Error: rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft
File:                     Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft (raw, json)
Hash identifier:          FYAX0T+b77HuTrdYFgCiVjz3xh4sOV5m3xVJZedNbTI=
Subject key identifier:   94:BC:F7:43:87:F5:2C:AC:B5:C5:A2:89:3E:5A:52:DA:16:45:FB:D0
Authority key identifier: 4A:38:7F:12:5A:C9:D2:18:9D:36:B1:BE:9A:14:60:16:E8:A9:B5:C5
Certificate issuer:       /CN=F3630A7FAF/serialNumber=4A387F125AC9D2189D36B1BE9A146016E8A9B5C5
Certificate serial:       0A05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sjh_ElrJ0hidNrG-mhRgFuiptcU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft
Manifest number:          09FF
Signing time:             Fri 25 Sep 2026 01:40:06 +0000
Manifest this update:     Fri 25 Sep 2026 01:40:06 +0000
Manifest next update:     Sun 27 Sep 2026 01:40:06 +0000
Files and hashes:         1: Sjh_ElrJ0hidNrG-mhRgFuiptcU.crl (hash: R6mOwDOGeDOjFdtZCjQW9WesmPzVjbCDYS12UlpDfNA=)
                          2: 2381AD62926111F1896CF2F0CE1D38B0.roa (hash: 3fE1G3OZX4rK59CibbFC1tONmpKbJxHlS8TcyqOCkoM=)
                          3: AA540066926011F1A332FEEECE1D38B0.roa (hash: uESD6pgA/ktgYvMCFOgYx2X8JsFNCARuhLdvxt7oFjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sjh_ElrJ0hidNrG-mhRgFuiptcU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 01:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2565 (0xa05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630A7FAF, serialNumber=4A387F125AC9D2189D36B1BE9A146016E8A9B5C5
        Validity
            Not Before: Sep 25 01:40:06 2026 GMT
            Not After : Sep 27 01:40:06 2026 GMT
        Subject: CN=6ab5d0f6-2537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cf:02:29:d4:5d:42:20:cb:f4:5f:a2:83:8f:
                    d2:9b:94:fb:1a:cf:ed:8f:7d:ac:58:1f:a9:ef:f8:
                    2b:e0:e8:7a:3b:57:ad:ec:8a:35:be:bf:ed:9b:35:
                    74:d4:08:55:57:73:1f:55:c3:d5:ea:d2:d5:ea:8f:
                    1f:4d:d0:b7:0c:1e:a9:0f:ce:20:7b:a9:0c:e2:6c:
                    64:6a:c9:cb:10:c7:46:ba:e8:48:81:73:de:65:53:
                    75:6c:fe:c5:a3:95:e6:b4:9b:47:8a:52:01:98:1a:
                    37:d2:6c:b4:1c:99:76:6d:15:e1:de:3a:b1:e3:61:
                    58:28:66:74:ad:6e:d1:71:cf:21:55:bc:9a:d1:9b:
                    a8:fb:8c:10:54:2b:4f:7f:66:09:16:ce:88:77:93:
                    79:e0:c9:b7:50:27:aa:27:0c:6e:e4:f2:32:4d:af:
                    c7:d1:33:d0:63:fe:c8:f7:c4:04:67:28:95:a9:a9:
                    a0:38:44:2b:7c:55:d1:e0:41:4f:16:69:7a:47:f3:
                    5a:e7:c2:d2:e2:0e:ff:11:f9:c0:16:95:c8:4a:b4:
                    c7:64:d1:82:64:1b:5a:02:f3:d3:f9:91:0a:3a:6d:
                    c8:7a:15:14:67:50:54:65:4a:36:36:58:24:dd:b3:
                    2f:74:41:89:9c:8d:95:86:75:39:ef:c9:be:62:7b:
                    a5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:BC:F7:43:87:F5:2C:AC:B5:C5:A2:89:3E:5A:52:DA:16:45:FB:D0
            X509v3 Authority Key Identifier:
                keyid:4A:38:7F:12:5A:C9:D2:18:9D:36:B1:BE:9A:14:60:16:E8:A9:B5:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sjh_ElrJ0hidNrG-mhRgFuiptcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:de:5e:45:99:42:f5:fb:02:54:84:50:76:a0:7f:15:6f:4e:
         8d:18:f0:ce:61:2e:58:3a:c1:8e:d6:d4:b2:e0:cd:3b:27:39:
         e9:d0:7b:e4:5e:11:e0:9e:f3:35:1d:76:c7:3a:c1:72:d5:ac:
         ce:90:10:f5:37:eb:f5:e1:59:78:19:45:70:4d:08:9a:e3:29:
         73:1e:58:a4:57:f8:e4:e0:62:d4:0b:b5:b9:a5:88:73:15:56:
         4c:15:33:8d:17:15:be:20:9a:85:0c:eb:70:d8:88:b1:43:d1:
         e3:f8:97:df:53:ca:52:bc:4b:32:5a:45:c8:3d:1c:08:6a:0e:
         95:33:c7:9f:91:a3:c4:ed:3e:1b:72:06:82:ec:2d:87:ee:66:
         07:33:ef:1f:f7:51:85:6f:60:ca:75:f1:81:18:29:bd:c2:87:
         a4:de:f7:0e:5c:03:8e:b1:71:22:88:02:3b:3d:bd:36:f1:69:
         d7:a1:01:64:4b:ae:55:25:ef:2d:f8:ea:21:3d:5a:ee:71:94:
         2f:58:9a:62:70:ff:d2:d2:e1:88:51:94:8a:34:e4:2d:d8:0a:
         b0:f2:75:f2:71:5f:3e:59:c3:9c:7e:fb:da:a1:c6:18:9f:50:
         56:7a:84:2d:01:12:b3:e7:ff:65:81:a1:75:a3:f4:df:84:1c:
         e5:cb:4e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:21:13 2026 by rpki-client