Error: rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
File:                     YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json)
Hash identifier:          J8LRiZw5JtG59USIuquTzh1b3d+2X1kynL2BFIbwslQ=
Subject key identifier:   32:90:9B:75:6D:A0:AD:39:E2:F5:DB:67:E5:6B:81:65:1D:B8:38:2F
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       08EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
Manifest number:          0831
Signing time:             Thu 08 Oct 2026 02:33:17 +0000
Manifest this update:     Thu 08 Oct 2026 02:33:17 +0000
Manifest next update:     Sat 10 Oct 2026 02:33:17 +0000
Files and hashes:         1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: KLEVtNQq67e11yQFxb3k3qE1jME5SquNfiNJ1mJhds8=)
                          2: 4C48DC2ABB4211F1A0983CADCE1D38B0.roa (hash: 8rgcFVSm/Jjk1irQEfmnhYkRN0kGWaodsElRF3BBqPA=)
                          3: 2857AB583E0F11F1BBCF171ECF1D38B0.roa (hash: zXKX4+aphgAq7cWal19QXfuEMLB96KnGjV9AjHPPGP0=)
                          4: BC9C52986C5811F099231397DAE4EC9C.roa (hash: HouG8yLobXovUgqovzMNrrKkzd8yvO2tiqmIiHxJg5I=)
                          5: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=)
                          6: 89C0CD90B4D211F19E36F6B5CE1D38B0.roa (hash: 0E7aZKk7mLWYWMTEqRcKfKRJJeKvoG0GTJoiVqK10/A=)
                          7: 675B538879D111F1806496E2CE1D38B0.roa (hash: bp+YaCSeLhLpcUdTFTWzyzlCYsw83e8JSVdbDNSccAA=)
                          8: 702BAEE858AA11F0AE7EFB8BDAE4EC9C.roa (hash: HZftb7SkoPVv8c3p79wmuz6GJ/7AyE9u3ys6HyH6VV8=)
                          9: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=)
                          10: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=)
                          11: 11B6AE7E838F11F1994E2B1DCF1D38B0.roa (hash: 107O5Hc0T8kufuDN9DDsdJ548skzB1wVpr+HsKnPrE0=)
                          12: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=)
                          13: 4EFCF00622C111F1AAA1EFF2DAE4EC9C.roa (hash: 3D+Quaj4BMO4jtOSxnbnu0sxbAWpBZqh6HWx8W4zicM=)
                          14: D55D1A00A11E11F1942F2513CF1D38B0.roa (hash: yc8Tj6om4r5yEqpo2YY2Xb6OiBaaTOc1OQMdrdH03F4=)
                          15: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=)
                          16: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=)
                          17: BA9BAA3C22C111F1ACA8CAF4DAE4EC9C.roa (hash: GYZpxLycHzLHmSDiBRqQ7uyBVa2S5xBQXI3/KUPkbHc=)
                          18: 21FFF270243711F19BF46CF5DAE4EC9C.roa (hash: y+yR/BjY5lbVDSiSHrjGsQSh+U1LLc7b06ohNZElnJ0=)
                          19: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=)
                          20: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=)
                          21: 97CCC2681C5C11F1AE1F85A3DAE4EC9C.roa (hash: DsBjO5rK+mU2qS73wFVI/SMQlpsQmkwrtPwNgodDHRk=)
                          22: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=)
                          23: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 02:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Oct  8 02:33:17 2026 GMT
            Not After : Oct 10 02:33:17 2026 GMT
        Subject: CN=6ac700ed-d8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:97:90:bd:8f:69:d5:87:d6:e7:05:6c:1f:89:
                    25:30:94:50:5d:43:32:fc:41:df:30:51:c7:e9:74:
                    e8:dd:02:fe:bc:73:53:51:70:5b:a8:ee:1e:e2:cb:
                    cc:3c:bc:22:5a:6e:d7:f2:3e:0e:f0:a8:41:9d:44:
                    75:b7:ad:9a:75:1b:75:09:82:05:b9:5b:2d:ff:63:
                    64:d8:d4:65:d8:6e:85:76:68:48:e7:d2:71:84:bf:
                    78:e7:12:68:ab:8b:7f:f6:17:98:b4:46:83:2f:91:
                    28:98:91:3e:84:73:c9:26:e3:3d:35:ed:4a:aa:bf:
                    8b:fd:d2:d1:b7:be:62:fb:43:8f:16:16:18:bb:6c:
                    29:e9:f8:95:5c:88:bd:06:6b:bd:36:e0:4f:82:7d:
                    11:eb:a8:38:fe:ad:cd:4d:3f:79:f5:16:a6:5d:ac:
                    fc:36:6a:7d:97:58:82:29:40:fa:68:21:d2:e6:b6:
                    7f:13:a0:f7:fc:c4:58:ab:67:74:33:5f:ee:d0:ed:
                    ec:f3:56:6f:00:7c:41:16:f0:ab:e7:ac:db:84:47:
                    2f:c7:0f:14:c2:bc:17:3f:5a:c0:7f:9b:92:46:3b:
                    bd:65:93:ba:ae:db:da:58:4c:4e:c0:8a:59:65:d4:
                    0c:96:e2:8e:67:96:fb:e6:72:f5:bd:92:81:51:38:
                    da:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:90:9B:75:6D:A0:AD:39:E2:F5:DB:67:E5:6B:81:65:1D:B8:38:2F
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:b6:d1:d8:6b:60:ef:61:d2:56:06:53:bb:41:5f:b1:6d:0a:
         3c:5f:e6:86:48:05:93:11:16:32:30:27:50:7f:bf:83:7f:10:
         38:5b:d2:fe:a2:17:62:df:21:31:a9:4a:c6:b4:e6:f0:87:0e:
         0c:f4:ac:a8:ad:28:ee:7b:3f:02:cd:31:66:e9:c7:31:1e:75:
         e0:b2:c1:39:41:10:c1:6f:3b:60:ae:72:dd:eb:0c:f5:8f:9c:
         d1:aa:a8:56:0d:02:b1:66:43:48:11:91:87:98:79:84:ce:fd:
         f8:73:3f:70:d9:8d:d6:f5:a0:2a:45:90:f8:ae:01:8f:0e:11:
         2c:87:91:38:39:9f:a7:ee:0d:87:11:b8:cc:0a:e9:f9:0d:46:
         71:7b:0f:34:c9:bc:9b:6c:ed:f3:f5:12:4c:c4:f7:61:85:48:
         19:4b:b4:8e:d9:32:85:65:3e:08:e4:4a:b8:e0:bd:f3:6c:4e:
         f8:21:63:16:31:da:e9:4b:97:87:0c:e9:e8:44:d4:41:b9:7c:
         09:6e:78:b7:84:5c:23:9d:59:b2:50:09:ad:ac:51:6f:bf:04:
         cd:63:ce:27:8a:3e:af:b5:f5:da:70:d9:81:b9:34:38:f6:b7:
         d3:19:14:2b:d3:83:14:a1:1e:39:1d:42:e9:b3:f7:23:10:06:
         1e:fd:b9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 03:02:00 2026 by rpki-client