Error: rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
File:                     yRNvElsMvwHLUu8Ona1pO53hebE.mft (raw, json)
Hash identifier:          B54pUjhcw26MTm7kE4KxqNtDT8qfzGi0GejKJx1Sd4w=
Subject key identifier:   CF:39:42:FA:24:E6:94:77:81:BE:0D:92:A0:02:12:62:C4:00:55:23
Authority key identifier: C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1
Certificate issuer:       /CN=F369F5CBAF/serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
Certificate serial:       0314
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
Manifest number:          0312
Signing time:             Tue 13 Oct 2026 04:27:01 +0000
Manifest this update:     Tue 13 Oct 2026 04:27:00 +0000
Manifest next update:     Thu 15 Oct 2026 04:27:00 +0000
Files and hashes:         1: yRNvElsMvwHLUu8Ona1pO53hebE.crl (hash: rUshqIwc1+KN8+KB35fhedJd3f6BitVKg7OKbMci8bY=)
                          2: DAA13BB269C211EF87DB5478762E951A.roa (hash: Y1C12JjUCRZB6miS2tftf7tn5FoqQq5MI2tzdSPlKmM=)
                          3: 6902F9DC69DB11EFB4D7CE8D762E951A.roa (hash: bWiMdJKsCZRqY9/D/tP0KK4vV03plvkNcR9SdfYbiCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:26:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F5CBAF, serialNumber=C9136F125B0CBF01CB52EF0E9DAD693B9DE179B1
        Validity
            Not Before: Oct 13 04:27:00 2026 GMT
            Not After : Oct 15 04:27:00 2026 GMT
        Subject: CN=6acdb315-4467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:69:80:a7:15:71:a1:e4:25:da:aa:38:79:
                    d4:b9:a7:2a:3d:7b:cf:cd:b3:5c:36:8b:ca:1e:66:
                    d9:27:c1:d4:61:77:a2:88:95:7d:2c:31:78:0e:9b:
                    dc:61:30:6d:22:2f:bc:d4:d1:88:2d:5c:db:56:e5:
                    c4:bd:b5:d0:3c:9b:0f:2f:cb:3a:9f:83:f4:bf:dc:
                    c4:93:95:3b:b8:3f:e4:41:8f:f3:d4:a0:49:d5:4c:
                    ee:34:04:0d:4d:9b:86:1e:38:8e:c9:6e:24:08:03:
                    90:83:c8:6f:78:6c:a2:78:59:05:96:ef:70:c4:21:
                    96:e0:24:1e:9f:64:ce:47:cc:61:91:46:ad:9c:16:
                    62:a0:98:c0:5a:38:88:15:72:3b:1b:2f:83:b8:ad:
                    a5:b8:00:ef:d4:aa:bf:f5:bc:3f:1b:96:05:72:9b:
                    ad:ec:e2:1f:af:29:fa:a0:e1:f1:39:7c:2a:cd:d7:
                    e6:79:b5:76:f7:ac:b2:90:1a:db:33:f2:7e:51:e4:
                    11:c7:57:fd:b2:1e:4c:15:40:6d:0f:49:59:8d:78:
                    2e:c7:b2:a2:33:fb:9f:ab:58:d0:6f:27:4f:f5:63:
                    1c:96:27:2d:2c:af:1a:57:ae:46:08:45:3a:e7:09:
                    12:a4:86:c6:e6:fd:db:8e:73:46:e0:c0:46:94:f7:
                    f3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:39:42:FA:24:E6:94:77:81:BE:0D:92:A0:02:12:62:C4:00:55:23
            X509v3 Authority Key Identifier:
