnNzJj7YfeNhLXPTBbM=
Subject key identifier:   1F:3F:B5:A3:5A:FF:CC:90:CF:CD:50:0C:FF:F1:F5:FE:EC:14:C5:20
Authority key identifier: F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50
Certificate issuer:       /CN=F366BE85AF/serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
Certificate serial:       0279
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
Manifest number:          0277
Signing time:             Sat 26 Sep 2026 04:43:33 +0000
Manifest this update:     Sat 26 Sep 2026 04:43:32 +0000
Manifest next update:     Mon 28 Sep 2026 04:43:32 +0000
Files and hashes:         1: 9rZiLcWmAFKfv9HBwPfJi_yJClA.crl (hash: knPdV8fF/vfk+m+yfWKAA413ZxHS81dOKiS6SKMstHs=)
                          2: 0138B876D29211EF9CA02783762E951A.roa (hash: 9Qo2BZpMY9XAgQ8sDtXz6FwY6T65u4EtYgo8ZKdICJA=)
                          3: 48197A8CD29211EF9C4B9D83762E951A.roa (hash: mZ9kRI2tetEX+zkrcuQdcEIANnKP7GMoF4oNcGCNj88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AF, serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
        Validity
            Not Before: Sep 26 04:43:32 2026 GMT
            Not After : Sep 28 04:43:32 2026 GMT
        Subject: CN=6ab74d75-9f52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:cd:2e:52:5b:fc:62:0d:5d:7e:9f:a5:53:
                    2b:42:cd:eb:59:32:25:fe:71:cb:a2:fb:cf:30:9c:
                    17:69:da:f0:f6:ae:2d:50:39:f3:c9:13:3a:a7:d8:
                    54:8f:c7:ca:d5:5d:a9:92:81:12:ef:b8:1c:e8:98:
                    85:45:46:90:cf:26:17:66:6d:39:ca:e4:ae:90:21:
                    3e:43:0e:98:af:0e:a4:be:61:88:9e:44:04:59:ff:
                    db:e6:27:71:1f:9a:75:2a:10:fc:4c:c1:81:d2:ab:
                    0c:92:81:92:c0:5f:bf:42:b3:46:19:e6:c5:3b:b8:
                    af:46:0a:bf:f4:58:ce:66:3c:20:9a:3c:d0:2e:e3:
                    b1:a8:58:cf:fb:11:0e:2a:f5:b8:9f:8a:e0:dc:32:
                    d2:e3:37:81:da:98:79:e5:cc:2c:70:c2:6d:ef:0a:
                    ae:80:8b:80:6b:0d:c3:e7:51:f2:61:a1:5c:86:db:
                    08:3c:7d:0d:1d:5a:e0:12:d0:0c:c1:6d:7a:dd:a4:
                    69:9b:0c:d0:6d:d1:53:a0:60:a2:8c:41:c9:0f:ba:
                    89:58:0c:a9:0e:02:5b:4f:66:c2:a3:a1:80:a0:52:
                    2c:e2:b4:aa:43:3d:74:24:1b:79:3f:4a:69:af:3a:
                    0a:27:2a:ee:c4:a8:49:14:49:71:2a:b9:9a:ff:6d:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3F:B5:A3:5A:FF:CC:90:CF:CD:50:0C:FF:F1:F5:FE:EC:14:C5:20
            X509v3 Authority Key Identifier:
                keyid:F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a4:ea:e2:0f:46:8d:60:ba:ec:87:ba:64:2b:17:7f:5f:28:
