Error: rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
File:                     _47Skrq7L4ZA7kbxs1kWS4BTj1U.mft (raw, json)
Hash identifier:          wb8wZ463JDC0xPTIBWM+FpY+N+FUeQqt60aujfISZWQ=
Subject key identifier:   D2:D3:D4:29:D8:D4:8A:19:81:B6:0F:2E:A8:B1:1D:D3:3E:57:57:06
Authority key identifier: FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55
Certificate issuer:       /CN=F3621C8AAF/serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
Certificate serial:       07CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
Manifest number:          07C6
Signing time:             Sat 03 Oct 2026 02:14:45 +0000
Manifest this update:     Sat 03 Oct 2026 02:14:45 +0000
Manifest next update:     Mon 05 Oct 2026 02:14:45 +0000
Files and hashes:         1: _47Skrq7L4ZA7kbxs1kWS4BTj1U.crl (hash: 6HUDSuu8rcbB0KXcDzMBE9p6fSjWzLXw5Xo4ozO61ic=)
                          2: AF1F9EB88AA211F1A6F615D0CE1D38B0.roa (hash: Kbztytj392WGdq9WMTQvMW9vcsVoTMuwASAGFgpLIZY=)
                          3: 434A25D28AA211F182DEACCFCE1D38B0.roa (hash: V652dbkdXSSqgsPyuMZdO+f/uQbanChKyQ/u1JVtFkE=)
                          4: DD41A65C8AA111F1BCA8F8CBCE1D38B0.roa (hash: Qm98hzHXsXZ9Nj80aHw72/kljCZGjn/Y5lt9OaYsxK4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997 (0x7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C8AAF, serialNumber=FF8ED292BABB2F8640EE46F1B359164B80538F55
        Validity
            Not Before: Oct  3 02:14:45 2026 GMT
            Not After : Oct  5 02:14:45 2026 GMT
        Subject: CN=6ac06515-2c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:d4:dc:4a:08:9d:34:ab:39:f2:d1:2f:47:
                    43:cf:9e:f7:df:95:21:d4:c8:79:de:6e:0a:d3:8b:
                    2a:12:98:6a:25:7a:40:f2:f4:88:17:e1:40:cf:7c:
                    9e:12:96:fa:a0:cb:d9:0e:0c:e1:4e:50:94:23:9b:
                    4e:ac:d5:e5:18:73:dd:c7:f0:52:2f:45:05:45:fc:
                    ab:9f:59:93:53:62:90:15:e9:45:93:87:19:57:7f:
                    db:d6:c0:e2:1a:1d:ea:f6:0d:ca:6b:89:50:e5:92:
                    d0:cc:8d:c3:3b:58:79:3e:c3:79:67:40:4b:e7:06:
                    3e:ee:a0:a6:69:52:ea:a1:43:fc:20:f8:6e:25:ab:
                    f1:62:51:7c:37:fe:6c:3f:82:66:18:c6:79:b8:79:
                    60:94:b5:11:c0:fe:4f:47:18:c2:39:a8:e6:30:bc:
                    7f:49:d7:fd:f7:af:c5:ea:38:62:7d:fc:f5:19:51:
                    bf:f1:b4:e3:2f:4b:4e:47:2a:da:7e:99:53:92:97:
                    2c:d4:a5:e5:14:bd:e2:d2:cb:72:5f:32:93:00:a2:
                    f2:25:02:29:ef:cf:04:39:2a:26:f6:af:56:d3:b2:
                    d6:c7:ad:7b:74:70:0a:96:f6:df:06:74:af:71:95:
                    bf:9c:a8:df:21:07:6e:7a:13:7e:f6:21:a2:74:df:
                    bf:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D3:D4:29:D8:D4:8A:19:81:B6:0F:2E:A8:B1:1D:D3:3E:57:57:06
            X509v3 Authority Key Identifier:
