Error: rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
File:                     aMXkutXc1WSiVidTyay2Mr0ky1A.mft (raw, json)
Hash identifier:          /zP7VUr/Z804pmtkeKYJnA7dkUBMIuZOb47KCTkohl4=
Subject key identifier:   79:8C:3F:A2:7F:8E:C7:B9:A0:B2:28:02:21:33:63:29:F8:E8:8D:B3
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Certificate issuer:       /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial:       0A93
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
Manifest number:          0A7D
Signing time:             Sat 10 Oct 2026 01:36:00 +0000
Manifest this update:     Sat 10 Oct 2026 01:36:00 +0000
Manifest next update:     Mon 12 Oct 2026 01:36:00 +0000
Files and hashes:         1: aMXkutXc1WSiVidTyay2Mr0ky1A.crl (hash: LGb9UB6gOmorH3wcnBhr3PLTrHqIZLGSrRJOo1bPgPk=)
                          2: 1397539A963311F1A5208F14CF1D38B0.roa (hash: Gbi1goqcteUHX94qentDkP1O0M2WUDxVYrOT+NrVjjw=)
                          3: 67CF4D4AC47A11EBAC1DCB2EF8AEA228.roa (hash: itFkoyhCFbkxoKe/6GZZJKhOYtJVGG20wDDeoMWtUpQ=)
                          4: 85592F58963311F1B268D616CF1D38B0.roa (hash: Lk9JNobEcQHSRvY8pP8rMGRN1zf55/NF3Nzph9wLwIs=)
                          5: 0668CDBA8ECF11EA92325F27F8AEA228.roa (hash: obmP99ZP4gHqQi9QCtzWh7Wc0rtLRTLbw4IjE5aS9HE=)
                          6: FD29A9F4963311F1B706DB1ACF1D38B0.roa (hash: Z7GYp8epv0CEFILt1d/4UHNDuxGxepIuoxMbBAe1vOQ=)
                          7: 6BE894F8963511F1AF34D2A4CE1D38B0.roa (hash: anJyhoGPfEPmHSCk6Uj9kNHFO5xjL9ibh1PSnUDx+Rk=)
                          8: 2A0AF02ED8D711EB93E56C7BF8AEA228.roa (hash: ZQ6oLNCOYoaY+3u19bx5mMnPdr11GM9m4rQK5cGUyGQ=)
                          9: 59AB9F46ACB311EA94FB7A5CF8AEA228.roa (hash: M7zBdV0WcI6PFd9tLd94yJGWhV8lnlP02DcFXSG5pCM=)
                          10: 77F17762ACB511EAB011A45EF8AEA228.roa (hash: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=)
                          11: 83CC39468F0011EA98508558F8AEA228.roa (hash: L5ieRjYiG1OFGX8hr9WtcOwJsazJ2sf4i+jmqBumzYY=)
                          12: 4D5B7DFA9A9911EAB460C75DF8AEA228.roa (hash: 08HHiOipKJGcq74gZtGxaBA7hKxLZk9ttDnVaGPnEtA=)
                          13: 8F0844CA963411F18267A01ECF1D38B0.roa (hash: nXi6wVCyaY1MaG1oBTjHxjTNa553jbzQFSran1dNAs4=)
                          14: 4F75903E8F9B11EAB3F92A79F8AEA228.roa (hash: 4DXiHxGSCbsyOMNhnwXSRwIzqtdpPeRGAU+Vq8d2Sbo=)
                          15: BC497164BFC211EB9C90B47DF8AEA228.roa (hash: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2707 (0xa93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
        Validity
            Not Before: Oct 10 01:36:00 2026 GMT
            Not After : Oct 12 01:36:00 2026 GMT
        Subject: CN=6ac99680-be39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:b1:88:f3:3b:a6:c7:e2:03:ed:bd:bb:78:
                    fc:1d:ba:d8:b4:f5:7c:b0:33:d4:80:18:6f:38:3c:
                    61:85:22:29:81:3d:24:af:b3:f2:51:4a:4c:be:70:
                    d7:14:4b:02:ac:8f:0e:60:80:40:66:d8:34:b9:0a:
                    70:ba:79:ee:fa:ab:25:87:ba:37:6a:5f:e7:0a:16:
                    58:41:98:f7:2c:c2:f0:e3:00:ee:51:15:85:e0:f2:
                    ce:57:d7:8a:a5:cf:65:90:9e:89:43:dd:ac:3f:45:
                    a6:4c:76:b6:82:cc:b7:58:32:c2:14:eb:30:3e:91:
                    e1:5f:6e:46:5a:92:58:66:15:84:a0:2c:6a:01:4f:
                    73:aa:ad:ca:ae:dc:5b:3e:56:24:eb:3a:9a:70:ae:
                    d3:36:dc:47:98:5f:67:b8:06:67:dd:89:5d:c3:de:
                    a9:dd:72:65:d8:db:5c:11:45:ad:a8:37:3a:e9:de:
                    5d:fa:41:dc:55:e4:e1:50:79:c7:71:16:a3:d9:40:
                    0a:7b:a6:58:7c:6f:da:39:a2:b9:79:9b:b9:46:1f:
                    10:a2:03:08:7d:14:6d:b8:f0:07:87:1e:bc:79:a9:
                    f3:c2:1f:29:2e:57:d3:47:77:97:31:ea:cc:7b:a4:
                    05:01:fe:99:60:a2:74:32:47:5f:6e:10:90:b6:86:
                    86:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:8C:3F:A2:7F:8E:C7:B9:A0:B2:28:02:21:33:63:29:F8:E8:8D:B3
            X509v3 Authority Key Identifier:
                keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:d1:58:a3:83:37:c3:4b:44:ea:62:63:b9:29:05:65:16:c9:
         08:9f:26:e8:d3:41:67:0e:05:5e:d0:23:b5:41:8d:d6:73:e4:
         4f:65:e6:62:58:cf:9c:57:58:d6:97:90:23:33:44:24:b3:59:
         10:10:4a:68:ee:df:55:cc:34:ec:10:c3:0d:d8:20:bc:08:e0:
         ac:a9:76:c1:b6:6d:c6:5c:99:18:13:ac:4e:7e:3d:da:38:0d:
         73:1b:7d:24:27:7e:0f:7a:7a:5d:58:de:42:1c:aa:e3:fe:f5:
         2a:36:ca:c3:92:9b:31:d4:58:39:60:3f:89:40:02:00:df:a4:
         55:91:3e:d5:8b:7a:cc:59:94:a9:ea:8d:40:81:d0:db:20:f2:
         21:76:66:aa:5b:50:38:61:b5:df:a9:eb:df:fe:0e:42:d9:79:
         cd:10:e2:8a:1b:3e:79:ed:59:45:53:92:c0:19:36:9e:d0:3a:
         64:d6:57:4a:b9:03:0f:70:7e:bb:d3:f6:90:c2:de:64:6f:85:
         c2:15:df:a0:f8:54:23:58:66:31:59:4f:cc:b2:7a:4e:0f:3b:
         fa:5c:b9:3f:39:7f:1e:37:18:66:51:85:36:53:a3:d3:5b:2b:
         f1:3b:9e:f3:b4:47:e3:04:11:3f:e2:2e:cc:62:6b:36:a6:8f:
         75:e7:c3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:19:09 2026 by rpki-client