Error: rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
File:                     dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft (raw, json)
Hash identifier:          NHSt/noAQRh9N4NXPx24Ct1AklxCEqOW7PNEAhbrWUI=
Subject key identifier:   49:23:A0:45:C9:7B:EC:B8:84:6F:60:52:C6:28:2B:2E:54:24:8D:9A
Authority key identifier: 74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0
Certificate issuer:       /CN=F3676134AF/serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
Certificate serial:       01E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
Manifest number:          01DB
Signing time:             Fri 25 Sep 2026 04:58:08 +0000
Manifest this update:     Fri 25 Sep 2026 04:58:07 +0000
Manifest next update:     Sun 27 Sep 2026 04:58:07 +0000
Files and hashes:         1: dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl (hash: F1b+D8auM+IxBG86nv3EP7P+COWrlKRN0fvIBW6tx9A=)
                          2: AEC64E0AB80511F0971756F5DAE4EC9C.roa (hash: ykyErqJ9jMFlHt469iZFdc3zrZTDRfcAk+IWnW9xqMk=)
                          3: F330454475E911F1912FD5ACCE1D38B0.roa (hash: qmUbYot1nqsMbckCpWdEzy35tfteUOIURjfNCFIfS94=)
                          4: CD1104AC75DA11F1BC9990D3CE1D38B0.roa (hash: Zg5RWEgoA8Ow+axhg3Kss4mDZWo7l8RiP49z0j1eexs=)
                          5: 836F78B075DA11F1A1AB81D1CE1D38B0.roa (hash: C/oJZAkfwxQNcxTSbWLPjl5Q16hiylcczMDjFaQmjNE=)
                          6: EE670342B42211F0993F858CDAE4EC9C.roa (hash: iVTP+qjlG2fos49aJPA63qSgM1CByci4d+Gh4O+20Ng=)
                          7: FED45DEE75EA11F18B33C1B3CE1D38B0.roa (hash: nKWlg2D4RIZBs3lHbtX+wqy5k+dvX6IDFHmk81XF7LE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 486 (0x1e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676134AF, serialNumber=74B03B8FD8F53BEF4887B78698F9ECAB1B1F69B0
        Validity
            Not Before: Sep 25 04:58:07 2026 GMT
            Not After : Sep 27 04:58:07 2026 GMT
        Subject: CN=6ab5ff5f-7075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:1c:71:00:60:c4:33:ac:62:3a:b3:10:52:
                    b9:f7:28:21:fe:36:db:da:19:8a:72:7c:bf:fb:1c:
                    21:eb:62:48:12:f0:e7:cf:bf:43:f1:42:1a:42:20:
                    4c:72:25:0e:e2:c2:ce:5b:5e:f2:20:6e:18:d5:a2:
                    09:b6:5d:da:08:a7:14:41:58:02:93:4f:0b:8d:2a:
                    e8:86:20:70:a1:67:1c:a6:da:95:d1:0d:e0:91:c5:
                    91:74:af:2a:d7:fe:4c:73:aa:48:fe:2b:dd:d9:3f:
                    39:8a:74:50:23:3b:7e:c5:af:dc:67:df:fd:3f:77:
                    3f:99:3b:c7:e7:d9:36:67:34:19:97:cb:70:95:52:
                    c5:29:83:ef:ab:1b:83:3f:a0:57:0f:95:c8:6e:63:
                    e9:fa:fe:4b:e7:f7:87:65:67:87:4d:49:fd:9b:f4:
                    d7:56:4d:eb:f2:42:e2:5c:60:f9:99:0e:e3:b6:d1:
                    46:07:9d:4e:10:36:4c:98:ec:21:52:25:b8:98:1e:
                    b9:2d:4a:22:d8:98:ea:82:5e:d0:f7:89:44:b9:90:
                    8c:34:6a:4e:0f:25:df:b1:4f:87:49:d7:64:8a:cf:
                    0a:ac:aa:09:15:db:b3:f4:31:cd:15:2f:68:b8:79:
                    83:40:5e:8c:e6:14:80:1c:9b:8b:1b:25:0a:b6:5e:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:23:A0:45:C9:7B:EC:B8:84:6F:60:52:C6:28:2B:2E:54:24:8D:9A
            X509v3 Authority Key Identifier:
                keyid:74:B0:3B:8F:D8:F5:3B:EF:48:87:B7:86:98:F9:EC:AB:1B:1F:69:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dLA7j9j1O-9Ih7eGmPnsqxsfabA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676134/3362C1AA567E11F0B014F9DEDAE4EC9C/dLA7j9j1O-9Ih7eGmPnsqxsfabA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:49:af:53:b2:69:48:db:63:75:85:90:99:8c:40:18:99:34:
         13:88:2e:f4:53:26:c1:e4:51:58:23:31:1c:ad:16:a8:a4:46:
         34:d7:51:b4:11:31:4f:61:d4:53:72:89:6a:a7:c1:70:f3:de:
         97:c8:40:57:53:d7:c1:10:98:fe:c8:84:6a:17:11:fc:0c:3f:
         4d:fa:f6:6c:0c:94:1a:00:10:f6:56:71:a1:e4:c6:5a:cd:0f:
         81:97:97:e2:0f:ec:ae:f7:e1:39:fd:a6:b4:9f:36:8d:47:2e:
         b4:22:6e:2c:01:06:65:4a:82:db:ef:0d:77:33:83:3e:85:38:
         58:fd:a6:ca:61:85:71:16:97:b9:38:57:a5:2c:da:69:e6:aa:
         66:07:c7:3e:ee:49:d2:be:fd:a7:c7:79:1c:b2:89:99:24:53:
         42:90:5f:5d:d8:49:70:45:4b:02:74:25:cf:60:ce:32:12:a7:
         67:2e:c1:63:57:0a:28:6c:52:d6:d9:1b:52:c6:83:e5:df:26:
         88:06:ca:b8:aa:40:88:1c:7d:90:29:13:e1:f8:2d:57:f1:af:
         8d:6e:49:d4:39:fe:6b:16:56:76:df:5a:e2:73:90:1c:52:7a:
         32:bd:5b:74:c4:f1:55:5f:fe:2d:18:54:21:65:d6:63:17:b2:
         1e:75:ee:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:59:57 2026 by rpki-client