Error: rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
File:                     nWdNqh0x5rcSPGSUgdEU-pO97R8.mft (raw, json)
Hash identifier:          h1heARJ652CA/MiFEzQHONvzu7HUzEoRCljVp2YjjZw=
Subject key identifier:   62:74:98:6B:25:7C:94:F0:A2:BD:90:EE:A3:57:4E:D4:45:93:DD:89
Authority key identifier: 9D:67:4D:AA:1D:31:E6:B7:12:3C:64:94:81:D1:14:FA:93:BD:ED:1F
Certificate issuer:       /CN=F36A05ABAF/serialNumber=9D674DAA1D31E6B7123C649481D114FA93BDED1F
Certificate serial:       07A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
Manifest number:          07A3
Signing time:             Thu 24 Sep 2026 02:15:55 +0000
Manifest this update:     Thu 24 Sep 2026 02:15:54 +0000
Manifest next update:     Sat 26 Sep 2026 02:15:54 +0000
Files and hashes:         1: nWdNqh0x5rcSPGSUgdEU-pO97R8.crl (hash: f/HCDvSvGYCXmsQj5b7N6AF30LZh/RG/ivddS/3Dy9Y=)
                          2: 4E6BBD02DBF411EBBD1CB334F8AEA228.roa (hash: /m66F8lyHu8eSfVoSMkwDMFHVEqCkE2FHy0314I43Lc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1956 (0x7a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A05ABAF, serialNumber=9D674DAA1D31E6B7123C649481D114FA93BDED1F
        Validity
            Not Before: Sep 24 02:15:54 2026 GMT
            Not After : Sep 26 02:15:54 2026 GMT
        Subject: CN=6ab487db-06b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:21:f2:d9:3d:86:fe:10:ed:c7:45:d5:49:
                    0b:b9:55:92:a3:3f:fd:08:ed:d9:e2:01:63:d0:93:
                    ec:07:78:b5:63:88:51:be:5f:5f:8d:dc:59:19:f7:
                    7f:0a:13:ba:c4:68:f7:70:bf:84:dc:0a:f1:5e:ed:
                    4b:f5:32:39:35:3d:1a:04:ee:71:7b:db:0f:c0:90:
                    f1:a7:b4:cf:80:c7:44:6b:65:56:3f:70:fa:f9:e7:
                    d8:45:ca:69:9c:65:d6:50:80:9c:61:33:fe:f3:82:
                    b7:58:d8:c7:e8:d0:a8:19:b5:8e:7c:ff:e1:b4:cb:
                    b3:4b:cb:00:74:74:aa:b5:8c:85:6b:c8:a6:78:58:
                    07:97:f1:6e:18:fc:f2:dd:62:3e:53:94:27:a3:00:
                    11:3a:24:4f:fa:91:29:8c:ee:af:0c:df:46:0b:2c:
                    6d:51:ce:61:8d:b2:a7:ff:6b:9a:50:ac:e8:3f:69:
                    bd:b1:93:dd:c4:0a:6d:6b:b4:18:1c:72:46:59:ba:
                    11:72:02:84:52:18:e5:45:69:85:36:14:cf:b7:83:
                    cd:83:c4:0d:14:25:30:7d:cd:46:f0:40:05:ec:5b:
                    ea:77:b3:ee:b5:6a:38:71:5b:90:11:2e:d5:12:2d:
                    b7:43:65:af:50:42:a6:0b:07:d7:1e:40:1b:25:7f:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:74:98:6B:25:7C:94:F0:A2:BD:90:EE:A3:57:4E:D4:45:93:DD:89
            X509v3 Authority Key Identifier:
