Error: rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
File:                     pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft (raw, json)
Hash identifier:          hMqWUO4gOvqHR85U0UdIzRUWVAAjCtVIjYlWqDgk0B4=
Subject key identifier:   39:B0:F8:B9:B7:F3:CB:E8:F9:38:B7:1D:94:32:7B:60:05:4B:B3:E8
Authority key identifier: A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40
Certificate issuer:       /CN=F36BDDB2AF/serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
Certificate serial:       0153
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
Manifest number:          014B
Signing time:             Mon 21 Sep 2026 05:14:01 +0000
Manifest this update:     Mon 21 Sep 2026 05:14:00 +0000
Manifest next update:     Wed 23 Sep 2026 05:14:00 +0000
Files and hashes:         1: pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl (hash: ozcuE1qV3GcOdWaCHxMDxbO48KnnGEjEbuotoBX9CnA=)
                          2: 57F5D562066811F182A03BF2DAE4EC9C.roa (hash: H/dZ7GU4y3+0W4NbF4qfRfiPWKdEGrksIwpjjQKBLhc=)
                          3: 122D36EC066D11F18E1FF791DAE4EC9C.roa (hash: jtB1Hhv1HwpPRBPDwK5yT3PXgecLmuqLhxaUNyALYGE=)
                          4: 5D13438A066911F1AF7B9E7BDAE4EC9C.roa (hash: o3eibrTB3qklVAlPQvfUzdZj6M57IsoeiCH4IoymBO8=)
                          5: A7EAEC6E16C711F1B85F4C92DAE4EC9C.roa (hash: mbg1nz27QWm2VugAeSuCncl+InKYGhLEQyQ7AG/9h3o=)
                          6: B312FDDE066911F1BDF62B7CDAE4EC9C.roa (hash: buD5JSkUfeJCoxOUevkIVwfQkCScIrrjXbWb3f7GhrE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 339 (0x153)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BDDB2AF, serialNumber=A5CA4E5A6FCAFD98706523D3145C56BBCEC70940
        Validity
            Not Before: Sep 21 05:14:00 2026 GMT
            Not After : Sep 23 05:14:00 2026 GMT
        Subject: CN=6ab0bd19-20a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:79:d3:ab:75:12:f5:a8:c5:d1:c0:38:33:9d:
                    64:49:7b:fb:4c:0a:06:46:f6:52:d7:b1:cf:97:fa:
                    59:8e:67:f3:dd:d4:8d:7c:2b:af:53:8c:ce:3a:26:
                    58:d7:48:30:51:36:33:c0:e8:df:0e:15:8a:9f:29:
                    e1:ab:38:ca:11:4b:f1:3e:61:1c:6b:e6:32:a1:26:
                    c9:2d:ce:9a:52:66:30:a9:6d:2f:10:d1:85:49:b3:
                    d0:1d:d3:5a:1f:be:75:33:3b:6f:b3:7a:6a:09:21:
                    0d:18:a8:86:72:a4:56:2f:3f:04:42:85:6f:26:61:
                    04:7f:2e:f1:ba:03:cd:ad:55:b6:09:56:cd:b1:ff:
                    50:18:1b:e5:3d:61:66:18:33:a1:93:f2:c4:e1:c0:
                    71:f9:8a:ad:10:cd:2c:7a:e3:32:01:b3:d5:5e:80:
                    74:54:23:4d:75:a2:2b:c3:25:cb:9f:7d:44:03:28:
                    5a:d6:a1:e7:f7:29:15:7c:b2:c4:4f:72:ab:a9:20:
                    27:c9:99:bf:d6:5d:43:7f:b2:d3:9c:97:15:cc:78:
                    4d:a4:de:b6:64:c2:d1:41:aa:be:83:27:05:fc:1e:
                    c4:1b:a8:a9:2a:5e:cd:d5:b7:a1:5d:d8:22:88:3b:
                    38:45:9b:c1:5c:b4:95:2e:b8:b0:58:0a:7f:02:ce:
                    29:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B0:F8:B9:B7:F3:CB:E8:F9:38:B7:1D:94:32:7B:60:05:4B:B3:E8
            X509v3 Authority Key Identifier:
                keyid:A5:CA:4E:5A:6F:CA:FD:98:70:65:23:D3:14:5C:56:BB:CE:C7:09:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pcpOWm_K_ZhwZSPTFFxWu87HCUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BDDB2/7C71590CBEF111F0A1E499A4DAE4EC9C/pcpOWm_K_ZhwZSPTFFxWu87HCUA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:92:a5:36:65:36:35:3c:f2:25:3b:47:74:a3:11:36:ac:0a:
         44:17:bc:a8:f8:54:ce:2b:4d:6b:e3:8e:4e:9f:4f:05:63:06:
         05:36:87:d6:3c:7b:3a:76:15:ce:62:5b:f3:19:9c:be:e7:d2:
         72:18:d3:09:2c:e3:d5:2b:9c:f1:45:0b:7b:3b:0b:e8:ab:d8:
         15:2c:9b:3c:0a:c5:a8:4b:71:b1:ee:1c:3c:3c:fc:c9:6a:f8:
         12:2d:c9:bc:7f:ab:13:cf:23:78:48:94:79:7f:c9:01:0a:fb:
         67:57:cc:18:45:52:77:fa:7f:7d:01:de:43:32:33:a4:80:bd:
         9f:14:dd:aa:4e:3d:71:95:4a:4a:a0:cd:5b:62:a5:38:0c:66:
         fc:bf:6b:b9:b4:06:65:ba:6a:bb:a2:b0:be:e7:80:4e:83:82:
         bd:08:f5:89:01:34:db:82:b6:52:7f:03:14:21:ee:f2:0d:1b:
         41:a7:72:f1:e6:c9:27:3d:b6:32:ab:59:9a:b2:a9:d2:73:3d:
         87:75:4b:3f:65:bb:41:8e:c2:ff:33:1e:c4:1e:21:cb:cd:9a:
         ed:d5:62:8e:56:d4:1c:dc:74:b0:4d:73:4b:2b:64:96:6b:e5:
         f4:b3:d5:40:f4:dc:fd:5a:42:61:d0:95:fd:fb:33:f1:df:30:
         20:9f:76:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:36:04 2026 by rpki-client