                keyid:C9:13:6F:12:5B:0C:BF:01:CB:52:EF:0E:9D:AD:69:3B:9D:E1:79:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yRNvElsMvwHLUu8Ona1pO53hebE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F5CB/3063359269C211EF99380D74762E951A/yRNvElsMvwHLUu8Ona1pO53hebE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:cf:0b:f6:11:2b:58:58:c3:e2:dc:03:dc:dc:da:7f:93:52:
         38:80:7e:62:d4:37:60:07:76:df:01:9b:48:de:75:aa:bf:05:
         7e:25:10:bd:38:2f:3e:90:a2:96:8f:61:10:d7:33:5b:85:ba:
         56:0e:3e:e9:81:85:51:ae:68:10:ba:95:d3:e6:07:1a:44:06:
         01:74:97:fa:7f:68:05:d0:a3:ea:a5:cb:77:5c:4b:73:ac:76:
         04:65:0d:91:37:14:f9:08:d0:7a:e0:7a:76:46:bf:93:56:ad:
         f5:50:56:52:1b:e6:0e:e3:dd:27:4e:ea:e3:97:ba:bf:0d:12:
         97:d1:00:84:96:23:56:64:44:d8:a1:38:6d:41:7d:20:d7:db:
         dc:9d:fa:27:64:a4:f4:09:be:25:32:73:9e:30:69:3b:87:7e:
         ad:52:0c:03:c5:de:e4:08:f4:74:71:40:68:36:9f:5c:71:6e:
         e8:33:28:bf:6c:0b:1e:58:b2:70:af:b0:bd:81:1a:9b:45:8c:
         0f:77:5b:ca:33:3f:0c:4c:ca:a8:1b:15:5c:1b:14:b6:41:1a:
         41:96:f0:f5:dc:a5:5f:cc:fa:8c:20:30:7f:a2:a9:42:17:bc:
         f9:59:8e:04:2d:30:d6:6b:61:ce:49:1c:f0:9f:9d:1c:f1:e5:
         bf:60:8c:67
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAxQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUY1Q0JBRjExMC8GA1UEBRMoQzkxMzZGMTI1QjBDQkYwMUNCNTJFRjBFOURBRDY5
M0I5REUxNzlCMTAeFw0yNjEwMTMwNDI3MDBaFw0yNjEwMTUwNDI3MDBaMBgxFjAU
BgNVBAMTDTZhY2RiMzE1LTQ0NjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCenmmApxVxoeQl2qo4edS5pyo9e8/Ns1w2i8oeZtknwdRhd6KIlX0sMXgO
m9xhMG0iL7zU0YgtXNtW5cS9tdA8mw8vyzqfg/S/3MSTlTu4P+RBj/PUoEnVTO40
BA1Nm4YeOI7JbiQIA5CDyG94bKJ4WQWW73DEIZbgJB6fZM5HzGGRRq2cFmKgmMBa
OIgVcjsbL4O4raW4AO/Uqr/1vD8blgVym63s4h+vKfqg4fE5fCrN1+Z5tXb3rLKQ
Gtsz8n5R5BHHV/2yHkwVQG0PSVmNeC7HsqIz+5+rWNBvJ0/1YxyWJy0srxpXrkYI
RTrnCRKkhsbm/duOc0bgwEaU9/OpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzzlC
+iTmlHeBvg2SoAISYsQAVSMwHwYDVR0jBBgwFoAUyRNvElsMvwHLUu8Ona1pO53h
ebEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlGNUNCLzMwNjMzNTkyNjlDMjExRUY5OTM4MEQ3NDc2MkU5NTFBL3lSTnZF
bHNNdndITFV1OE9uYTFwTzUzaGViRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3lSTnZFbHNNdndITFV1OE9uYTFwTzUzaGViRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUY1Q0IvMzA2MzM1OTI2OUMyMTFFRjk5MzgwRDc0NzYy
RTk1MUEveVJOdkVsc012d0hMVXU4T25hMXBPNTNoZWJFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpzwv2EStYWMPi3APc3Np/k1I4gH5i
1DdgB3bfAZtI3nWqvwV+JRC9OC8+kKKWj2EQ1zNbhbpWDj7pgYVRrmgQupXT5gca
RAYBdJf6f2gF0KPqpct3XEtzrHYEZQ2RNxT5CNB64Hp2Rr+TVq31UFZSG+YO490n
Turjl7q/DRKX0QCEliNWZETYoThtQX0g19vcnfonZKT0Cb4lMnOeMGk7h36tUgwD
xd7kCPR0cUBoNp9ccW7oMyi/bAseWLJwr7C9gRqbRYwPd1vKMz8MTMqoGxVcGxS2
QRpBlvD13KVfzPqMIDB/oqlCF7z5WY4ELTDWa2HOSRzwn50c8eW/YIxn
-----END CERTIFICATE-----
Generated at Tue Oct 13 19:33:26 2026 by rpki-client