Error: rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
File:                     X6EtceluL4GPuSSQs3lvC3cBZW0.mft (raw, json)
Hash identifier:          wQc2MeHr0272Ef7xjZ6Zn+PWIENkTIBg33Qv5xGB++c=
Subject key identifier:   66:D1:A6:70:4E:FD:D8:29:8A:87:E5:99:B1:97:24:75:68:5F:A3:02
Authority key identifier: 5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D
Certificate issuer:       /CN=F3626FA1AF/serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
Certificate serial:       019E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
Manifest number:          019C
Signing time:             Sun 27 Sep 2026 05:07:02 +0000
Manifest this update:     Sun 27 Sep 2026 05:07:01 +0000
Manifest next update:     Tue 29 Sep 2026 05:07:01 +0000
Files and hashes:         1: X6EtceluL4GPuSSQs3lvC3cBZW0.crl (hash: 79LR7kTlEFeb4mq03Fq4pAp0Ah9Tj3ixtN52AT42yp0=)
                          2: 261607DC0E5C11F1BFDCA9D8DAE4EC9C.roa (hash: RDOBBGsvJhE0OkAO2/KgMOs6/gp2HdgBOnY1YQ2CAy4=)
                          3: 23AA3F847CB411F08F9595B0DAE4EC9C.roa (hash: 3MSrx7uq5AEGHOWAFB7THkIOfn/SgWoN7PEmoZN2Nzo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626FA1AF, serialNumber=5FA12D71E96E2F818FB92490B3796F0B7701656D
        Validity
            Not Before: Sep 27 05:07:01 2026 GMT
            Not After : Sep 29 05:07:01 2026 GMT
        Subject: CN=6ab8a476-da75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f5:3a:3d:a3:82:05:73:ca:4d:6e:30:42:e5:
                    4d:68:22:ff:ec:55:cb:f2:9b:05:c2:c0:6c:0b:ac:
                    7d:82:c1:fe:02:dd:2a:cf:a8:0e:72:38:61:ec:99:
                    8f:79:bb:62:8d:15:92:79:70:a7:68:68:76:a8:19:
                    01:40:c3:4d:2a:fd:08:1b:d7:69:0a:6b:79:64:eb:
                    4f:93:1b:c9:6a:ea:f6:27:8b:35:17:32:08:87:c2:
                    16:41:18:71:c7:04:1e:35:74:8b:b0:b0:0e:b3:89:
                    06:7d:44:60:2e:f6:64:af:22:09:13:23:5a:ad:ee:
                    43:29:0b:60:46:8a:06:63:1f:3a:5c:60:aa:90:96:
                    c2:4e:07:9d:f0:2d:77:df:99:08:43:0e:f2:49:f8:
                    6d:93:5e:43:7f:bc:d1:8e:dc:eb:aa:88:30:2c:90:
                    11:a2:4b:bb:25:71:f6:3a:f9:ff:58:8b:5e:81:8e:
                    6c:50:cc:4a:a3:95:78:3a:1c:ce:2a:63:18:58:10:
                    92:72:27:61:f8:11:34:b7:a2:bb:b6:0c:08:95:8e:
                    b2:1f:86:bc:1d:09:e0:ec:b7:f9:13:d2:cd:4a:54:
                    18:88:0a:63:c6:68:2a:f5:c1:9e:83:e2:30:02:41:
                    04:7c:db:1e:29:d0:fc:38:27:6a:50:85:cd:b8:89:
                    08:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D1:A6:70:4E:FD:D8:29:8A:87:E5:99:B1:97:24:75:68:5F:A3:02
            X509v3 Authority Key Identifier:
                keyid:5F:A1:2D:71:E9:6E:2F:81:8F:B9:24:90:B3:79:6F:0B:77:01:65:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X6EtceluL4GPuSSQs3lvC3cBZW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626FA1/38CD12E87CB311F0A60F6AABDAE4EC9C/X6EtceluL4GPuSSQs3lvC3cBZW0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ed:08:63:96:23:c4:3e:51:28:fa:64:a4:dd:a3:59:bb:c0:
         d4:40:ac:cd:22:07:2e:9b:7f:24:ef:64:b6:f3:c8:f1:bc:f0:
         77:38:73:25:49:04:d1:17:4f:50:ae:48:e3:26:70:0f:59:0c:
         d1:f1:3d:af:a7:f9:c9:ee:11:19:0a:25:32:1b:68:d0:b0:39:
         e8:fb:e7:ba:f6:b7:71:b6:1c:de:28:cd:07:dc:51:f1:38:a2:
         bd:86:7c:73:bd:63:e6:bc:4d:8c:5a:3b:79:55:0d:db:be:2f:
         61:d2:c9:8a:71:81:7d:0b:1f:39:7f:fc:62:28:4c:60:5c:ea:
         fa:1c:b7:e7:53:f6:4f:f4:12:d0:b3:bd:e9:0c:8f:b0:16:6f:
         38:74:74:de:be:54:27:88:a5:ca:4c:1a:9c:6d:1d:ca:89:7d:
         d3:e7:e6:39:a5:91:9e:bb:0d:ae:44:6b:6e:35:c4:3e:13:82:
         2e:1e:a6:73:91:a2:b1:44:56:ef:56:0e:c7:b5:86:5f:9b:5f:
         38:45:b0:e2:0d:e0:f3:f9:a5:71:98:ec:77:0b:7f:93:7c:bf:
         4b:b3:43:72:90:4e:14:c7:87:89:f7:01:7c:bd:d4:37:7c:ed:
         56:9a:e5:d9:e1:c7:78:9a:69:f9:43:03:2a:0d:10:b6:cf:8d:
         98:ed:fd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:33:49 2026 by rpki-client