Error: rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
File:                     ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft (raw, json)
Hash identifier:          sr/J3Hb7v6lm1oEnALTArHz/SyKO/cUQteEDdWhrmE4=
Subject key identifier:   6E:0F:52:95:A3:46:AE:91:C3:B8:C9:23:1A:C7:4D:EF:0F:A5:99:93
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Certificate issuer:       /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial:       0474
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
Manifest number:          0457
Signing time:             Thu 15 Oct 2026 03:51:25 +0000
Manifest this update:     Thu 15 Oct 2026 03:51:24 +0000
Manifest next update:     Sat 17 Oct 2026 03:51:24 +0000
Files and hashes:         1: ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl (hash: aSpCTu4NQKa5Faf/fDSyitJiPEdcVldCz4/gn22682Q=)
                          2: 7BD4733608DD11F1B4C68D8BDAE4EC9C.roa (hash: VaWtLFO8gF8tTVqYTrmDCxhKxdVDZKRkXcmlPSJiI4M=)
                          3: 4EA7D32E53E611EF9B5BE56C762E951A.roa (hash: NtlpVvP6+zWzB8RFTth6ghNvN5nR/THSHfhDD9x2bP8=)
                          4: A1BBDFB45BDA11EFA2803F75762E951A.roa (hash: B+/DOrNgATDNRMYx/JLMgJNXWHAPifjl6iw4sXJYoDA=)
                          5: D2F9CEC4BE4B11EE8D656598775412E6.roa (hash: Cxpb4VpHsS5nAkYLG5LF8Ro6WmVM8kJPPNxJ4wnGbyc=)
                          6: A4628766FCF811F094508AF6DAE4EC9C.roa (hash: /jc/xWZSJFLRCYN2+c6nB85Dxq9lg0faSAdWwu56nk4=)
                          7: DC282EF8882211F0A7704DDBDAE4EC9C.roa (hash: T0igekGrTYaRpNadHLliqhNPK9+LbtXEGTfnQQPv4/o=)
                          8: 8804A9420EF611EF90E9CB4F017001B1.roa (hash: Ah/gC+WFiWi7Jlp6m9g/RNWVwD4e/UvuFekwBmptqnY=)
                          9: A8121FD29CFC11EF91E12A85762E951A.roa (hash: 40tq9RUAvjkX3eq2QoBMj2ZOuP4wwcDT4oeJUrXPD54=)
                          10: A7638A7CFCF411F0BF391BDEDAE4EC9C.roa (hash: uRFcCGOfvIfr+Tf43abUlIiB/kt42kecBcMz+0o+sSI=)
                          11: 0EF37AD45BDA11EF9E5BF670762E951A.roa (hash: 51koAiGBT4Qlz96Il2OYaGj869PU6MSFeqlPyjHqg1Q=)
                          12: 518CAA929CFC11EF95640782762E951A.roa (hash: OyktAYCtLdWaRz8aqABUtVcVPRFArgA2QV1t66oDcS8=)
                          13: 23292B7612C311EFB9087350017001B1.roa (hash: ljEIXCzMDkNC6MsSv3Wx80qJCOfaflJx6GdHSwJRefU=)
                          14: 963B58C8FCFA11F0B12DEA82DAE4EC9C.roa (hash: v/Cu1W16efLVxqP+0ar6L17VA0jidL4qkzPUWebyruw=)
                          15: D265FEDE0BCA11EF917FA0F3007001B1.roa (hash: JnlsXUtJ6yRPF3xH5RBfKSof1yPWn25dJe2aCkd3Tug=)
                          16: F3558888612511F098D6E98EDAE4EC9C.roa (hash: JDtyMwOOrKTy2qsgEw1FCl42QKzix0RW6dRZVcnlssk=)
                          17: 68E2FFBA615611F0A2488AD5DAE4EC9C.roa (hash: w3HgJ6iasE0Baeop5RBkwj/+ubVBgHbMYQzGZBLJCBU=)
                          18: 61DC7730DCFF11F084B31E79DAE4EC9C.roa (hash: RFmc2pe6J4tZTf5Zu+6VgaZEp8ibw3jxL16vDYLsA6E=)
                          19: EB9D4AF4FCF211F0BB098AD2DAE4EC9C.roa (hash: emghLEG84DuosUhnolF3yQQxO1sKUhr3+10JwSDZbjU=)
                          20: 7F5635A2887511EEBFD443484AD9E6FC.roa (hash: ocQwdIyiszloWpRuczWxhp841V/qq4mP8+w57e47R8w=)
