Error: rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
File:                     JfCxDKLk37Or6AFrgxnhVRHDOhw.mft (raw, json)
Hash identifier:          hcqDGIOo9NLENrzNtVVDe/swXqlJXvBXePvTZ2B8RB4=
Subject key identifier:   ED:51:F8:F0:B7:78:EF:73:B2:F3:EF:2A:57:2A:82:31:29:B3:9B:19
Authority key identifier: 25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
Certificate issuer:       /CN=F36374C9AF/serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
Certificate serial:       0FF3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
Manifest number:          0FEE
Signing time:             Mon 05 Oct 2026 00:59:18 +0000
Manifest this update:     Mon 05 Oct 2026 00:59:18 +0000
Manifest next update:     Wed 07 Oct 2026 00:59:18 +0000
Files and hashes:         1: JfCxDKLk37Or6AFrgxnhVRHDOhw.crl (hash: /s/rPkDcIe+B8AZuIlXD2t3XdxSODQFKxV0LU9UCj1w=)
                          2: F35BB514FD1A11F09CDCADC4DAE4EC9C.roa (hash: 5Wpfu3V0z99E5igYsWKu2qoRiZQUf6XSjeaaEOnOFRg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4083 (0xff3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AF, serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
        Validity
            Not Before: Oct  5 00:59:18 2026 GMT
            Not After : Oct  7 00:59:18 2026 GMT
        Subject: CN=6ac2f666-32c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:cc:fb:b5:cf:e4:10:c4:06:30:80:79:45:bb:
                    00:e8:50:35:47:08:97:07:62:c6:1d:7c:68:4f:1b:
                    a2:1b:e3:43:38:5a:c2:de:f0:7e:c8:ba:06:47:da:
                    d5:ea:60:fe:93:56:b6:e5:7b:40:18:5f:9e:aa:13:
                    d4:5f:5d:5b:68:b8:56:71:5c:bd:14:f7:18:b3:8f:
                    cb:ce:a1:98:7f:4c:ef:e9:ee:96:9d:cd:4a:5d:ff:
                    56:d4:0c:6d:2a:4b:15:aa:53:69:2e:25:c2:e4:ae:
                    d6:bf:b7:e3:74:d5:da:a7:83:48:81:20:1a:13:ed:
                    93:e1:4c:09:f0:c8:6b:bc:4e:83:ba:1e:86:89:e2:
                    39:ab:8b:f5:87:62:1f:5d:a7:55:f6:8d:c3:a5:96:
                    ff:b1:bb:ba:bf:1b:4f:67:2c:51:23:04:12:cd:3b:
                    45:93:90:a0:23:91:d4:80:80:93:59:e6:70:eb:f1:
                    bf:0c:7e:24:bb:79:fb:f5:5d:d1:fd:fc:76:e5:8b:
                    3b:89:3e:4c:18:5a:8f:ea:d1:b2:1e:e3:2a:dd:b9:
                    1e:59:d6:f5:1f:07:3d:e1:60:34:ee:58:8c:fb:76:
                    ad:15:c0:36:b7:13:26:15:37:b2:fd:92:96:88:93:
                    6e:d8:03:c3:2c:46:60:a7:cf:21:9b:1c:2b:1a:8c:
                    c7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:51:F8:F0:B7:78:EF:73:B2:F3:EF:2A:57:2A:82:31:29:B3:9B:19
            X509v3 Authority Key Identifier:
