Error: rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
File:                     b60oLUjzGQY2QqK5qAO2puATULQ.mft (raw, json)
Hash identifier:          UClrDIibcbqG7S0NCN3fu4YxXbxjGRmAlIHWiZAfUb4=
Subject key identifier:   9A:94:F0:01:FC:62:C4:50:CE:24:F1:88:EF:B8:32:FA:B1:19:D5:EF
Authority key identifier: 6F:AD:28:2D:48:F3:19:06:36:42:A2:B9:A8:03:B6:A6:E0:13:50:B4
Certificate issuer:       /CN=F36FDBB4AF/serialNumber=6FAD282D48F319063642A2B9A803B6A6E01350B4
Certificate serial:       0361
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
Manifest number:          0360
Signing time:             Tue 22 Sep 2026 04:11:42 +0000
Manifest this update:     Tue 22 Sep 2026 04:11:41 +0000
Manifest next update:     Thu 24 Sep 2026 04:11:41 +0000
Files and hashes:         1: b60oLUjzGQY2QqK5qAO2puATULQ.crl (hash: AeVVuOdcKcfqFuX5Ay6RnAd7WGyAqeEYoPuLuipryDo=)
                          2: 5AE15E321D8E11EFB150AF207DDC24C2.roa (hash: 02fS43r1eNuS1EPFvyivvFwrFFekmWd3UmleeUTRe0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865 (0x361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDBB4AF, serialNumber=6FAD282D48F319063642A2B9A803B6A6E01350B4
        Validity
            Not Before: Sep 22 04:11:41 2026 GMT
            Not After : Sep 24 04:11:41 2026 GMT
        Subject: CN=6ab1fffd-78a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:b8:dd:8c:e2:10:ef:8e:1f:e0:0b:c6:6c:
                    58:58:7a:e3:99:14:53:0c:81:71:3e:0e:30:95:c5:
                    0d:87:d1:a7:9c:96:02:1e:2a:c6:14:86:ed:41:13:
                    4d:67:c6:64:e7:02:bf:ff:f0:7c:ff:66:7e:53:01:
                    4a:1d:07:ae:71:1a:0d:c1:26:db:bf:ee:d8:1a:d0:
                    f9:68:4d:18:99:07:cd:86:fd:28:1c:33:f8:81:6c:
                    86:56:30:55:e8:68:bb:8c:02:08:33:23:98:25:1b:
                    30:91:7d:f3:c2:da:9f:7c:bc:72:e7:af:3b:39:8b:
                    5e:41:b4:e1:68:b0:f9:22:63:83:0c:e1:08:b5:3a:
                    1d:8d:54:68:c7:f4:1e:67:d6:08:f7:89:5a:2b:a5:
                    1d:3c:26:07:d9:41:53:fa:40:84:0e:40:c2:5d:76:
                    d9:62:18:6f:cc:f1:a3:68:c7:61:9b:fc:d5:2a:ef:
                    32:81:0d:79:14:f3:b8:7c:20:2f:f1:41:39:2b:55:
                    6c:6c:f9:95:0a:fb:59:f7:3d:25:9c:c2:d8:69:8e:
                    55:ad:4d:14:1d:49:f8:3b:38:ec:cc:37:62:e3:62:
                    d3:be:71:75:ae:8e:30:1b:6a:2e:a4:00:e0:7d:17:
                    03:4f:90:2a:14:08:7a:3a:87:7c:d3:c3:dd:8f:2e:
                    14:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:94:F0:01:FC:62:C4:50:CE:24:F1:88:EF:B8:32:FA:B1:19:D5:EF
            X509v3 Authority Key Identifier:
