Error: rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
File:                     0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft (raw, json)
Hash identifier:          SoEOdealj50y1iuxidUWlPoNfDeWxF5XAyFD30KoV14=
Subject key identifier:   D8:ED:07:AB:E6:CC:F8:94:14:D1:A4:8C:C6:42:91:DA:C3:02:B7:D7
Authority key identifier: D1:54:AB:C2:A3:1E:0F:D6:03:D7:C7:05:CC:0F:95:DD:1A:9C:E2:08
Certificate issuer:       /CN=F36862C7AF/serialNumber=D154ABC2A31E0FD603D7C705CC0F95DD1A9CE208
Certificate serial:       079D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
Manifest number:          0799
Signing time:             Fri 09 Oct 2026 02:17:18 +0000
Manifest this update:     Fri 09 Oct 2026 02:17:17 +0000
Manifest next update:     Sun 11 Oct 2026 02:17:17 +0000
Files and hashes:         1: 0VSrwqMeD9YD18cFzA-V3Rqc4gg.crl (hash: Z8r0+Uhe1Xf9Aq6w/aeoS77MZrGXTTOU0k9II/Fhth8=)
                          2: 1F32A9483B1211F0978FEFE8DAE4EC9C.roa (hash: nYabbDnuVLUJQTyxU+UCVZek8zipwMdBD3Ty9i13z2c=)
                          3: 9CCFAF803B0E11F086191DD3DAE4EC9C.roa (hash: LpuWWsVevaLsONGBPOWroSuUfwidPT8wZ+6qZPVLZQI=)
                          4: 3776CF063B0E11F0A24337D1DAE4EC9C.roa (hash: vrxsc5lhGcJj9xua4OQQhc/cmd7AwV6Wu5DNrt8ZzzA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 02:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1949 (0x79d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36862C7AF, serialNumber=D154ABC2A31E0FD603D7C705CC0F95DD1A9CE208
        Validity
            Not Before: Oct  9 02:17:17 2026 GMT
            Not After : Oct 11 02:17:17 2026 GMT
        Subject: CN=6ac84ead-c43c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:db:f9:47:a3:4a:66:28:5d:3f:0d:2e:fd:b1:
                    34:6c:f7:c4:95:6b:b3:22:5e:92:fc:8b:d1:26:62:
                    4d:75:e7:49:9b:fe:6d:a4:f8:48:84:07:fa:29:63:
                    8b:79:1c:fe:a0:22:2a:fc:ea:14:0a:49:9e:d5:a4:
                    36:76:e0:a9:4d:4e:c2:f7:9a:65:47:7a:d0:fb:b7:
                    d5:94:f7:c2:09:32:9d:da:4e:8c:e6:d3:c7:90:e8:
                    fb:bd:2a:d4:fb:ff:a6:bd:92:db:af:ef:e2:0d:f0:
                    e7:25:42:d2:ac:bd:4a:59:68:fc:04:7d:24:29:d1:
                    a1:cc:f5:18:75:d7:d7:4e:42:4e:31:99:63:e3:d5:
                    2b:30:c2:c0:b7:cd:7b:b9:d7:eb:30:1a:2c:4c:6c:
                    5c:4a:1c:4c:49:05:1f:d1:05:bd:da:2a:c3:39:88:
                    40:c3:95:b8:05:47:04:65:fd:1f:30:94:2c:6f:4d:
                    a4:7a:b6:a1:12:bc:5f:95:01:d1:18:e1:2d:33:1f:
                    ea:48:55:1a:d4:76:02:39:d7:00:d0:94:88:08:4b:
                    10:9d:5d:6b:86:96:e3:51:3b:36:56:ee:81:8c:86:
                    be:29:4e:c7:c2:c4:4f:28:3a:cd:1c:6d:4b:14:f4:
                    bb:ed:f4:4d:f2:b5:51:c2:2e:47:7d:90:12:e6:ca:
                    e9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:ED:07:AB:E6:CC:F8:94:14:D1:A4:8C:C6:42:91:DA:C3:02:B7:D7
            X509v3 Authority Key Identifier:
                keyid:D1:54:AB:C2:A3:1E:0F:D6:03:D7:C7:05:CC:0F:95:DD:1A:9C:E2:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0VSrwqMeD9YD18cFzA-V3Rqc4gg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36862C7/51F2BC40F0F411EBB1823F30D8A014CE/0VSrwqMeD9YD18cFzA-V3Rqc4gg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:3c:c8:07:d7:7a:68:04:87:0a:0e:c6:45:37:60:7c:d0:
         2a:f3:b1:ac:62:a3:ed:51:6e:4e:3f:17:76:eb:7b:99:25:d7:
         43:25:e5:12:ed:80:fb:78:e9:23:cd:ca:74:ff:d7:f5:a8:fe:
         94:de:80:a1:51:1f:6b:47:00:cb:2a:b3:7a:8d:3e:56:22:19:
         fe:d1:69:c9:90:9e:c4:7a:5b:a8:b4:ee:36:6a:68:10:04:94:
         cc:09:96:b0:dd:e7:b3:3a:ed:d4:96:59:f0:a1:69:06:2b:f5:
         63:85:8c:a4:fc:9c:a4:af:69:bd:28:da:d7:30:67:8b:1c:9b:
         23:7a:da:74:1c:78:9b:0d:3b:f4:39:86:ef:ee:53:1d:65:6d:
         3c:4e:ef:b3:52:12:3f:19:97:ce:48:df:02:37:b6:f0:40:6f:
         12:cd:d4:82:0b:00:c5:dc:ac:33:2e:ab:20:23:7d:ff:1a:b8:
         5f:23:e6:90:06:5d:ad:11:36:83:31:e5:56:a0:01:d2:8d:17:
         0d:90:b8:a3:b8:f6:37:49:c0:10:13:76:52:43:95:2c:ea:81:
         dc:36:40:d3:89:bd:d5:40:71:7b:9e:18:48:0a:93:f6:b4:a4:
         f7:ce:8f:65:c5:6a:79:06:b3:f1:b2:af:2d:2d:db:e5:6e:c8:
         19:7d:39:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 01:41:08 2026 by rpki-client