Error: rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
File:                     f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft (raw, json)
Hash identifier:          2Zkh6M886L+GoJl/PUWrVJCmHGkB0e7JjbzC8k3mhbA=
Subject key identifier:   7D:48:62:FB:AB:CB:B4:85:12:1D:2D:41:5F:6E:7F:BB:EA:5E:DA:84
Authority key identifier: 7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45
Certificate issuer:       /CN=RIPETOAFRINIC/serialNumber=7F7AC180897983E29E937C0A187803C072755545
Certificate serial:       121C
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
Manifest number:          1143
Signing time:             Mon 21 Sep 2026 00:45:34 +0000
Manifest this update:     Mon 21 Sep 2026 00:45:31 +0000
Manifest next update:     Wed 23 Sep 2026 00:45:31 +0000
Files and hashes:         1: f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl (hash: 2/QIVGLOTm99ZqrvSxcp+bZ4OqgAQ9da0NF+wOaH4as=)
                          2: KcDd4kMF8g5OWtC7_cAP8XSMpmU.cer (hash: 7P3OQMXmFsOa8WIMclWcCqGJQ7rr260vhG2nME8veoM=)
                          3: wDt4YuRBsALhCei7e6wo-u2Xl08.cer (hash: fJBiv8O0wZh6CtZ9/+QS/zyF54vwRtZW6gmFtWifhNA=)
                          4: n10GlKN56yP6tAip1LvVCOGqOSI.cer (hash: K04OvzkAolzFq1fT1oiHvi+Mj+v62+EgJUQSVJaFvcM=)
                          5: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer (hash: BZnl11DNpWh5PGLZaaoh4nJoG83nXFKoRkTHjhyWgz4=)
                          6: ZbPoGBw9qNHWQehKRcjvgjndfqc.cer (hash: aSidkzKJveb6i/hBK3iEqraQvUvcPExhwR8JmQ3u8Gs=)
                          7: wySXsqJX-mcm_Z4GnwWCWtpw-WY.cer (hash: AfzL1WxSfoLeqoguZfbCpKb9Vic4c/fcP8fXCLcEQQ0=)
                          8: eW3qOGfLk4c-eX8UKo65xUiMl4A.cer (hash: mqEsTRKJt26AntvB6W5YNW2DnKeV27rd9z+f53GIxo0=)
                          9: sOuFTcDYmjIzySVR0W0U1DjPVR8.cer (hash: V4+FuUEoCZJ6/ClJ+fuUe/iGrC1jBuQuQZHU+7fX8Q0=)
                          10: 1X3hPvIcIQ_suBv_eMQUm-o6fDI.cer (hash: 7Yf2WnE0MSTH4H3Yv7yD9zrBsRwXsRyyy+8kRrCpH14=)
                          11: OWSdY4-MUgk4TWK4gN9_jH5G4fs.cer (hash: xBt25wdeMT7MFd1dqxS5Fs/a/6hAb2DrhZUOgYIJpek=)
                          12: 6vTkF_QNHJDUbdlViOspDev7ius.cer (hash: Vk6/QhwBtzjIFouUR5GpkXr9wLsJbmz7egRFfNs4fwU=)
                          13: 8GzMRNUs-b4RXOx6TaaxMJukOaU.cer (hash: 1f9QrB5GLNacvyX7ryc+rmCF6Rqqj5DBunkE238OAWs=)
                          14: nYezEXqhvXgot91GTXMHa66NzJY.cer (hash: /3p8PM8g2w6iGXCuh2E3NOY5JJz2WAq1yRiUMQFIv5o=)
                          15: qEB8UNNVEmlZXYTPEkOl86_4EHA.cer (hash: gIOVAzJrB5GBBiknNN57bD8vKs+P+elCD7kOXrr9P7s=)
                          16: D1pm1nbRb8eSfE4kaUoejHekQGs.cer (hash: ESonQPm1BZCZHT8AmAPn4aB2WMWF4HVW9G/XjdItdL0=)
                          17: SGm5dfSdmA_lFc7dSaDEDruBrKI.cer (hash: DdA86ErG2aWUEFY1XPYv5b9pK/sSPti3aZwUKBJ/sE0=)
                          18: 00oZ5jEGlkvQLLLYrRgH35prGQE.cer (hash: LKblwX6VPkqX+5B56CEh+E8d26+ROD/d77JKqICYltw=)
                          19: 3P6jhHci0v7HoDnpkDj3U4JZ0DE.cer (hash: PiWeHC/tbHAm1fE1JWWzKnAwyAo5srtkm1xwcPPCIpA=)