                keyid:6F:AD:28:2D:48:F3:19:06:36:42:A2:B9:A8:03:B6:A6:E0:13:50:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:88:7b:a9:5b:9f:f4:a7:4f:31:9f:27:a3:92:b7:f2:23:d0:
         fa:60:e4:2c:a6:21:f4:2a:ca:db:fc:cf:3b:5d:e4:63:69:0f:
         05:04:8f:69:6f:71:c8:4e:55:7f:ff:1f:7d:7a:23:ff:26:68:
         6f:66:f8:4f:6c:dc:21:86:94:1f:2c:94:dc:f4:35:a7:48:2f:
         21:58:59:5f:6c:d7:17:d8:0f:7e:0a:0d:dc:32:29:56:9b:c5:
         e5:1f:d9:16:b2:07:51:61:18:19:22:09:35:e4:45:22:93:91:
         7c:73:39:73:c4:85:9c:52:ac:be:99:91:5e:f7:c3:5b:24:88:
         6b:c3:ac:e0:55:e7:c1:f1:0d:58:d4:de:58:51:d9:98:ad:e9:
         ca:59:07:7f:f8:21:4a:84:af:58:e3:6d:0c:c7:a7:c2:01:e0:
         26:86:8e:9e:34:f6:00:16:db:a4:3e:f6:2a:e1:9d:3e:37:58:
         06:a4:b0:8f:40:d3:d8:d3:bc:37:bd:5e:58:3c:55:ee:26:e3:
         b7:d3:cd:98:67:a5:70:b0:4e:3b:87:3f:95:b6:01:a5:48:30:
         9a:1f:f1:c0:26:a2:8f:00:86:2c:53:3e:6b:63:fa:03:62:1a:
         c2:b1:7a:58:93:3a:53:e1:18:a0:bf:ef:ba:18:fe:98:01:f1:
         b0:d7:48:1d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA2EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkRCQjRBRjExMC8GA1UEBRMoNkZBRDI4MkQ0OEYzMTkwNjM2NDJBMkI5QTgwM0I2
QTZFMDEzNTBCNDAeFw0yNjA5MjIwNDExNDFaFw0yNjA5MjQwNDExNDFaMBgxFjAU
BgNVBAMTDTZhYjFmZmZkLTc4YTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChxLjdjOIQ744f4AvGbFhYeuOZFFMMgXE+DjCVxQ2H0aeclgIeKsYUhu1B
E01nxmTnAr//8Hz/Zn5TAUodB65xGg3BJtu/7tga0PloTRiZB82G/SgcM/iBbIZW
MFXoaLuMAggzI5glGzCRffPC2p98vHLnrzs5i15BtOFosPkiY4MM4Qi1Oh2NVGjH
9B5n1gj3iVorpR08JgfZQVP6QIQOQMJddtliGG/M8aNox2Gb/NUq7zKBDXkU87h8
IC/xQTkrVWxs+ZUK+1n3PSWcwthpjlWtTRQdSfg7OOzMN2LjYtO+cXWujjAbai6k
AOB9FwNPkCoUCHo6h3zTw92PLhQHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmpTw
AfxixFDOJPGI77gy+rEZ1e8wHwYDVR0jBBgwFoAUb60oLUjzGQY2QqK5qAO2puAT
ULQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZEQkI0L0Y0RTBERjE0MUQ4QzExRUZCOUM1QThFNDdDREMyNEMyL2I2MG9M
VWp6R1FZMlFxSzVxQU8ycHVBVFVMUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2I2MG9MVWp6R1FZMlFxSzVxQU8ycHVBVFVMUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkRCQjQvRjRFMERGMTQxRDhDMTFFRkI5QzVBOEU0N0NE
QzI0QzIvYjYwb0xVanpHUVkyUXFLNXFBTzJwdUFUVUxRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAeiHupW5/0p08xnyejkrfyI9D6YOQs
piH0Ksrb/M87XeRjaQ8FBI9pb3HITlV//x99eiP/JmhvZvhPbNwhhpQfLJTc9DWn
SC8hWFlfbNcX2A9+Cg3cMilWm8XlH9kWsgdRYRgZIgk15EUik5F8czlzxIWcUqy+
mZFe98NbJIhrw6zgVefB8Q1Y1N5YUdmYrenKWQd/+CFKhK9Y420Mx6fCAeAmho6e
NPYAFtukPvYq4Z0+N1gGpLCPQNPY07w3vV5YPFXuJuO3082YZ6VwsE47hz+VtgGl
SDCaH/HAJqKPAIYsUz5rY/oDYhrCsXpYkzpT4Rigv++6GP6YAfGw10gd
-----END CERTIFICATE-----
Generated at Tue Sep 22 08:32:05 2026 by rpki-client