                          21: 3B419B887CAB11EFB49DDE4D762E951A.roa (hash: IQzn2Mmxf3299kc5c2KxlM3LEdiHGEsho1HI4seozUE=)
                          22: 566CE01C0BD011EF922BB41F017001B1.roa (hash: NJoaiPoqCsvM8uTcCsGcl3CIrYSjToxekiedssQBL9U=)
                          23: C184DE48FCF311F098D8C0D8DAE4EC9C.roa (hash: hsBrfsye6tAWzBtuUHNAmPGil1onGCjZ9YyyLCUq1Xw=)
                          24: 59419D7EED4111F084A6D7F1DAE4EC9C.roa (hash: /ipmAqtO7rPFo9K3hMcn3Hq84xr+ZiKjMo9l9Mibio4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 03:51:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1140 (0x474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
        Validity
            Not Before: Oct 15 03:51:24 2026 GMT
            Not After : Oct 17 03:51:24 2026 GMT
        Subject: CN=6ad04dbd-37c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:dd:06:5f:0e:bf:e1:57:08:f3:86:57:38:
                    32:2a:5d:9e:59:7c:b4:c4:2d:f0:04:40:fd:b1:a6:
                    53:31:98:50:81:f1:13:e9:14:12:42:a0:ef:15:f0:
                    ae:03:f2:fd:2b:26:44:30:62:41:c9:31:68:71:52:
                    85:20:c7:b1:65:d8:79:84:3d:27:35:9b:e6:9a:2e:
                    f3:1c:98:af:7f:0f:a2:73:c1:9e:13:f6:38:04:bc:
                    9c:31:ad:e7:c1:99:80:7c:f1:61:fb:5b:dd:24:79:
                    f0:b8:0e:10:1a:5b:79:e8:cb:f1:53:fe:90:0e:4b:
                    4c:37:e4:8b:bc:0e:f8:65:fc:18:ac:fc:a9:ea:76:
                    8c:9a:b0:03:26:62:e5:1c:07:63:00:ad:f8:80:29:
                    ef:a1:d7:d9:65:3e:a8:f9:97:ae:30:27:28:1f:d0:
                    7d:5d:ea:13:0f:3a:ad:17:73:ab:37:6b:08:3d:cb:
                    d3:1a:26:fc:b6:60:c4:67:89:59:2b:26:4f:74:38:
                    b8:a1:8a:24:16:a4:d5:8f:77:f1:f2:d7:8c:1f:b0:
                    61:44:d5:ae:5b:d1:ff:ad:c3:fd:77:5a:e7:79:b5:
                    c0:de:d3:62:1a:f2:50:9c:bd:90:ca:a4:58:18:a4:
                    1d:fd:cd:bd:70:44:c7:b6:a0:6e:04:10:dd:e3:92:
                    eb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0F:52:95:A3:46:AE:91:C3:B8:C9:23:1A:C7:4D:EF:0F:A5:99:93
            X509v3 Authority Key Identifier:
                keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:57:ba:e2:fd:42:83:57:ce:be:d9:24:7c:40:c1:d0:39:86:
         d7:1b:d2:66:31:03:ee:42:dc:cb:3e:b6:eb:ce:21:10:5b:f4:
         b7:05:5a:6e:d3:ad:35:cd:18:02:62:b2:f1:a8:b3:30:a6:4d:
         75:fc:85:fd:b0:97:90:38:ed:6b:2b:19:eb:37:85:78:93:bf:
         0f:d2:4c:c6:ca:5d:fd:63:b3:e1:50:71:1d:ca:ee:16:37:d6:
         c5:06:e0:32:6e:1e:ef:48:75:91:30:b4:e7:dc:d4:23:ae:04:
         5a:71:4d:a7:5f:45:8d:5a:54:4e:4f:89:54:2d:8f:5f:f0:4b:
         1a:ca:51:ee:70:b3:f5:7e:73:d8:88:fa:e1:bd:c5:c8:ca:9b:
         45:55:8e:6e:8b:4b:37:b2:81:de:6f:73:ad:f1:23:d4:ea:20:
         a8:21:a3:8d:a9:40:c0:bf:20:d1:54:33:df:60:e6:53:e1:42:
         4c:9b:a8:db:de:59:c5:e9:7b:c9:72:c7:97:25:d1:d6:23:3e:
         1a:f1:46:18:00:05:b9:0b:48:ba:d0:04:46:a5:ce:b1:aa:43:
         c0:c9:63:13:18:68:34:84:53:c6:0e:c4:1f:04:5a:cf:2d:38:
         bd:b9:d8:c5:89:c3:61:86:c6:a7:ad:45:7c:14:eb:39:51:1d:
         be:d3:2c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:25:48 2026 by rpki-client