                          20: pyKwoONloK3D2e6zzL_MBi2Q76k.cer (hash: IrSo9ZLwerj9+uDqOJHKXiYYIV/k0fHU25wPuauz04U=)
                          21: gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer (hash: 3DtWEKfWel4Ugy9StOMR1yLEPzZCWovefGWBtkcq17E=)
                          22: YiXGU2dIRI8cYBvpr6uCfJptjJg.cer (hash: P1aSzAVDH5tUU9whtzq2lgECjXLQtpROj+qfdFLtGSY=)
                          23: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer (hash: O4IWRrDhqem9+Acu1pAthLUbgTcOC666MpFUC9ANW8k=)
                          24: 8ZI823Vz-wlzku4GArwdsbV78OM.cer (hash: RjzQhisIV4IZBDv1UUEp/AN146ndNgiP56kIgNc3obM=)
                          25: lyz9rusSb2_NRpalkPcBiDeqX_I.cer (hash: QBSq1jgFtVJGdhSF3kq8whg65OLr34x7xuXUJhj45n0=)
                          26: BinJnUdgwom4TNvs8bbBPPUl6q8.cer (hash: hzZBQC0rhVWEHJyovZhr6R4fT883Z/vVYRS/Cu/GUoE=)
                          27: btXWd58RVP-e4YoO_T3bdQZOoeU.cer (hash: 22IzvwF0ubOVwj7dDZXh+HuKNTWvJ+hh/Ol4mnaHd+g=)
                          28: W8VPKEgipxexrUw3z2nQls5_Z3M.cer (hash: a1WXPpH5gOhL3PAp6EzAsA/GCV1/LGE+Yg+s5Pl3/yE=)
                          29: 5jUkb-v3B1Mu2tICGvyHSMFxFq8.cer (hash: DZr1zEYmsmNuEWAIAxR5GzgoUKVNwtM9sbdrMLou0xk=)
                          30: 1F-q3w0PsrIYxNl-HvQbwMkznC8.cer (hash: xpydeokQoxNzDVYCyCJS3vRj2ntfmkb6bVOY0XBoBcE=)
                          31: CBu-ff9M0Q1agvt6aWqU1dTGrvU.cer (hash: YaTTmJfB5qkSFWL9ZYPB5h0TBO5OKdFOj/WIdmLXlIw=)
                          32: MTy_73KkJrBHiE4HS7G7CwL8Vkk.cer (hash: 78cXdx8qWdgwku4h6ARLYUeWMxb0UtRpJquZFI9BgCc=)
                          33: 5pD7ZWuNfQ8PZ22dEnoy3406bYU.cer (hash: nkYQLFEms18aXVHheCfHd/hM6smDyW/5caP1l97myOw=)
                          34: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer (hash: WGAjmXTfCgdokK98XyWtkGwWIlDjE34bEfqdPnKFXNM=)
                          35: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer (hash: UNQ9r+ulyKJMsUSDxRq58fXfkcC8uAzkEQnsJKshYVc=)
                          36: dP2KmbmPfFmCclePXqFPEhiXqVs.cer (hash: ODPsy/iImVniqak/Pgduwz/zaZKctT401Fyabu3//kE=)
                          37: VCiBspPW4uKh8hlSyLwDISbuu8k.cer (hash: Q5EknewVPEVZwmglFeD965Bt2h8UU65GklGFGcZ/Alo=)
                          38: ShihNoN8fkklQFrLpOOnPS4t9d4.cer (hash: 9YlJmkUieHtPlYbBVLn2IEVg1vkosZNLAoAs1YdVgt8=)
                          39: bynJvMAklSDlBwZp-vZmUm98jzA.cer (hash: 48HpkA2xVe1po/4zte4zm57TDXGBkFxyvNFS1bmsdbY=)
                          40: 8qncFw2PMqBEwa8QUgRdbU4kIus.cer (hash: WXJbwAZTsEUuaDDDhQ0zysFJXc71VbV+Hx+e9SqnC9Y=)
                          41: i-GoLMm4kURYOcv-vplg8wM9pUI.cer (hash: 7jk8mJ3rCoxrRFhDFkx2XtYZWHW9cChZc7Me/I5u8+g=)
                          42: oHAxgIgisopRzqJ21BM9cIqlFO0.cer (hash: 58jHcj/BEAmJsCs+pzCNIv2iJNAegjttXvaY6UAxVFc=)
                          43: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer (hash: IqULL+lG1Z5qhAnwhTtSEmsoGbxU4pT2kMU3GoeUntc=)
                          44: mwftdzFoum4LC-Pl3LLPeB96yCo.cer (hash: mwUHFb8IaRLlcLhhn/YB6d0ugbt/JKazY6dGaopzai0=)
