Error: rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
File:                     wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft (raw, json)
Hash identifier:          rym6emayO17s0gk0jG7YHCa7sD1YoJh8LLCOq0O7CdI=
Subject key identifier:   6B:9A:1F:5C:E9:8F:95:05:3C:3E:33:03:18:8E:08:6E:6D:8E:27:EA
Authority key identifier: C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB
Certificate issuer:       /CN=F36C10D8AF/serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
Certificate serial:       055C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
Manifest number:          0557
Signing time:             Mon 21 Sep 2026 03:13:13 +0000
Manifest this update:     Mon 21 Sep 2026 03:13:12 +0000
Manifest next update:     Wed 23 Sep 2026 03:13:12 +0000
Files and hashes:         1: wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl (hash: t+gHMFImYr53W6OVvUGLuvr3+XT24MbkulM9oZb+AhE=)
                          2: 0B262D308C3D11F1A9EAD41DCF1D38B0.roa (hash: f0VcjDEiye0w2QvjWQnb/8s/VFRQ18PphEj22j/lv34=)
                          3: 77AF8F281BCC11F1B29BDED1DAE4EC9C.roa (hash: tCnoOENkXH3e8Mdks03czB54TYmILM8hcs1Ov5Tph/M=)
                          4: 0391042A007911EFAE93753B017001B1.roa (hash: ROy7IXIOSH9P9duj13zOuIMfsAHkd1TqIfObC5Gq/2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C10D8AF, serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
        Validity
            Not Before: Sep 21 03:13:12 2026 GMT
            Not After : Sep 23 03:13:12 2026 GMT
        Subject: CN=6ab0a0c9-2805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:0e:ff:c5:90:be:2f:2e:4f:75:0c:0d:a8:
                    ab:08:50:e7:cf:1d:cf:2a:c1:fa:81:e2:b5:40:cc:
                    46:4e:a1:38:08:63:67:2d:82:9d:be:c0:ae:f5:cb:
                    9f:a9:08:7c:90:21:89:e0:13:15:4a:16:71:a5:83:
                    3e:af:20:07:11:e3:a0:4b:d3:07:a0:67:d8:72:b6:
                    1f:6d:5e:bb:9e:d3:90:19:84:3e:2f:6c:75:d5:ba:
                    57:08:97:8a:83:af:97:41:c5:43:92:07:72:b8:b3:
                    94:d3:ea:0f:41:04:2a:b4:c2:64:1f:c5:f2:fe:84:
                    54:9b:34:fa:0a:03:85:80:05:aa:7d:49:e2:f3:bd:
                    51:39:7c:e6:9d:6d:08:76:2d:58:48:fd:d3:c9:a1:
                    58:09:35:4e:20:04:5c:2d:94:d6:e7:10:51:fa:8e:
                    07:3e:e0:3a:42:5c:49:dd:da:38:2a:3b:ae:53:ee:
                    8a:19:d6:d1:ed:9d:cf:f5:5d:86:54:82:50:f7:44:
                    f9:df:79:a4:01:f3:9e:b6:ee:c5:5a:50:67:48:58:
                    b0:0c:cb:dd:90:45:7e:a4:48:81:39:25:30:ef:96:
                    7e:ad:a2:9b:00:f4:ac:24:49:a2:d6:d4:c5:fa:43:
                    f1:29:12:64:cf:64:53:1f:cf:9d:71:e3:44:c9:eb:
