Error: rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
File:                     9s_tdm0YWlpEFVDpcITTe-KcA-s.mft (raw, json)
Hash identifier:          P89QQRK236+7uqIJucd8dKGeZXSLTsxJtBwLGByB1Oc=
Subject key identifier:   13:F5:BE:36:CC:2B:D4:DA:AB:70:89:48:11:B7:67:8F:FD:B6:6F:C6
Authority key identifier: F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB
Certificate issuer:       /CN=F363DDF3AF/serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
Certificate serial:       0718
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
Manifest number:          0714
Signing time:             Sun 15 Nov 2026 02:34:33 +0000
Manifest this update:     Sun 15 Nov 2026 02:34:32 +0000
Manifest next update:     Tue 17 Nov 2026 02:34:32 +0000
Files and hashes:         1: 9s_tdm0YWlpEFVDpcITTe-KcA-s.crl (hash: YqCAfRpVk45zcN0VYz5A7qlihdYt9ys5hYGlBJy7Ozo=)
                          2: C813B5AC898B11F1BF7808B0CE1D38B0.roa (hash: sIuS3dFb0ljNs/CTOnl8n6H7ZV0rY+ovWMrRtUWyQDg=)
                          3: E6BE8514847B11F1BA44D4BBCE1D38B0.roa (hash: tauOOSFJltY6KG4MJlrCmt0lohbXb9OdzTR2QMoclwc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DDF3AF, serialNumber=F6CFED766D185A5A441550E97084D37BE29C03EB
        Validity
            Not Before: Nov 15 02:34:32 2026 GMT
            Not After : Nov 17 02:34:32 2026 GMT
        Subject: CN=6af91a38-498e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8f:ca:90:cc:cd:e1:9e:e9:70:c3:e7:d8:9f:
                    e4:fb:17:0a:b8:40:c6:39:5f:06:e3:cf:bb:80:a9:
                    eb:84:7d:63:b1:33:9c:c7:67:b0:a3:f3:21:9a:04:
                    a0:f1:d4:d4:6d:d9:70:68:46:1b:7e:1c:5c:7b:e4:
                    95:6b:f4:29:9b:d3:bb:ea:ae:be:15:07:9a:fc:57:
                    3e:16:43:01:23:61:4e:b8:ea:c8:52:ad:f7:27:2e:
                    f2:96:0b:0c:8c:42:24:23:e7:05:79:06:a3:a1:9b:
                    d8:c2:a0:00:ce:b3:82:bc:80:b7:a9:1f:85:3b:69:
                    48:09:c5:7b:e7:09:1d:58:72:df:a8:3e:1d:c4:23:
                    70:2f:62:0a:56:18:fc:9e:41:96:b4:e7:2f:06:d7:
                    0d:06:a1:55:61:92:93:c5:87:79:35:90:08:a6:be:
                    fa:b8:8c:63:b3:5e:58:ef:3d:e2:3c:fe:e0:66:65:
                    76:92:d8:e3:84:b8:5f:4f:35:fd:8c:c2:69:8d:34:
                    7f:1e:b3:6b:b5:e8:ae:55:04:0f:7f:ed:6a:5c:0b:
                    99:b8:c6:5f:92:53:80:05:d0:33:80:a0:8f:86:a7:
                    3b:30:70:9f:ea:c4:6c:61:a8:63:cb:8e:e2:cc:10:
                    b5:42:84:36:86:f9:84:b5:e2:63:c9:f0:83:b3:1c:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F5:BE:36:CC:2B:D4:DA:AB:70:89:48:11:B7:67:8F:FD:B6:6F:C6
            X509v3 Authority Key Identifier:
