Error: rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
File:                     AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft (raw, json)
Hash identifier:          OGdQc6qTuTC7DtLJ4g/juROYThPM7ivGJBheVJW/BkE=
Subject key identifier:   50:6B:8D:B9:52:71:DA:85:A3:A8:5D:D0:0D:47:F3:17:28:1B:DA:E9
Authority key identifier: 01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69
Certificate issuer:       /CN=F367278DAF/serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
Certificate serial:       043D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
Manifest number:          043C
Signing time:             Tue 13 Oct 2026 03:50:42 +0000
Manifest this update:     Tue 13 Oct 2026 03:50:41 +0000
Manifest next update:     Thu 15 Oct 2026 03:50:41 +0000
Files and hashes:         1: AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl (hash: RYoCi/z97TWLWLfbNmv/EnaPU/yc3oBWTNTcwwSEA1M=)
                          2: C450DAB0852B11EEA03755784AD9E6FC.roa (hash: +41zmHN4DGC6b99Vfy5ZDUkMkjOSaYpSIq26rSH1w4E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 03:50:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367278DAF, serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
        Validity
            Not Before: Oct 13 03:50:41 2026 GMT
            Not After : Oct 15 03:50:41 2026 GMT
        Subject: CN=6acdaa92-afa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:de:b1:b9:2c:41:ef:3e:99:4a:79:34:64:8f:
                    14:a7:ad:63:1c:73:c3:d8:15:cf:08:e7:75:15:56:
                    73:3c:9a:a5:96:58:21:50:ae:9e:0b:c1:d9:55:d7:
                    04:f1:f4:f9:34:55:0f:e2:1c:10:c4:f0:6e:95:68:
                    d6:51:f0:7d:08:d5:c3:21:32:8c:98:34:87:79:ef:
                    2b:b7:0e:ec:a7:fd:95:40:b8:6f:4b:4a:70:33:ee:
                    d6:30:0c:18:c7:63:52:f3:9b:00:9a:c4:24:aa:d8:
                    d7:58:64:f0:4e:ab:b3:9d:01:33:7c:de:5a:0d:91:
                    02:9f:67:ad:7b:05:8e:59:e9:40:17:00:f4:ab:11:
                    72:18:77:78:b5:00:e7:41:00:66:7b:09:08:57:dc:
                    a9:97:81:70:70:ac:02:1b:45:a4:94:70:7f:48:b5:
                    e4:64:3b:c6:18:29:fc:79:5b:c8:dd:fc:c2:aa:dc:
                    59:d5:da:f0:41:8f:2c:f1:f3:29:83:49:4f:39:62:
                    48:70:ea:5b:ed:5b:9a:ac:9c:03:d9:29:23:d1:fe:
                    00:b2:37:db:9a:f6:44:78:91:1f:69:94:65:5b:86:
                    bd:00:e9:d2:3e:cd:0d:c7:18:fa:e2:c8:7f:bf:d0:
                    60:8c:a9:fa:a4:89:e3:0e:54:99:81:00:4f:09:e8:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:6B:8D:B9:52:71:DA:85:A3:A8:5D:D0:0D:47:F3:17:28:1B:DA:E9
            X509v3 Authority Key Identifier:
                keyid:01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:31:75:47:37:ea:65:97:04:f5:3d:f2:31:29:83:04:03:
         c3:f0:69:12:73:d3:d0:7f:4d:6e:cd:98:3a:06:11:75:6b:87:
         79:f5:42:1e:2b:96:35:2c:01:b4:7a:99:e6:bc:da:5a:ee:0c:
         78:ba:d8:09:10:c8:5b:55:1d:81:76:16:05:6a:7d:02:5b:31:
         9e:69:a1:62:1a:d3:32:13:c5:ca:02:73:94:2b:39:ef:21:3e:
         fa:ad:b4:c5:42:de:31:4c:d9:3a:05:1b:c7:94:f3:7d:1b:49:
         6a:d6:cc:cd:9a:90:b5:67:89:d3:a9:18:b8:a1:cf:74:f9:05:
         bd:60:9d:1f:3e:84:fa:d7:a3:07:ff:a5:b5:70:b0:b0:28:1c:
         9f:88:fd:89:c6:1c:16:47:b0:4c:32:85:94:9a:dc:ab:1e:8d:
         8a:f2:bf:68:ff:c5:fe:f0:4f:d4:9e:96:9a:82:f1:7c:69:e1:
         e1:9d:50:41:f6:2f:98:08:ed:71:59:73:b5:af:c4:e6:21:88:
         f3:c4:72:bc:21:3a:0b:ad:9e:33:b1:30:47:43:06:55:c8:ea:
         7e:dc:39:e4:4d:5c:c0:e1:fb:20:72:6e:78:60:5c:b3:bb:81:
         d5:8c:40:77:83:cf:59:ab:6e:5a:c6:07:a0:18:76:05:6a:de:
         b4:dd:d8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:40:16 2026 by rpki-client