                    a7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9A:1F:5C:E9:8F:95:05:3C:3E:33:03:18:8E:08:6E:6D:8E:27:EA
            X509v3 Authority Key Identifier:
                keyid:C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:07:7c:40:68:8f:9a:dc:4a:ca:e1:40:87:43:4c:cb:43:81:
         a0:83:82:90:71:87:ba:f8:0b:9c:48:2e:a0:ea:52:fe:0b:8e:
         39:4d:cb:4b:9d:01:06:68:3d:d0:59:45:94:4d:43:80:b1:e4:
         f3:68:26:e1:11:3b:28:7c:4b:11:a8:77:dd:16:36:f6:a9:6a:
         66:07:d8:81:b4:58:a6:cc:4a:7a:36:04:fc:62:31:64:ae:c0:
         6b:50:bb:72:b4:dd:21:b1:04:86:6e:5f:d4:6d:2e:07:f6:94:
         2e:b6:48:c5:bd:b5:5c:d9:9b:6b:68:d3:f9:06:f1:98:60:66:
         79:d2:db:37:a9:e9:49:b6:8e:3b:d6:23:ae:a5:86:33:61:94:
         43:03:e7:6a:d8:2a:b9:f0:68:e3:12:57:d5:36:e0:8b:83:8a:
         68:64:5b:b6:43:0d:0e:43:01:55:1b:12:32:1c:5e:00:9b:14:
         97:8d:75:d4:e9:e4:0d:61:fe:c8:fe:e7:b1:34:e8:42:08:7d:
         71:ae:ba:81:2c:d4:01:65:b8:2c:fd:16:10:bf:85:19:9e:d6:
         0b:e4:8e:76:bf:59:b0:15:be:cb:8f:7d:05:7e:f7:ef:80:e1:
         65:d1:e5:48:09:78:33:03:91:6d:8b:6f:94:2c:cb:17:54:9f:
         9a:8b:d2:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBVwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzEwRDhBRjExMC8GA1UEBRMoQzBEM0FBRkI2M0QzM0YwRjY3MzVEQzk5RkY0RDkw
MUE4RTIyNTBFQjAeFw0yNjA5MjEwMzEzMTJaFw0yNjA5MjMwMzEzMTJaMBgxFjAU
BgNVBAMTDTZhYjBhMGM5LTI4MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzGA7/xZC+Ly5PdQwNqKsIUOfPHc8qwfqB4rVAzEZOoTgIY2ctgp2+wK71
y5+pCHyQIYngExVKFnGlgz6vIAcR46BL0wegZ9hyth9tXrue05AZhD4vbHXVulcI
l4qDr5dBxUOSB3K4s5TT6g9BBCq0wmQfxfL+hFSbNPoKA4WABap9SeLzvVE5fOad
bQh2LVhI/dPJoVgJNU4gBFwtlNbnEFH6jgc+4DpCXEnd2jgqO65T7ooZ1tHtnc/1
XYZUglD3RPnfeaQB85627sVaUGdIWLAMy92QRX6kSIE5JTDvln6topsA9KwkSaLW
1MX6Q/EpEmTPZFMfz51x40TJ66clAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUa5of
XOmPlQU8PjMDGI4Ibm2OJ+owHwYDVR0jBBgwFoAUwNOq+2PTPw9nNdyZ/02QGo4i
UOswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxMEQ4Lzg3MjBFM0VBQTYxMjExRUQ4RDNFQkVEMkYxMjIyNDY4L3dOT3Et
MlBUUHc5bk5keVpfMDJRR280aVVPcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dOT3EtMlBUUHc5bk5keVpfMDJRR280aVVPcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzEwRDgvODcyMEUzRUFBNjEyMTFFRDhEM0VCRUQyRjEy
MjI0Njgvd05PcS0yUFRQdzluTmR5Wl8wMlFHbzRpVU9zLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvB3xAaI+a3ErK4UCHQ0zLQ4Ggg4KQ
cYe6+AucSC6g6lL+C445TctLnQEGaD3QWUWUTUOAseTzaCbhETsofEsRqHfdFjb2
qWpmB9iBtFimzEp6NgT8YjFkrsBrULtytN0hsQSGbl/UbS4H9pQutkjFvbVc2Ztr
aNP5BvGYYGZ50ts3qelJto471iOupYYzYZRDA+dq2Cq58GjjElfVNuCLg4poZFu2
Qw0OQwFVGxIyHF4AmxSXjXXU6eQNYf7I/uexNOhCCH1xrrqBLNQBZbgs/RYQv4UZ
ntYL5I52v1mwFb7Lj30FfvfvgOFl0eVICXgzA5Fti2+ULMsXVJ+ai9LL
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:35:52 2026 by rpki-client