         97:ef:48:cc:37:0b:d2:59:fc:b1:49:e3:13:75:e2:61:f8:e8:
         32:f9:83:78:c7:45:3a:eb:c6:ed:f3:04:76:08:89:08:f9:80:
         63:ee:71:ea:2d:65:e0:b4:42:91:a7:ef:2b:22:63:ae:a7:db:
         81:3f:b7:ba:b4:05:48:e7:23:f4:81:41:09:5c:d8:20:c9:5a:
         c6:d1:7f:9a:7f:75:78:0e:ea:84:43:03:e6:34:90:62:4c:d4:
         83:ce:73:b5:e1:c5:1d:31:e1:be:c4:fe:78:a8:4d:ff:1b:2c:
         b5:7d:29:a0:9f:c7:4b:21:2f:f9:34:b3:c6:cf:77:56:90:0b:
         47:19:f4:b4:d5:bf:5c:8b:f5:06:c9:5e:3e:4e:80:3c:83:35:
         87:0f:dc:f4:d4:f2:c2:c3:3c:86:a0:fd:00:9e:c5:27:45:d7:
         d5:8d:c9:b4:4b:33:18:ab:80:13:c7:47:ce:64:e7:c5:8d:e1:
         be:50:6a:52:cc:b1:13:70:b7:18:c0:c0:0f:79:61:dc:77:e1:
         6c:74:4b:fa:95:68:1f:c0:a4:62:ef:25:a1:04:87:ec:6f:c7:
         8a:f8:f9:5b:38:98:d5:e1:b2:22:f8:f0:cc:ec:c8:1e:d3:1b:
         e8:51:58:c9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAnkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkJFODVBRjExMC8GA1UEBRMoRjZCNjYyMkRDNUE2MDA1MjlGQkZEMUMxQzBGN0M5
OEJGQzg5MEE1MDAeFw0yNjA5MjYwNDQzMzJaFw0yNjA5MjgwNDQzMzJaMBgxFjAU
BgNVBAMTDTZhYjc0ZDc1LTlmNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/5s0uUlv8Yg1dfp+lUytCzetZMiX+ccui+88wnBdp2vD2ri1QOfPJEzqn
2FSPx8rVXamSgRLvuBzomIVFRpDPJhdmbTnK5K6QIT5DDpivDqS+YYieRARZ/9vm
J3EfmnUqEPxMwYHSqwySgZLAX79Cs0YZ5sU7uK9GCr/0WM5mPCCaPNAu47GoWM/7
EQ4q9bifiuDcMtLjN4HamHnlzCxwwm3vCq6Ai4BrDcPnUfJhoVyG2wg8fQ0dWuAS
0AzBbXrdpGmbDNBt0VOgYKKMQckPuolYDKkOAltPZsKjoYCgUizitKpDPXQkG3k/
SmmvOgonKu7EqEkUSXEquZr/bT45AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHz+1
o1r/zJDPzVAM//H1/uwUxSAwHwYDVR0jBBgwFoAU9rZiLcWmAFKfv9HBwPfJi/yJ
ClAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZCRTg1LzYzRTk4RDZDRDI5MDExRUY5MkU4QkU3ODc2MkU5NTFBLzlyWmlM
Y1dtQUZLZnY5SEJ3UGZKaV95SkNsQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlyWmlMY1dtQUZLZnY5SEJ3UGZKaV95SkNsQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkJFODUvNjNFOThENkNEMjkwMTFFRjkyRThCRTc4NzYy
RTk1MUEvOXJaaUxjV21BRktmdjlIQndQZkppX3lKQ2xBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSpOriD0aNYLrsh7pkKxd/XyiX70jM
NwvSWfyxSeMTdeJh+Ogy+YN4x0U668bt8wR2CIkI+YBj7nHqLWXgtEKRp+8rImOu
p9uBP7e6tAVI5yP0gUEJXNggyVrG0X+af3V4DuqEQwPmNJBiTNSDznO14cUdMeG+
xP54qE3/Gyy1fSmgn8dLIS/5NLPGz3dWkAtHGfS01b9ci/UGyV4+ToA8gzWHD9z0
1PLCwzyGoP0AnsUnRdfVjcm0SzMYq4ATx0fOZOfFjeG+UGpSzLETcLcYwMAPeWHc
d+FsdEv6lWgfwKRi7yWhBIfsb8eK+PlbOJjV4bIi+PDM7Mge0xvoUVjJ
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:53:53 2026 by rpki-client