                keyid:FF:8E:D2:92:BA:BB:2F:86:40:EE:46:F1:B3:59:16:4B:80:53:8F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_47Skrq7L4ZA7kbxs1kWS4BTj1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C8A/0E4E6838D3F111EBB0F12E18F8AEA228/_47Skrq7L4ZA7kbxs1kWS4BTj1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:06:e7:13:90:33:ba:56:a2:dd:ca:3b:96:7c:d3:77:ad:4e:
         c6:d8:d9:cb:23:a7:c5:3a:2a:c0:ba:58:d6:ad:63:6a:ce:1b:
         71:6f:75:d4:1c:bf:b3:92:a3:ec:0d:25:ad:2d:56:f0:68:21:
         7c:67:3a:6b:2b:29:ca:17:ed:7f:4d:53:92:73:d9:7d:38:8b:
         c7:b7:ec:14:f1:de:c0:f2:88:a7:1c:34:5d:9a:c9:6c:59:48:
         17:98:6e:69:17:ba:ce:de:3e:8f:38:a8:21:4e:1a:ff:d2:21:
         9c:18:f3:d1:8e:de:3b:37:51:da:13:9c:ea:29:14:3a:06:35:
         d0:3d:62:ac:e8:7f:6a:4d:8b:55:cc:5c:87:38:c3:5f:57:cd:
         10:4c:9c:fc:31:96:ad:a4:2b:84:25:0a:7d:3b:7d:e4:10:65:
         e3:40:13:76:5f:9c:fe:0a:13:e5:34:b8:58:ef:ee:5f:bf:a2:
         73:59:f8:28:b7:fc:04:8f:a4:0d:2a:d6:5b:14:06:70:db:e0:
         6e:b3:96:f7:6b:c9:71:27:b2:ad:d0:90:ef:e7:39:e6:9c:68:
         83:90:33:9c:35:48:50:16:31:20:ef:52:4e:cd:f6:80:ec:fb:
         86:ff:d8:0f:d6:25:38:46:9a:b7:7a:05:e6:5a:79:3a:0a:7a:
         26:8e:fd:01
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB80wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDOEFBRjExMC8GA1UEBRMoRkY4RUQyOTJCQUJCMkY4NjQwRUU0NkYxQjM1OTE2
NEI4MDUzOEY1NTAeFw0yNjEwMDMwMjE0NDVaFw0yNjEwMDUwMjE0NDVaMBgxFjAU
BgNVBAMTDTZhYzA2NTE1LTJjNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+FNTcSgidNKs58tEvR0PPnvfflSHUyHnebgrTiyoSmGolekDy9IgX4UDP
fJ4Slvqgy9kODOFOUJQjm06s1eUYc93H8FIvRQVF/KufWZNTYpAV6UWThxlXf9vW
wOIaHer2DcpriVDlktDMjcM7WHk+w3lnQEvnBj7uoKZpUuqhQ/wg+G4lq/FiUXw3
/mw/gmYYxnm4eWCUtRHA/k9HGMI5qOYwvH9J1/33r8XqOGJ9/PUZUb/xtOMvS05H
Ktp+mVOSlyzUpeUUveLSy3JfMpMAovIlAinvzwQ5Kib2r1bTstbHrXt0cAqW9t8G
dK9xlb+cqN8hB256E372IaJ0379LAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0tPU
KdjUihmBtg8uqLEd0z5XVwYwHwYDVR0jBBgwFoAU/47Skrq7L4ZA7kbxs1kWS4BT
j1UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzhBLzBFNEU2ODM4RDNGMTExRUJCMEYxMkUxOEY4QUVBMjI4L180N1Nr
cnE3TDRaQTdrYnhzMWtXUzRCVGoxVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL180N1NrcnE3TDRaQTdrYnhzMWtXUzRCVGoxVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjFDOEEvMEU0RTY4MzhEM0YxMTFFQkIwRjEyRTE4RjhB
RUEyMjgvXzQ3U2tycTdMNFpBN2tieHMxa1dTNEJUajFVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfBucTkDO6VqLdyjuWfNN3rU7G2NnL
I6fFOirAuljWrWNqzhtxb3XUHL+zkqPsDSWtLVbwaCF8ZzprKynKF+1/TVOSc9l9
OIvHt+wU8d7A8oinHDRdmslsWUgXmG5pF7rO3j6POKghThr/0iGcGPPRjt47N1Ha
E5zqKRQ6BjXQPWKs6H9qTYtVzFyHOMNfV80QTJz8MZatpCuEJQp9O33kEGXjQBN2
X5z+ChPlNLhY7+5fv6JzWfgot/wEj6QNKtZbFAZw2+Bus5b3a8lxJ7Kt0JDv5znm
nGiDkDOcNUhQFjEg71JOzfaA7PuG/9gP1iU4Rpq3egXmWnk6Cnomjv0B
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:19:34 2026 by rpki-client