Error: rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft
File:                     TuWp-sfUawsWJ8ZO5wq929LVXn0.mft (raw, json)
Hash identifier:          L2W2+d0CwLjrSOqb1wiLhgnUDsKdoFRrWhvVzHvzMu0=
Subject key identifier:   FA:91:72:D9:07:51:BF:8B:9E:05:DD:1E:A2:D5:BF:93:19:F1:17:AA
Authority key identifier: 4E:E5:A9:FA:C7:D4:6B:0B:16:27:C6:4E:E7:0A:BD:DB:D2:D5:5E:7D
Certificate issuer:       /CN=F366EFDFAR/serialNumber=4EE5A9FAC7D46B0B1627C64EE70ABDDBD2D55E7D
Certificate serial:       07D7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TuWp-sfUawsWJ8ZO5wq929LVXn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft
Manifest number:          07D6
Signing time:             Sat 10 Oct 2026 02:11:47 +0000
Manifest this update:     Sat 10 Oct 2026 02:11:46 +0000
Manifest next update:     Mon 12 Oct 2026 02:11:46 +0000
Files and hashes:         1: TuWp-sfUawsWJ8ZO5wq929LVXn0.crl (hash: MrEeS772zbVEVoP9q9wuKsVRGgfo2fHuisv1h41AbXs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft
                          rsync://rpki.afrinic.net/repository/arin/TuWp-sfUawsWJ8ZO5wq929LVXn0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2007 (0x7d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366EFDFAR, serialNumber=4EE5A9FAC7D46B0B1627C64EE70ABDDBD2D55E7D
        Validity
            Not Before: Oct 10 02:11:46 2026 GMT
            Not After : Oct 12 02:11:46 2026 GMT
        Subject: CN=6ac99ee3-80b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d4:e3:c3:83:fd:e3:97:4b:10:74:f5:72:5b:
                    8d:fd:ab:41:fe:57:43:66:88:73:1d:0c:99:22:cb:
                    7d:8f:67:4f:0d:26:07:64:e9:aa:47:52:1d:ff:97:
                    2c:e8:1d:c7:2c:eb:99:63:a3:93:be:38:21:f4:2c:
                    a1:df:8a:3a:71:3b:27:36:7d:ec:3d:6a:1c:7c:46:
                    c3:17:fb:de:4a:e0:95:17:2c:91:79:ea:fe:42:49:
                    5a:02:7a:92:70:30:cd:0c:39:d9:5e:cd:93:62:99:
                    35:54:d5:5e:ff:59:6b:8f:1d:4d:a4:74:1d:22:10:
                    ed:95:a4:ae:ae:20:93:e3:e5:ea:79:26:c8:f2:17:
                    fc:c6:0f:d2:e6:14:ea:c6:fd:21:a9:28:21:09:d9:
                    d8:f8:7a:f3:e1:34:6e:cd:8a:b1:d3:bc:96:38:0c:
                    88:85:ef:64:a9:c9:f8:fc:76:83:c0:66:6f:e4:60:
                    cd:b9:82:f0:bc:16:b3:b7:99:07:6b:fc:4d:1a:1b:
                    96:b3:23:15:20:f7:28:10:f7:70:9f:8f:81:85:9e:
                    6c:ff:d3:64:27:71:1f:ff:ce:11:ca:89:69:1f:f0:
                    48:1f:08:80:5d:3b:94:a6:e7:a1:5d:cc:78:e4:41:
                    98:2d:1a:b0:e8:c1:a5:69:08:bc:e8:f3:6c:f6:70:
                    db:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:91:72:D9:07:51:BF:8B:9E:05:DD:1E:A2:D5:BF:93:19:F1:17:AA
            X509v3 Authority Key Identifier:
                keyid:4E:E5:A9:FA:C7:D4:6B:0B:16:27:C6:4E:E7:0A:BD:DB:D2:D5:5E:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TuWp-sfUawsWJ8ZO5wq929LVXn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366EFDF/B8FBFDC6C3A811EBB226A912F8AEA228/TuWp-sfUawsWJ8ZO5wq929LVXn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:96:cb:56:ef:6b:b8:27:05:f7:f3:19:06:1f:c2:6a:1b:99:
         14:be:f5:f8:8a:b5:4f:d0:83:47:35:2f:70:b2:13:ee:2b:dd:
         f2:16:ed:2a:58:4a:22:d0:e8:db:3f:5e:9b:ec:e0:da:f6:d6:
         f9:bf:31:6f:1a:f3:5c:67:3f:e7:06:a0:d4:ed:72:6f:e2:f2:
         fb:0c:f9:b7:3f:78:3a:ad:67:3f:e7:fe:88:57:c1:15:d4:04:
         d5:ca:1b:75:ff:4c:41:90:de:91:d9:71:88:e1:13:fc:61:2b:
         b8:3d:0a:98:07:32:14:d6:b8:4a:9f:98:3a:b3:93:20:f5:1f:
         4d:49:0f:c3:3e:62:c0:74:b5:6b:5b:b3:2d:fd:5a:e5:14:26:
         1c:3c:b0:70:46:4f:43:65:83:04:4e:fe:4e:38:f1:95:bf:65:
         49:e9:3b:03:66:66:05:b6:7f:c6:9a:7d:8d:66:88:07:46:91:
         ac:c9:d0:56:cf:c2:80:e2:e7:06:8f:16:52:36:35:6c:f6:17:
         10:e9:2b:ac:36:92:26:36:ee:b2:73:8c:7e:f6:32:ab:8d:2d:
         5a:13:a1:05:64:b1:b9:5f:ef:55:b5:cc:bf:a9:fe:4d:f2:bd:
         ae:ba:43:c0:24:18:31:ad:71:ef:fa:62:ff:c8:b0:2e:5d:fe:
         13:6e:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:23:12 2026 by rpki-client