                keyid:F6:CF:ED:76:6D:18:5A:5A:44:15:50:E9:70:84:D3:7B:E2:9C:03:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9s_tdm0YWlpEFVDpcITTe-KcA-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DDF3/D1A6091A76DC11ECA4EF3E895A40D577/9s_tdm0YWlpEFVDpcITTe-KcA-s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:c5:3e:7d:a6:78:47:39:18:8b:6c:e4:a5:68:d4:6d:9c:00:
         c1:54:99:6b:3e:7d:e9:c6:cb:cd:72:24:68:34:fa:72:90:e4:
         d2:3d:26:fd:eb:dc:55:e6:13:7c:8d:8d:74:c5:c0:bf:ce:c7:
         ee:56:a2:63:c2:12:00:cf:f6:d0:e7:f7:25:38:6e:d1:64:2e:
         0d:cc:56:a8:98:74:a6:a5:74:7f:fb:86:2b:78:4a:a8:ae:e2:
         e8:d5:9d:98:ef:9d:95:6f:68:f7:39:68:ac:2d:eb:1d:79:28:
         a4:59:64:8d:21:16:68:f1:08:d7:e0:72:8d:62:47:7e:52:7b:
         54:35:e2:8c:d2:5e:2f:6c:21:97:1c:0a:a8:aa:7f:7d:7c:eb:
         3d:3e:df:2d:10:d4:31:a1:34:e3:70:f4:98:84:82:09:07:ca:
         1d:0c:8c:06:dd:70:03:07:d2:70:d6:74:07:ac:39:4f:cf:d1:
         b7:e0:2d:95:37:7d:37:c5:4b:40:e2:e4:90:1d:fa:1e:03:30:
         61:33:d4:2d:15:5d:c2:28:fc:5c:f3:d8:56:a2:35:50:de:0a:
         99:d1:68:24:29:57:cc:6d:92:9e:c0:da:9e:35:0f:ef:e8:bd:
         c3:52:a1:6d:40:66:c2:cd:31:09:57:a8:e7:d1:a3:38:86:d0:
         77:43:13:19
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBxgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0RERjNBRjExMC8GA1UEBRMoRjZDRkVENzY2RDE4NUE1QTQ0MTU1MEU5NzA4NEQz
N0JFMjlDMDNFQjAeFw0yNjExMTUwMjM0MzJaFw0yNjExMTcwMjM0MzJaMBgxFjAU
BgNVBAMTDTZhZjkxYTM4LTQ5OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUj8qQzM3hnulww+fYn+T7Fwq4QMY5Xwbjz7uAqeuEfWOxM5zHZ7Cj8yGa
BKDx1NRt2XBoRht+HFx75JVr9Cmb07vqrr4VB5r8Vz4WQwEjYU646shSrfcnLvKW
CwyMQiQj5wV5BqOhm9jCoADOs4K8gLepH4U7aUgJxXvnCR1Yct+oPh3EI3AvYgpW
GPyeQZa05y8G1w0GoVVhkpPFh3k1kAimvvq4jGOzXljvPeI8/uBmZXaS2OOEuF9P
Nf2MwmmNNH8es2u16K5VBA9/7WpcC5m4xl+SU4AF0DOAoI+GpzswcJ/qxGxhqGPL
juLMELVChDaG+YS14mPJ8IOzHMQLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUE/W+
Nswr1NqrcIlIEbdnj/22b8YwHwYDVR0jBBgwFoAU9s/tdm0YWlpEFVDpcITTe+Kc
A+swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNEREYzL0QxQTYwOTFBNzZEQzExRUNBNEVGM0U4OTVBNDBENTc3LzlzX3Rk
bTBZV2xwRUZWRHBjSVRUZS1LY0Etcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlzX3RkbTBZV2xwRUZWRHBjSVRUZS1LY0Etcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0RERjMvRDFBNjA5MUE3NkRDMTFFQ0E0RUYzRTg5NUE0
MEQ1NzcvOXNfdGRtMFlXbHBFRlZEcGNJVFRlLUtjQS1zLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALxT59pnhHORiLbOSlaNRtnADBVJlr
Pn3pxsvNciRoNPpykOTSPSb969xV5hN8jY10xcC/zsfuVqJjwhIAz/bQ5/clOG7R
ZC4NzFaomHSmpXR/+4YreEqoruLo1Z2Y752Vb2j3OWisLesdeSikWWSNIRZo8QjX
4HKNYkd+UntUNeKM0l4vbCGXHAqoqn99fOs9Pt8tENQxoTTjcPSYhIIJB8odDIwG
3XADB9Jw1nQHrDlPz9G34C2VN303xUtA4uSQHfoeAzBhM9QtFV3CKPxc89hWojVQ
3gqZ0WgkKVfMbZKewNqeNQ/v6L3DUqFtQGbCzTEJV6jn0aM4htB3QxMZ
-----END CERTIFICATE-----
Generated at Sun Nov 15 06:36:08 2026 by rpki-client