Error: rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
File:                     P2d_OhisqubJf4H5muh5RlTgQQs.mft (raw, json)
Hash identifier:          XWBBxlryOopH4G0qhcL2IbKeaDJPbF0/fUisQkZ4hdg=
Subject key identifier:   CC:F7:0B:B1:30:E5:08:73:E6:68:B8:CE:83:A2:45:27:58:2B:BB:45
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       0541
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
Manifest number:          050D
Signing time:             Tue 22 Sep 2026 03:31:48 +0000
Manifest this update:     Tue 22 Sep 2026 03:31:47 +0000
Manifest next update:     Thu 24 Sep 2026 03:31:47 +0000
Files and hashes:         1: P2d_OhisqubJf4H5muh5RlTgQQs.crl (hash: qkcamSySADMDsQc4xtT/jPmeISVeBpb8gJkzHdcRhF4=)
                          2: 93BEB9727B6F11EF81325783762E951A.roa (hash: XGjuCE7tXlwix5GuCmklZ88dhoOPc6iO4b/dd0dOcD8=)
                          3: B598428C7BD011EF9348E170762E951A.roa (hash: u8koei9o52T1/oDA6+Vc7alnKCHHr6e9qCPf+FyEca0=)
                          4: 93134C74962011EFAAA0A9B4762E951A.roa (hash: HWJdyAQD0gPKecvYAkvhvhhvqGUM+2Gwedr+o6pd7fI=)
                          5: 1A4F9134922511EF83368F9D762E951A.roa (hash: anCBfgZHtzniM7dP4vfF3lMI+1CdF2Ions9Nt8kdpN4=)
                          6: 0EED0EBABAA811EFB3FB887B762E951A.roa (hash: cWJpYejV3y01oVA8qnDQSW9CTviS9mBH5RQPU8qnsl4=)
                          7: 7B0EB180561611EF957AD24F762E951A.roa (hash: YLCMHlWP1EnEGexbMo2ag/60lLWvA9wmZJiet6AJRXI=)
                          8: 837E97941C2511EEAA26D4594AD9E6FC.roa (hash: DmTBedmJtAZllDRXX8QYacyLifphZi9/9tYqy0qa/Z8=)
                          9: E1F54F2E5FF511EFAE767E52762E951A.roa (hash: ZHyP78AP+q/JJtHtUW/HC4m2P265a+lBVZzkus9pUMQ=)
                          10: 9B6E721AE3E411EFB934FF78762E951A.roa (hash: gBgcjfT/qrh95VoyMQ5KZbvh0uc6ei9HAXRDsRUsII4=)
                          11: 77525E5A1C2611EE8D4AC85C4AD9E6FC.roa (hash: DpMrNiTjRZWKu4SpXJlLIPkKtzQPA3MM+9+EToM9kyg=)
                          12: 9EECB24E1C2611EEA7AD515D4AD9E6FC.roa (hash: 9W8fC1Pv3M9CQpx7wz4y4cmIGIFTbWUALksyFRhYDgE=)
                          13: D305BF9E1C2611EE962CF15D4AD9E6FC.roa (hash: QvV0F8KyJ9WvuBSABzYloVhD1CSoUH2t+UNQgJHZffQ=)
                          14: 8CBFAAFA561711EFA32AB1BE762E951A.roa (hash: x13tTUmCqaneTmuylrncyIbgJsZvmJqEqrEdlvKnZD8=)
                          15: 003205069B9511EFB5BBFBA3762E951A.roa (hash: UjNuym/YVxBGxCeImR5szQOeTVJpSD09YHDR0+HigJY=)
                          16: 48DB40CE1C2511EE961F2B594AD9E6FC.roa (hash: 0WYNowNq6/ghxa/+ViWE2YlwzJQFXVRIIBMOUYA+fQ8=)
                          17: CC06753C9B9411EFB98A1EA2762E951A.roa (hash: PrWrPFpz78YhUoGxQ7jEkZFHzPPsv0jeCPOMzZB31PQ=)
                          18: D6A352521C2511EE9164F55A4AD9E6FC.roa (hash: He2Venw8taiOIZNG5L2+aSFbOwse3tT4XMAeuZ2rfyQ=)
                          19: 4134710A1C2611EE8654415C4AD9E6FC.roa (hash: FOrfNT73uBh2aYXKjOIxZWv6Nr2ME7Pa+Um5EKzqmIQ=)
                          20: 2D888128971311EFB14662AA762E951A.roa (hash: m6Vgw13O/Z9CVMDFoYn3/x7Scp+tZSUuvP1qWkzu25Q=)
                          21: 0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa (hash: Ev2ul4e+ltqtbvYSPW/0zConR3j9rixqOLLNpHJBAUU=)