                          45: 48LJS_VpO0HwWh1WV9GnhLXVcmE.cer (hash: Typpk6tXaearLSR7AFkBBrayaSDOI/ZgTs2Fo/8103k=)
                          46: qq2zeUNQh6CU8n12Cd-4YvxcxGU.cer (hash: aqPqCmyv7jwaNDhMTitwanekt3dmItYEuK1j6O4NCUU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4636 (0x121c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=RIPETOAFRINIC, serialNumber=7F7AC180897983E29E937C0A187803C072755545
        Validity
            Not Before: Sep 21 00:45:31 2026 GMT
            Not After : Sep 23 00:45:31 2026 GMT
        Subject: CN=6ab07e2c-06e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6c:49:28:ba:7e:05:50:9a:8b:24:2b:83:c9:
                    0f:83:bf:c9:d4:bf:fd:9c:67:83:b6:1e:05:13:c6:
                    c4:06:60:a6:e6:5a:ae:49:e3:09:4f:43:1f:11:7b:
                    bc:27:96:af:cf:51:b8:b2:b8:27:26:25:17:13:c0:
                    62:1f:58:34:e4:af:67:a9:ce:8d:ce:9e:f0:0d:d6:
                    d6:57:14:f8:e4:40:ec:49:6c:25:fa:af:93:ef:2e:
                    16:c6:86:ed:c9:80:ce:7f:2f:0e:84:3b:30:ff:64:
                    09:f8:f9:88:f5:af:3a:12:c0:b7:cd:2c:34:e5:f7:
                    87:90:c0:02:7c:85:63:67:fe:27:d2:ae:fc:1b:05:
                    9a:1e:b6:b6:b4:f5:dd:f8:e5:dc:ab:19:8b:ec:0c:
                    5a:b2:24:16:9d:92:15:29:e0:72:06:5a:f8:c2:7a:
                    2e:66:1c:d4:0e:1a:a7:0c:e6:ad:33:4f:0d:77:de:
                    20:03:6b:4a:3b:5f:ce:95:96:e1:13:6d:3d:f0:cc:
                    21:f9:79:6a:4b:27:f0:2c:9d:40:6f:61:53:a7:94:
                    9a:cf:e4:25:b5:48:4a:f2:80:4d:96:39:06:59:70:
                    e7:a5:5b:a7:09:29:bd:0e:8c:04:ed:9e:2d:58:b7:
                    22:e2:30:b7:2b:a2:6c:dc:78:81:5b:56:3e:24:5e:
                    28:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:62:FB:AB:CB:B4:85:12:1D:2D:41:5F:6E:7F:BB:EA:5E:DA:84
            X509v3 Authority Key Identifier:
                keyid:7F:7A:C1:80:89:79:83:E2:9E:93:7C:0A:18:78:03:C0:72:75:55:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:07:7c:5f:ab:2c:37:de:12:18:89:13:6c:cd:62:68:3c:37:
         21:e6:57:20:44:7f:48:6d:5d:51:96:ab:c4:56:27:36:4f:7d:
         06:67:54:44:05:6b:51:f0:bf:ea:9d:f7:01:85:b7:ad:86:24:
         ba:f3:e3:1f:4b:74:67:83:14:f0:9d:b6:21:c5:97:56:5c:54:
         9e:1f:76:e0:14:eb:e0:4d:82:d5:fd:bd:6b:03:ba:da:42:ad:
         f5:2b:23:ed:70:ed:5d:83:0e:59:37:db:aa:c9:de:18:bb:ff:
         de:b7:f9:60:8d:85:b3:86:d7:10:60:bb:86:5a:a3:48:c3:b3:
         ba:15:34:c0:87:d4:19:4e:7a:3e:5a:15:21:b7:af:a8:87:d5:
         54:49:b0:55:85:7d:21:00:8f:4d:5c:80:6c:40:54:47:54:3f:
         ba:f1:41:7b:cd:f8:70:4f:13:02:5f:f9:76:ef:5b:00:0d:94:
         09:38:6f:dd:84:3b:ba:9d:97:fc:a2:00:ea:71:f1:8a:75:b1:
         7b:83:b3:7a:4c:e4:82:15:b7:cc:ef:e8:42:0a:14:bd:09:30:
         21:50:96:d6:14:67:f4:ab:38:5c:f3:d9:98:15:a5:13:21:74:
         17:87:f9:c0:e3:7c:1e:e1:3a:6a:f9:05:e8:2c:2f:6c:c0:7a:
         e7:ae:27:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:19:39 2026 by rpki-client