                keyid:9D:67:4D:AA:1D:31:E6:B7:12:3C:64:94:81:D1:14:FA:93:BD:ED:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:c0:9d:97:45:6f:e0:98:66:6f:94:91:75:66:b9:26:53:c8:
         bb:1a:a1:3d:2c:22:f4:8e:16:a2:58:17:e2:2a:54:54:c7:15:
         07:32:ac:b8:87:cd:58:30:7a:ac:f0:4d:4b:c2:77:a0:e5:99:
         21:2c:56:5e:c0:ca:df:ee:4d:5c:b6:2e:b3:53:3f:e2:1d:fb:
         9d:04:fb:48:63:b5:9f:ee:c6:4e:c3:41:65:82:05:f7:89:1c:
         04:2d:ed:b3:ea:13:19:7d:89:2e:cf:d1:ea:f9:5d:b8:9b:88:
         ce:c7:c5:7e:ca:05:69:d0:a0:ba:f0:8f:d5:68:87:7c:f1:d4:
         09:2f:ea:ed:80:9e:83:a2:43:bc:90:64:ab:29:25:d4:fe:14:
         0e:83:26:c3:bb:61:f0:51:7c:e3:3a:e6:8d:57:68:3f:28:07:
         c9:0f:c3:c4:a4:ba:b8:84:a9:b2:53:36:a9:b4:4c:da:61:76:
         b6:a2:16:4f:76:16:06:3b:df:da:86:3c:1c:1e:b3:a2:e4:79:
         91:68:3f:af:9f:df:01:0e:ee:42:f6:56:3f:94:cf:4d:4e:ba:
         a1:4f:26:f4:01:ee:77:c4:ee:58:95:d1:16:a5:af:3e:ff:5e:
         cd:62:f9:45:6e:9b:b5:e5:ae:79:f1:22:25:52:94:5d:11:e6:
         10:7d:2c:6b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB6QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTA1QUJBRjExMC8GA1UEBRMoOUQ2NzREQUExRDMxRTZCNzEyM0M2NDk0ODFEMTE0
RkE5M0JERUQxRjAeFw0yNjA5MjQwMjE1NTRaFw0yNjA5MjYwMjE1NTRaMBgxFjAU
BgNVBAMTDTZhYjQ4N2RiLTA2YjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC00iHy2T2G/hDtx0XVSQu5VZKjP/0I7dniAWPQk+wHeLVjiFG+X1+N3FkZ
938KE7rEaPdwv4TcCvFe7Uv1Mjk1PRoE7nF72w/AkPGntM+Ax0RrZVY/cPr559hF
ymmcZdZQgJxhM/7zgrdY2Mfo0KgZtY58/+G0y7NLywB0dKq1jIVryKZ4WAeX8W4Y
/PLdYj5TlCejABE6JE/6kSmM7q8M30YLLG1RzmGNsqf/a5pQrOg/ab2xk93ECm1r
tBgcckZZuhFyAoRSGOVFaYU2FM+3g82DxA0UJTB9zUbwQAXsW+p3s+61ajhxW5AR
LtUSLbdDZa9QQqYLB9ceQBslfyW7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYnSY
ayV8lPCivZDuo1dO1EWT3YkwHwYDVR0jBBgwFoAUnWdNqh0x5rcSPGSUgdEU+pO9
7R8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEwNUFCLzk4MDE1RjM2REJGMzExRUJBRTZGQUQzM0Y4QUVBMjI4L25XZE5x
aDB4NXJjU1BHU1VnZEVVLXBPOTdSOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25XZE5xaDB4NXJjU1BHU1VnZEVVLXBPOTdSOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTA1QUIvOTgwMTVGMzZEQkYzMTFFQkFFNkZBRDMzRjhB
RUEyMjgvbldkTnFoMHg1cmNTUEdTVWdkRVUtcE85N1I4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBwJ2XRW/gmGZvlJF1ZrkmU8i7GqE9
LCL0jhaiWBfiKlRUxxUHMqy4h81YMHqs8E1Lwneg5ZkhLFZewMrf7k1cti6zUz/i
HfudBPtIY7Wf7sZOw0FlggX3iRwELe2z6hMZfYkuz9Hq+V24m4jOx8V+ygVp0KC6
8I/VaId88dQJL+rtgJ6DokO8kGSrKSXU/hQOgybDu2HwUXzjOuaNV2g/KAfJD8PE
pLq4hKmyUzaptEzaYXa2ohZPdhYGO9/ahjwcHrOi5HmRaD+vn98BDu5C9lY/lM9N
TrqhTyb0Ae53xO5YldEWpa8+/17NYvlFbpu15a558SIlUpRdEeYQfSxr
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:27:47 2026 by rpki-client