Error: rpki.afrinic.net/repository/member_repository/F36C95F1/2E8CAAF0F39611EB8717BD47D8A014CE/uoywwzlAbMY7ZjvGWPeL-p8XlyI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C95F1/2E8CAAF0F39611EB8717BD47D8A014CE/uoywwzlAbMY7ZjvGWPeL-p8XlyI.mft
File:                     uoywwzlAbMY7ZjvGWPeL-p8XlyI.mft (raw, json)
Hash identifier:          ezRpLL661okQ9f4X3iEdzKbjv04aXvivGlNiEaazKpM=
Subject key identifier:   41:1D:85:55:F5:EB:E5:91:82:5F:CD:93:FB:FB:C3:0E:A3:59:A2:DD
Authority key identifier: BA:8C:B0:C3:39:40:6C:C6:3B:66:3B:C6:58:F7:8B:FA:9F:17:97:22
Certificate issuer:       /CN=F36C95F1AF/serialNumber=BA8CB0C339406CC63B663BC658F78BFA9F179722
Certificate serial:       079A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uoywwzlAbMY7ZjvGWPeL-p8XlyI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/2E8CAAF0F39611EB8717BD47D8A014CE/uoywwzlAbMY7ZjvGWPeL-p8XlyI.mft
Manifest number:          0798
Signing time:             Tue 13 Oct 2026 02:18:43 +0000
Manifest this update:     Tue 13 Oct 2026 02:18:42 +0000
Manifest next update:     Thu 15 Oct 2026 02:18:42 +0000
Files and hashes:         1: uoywwzlAbMY7ZjvGWPeL-p8XlyI.crl (hash: S6JMYwivHnFLTOSYpuQKOhvqZz5yjtp8gXlZROW0z7M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/2E8CAAF0F39611EB8717BD47D8A014CE/uoywwzlAbMY7ZjvGWPeL-p8XlyI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/2E8CAAF0F39611EB8717BD47D8A014CE/uoywwzlAbMY7ZjvGWPeL-p8XlyI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uoywwzlAbMY7ZjvGWPeL-p8XlyI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 02:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1946 (0x79a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C95F1AF, serialNumber=BA8CB0C339406CC63B663BC658F78BFA9F179722
        Validity
            Not Before: Oct 13 02:18:42 2026 GMT
            Not After : Oct 15 02:18:42 2026 GMT
        Subject: CN=6acd9503-1a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:79:58:89:b9:65:8a:1c:f4:ae:34:21:76:4b:
                    66:c4:3b:20:f3:d5:f1:52:b4:03:0f:87:f8:2c:c5:
                    bd:cb:8d:4b:b9:77:c5:61:eb:14:7d:a7:b7:c1:7b:
                    4a:3a:1c:12:f4:26:ab:6c:a9:b5:2f:74:36:0c:44:
                    f3:4b:60:3c:17:64:83:89:2a:3a:98:3d:f6:21:61:
                    73:73:24:43:0e:63:f9:ad:af:d1:e6:1a:af:45:8a:
                    69:bf:a3:26:91:e3:f9:17:fc:c2:40:c5:59:25:fb:
                    bf:05:cd:0e:1f:47:c0:02:c3:3a:63:4c:69:d6:9c:
                    c2:1d:a4:12:b9:00:4d:f6:09:12:03:05:f3:03:c0:
                    fe:b6:0d:d0:09:af:fb:52:ef:ce:b2:85:cb:09:97:
                    49:52:b2:02:5b:7a:a7:36:79:5f:3e:eb:36:aa:c4:
                    f0:12:76:b7:c3:09:40:d6:8c:f0:03:fe:35:d1:4a:
                    ca:cf:c4:6f:7c:d8:17:37:4b:e9:0a:69:b0:3c:20:
                    bc:b9:23:e3:2c:c9:46:21:49:fc:2d:f1:12:46:75:
                    e6:ba:c6:f6:54:0b:dd:02:e0:11:7a:a7:92:d0:78:
                    a6:e4:10:ec:4e:8a:c4:e2:a0:f1:71:05:28:c6:11:
                    58:fd:5e:7c:86:28:e4:39:b1:6d:bb:b4:57:0c:17:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:85:55:F5:EB:E5:91:82:5F:CD:93:FB:FB:C3:0E:A3:59:A2:DD
            X509v3 Authority Key Identifier:
                keyid:BA:8C:B0:C3:39:40:6C:C6:3B:66:3B:C6:58:F7:8B:FA:9F:17:97:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/2E8CAAF0F39611EB8717BD47D8A014CE/uoywwzlAbMY7ZjvGWPeL-p8XlyI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uoywwzlAbMY7ZjvGWPeL-p8XlyI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C95F1/2E8CAAF0F39611EB8717BD47D8A014CE/uoywwzlAbMY7ZjvGWPeL-p8XlyI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:9d:6e:3f:09:5b:99:7c:8e:af:83:98:96:0a:f6:80:de:fa:
         56:20:dc:9f:4e:f7:09:69:ee:32:ed:2f:8d:01:fd:2e:2d:63:
         1b:6e:79:99:d8:72:31:93:7e:69:34:01:3d:f1:7f:f8:e9:14:
         4b:5f:93:c7:e1:0d:70:12:4c:24:ac:1b:07:d6:c2:6b:28:1f:
         b0:91:2e:26:46:c7:81:7e:3c:00:a4:3f:a3:2a:89:27:9b:9f:
         1c:ca:f8:dc:e3:ff:f2:26:26:52:94:b0:db:12:15:7d:00:95:
         05:ed:62:d8:58:c4:ba:08:81:5d:3b:1d:09:4f:72:f8:72:be:
         ec:51:69:53:2d:66:6d:c6:43:5f:86:8b:77:85:44:ec:52:61:
         54:1b:af:02:f7:72:63:52:f3:b5:30:b5:3f:9f:e9:54:11:ff:
         82:1d:1d:4f:44:4e:ef:0b:ec:99:52:60:62:1c:91:2f:65:7a:
         58:9c:5c:86:c2:ae:72:fa:5b:c2:66:25:aa:d8:b3:43:7e:6c:
         42:0e:b7:57:6f:6d:77:91:9f:86:45:bf:a8:56:57:3a:e0:76:
         86:e9:f5:12:22:7e:a4:99:33:f7:a4:1f:92:cb:66:53:b1:87:
         f0:05:3b:70:85:70:0e:86:8c:dd:d6:62:03:b5:39:f1:1a:62:
         6d:3f:dd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:23:40 2026 by rpki-client