Error: rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.mft
File:                     NX5-7x0xpb46-ORe8b6kcSLM7rI.mft (raw, json)
Hash identifier:          LbxAzKESjBuKcR1KqR5AZc8wiG0CjY8+V2yVKZUMgHM=
Subject key identifier:   FE:10:E6:02:9E:B2:69:63:A0:CD:6F:CF:C5:B3:CE:A3:C5:8B:03:86
Authority key identifier: 35:7E:7E:EF:1D:31:A5:BE:3A:F8:E4:5E:F1:BE:A4:71:22:CC:EE:B2
Certificate issuer:       /CN=F3677E0AAF/serialNumber=357E7EEF1D31A5BE3AF8E45EF1BEA47122CCEEB2
Certificate serial:       4E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NX5-7x0xpb46-ORe8b6kcSLM7rI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.mft
Manifest number:          4B
Signing time:             Mon 21 Sep 2026 05:44:43 +0000
Manifest this update:     Mon 21 Sep 2026 05:44:42 +0000
Manifest next update:     Wed 23 Sep 2026 05:44:42 +0000
Files and hashes:         1: NX5-7x0xpb46-ORe8b6kcSLM7rI.crl (hash: +uILSthd5Nmi0rJlK1HP3STZoWZBtYgYMv3vJ4KkEoo=)
                          2: FFEA21FE7F8211F19C66F4B9CE1D38B0.roa (hash: T0+aQCB1jE+0pKJ961D3GcJJnHxca1wiIgEMw2YqtwA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NX5-7x0xpb46-ORe8b6kcSLM7rI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3677E0AAF, serialNumber=357E7EEF1D31A5BE3AF8E45EF1BEA47122CCEEB2
        Validity
            Not Before: Sep 21 05:44:42 2026 GMT
            Not After : Sep 23 05:44:42 2026 GMT
        Subject: CN=6ab0c44b-1d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8c:f6:18:2c:d8:b7:83:aa:95:22:20:75:05:
                    7f:d6:05:77:bf:45:2d:81:bb:a4:3e:40:d5:35:0c:
                    3d:eb:14:87:c0:2b:f6:93:f2:82:e9:36:24:2d:35:
                    3f:a4:7b:20:b4:59:5c:7f:18:54:10:8c:b0:0e:66:
                    02:3d:dd:6e:2f:70:de:73:66:a4:b6:da:ed:86:f1:
                    38:70:1f:7e:5b:8c:8b:c8:ab:83:26:65:84:dc:5c:
                    bd:a7:19:f2:5d:2f:cd:3c:11:a3:00:f5:7c:18:ec:
                    0f:d2:b4:e3:89:86:2f:02:e8:1e:0a:4b:08:00:26:
                    c3:c1:49:02:d5:d7:60:77:e9:31:1a:61:08:ad:90:
                    b4:a1:f8:73:98:a3:73:64:68:2d:ce:13:09:2a:40:
                    7b:5c:a3:cf:6f:ea:fe:07:16:1e:31:d6:3d:ce:a6:
                    4e:9c:a9:55:b6:e2:dc:e8:fc:64:48:c0:2f:f3:a0:
                    40:31:d1:29:71:18:bb:2a:7e:85:67:db:13:e5:2e:
                    53:5d:6b:4b:f9:db:ea:d8:f9:51:62:23:b4:36:c5:
                    ec:7a:6c:f8:e5:0a:e8:d1:5e:ca:34:ac:75:74:c3:
                    ee:a1:48:de:72:0d:36:88:59:67:92:63:6b:bc:ed:
                    6d:40:16:14:01:4b:b0:a9:b8:3e:f9:5e:4e:06:58:
                    f8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:10:E6:02:9E:B2:69:63:A0:CD:6F:CF:C5:B3:CE:A3:C5:8B:03:86
            X509v3 Authority Key Identifier:
                keyid:35:7E:7E:EF:1D:31:A5:BE:3A:F8:E4:5E:F1:BE:A4:71:22:CC:EE:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NX5-7x0xpb46-ORe8b6kcSLM7rI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3677E0A/026311D27F8011F1994283A9CE1D38B0/NX5-7x0xpb46-ORe8b6kcSLM7rI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:68:ea:1c:72:98:a4:7a:bf:69:cc:af:39:69:ac:c8:e6:16:
         6d:78:ed:58:1d:bd:52:36:b1:91:d9:8c:20:1c:9d:7c:77:17:
         73:07:9d:db:6a:0c:d8:7c:fa:40:b3:2e:24:f1:ca:f1:0f:07:
         9e:36:08:8d:02:e2:0d:d1:b9:1d:f9:ff:04:c8:b8:56:1e:89:
         c8:fe:a8:68:2a:92:6d:92:b1:7d:03:bc:a3:47:2f:d2:2b:d4:
         bf:5c:2d:d2:b0:70:d8:65:1b:95:80:a0:ac:f8:bf:5f:25:95:
         ca:f4:99:e1:40:4f:65:e6:4e:04:be:f3:76:28:f8:f0:ec:26:
         c6:63:57:cb:16:55:a3:ef:be:fb:f4:ba:75:03:ad:5d:f2:47:
         f6:0f:66:cc:72:73:09:3c:b4:14:89:f3:c6:a7:2a:62:4b:e2:
         1d:33:73:d8:a6:91:3f:87:c5:67:ae:6e:71:52:11:38:b8:55:
         94:25:05:ea:cd:4f:2e:f1:dd:1e:a3:c4:c6:c7:0e:35:da:76:
         ec:dd:8e:42:c7:fd:8f:93:f5:4f:35:e5:04:65:ef:19:74:af:
         b0:8f:19:dc:c4:1b:39:85:7c:0f:35:a3:44:85:e2:3d:7a:54:
         35:86:2e:fc:a4:68:21:07:18:a0:f7:6f:e7:c5:89:2d:01:95:
         1f:fe:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:21:01 2026 by rpki-client