Error: rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
File:                     bBegDOel7ptwctoLjNYoITB00AE.mft (raw, json)
Hash identifier:          39019DvZpdBbtWtyUWqbVgLA1PGivWyEX8nwd1vjoQ0=
Subject key identifier:   AC:F7:66:62:69:2B:50:A1:C9:61:28:6F:6D:0A:81:3F:8D:EA:00:6E
Authority key identifier: 6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01
Certificate issuer:       /CN=F367D0C5AR/serialNumber=6C17A00CE7A5EE9B7072DA0B8CD628213074D001
Certificate serial:       055E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
Manifest number:          055B
Signing time:             Fri 25 Sep 2026 03:13:39 +0000
Manifest this update:     Fri 25 Sep 2026 03:13:38 +0000
Manifest next update:     Sun 27 Sep 2026 03:13:38 +0000
Files and hashes:         1: bBegDOel7ptwctoLjNYoITB00AE.crl (hash: qVf+XsrMIYQDmfYT/7T7sWuTBerP6JZMSQYir+CtGLg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
                          rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:13:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1374 (0x55e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D0C5AR, serialNumber=6C17A00CE7A5EE9B7072DA0B8CD628213074D001
        Validity
            Not Before: Sep 25 03:13:38 2026 GMT
            Not After : Sep 27 03:13:38 2026 GMT
        Subject: CN=6ab5e6e2-4817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:94:ae:fe:91:55:0d:04:33:34:7a:0e:b7:8e:
                    ff:90:f9:ab:ec:c4:ff:0d:45:b6:cc:4c:73:bf:63:
                    68:93:2b:39:b0:6a:72:21:b6:83:8c:e7:38:60:eb:
                    72:3d:9f:f4:8f:bb:6d:40:34:9e:0e:ac:31:8d:c4:
                    90:b6:de:b6:6f:94:2d:28:3c:54:d1:fc:be:8d:57:
                    76:e4:07:23:2f:55:62:62:11:45:fd:41:7b:d4:44:
                    08:bb:99:a5:ce:6a:5a:4d:6e:0d:99:46:c0:a2:8a:
                    77:cf:94:36:b4:79:84:0f:5c:ba:d9:a0:f8:a8:bd:
                    ae:28:fb:cb:bf:99:db:4a:64:6d:d8:55:a4:9d:b3:
                    17:49:2a:59:33:e1:66:dd:5a:13:8d:5b:d4:93:65:
                    bd:5c:ba:af:e0:8b:0d:a5:3e:e1:eb:37:fd:35:21:
                    20:dc:46:1d:fa:6b:9a:8c:91:da:56:ae:d7:15:84:
                    21:5b:62:94:57:46:11:bb:47:c7:3f:6c:3f:51:ac:
                    97:e9:dc:44:21:44:43:92:01:e9:fb:11:99:22:e3:
                    3b:3e:2d:14:b3:ac:e1:a5:79:f7:cb:20:a7:96:72:
                    fa:e0:bd:ca:47:86:1c:39:6e:f2:dd:7a:69:14:29:
                    f7:92:ab:e4:f7:47:7a:96:c6:96:93:9e:f2:0a:20:
                    6d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F7:66:62:69:2B:50:A1:C9:61:28:6F:6D:0A:81:3F:8D:EA:00:6E
            X509v3 Authority Key Identifier:
                keyid:6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:13:a2:1f:bc:da:49:6a:cc:a5:2f:1b:08:5e:a8:bc:8d:39:
         c9:94:85:39:e2:1b:d4:6d:39:53:de:37:40:55:dc:fb:87:58:
         2d:52:17:31:1a:9d:0d:72:63:fb:f3:71:70:11:5a:14:ea:96:
         e5:5c:f7:fa:a8:d7:ed:e7:24:db:9e:1a:5f:57:a5:8d:32:37:
         35:b3:66:a3:6c:d5:6c:85:41:c6:6e:2b:9f:f8:a0:7b:ca:7d:
         86:85:8d:93:37:25:8f:46:26:a6:c6:31:5b:67:22:d4:8e:fd:
         cb:11:b5:31:a9:84:df:88:97:f1:7d:d0:88:93:75:f4:7a:57:
         07:27:4b:88:e0:e9:42:cb:f3:26:2b:c7:df:dd:55:aa:0f:92:
         2e:85:ae:f0:0d:cd:15:a8:2a:55:5f:58:f6:08:e2:64:4c:54:
         a3:88:1e:52:81:cd:a1:97:98:4e:ae:8d:e6:92:27:4d:1a:80:
         f5:13:70:22:2e:f7:26:b1:94:69:ec:ea:f0:41:27:d6:f6:13:
         fe:d2:a0:35:68:d5:fe:a8:e0:35:d7:c7:e7:82:98:ff:61:5b:
         48:cc:57:ac:04:21:c6:23:78:8f:6a:04:c6:dc:33:3a:7a:f9:
         ed:95:a1:13:32:ec:4b:11:3b:f4:e1:1c:2e:ee:9c:00:53:81:
         f0:d8:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:05:14 2026 by rpki-client