Error: rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
File:                     YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft (raw, json)
Hash identifier:          k81Ga96kUQzi1RpSE5nWxBzpISCkykbEhus0LUZmSFE=
Subject key identifier:   99:FF:39:8D:E8:D0:61:5D:9A:3E:04:D2:C4:D1:0D:F6:2C:C1:1A:83
Authority key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Certificate issuer:       /CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Certificate serial:       07E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
Manifest number:          07DD
Signing time:             Tue 13 Oct 2026 02:12:52 +0000
Manifest this update:     Tue 13 Oct 2026 02:12:51 +0000
Manifest next update:     Thu 15 Oct 2026 02:12:51 +0000
Files and hashes:         1: YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl (hash: Do6xPX1mSRnjrk9lwvKm7DTfy4viIEvO/KYO1Uycr80=)
                          2: 912FBF2E8A7911F1B31828D8CE1D38B0.roa (hash: zYTBvHbOq51i/nbuKMgvUoNYk1P78hyVlO8xCIxqaFY=)
                          3: 388DFCA48A7A11F1B7B83CDCCE1D38B0.roa (hash: K8U3ZsQE3FMB5TCFVPQ9/MnlTHx0TNLdYQ+qwlTgtqM=)
                          4: D0DCBE4C8A7911F19DA91ADCCE1D38B0.roa (hash: /o+O3ztThNiECWWwpWeQxfRZFgNL7pteuS2ywgWSCoQ=)
                          5: 163DFFC48A7911F18B7BFFD7CE1D38B0.roa (hash: +oqp9hoIEG1zN/2lBG7ea/q/Jlp77lY4zxCoE4WrmFg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 02:12:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2023 (0x7e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAF9BAF, serialNumber=627533ECBAB7D89BD9570B20054666053669A759
        Validity
            Not Before: Oct 13 02:12:51 2026 GMT
            Not After : Oct 15 02:12:51 2026 GMT
        Subject: CN=6acd93a4-1dd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5b:82:75:17:35:85:03:87:27:5a:8e:e8:0b:
                    fa:47:1b:e3:ff:5a:d7:7b:9f:e8:27:90:3e:16:d9:
                    7e:5c:97:0c:24:e5:fb:1e:a9:9b:db:74:9c:49:f5:
                    e1:48:2e:ab:94:8e:6c:2c:f3:bd:66:47:80:41:3f:
                    89:e3:a8:05:fa:40:55:9e:fc:4a:0f:b1:64:d3:0c:
                    61:a9:70:3e:9e:70:5c:37:99:97:7c:4e:f9:9c:ff:
                    68:9c:3c:62:fa:d1:1b:54:28:c6:5a:ed:5a:60:d2:
                    97:82:d6:e3:1a:38:aa:12:9c:90:27:a7:8f:65:50:
                    ec:88:a9:94:48:4f:39:2f:db:8a:1c:6c:01:8e:98:
                    ac:06:59:3d:eb:28:ba:f5:6c:de:8c:12:ce:3c:33:
                    0b:79:bb:bd:7d:53:cb:71:de:ed:a3:a4:c9:58:f4:
                    2d:c2:37:6f:a8:40:66:30:bc:eb:ff:fe:50:cc:01:
                    01:ce:f1:6f:28:a6:60:4c:16:2a:7a:d1:21:8d:dc:
                    97:b7:9c:a7:50:67:38:e5:9b:e4:39:d3:8b:0f:7b:
                    dc:0f:e7:88:a4:9c:8b:2b:f1:63:8e:cc:d5:82:e7:
                    00:f0:c2:8e:77:67:68:fb:20:5e:cd:c7:be:16:f1:
                    12:51:97:15:ba:80:a0:6d:d3:36:e8:26:41:58:58:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:FF:39:8D:E8:D0:61:5D:9A:3E:04:D2:C4:D1:0D:F6:2C:C1:1A:83
            X509v3 Authority Key Identifier:
                keyid:62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:49:fd:52:45:d6:57:07:d7:9c:d1:03:fe:b4:96:9e:76:b8:
         28:a2:15:66:92:5a:50:c1:84:1f:89:d8:ee:ef:dc:b3:e1:4a:
         0d:eb:03:04:33:b5:90:41:27:5a:aa:bb:e0:59:50:8e:c2:15:
         ee:36:fe:81:48:d3:3b:f2:b3:74:69:10:9e:a3:15:de:15:f6:
         43:a6:30:01:8c:ca:c2:f4:8b:8d:30:d2:53:67:9c:24:f0:de:
         8d:d3:c6:67:3a:79:b8:2b:84:de:4e:71:9d:85:77:30:4f:6c:
         99:c4:40:f4:1c:0b:fa:75:1a:82:c2:e9:96:97:32:45:e8:15:
         18:de:4f:3c:bd:2a:6f:00:31:6f:d7:ff:7b:23:8e:1c:c4:0e:
         68:a1:70:d6:d1:41:fb:9d:e8:1d:53:f2:4a:e9:66:8d:c2:9d:
         5e:92:fb:9c:2b:1d:4f:d4:d3:03:5b:d3:07:8c:9c:eb:8c:c5:
         f9:a1:31:65:14:af:88:ce:11:85:c9:c6:1e:b7:6a:b2:a3:40:
         5f:25:b7:95:c0:5a:1b:16:88:e1:21:c0:16:4e:0c:57:d6:bd:
         71:76:66:01:2e:ce:54:98:b2:11:89:84:4b:f9:07:25:d8:d7:
         da:19:f1:9c:cf:c5:c7:1d:16:68:37:7a:2a:f9:5a:30:b3:79:
         9d:aa:e7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 22:29:23 2026 by rpki-client