                          22: 494629A869C611EFAB29428D762E951A.roa (hash: eeCnZNp5+DXjWbE73Xzf+vc1c6ITE8Mpg+2iFFIZRf0=)
                          23: AC6C1AF87C2011EF8072375D762E951A.roa (hash: 3Rl3eJ9URzbNEAjNItG8eZqFtndJzNxZbtBiE9bB/NU=)
                          24: 93F6BF08D1D611EFA285465B762E951A.roa (hash: tVKwje6T2o4eP3SDnHXNKWk8+gEDaKos+OkXYB9+jE0=)
                          25: C41EE034846D11F1B0082AE7CE1D38B0.roa (hash: vPIx+3su5XEgYcI5vDBbL8/o4dvvzyDdnNa2ovBoobU=)
                          26: C3DC7C78744B11EFB00C628E762E951A.roa (hash: DslpOa5/mWSwqGcWwNCCAP4kUIk852TGOki17LeoHAI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345 (0x541)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF, serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Sep 22 03:31:47 2026 GMT
            Not After : Sep 24 03:31:47 2026 GMT
        Subject: CN=6ab1f6a4-665b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:81:b8:3c:ef:83:27:2c:e1:e7:6c:5c:ca:49:
                    13:b8:b5:27:f2:9e:37:80:02:dd:be:44:35:1b:13:
                    1a:30:49:87:3f:30:2a:0c:a7:fe:c5:7f:ac:10:1d:
                    c2:65:e4:df:7a:11:b8:98:0f:d3:4b:f6:43:52:8e:
                    32:db:e9:91:c8:c2:73:02:46:d4:95:f2:65:ec:b7:
                    17:cc:0b:98:ca:3e:e6:4e:a0:6f:7d:a1:51:55:24:
                    d6:8b:26:0a:a7:dd:22:a6:9f:3f:2d:68:7a:6b:53:
                    18:93:de:1d:f6:4b:41:ca:10:37:26:8d:57:ae:4f:
                    dc:c0:51:12:4c:a7:bd:32:0f:ba:4d:12:61:fe:fa:
                    61:07:1b:e8:3a:25:b7:10:71:49:0a:30:0f:45:f0:
                    f6:04:a1:53:79:b1:78:4a:a5:e4:f3:73:d9:4f:8e:
                    c2:97:06:59:df:6c:73:58:6a:7b:48:c0:34:46:96:
                    7c:bf:8b:7b:94:33:44:91:01:01:1e:45:f0:4d:5d:
                    79:f8:48:3d:93:f1:2f:35:7c:eb:1a:07:e0:3f:82:
                    44:af:87:96:5a:02:0f:00:c4:c3:38:5f:36:fe:78:
                    7e:d9:aa:b6:86:08:84:29:2e:b2:ac:69:0a:2d:e7:
                    34:d6:19:38:ce:22:ee:1d:f9:49:ac:3e:4b:9d:47:
                    35:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F7:0B:B1:30:E5:08:73:E6:68:B8:CE:83:A2:45:27:58:2B:BB:45
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:b6:69:5a:5e:79:93:f9:4d:7f:db:0b:c6:18:1a:cd:a2:0c:
         34:bb:05:1e:19:dd:22:44:c5:8c:0f:3a:e3:41:89:09:4d:28:
         66:c0:43:3c:d1:3a:a2:1d:4d:5e:a1:7e:55:b2:2c:7a:d2:2d:
         fe:63:47:6d:e5:2a:04:1d:77:9e:7d:eb:c9:49:ad:c7:3c:4e:
         98:21:6a:f4:d0:c6:04:24:01:83:c0:15:e0:a3:cc:36:2e:e3:
         a3:cf:c8:98:54:7d:31:97:87:4f:e9:e3:ac:f1:f5:d9:f5:e4:
         12:54:c8:19:74:0b:76:a3:64:c9:b5:a9:e7:68:29:6c:2e:ac:
         3e:e3:16:eb:d3:14:a4:7f:49:a0:4a:bb:c1:8c:6f:ba:bb:e7:
         16:59:92:95:c3:4b:9a:6c:5c:da:83:99:e9:12:6d:33:99:72:
         cc:3a:ab:f5:5b:31:ee:a8:ac:92:f0:4a:03:ce:af:34:57:3c:
         84:32:23:0c:cd:1c:c9:d5:e0:8e:f2:3f:99:7e:a9:68:fd:80:
         4b:03:e2:4e:07:a5:45:0c:07:91:55:66:30:6d:fc:c3:53:70:
         2b:90:b3:37:9b:ee:2b:fd:35:72:3d:73:dd:ff:c0:47:b5:cb:
         6e:00:d7:bb:22:6c:5f:1e:6e:95:d7:c9:6c:f9:38:0e:88:c6:
         c1:66:e3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:32:17 2026 by rpki-client