Error: rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.mft
File:                     67Cd90Y6h1y-KGD8kx4943Tij8I.mft (raw, json)
Hash identifier:          jcs05L3wdTeWtPYEADhBbeN12pT2z0EardPKJV4gjSQ=
Subject key identifier:   57:7C:CE:31:62:83:C1:87:F4:AA:2D:14:36:FD:4C:19:6A:88:F1:61
Authority key identifier: EB:B0:9D:F7:46:3A:87:5C:BE:28:60:FC:93:1E:3D:E3:74:E2:8F:C2
Certificate issuer:       /CN=F366CF6BAF/serialNumber=EBB09DF7463A875CBE2860FC931E3DE374E28FC2
Certificate serial:       09
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/67Cd90Y6h1y-KGD8kx4943Tij8I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.mft
Manifest number:          08
Signing time:             Sun 20 Sep 2026 05:55:31 +0000
Manifest this update:     Sun 20 Sep 2026 05:55:31 +0000
Manifest next update:     Tue 22 Sep 2026 05:55:31 +0000
Files and hashes:         1: 67Cd90Y6h1y-KGD8kx4943Tij8I.crl (hash: gZIDLS8tg+CiOTlE/xn7d+TeBzYlb4jQps8f6oftI1o=)
                          2: A58AAD5EB02A11F1BBEF72A8CE1D38B0.roa (hash: IoEQwxvrrVHBpVPR446a/dDQ5kBhfiEUzRqqxCgjeC4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/67Cd90Y6h1y-KGD8kx4943Tij8I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CF6BAF, serialNumber=EBB09DF7463A875CBE2860FC931E3DE374E28FC2
        Validity
            Not Before: Sep 20 05:55:31 2026 GMT
            Not After : Sep 22 05:55:31 2026 GMT
        Subject: CN=6aaf7553-f203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:11:1b:43:8d:00:b4:eb:16:39:31:42:7c:d3:
                    d3:ab:8b:86:24:af:6e:92:e6:b7:aa:e3:72:23:cd:
                    68:68:c6:46:e7:6d:23:3f:bf:72:92:b7:b4:a4:f0:
                    28:b7:a1:e9:2a:35:42:aa:a6:8e:7b:89:eb:17:b1:
                    b0:f7:54:09:33:06:b9:7c:a2:6d:87:e7:48:8a:27:
                    68:9e:6f:cf:8f:f0:42:62:d6:33:66:76:bd:2e:0d:
                    9f:e6:fa:b1:03:d7:87:f2:77:06:dc:bd:d8:bf:68:
                    51:ee:33:cc:45:4c:d2:a8:a9:40:ac:e7:8c:b0:14:
                    b5:87:ad:f0:9d:c8:2b:99:be:df:6b:7c:98:97:7b:
                    12:ea:ad:7f:ad:7c:92:06:ea:bc:c8:71:b0:bd:18:
                    26:b2:bd:d1:1b:76:d7:17:c2:e6:65:e5:4f:8a:a0:
                    49:40:4d:ec:2d:ed:42:fb:e2:f0:63:6a:71:89:c1:
                    d0:4d:e2:d1:cd:b3:d4:71:9b:6d:75:80:0b:0b:ae:
                    bd:62:1d:db:79:32:c2:d2:68:f3:a8:3d:c2:20:c0:
                    a9:1c:22:1c:52:33:66:af:5a:48:2b:0c:75:4b:bc:
                    89:f7:5e:55:5c:9e:b8:46:c3:3c:04:e1:38:ee:af:
                    d4:f7:da:d5:6e:15:8c:0b:47:b7:1b:c9:16:be:e8:
                    13:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:7C:CE:31:62:83:C1:87:F4:AA:2D:14:36:FD:4C:19:6A:88:F1:61
            X509v3 Authority Key Identifier:
                keyid:EB:B0:9D:F7:46:3A:87:5C:BE:28:60:FC:93:1E:3D:E3:74:E2:8F:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/67Cd90Y6h1y-KGD8kx4943Tij8I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CF6B/0807F02EB02911F1B79BBF1CCF1D38B0/67Cd90Y6h1y-KGD8kx4943Tij8I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:0e:01:22:3e:0d:1b:9c:73:3a:3d:87:63:06:d3:61:1c:b8:
         ed:db:99:09:06:e9:13:13:d9:26:07:07:55:22:07:57:31:70:
         57:a1:2a:4a:d3:63:7e:4d:87:9e:30:00:74:f4:aa:16:fc:d1:
         25:fe:23:77:6f:fa:5a:8b:2f:42:ba:2e:6b:f9:93:98:f6:ea:
         13:13:82:7c:c0:04:ce:66:7b:40:df:99:69:29:4c:33:0a:0f:
         2a:77:38:f6:e1:19:56:2e:b2:6f:32:6c:ef:a1:87:f8:7d:b5:
         f8:f3:1f:26:b5:29:7f:d5:07:e8:bc:a5:d0:b1:e1:fb:10:cd:
         fd:5c:0a:82:46:be:f1:a6:24:c8:1b:54:e8:85:07:04:59:61:
         99:e1:b6:cc:54:4e:6e:10:71:14:13:66:a2:69:c5:f2:32:0a:
         08:12:58:85:79:7b:9b:70:e3:56:60:4e:43:c2:69:0d:c6:43:
         74:7c:9f:aa:2d:77:92:a5:f6:d7:ae:af:3a:57:eb:29:23:af:
         f6:48:cf:fe:0f:6e:d2:10:b6:9d:7e:ff:87:7e:76:14:07:fc:
         2d:8c:a2:74:a6:c7:8f:0c:22:ed:b4:fd:44:5e:fb:b9:0d:ee:
         b7:18:b3:34:eb:88:7e:3c:e3:f6:d1:0e:72:0a:e7:c7:a3:dd:
         8e:cc:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:30:17 2026 by rpki-client