Error: rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
File:                     YgYKORQeYf1_hIcoAdkqSoCYD2o.mft (raw, json)
Hash identifier:          /GFjzWXdh8Tljlo8RtygUGJWyHJTPrLmZ05Ry6g3SAs=
Subject key identifier:   39:E8:A5:82:B8:E6:2E:1C:1F:2A:DA:07:AB:44:E6:99:08:F0:47:46
Authority key identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
Certificate issuer:       /CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Certificate serial:       062A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
Manifest number:          0629
Signing time:             Mon 21 Sep 2026 02:49:25 +0000
Manifest this update:     Mon 21 Sep 2026 02:49:24 +0000
Manifest next update:     Wed 23 Sep 2026 02:49:24 +0000
Files and hashes:         1: YgYKORQeYf1_hIcoAdkqSoCYD2o.crl (hash: daS2b5rJwIgmlxU04mDIjH+0aSA/feTUqM68y9efNYE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                          rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1578 (0x62a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAR, serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
        Validity
            Not Before: Sep 21 02:49:24 2026 GMT
            Not After : Sep 23 02:49:24 2026 GMT
        Subject: CN=6ab09b35-22d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:c9:e6:1b:dc:56:e4:32:28:7a:f9:78:ec:
                    ae:a0:be:4a:d1:4d:62:27:e6:21:44:02:b8:c2:5e:
                    eb:b2:ba:2a:55:44:47:36:73:0c:82:19:be:52:fb:
                    8a:c8:2b:fc:9a:58:8d:53:b1:55:76:61:50:82:ec:
                    76:ab:2c:2b:ff:ea:ab:df:4b:9f:c6:a6:3f:a8:9c:
                    a1:c3:70:ba:7f:9f:28:ab:88:bd:1d:15:3a:00:bf:
                    d1:65:91:d0:f3:72:cd:8f:19:8e:ce:3a:94:c5:38:
                    54:f3:a2:4c:5e:bc:65:e5:15:a9:10:6f:88:bf:39:
                    66:3b:12:a5:b1:98:c3:b1:1b:15:35:9c:b9:8b:1b:
                    4e:ec:9b:80:11:26:ca:c0:33:0a:cb:ea:f2:86:34:
                    b3:c4:89:73:ae:97:46:59:76:88:b0:bc:41:25:2f:
                    dc:c7:dd:e3:8e:f8:d0:ec:84:09:79:04:78:33:04:
                    b6:53:5a:53:84:e0:f9:b7:48:b2:f9:94:d0:07:fe:
                    73:9a:fd:bd:2f:58:a2:79:e6:b1:8b:53:c2:4d:af:
                    bb:af:93:8b:0d:7c:b6:74:69:e2:3a:17:fd:2e:10:
                    82:71:b3:82:d1:e5:f9:88:28:c2:91:83:8a:b6:aa:
                    41:38:1f:83:c5:80:0d:6b:3f:2b:db:cc:26:51:58:
                    96:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E8:A5:82:B8:E6:2E:1C:1F:2A:DA:07:AB:44:E6:99:08:F0:47:46
            X509v3 Authority Key Identifier:
                keyid:62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:5f:b3:fa:4f:a9:26:a9:d1:a2:24:53:9e:be:4d:d0:88:
         91:c1:62:63:75:aa:13:ee:b0:38:85:8b:6b:0e:c5:8b:35:25:
         0a:5f:70:3b:f9:6e:a2:0b:8c:f2:f7:97:29:9e:91:8c:b6:5a:
         7a:51:a3:d7:2e:a2:bf:1d:2d:6d:fd:1c:21:35:3e:2c:d8:84:
         34:90:e6:6f:59:9f:ac:70:49:3e:7b:43:04:b5:45:13:7b:cd:
         05:a6:ee:08:d5:48:95:7c:3a:db:0e:d6:0f:2f:8b:b8:bb:50:
         b4:58:20:29:73:6e:a0:3c:97:91:02:5a:26:aa:a0:d4:07:16:
         ab:7f:ea:02:b9:37:83:5f:ad:92:6c:ae:6e:4a:e5:ea:b3:9b:
         a6:cb:d1:08:d6:30:a8:c6:a0:c9:2a:4c:63:62:c9:a8:09:b9:
         2c:48:22:69:b3:ce:3f:3c:d7:90:99:72:5d:da:73:db:16:1b:
         5b:95:6e:d3:fa:a3:49:90:0a:bf:0b:71:33:71:78:80:e6:1b:
         3f:30:a7:59:71:af:40:2e:5f:1b:7d:e5:21:19:96:9d:c4:d4:
         37:c9:49:18:d3:0d:b4:29:15:21:c4:58:f9:97:b4:3f:84:8d:
         a1:84:df:3a:04:4b:e4:65:d5:0c:14:1b:3e:22:2a:12:73:c3:
         6b:bd:ea:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:43:31 2026 by rpki-client