Error: rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
File:                     xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft (raw, json)
Hash identifier:          9QTKm/Xrccc5iSFnrFKLfPG/vumR4x5aFKSzWzw0hvY=
Subject key identifier:   69:AC:73:BF:BF:4B:89:21:4F:69:27:0D:1E:D2:9F:D5:48:40:4E:44
Authority key identifier: C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
Certificate issuer:       /CN=F363C3E1AF/serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
Certificate serial:       0ACD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
Manifest number:          0AC9
Signing time:             Thu 08 Oct 2026 01:23:14 +0000
Manifest this update:     Thu 08 Oct 2026 01:23:13 +0000
Manifest next update:     Sat 10 Oct 2026 01:23:13 +0000
Files and hashes:         1: xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl (hash: x02GigMX2Y5Jq317OVnv5y1JU6B5yigNRgnzEg3ZLVE=)
                          2: 95B5298A8BFA11F186C65C0ECF1D38B0.roa (hash: dGGy+tGu/d3VEa+RmdR8hyWyPwfvdAS4Rg9besvo/cY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 01:23:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2765 (0xacd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C3E1AF, serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
        Validity
            Not Before: Oct  8 01:23:13 2026 GMT
            Not After : Oct 10 01:23:13 2026 GMT
        Subject: CN=6ac6f082-e9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:18:c2:ff:ef:98:81:f6:a1:c9:2d:53:b8:a7:
                    e5:bb:7d:1a:91:a8:1b:fc:cb:ac:6a:61:ff:8e:ff:
                    c8:f6:a4:f3:86:36:38:5d:0b:2e:53:84:ef:64:89:
                    a2:d9:f5:0d:4a:b1:aa:57:a5:5c:37:4d:d0:32:83:
                    3c:ec:7c:86:3b:8f:9d:e5:bf:29:76:70:da:ed:c2:
                    e3:66:1a:58:79:ce:5a:3f:15:37:53:b4:0d:4a:31:
                    49:47:12:2e:b4:4b:22:74:df:74:8f:e2:df:69:a9:
                    55:e6:cc:f9:09:c3:0c:b0:92:60:64:76:d5:7e:1f:
                    2a:12:b9:46:f3:71:14:40:63:ad:70:51:d1:ac:cc:
                    b0:a5:41:de:f0:6a:7c:1b:6c:bf:51:0c:9e:44:ff:
                    c9:81:1e:6a:6f:27:06:2a:65:c3:bc:42:23:a1:a5:
                    95:77:94:d0:a9:99:79:07:8e:6d:36:69:59:26:33:
                    59:9f:6a:0d:db:b3:ed:46:a1:16:e4:fb:f2:38:77:
                    ae:ad:0a:bf:40:c7:df:f0:5e:6c:b0:70:72:a3:27:
                    c1:39:64:dc:df:2e:0a:be:bf:d6:fa:49:91:5c:76:
                    7c:36:0d:5c:a9:82:38:2f:9d:7e:35:5d:bc:32:de:
                    a0:79:ce:f0:65:32:40:70:5f:bc:2d:30:23:a0:2f:
                    40:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AC:73:BF:BF:4B:89:21:4F:69:27:0D:1E:D2:9F:D5:48:40:4E:44
            X509v3 Authority Key Identifier:
                keyid:C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:17:bd:87:12:19:c1:ae:05:db:7d:e8:f9:0c:ba:e4:fa:
         d1:5d:33:be:29:d3:22:65:a9:3d:1d:4f:4f:b9:c6:5f:ad:68:
         61:34:b4:d2:14:08:42:2c:6a:49:8e:9d:76:73:8d:ed:1c:ec:
         23:ff:72:69:19:9c:91:20:f8:43:4a:56:49:10:c8:21:6e:c5:
         6c:16:2a:f4:bf:f0:de:b5:59:1c:18:4e:4f:ea:d7:bd:28:97:
         96:0a:ec:3c:e9:6d:ec:b3:24:71:4b:f3:05:08:36:62:65:64:
         bd:d3:a9:d0:a6:81:92:ba:38:21:84:2d:91:97:7b:01:3d:0c:
         72:e8:54:44:00:61:4f:a9:e8:1c:52:38:53:51:53:a6:81:03:
         a2:d1:90:36:bb:a0:a5:d5:69:be:7b:e7:34:84:70:e8:3d:6b:
         78:9c:ba:d2:fe:e2:35:cd:7d:d0:ed:7a:88:04:7d:59:41:a4:
         0f:f8:3d:17:85:2b:78:7f:80:59:48:98:95:b0:06:da:b4:92:
         74:8f:b7:0d:4a:73:18:1d:2d:3f:1a:43:c4:d7:ff:b4:b7:73:
         49:9f:f3:47:d3:fe:4d:aa:46:75:15:d6:42:88:86:e9:90:55:
         a4:18:af:07:60:aa:19:3e:5d:0e:dc:6d:ba:73:d7:be:9a:80:
         82:6a:e1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:47:34 2026 by rpki-client