Error: rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
File:                     yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft (raw, json)
Hash identifier:          QmIgHzD6mTvTPh3185aHD/E2C1BOjau/UqK7UsNhMlI=
Subject key identifier:   72:FD:4B:67:AC:F0:C0:F5:DB:A9:18:F4:9D:E5:DE:16:3C:D0:BD:36
Authority key identifier: C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1
Certificate issuer:       /CN=F36FB15EAF/serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
Certificate serial:       03E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
Manifest number:          03E5
Signing time:             Mon 21 Sep 2026 03:56:05 +0000
Manifest this update:     Mon 21 Sep 2026 03:56:04 +0000
Manifest next update:     Wed 23 Sep 2026 03:56:04 +0000
Files and hashes:         1: yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl (hash: hwxlfzdOX8IN+M4jJgSD6N4f+JeermFm/vBJyo0RYH4=)
                          2: E7E6ED96B5B911F0897D0386DAE4EC9C.roa (hash: USTrTqgafFdAdWVQRnFi5xBXcAuIAY9hmlsS/Lw+jKU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000 (0x3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB15EAF, serialNumber=C9A59C63B70A8E12BD1C0B1577697171A3FEE0F1
        Validity
            Not Before: Sep 21 03:56:04 2026 GMT
            Not After : Sep 23 03:56:04 2026 GMT
        Subject: CN=6ab0aad5-0aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7b:8f:39:c7:87:75:a7:4c:ce:ed:1f:18:1b:
                    02:5a:b4:98:a8:2d:1b:28:35:4f:29:69:2d:34:bb:
                    b8:fa:da:f9:5a:fd:4e:20:20:d0:7b:d0:4d:ae:d6:
                    b4:d3:1b:b2:80:f0:20:cf:8a:9b:e2:1c:21:32:af:
                    80:fd:b8:e5:a8:80:4e:e6:82:d4:6e:8a:7f:db:ca:
                    30:81:13:87:fb:ec:ad:37:de:94:2d:5c:3b:c0:c6:
                    d8:50:76:d3:0c:b1:b9:ce:43:16:fa:7e:67:bc:a2:
                    2e:9f:5c:24:52:a4:72:3e:72:87:af:c0:56:e7:c4:
                    7c:69:4d:70:d8:c9:97:27:ce:93:7a:6a:6d:9e:b7:
                    73:ec:e5:d3:da:ce:5c:0a:47:e5:8d:79:6c:ca:59:
                    69:e6:13:ae:b6:cd:6c:11:9e:60:60:c4:d8:d0:50:
                    d6:58:76:7e:68:9a:cd:d6:d7:5b:cd:a5:53:6a:71:
                    1d:0b:24:6f:94:6a:b1:01:74:45:f7:7b:ad:82:9c:
                    5b:ae:9a:6f:28:7e:79:32:64:fd:08:ba:6c:cc:ef:
                    c8:32:80:91:d4:e9:95:eb:a7:c3:39:9d:e8:6a:bb:
                    fa:a9:a6:a4:ea:8e:0d:01:b4:f1:a6:47:0d:4a:61:
                    c9:b2:ab:1e:a2:8a:09:7a:5e:a6:27:88:3f:58:a6:
                    2b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FD:4B:67:AC:F0:C0:F5:DB:A9:18:F4:9D:E5:DE:16:3C:D0:BD:36
            X509v3 Authority Key Identifier:
                keyid:C9:A5:9C:63:B7:0A:8E:12:BD:1C:0B:15:77:69:71:71:A3:FE:E0:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yaWcY7cKjhK9HAsVd2lxcaP-4PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB15E/AF1E2EC2B9C911EEB2D5515A775412E6/yaWcY7cKjhK9HAsVd2lxcaP-4PE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:a5:67:af:a0:9f:01:09:79:c8:a4:ef:9d:01:8e:2c:07:
         f9:f7:fe:b5:f0:77:08:58:82:21:4d:4c:9a:2a:9f:e9:eb:90:
         98:9d:86:71:3f:65:4a:c6:ff:6a:72:4a:f7:10:26:88:86:47:
         c5:d4:fd:26:1e:57:dc:1b:8f:29:b7:02:d0:0c:11:fb:1f:89:
         8a:f1:ee:d4:5d:f3:94:d9:77:19:d1:e2:65:f3:2d:f0:69:e6:
         b5:e1:fc:14:96:1b:6b:9b:0b:b5:79:7a:69:d4:14:aa:96:45:
         3b:66:90:8a:33:c4:20:27:2c:77:08:f3:e1:96:d4:ea:2f:74:
         5a:aa:9c:75:24:4b:fd:93:ed:8e:34:fc:37:7c:f9:53:df:d8:
         7c:cd:75:32:e4:8f:b1:12:a5:d5:ce:d3:48:7e:24:5d:41:42:
         9a:db:5f:01:f3:80:c2:5c:c9:38:46:c0:ec:5f:90:cf:d1:0b:
         57:f1:7c:61:1a:fd:71:83:8a:81:05:a8:9b:1d:6e:76:25:ec:
         28:88:57:63:21:7f:ca:62:9b:44:ad:f3:7a:35:e0:df:36:49:
         53:83:ad:5f:6b:48:b4:f1:c4:d5:50:9b:12:95:c0:84:75:68:
         3a:9a:fe:cf:1c:ab:46:7d:df:21:4c:a3:72:93:b0:2b:32:09:
         67:16:e5:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:57:48 2026 by rpki-client