                keyid:25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5f:4d:7f:d9:0f:2a:16:26:3a:27:7b:73:14:a7:f7:e2:ca:
         a0:b0:ac:e0:b4:ca:b0:c2:ae:50:71:c3:53:c6:fb:82:10:21:
         60:96:ea:1c:58:67:54:02:55:33:b2:14:76:7e:e2:f0:37:e8:
         21:f6:52:4b:62:20:73:2a:40:4b:35:12:eb:c6:5b:48:85:9b:
         d6:ba:36:96:b5:97:83:b5:d7:f5:43:27:19:a8:55:73:3b:e7:
         12:30:f4:1e:4b:39:0a:78:ec:e1:db:15:24:cf:44:e9:02:29:
         66:d4:a9:af:91:33:d4:76:9e:24:28:4e:d5:34:4f:33:36:ae:
         06:61:41:98:90:ed:45:46:e4:9c:93:ce:db:49:fd:b8:e7:bc:
         fb:ab:a8:8e:08:55:38:5e:e2:7f:f4:24:bc:64:fe:e0:52:58:
         3c:f7:5c:54:75:92:99:5e:8a:c6:dd:6f:57:ed:c8:51:0e:d0:
         ee:67:53:99:09:de:d3:dd:66:e0:7e:c8:d9:ad:ce:a9:5b:56:
         c6:2a:e9:15:22:88:05:59:44:c5:5b:76:9c:19:fe:fc:cb:d9:
         75:b9:d3:3d:b4:74:c2:da:ed:d5:9f:58:bc:87:70:f0:fb:96:
         9c:05:78:98:83:ea:8e:57:17:f7:37:36:f3:15:e3:2a:88:07:
         d4:49:86:fa
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD/MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mzc0QzlBRjExMC8GA1UEBRMoMjVGMEIxMENBMkU0REZCM0FCRTgwMTZCODMxOUUx
NTUxMUMzM0ExQzAeFw0yNjEwMDUwMDU5MThaFw0yNjEwMDcwMDU5MThaMBgxFjAU
BgNVBAMTDTZhYzJmNjY2LTMyYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqzPu1z+QQxAYwgHlFuwDoUDVHCJcHYsYdfGhPG6Ib40M4WsLe8H7IugZH
2tXqYP6TVrble0AYX56qE9RfXVtouFZxXL0U9xizj8vOoZh/TO/p7padzUpd/1bU
DG0qSxWqU2kuJcLkrta/t+N01dqng0iBIBoT7ZPhTAnwyGu8ToO6HoaJ4jmri/WH
Yh9dp1X2jcOllv+xu7q/G09nLFEjBBLNO0WTkKAjkdSAgJNZ5nDr8b8MfiS7efv1
XdH9/HblizuJPkwYWo/q0bIe4yrduR5Z1vUfBz3hYDTuWIz7dq0VwDa3EyYVN7L9
kpaIk27YA8MsRmCnzyGbHCsajMflAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7VH4
8Ld473Oy8+8qVyqCMSmzmxkwHwYDVR0jBBgwFoAUJfCxDKLk37Or6AFrgxnhVRHD
OhwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM3NEM5LzQyRTkzODcyNzhBQjExRTVCRkJBODYyQUY4QUVBMjI4L0pmQ3hE
S0xrMzdPcjZBRnJneG5oVlJIRE9ody5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pmQ3hES0xrMzdPcjZBRnJneG5oVlJIRE9ody5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Mzc0QzkvNDJFOTM4NzI3OEFCMTFFNUJGQkE4NjJBRjhB
RUEyMjgvSmZDeERLTGszN09yNkFGcmd4bmhWUkhET2h3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARX01/2Q8qFiY6J3tzFKf34sqgsKzg
tMqwwq5QccNTxvuCECFgluocWGdUAlUzshR2fuLwN+gh9lJLYiBzKkBLNRLrxltI
hZvWujaWtZeDtdf1QycZqFVzO+cSMPQeSzkKeOzh2xUkz0TpAilm1KmvkTPUdp4k
KE7VNE8zNq4GYUGYkO1FRuSck87bSf2457z7q6iOCFU4XuJ/9CS8ZP7gUlg891xU
dZKZXorG3W9X7chRDtDuZ1OZCd7T3WbgfsjZrc6pW1bGKukVIogFWUTFW3acGf78
y9l1udM9tHTC2u3Vn1i8h3Dw+5acBXiYg+qOVxf3NzbzFeMqiAfUSYb6
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:54:24 2026 by rpki-client