Error: rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
File:                     1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft (raw, json)
Hash identifier:          eT9pxX6T14uXOp0gUEueAKgI4Ox73uSsRZQieRwp48Q=
Subject key identifier:   37:D1:5C:0A:01:6F:DD:EA:53:A8:A1:5A:62:60:E0:B8:A8:4B:E6:F9
Authority key identifier: D5:B8:FA:3A:AD:40:69:62:EF:AA:CA:DF:00:02:A1:CC:EF:84:B6:10
Certificate issuer:       /CN=F363E214AF/serialNumber=D5B8FA3AAD406962EFAACADF0002A1CCEF84B610
Certificate serial:       0AD0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
Manifest number:          0ACD
Signing time:             Tue 13 Oct 2026 01:21:52 +0000
Manifest this update:     Tue 13 Oct 2026 01:21:51 +0000
Manifest next update:     Thu 15 Oct 2026 01:21:51 +0000
Files and hashes:         1: 1bj6Oq1AaWLvqsrfAAKhzO-EthA.crl (hash: m5J9B9z+UQFincF6I21XMhQCAMnm9QoNJOe2kWmB3zo=)
                          2: 3ACCA76E7D4D11E9BA82FB71F8AEA228.roa (hash: yC1yqZLK/mn5O8oPUPstRFKqoZMenamr5HvhnVgkq2M=)
                          3: 7B80003A7D4D11E98C653A72F8AEA228.roa (hash: Pf4+vucLWS0+RlRnSnEIXgYSOdRPDXw0o293VLaPD8U=)
                          4: ECE818207D4D11E9ACBE8A72F8AEA228.roa (hash: lFX/K+uRha67tPuzFLrmfgCjnGBWbSFiv83qQNOXpEo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 01:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2768 (0xad0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363E214AF, serialNumber=D5B8FA3AAD406962EFAACADF0002A1CCEF84B610
        Validity
            Not Before: Oct 13 01:21:51 2026 GMT
            Not After : Oct 15 01:21:51 2026 GMT
        Subject: CN=6acd87b0-3da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:ee:d6:5f:d5:b2:21:86:66:d3:ec:f4:6d:
                    28:c9:16:b0:01:3c:57:c4:fa:5e:e0:01:7d:29:73:
                    02:f1:1b:fd:c2:f4:cc:ce:3f:98:3b:ab:22:dc:5f:
                    00:6f:ff:1c:57:f3:c9:39:e0:71:5c:05:e3:63:50:
                    6d:64:75:e6:70:27:c6:7b:7e:6d:a0:c6:85:5f:a2:
                    93:0a:a4:20:76:7e:da:b9:53:50:4b:91:76:7d:92:
                    de:20:08:3a:50:8a:e4:0b:c0:27:12:00:bb:90:83:
                    85:f8:4e:65:8a:8d:62:e6:ce:75:3f:05:00:66:bd:
                    41:39:b8:77:7f:24:3e:53:cf:08:af:09:c8:45:71:
                    93:40:32:7a:fa:b5:5a:13:2c:51:b4:0a:e3:81:de:
                    0c:2e:7e:35:2e:8e:e9:2c:32:53:a0:6a:3c:9b:35:
                    78:11:b2:de:91:f5:fd:56:bd:e5:8c:6f:0a:a5:e2:
                    6b:a4:29:d4:ff:ab:3d:94:b5:9e:cc:40:49:af:88:
                    fa:5e:2f:c1:32:cc:fb:32:51:e8:13:0f:74:d2:0b:
                    a5:39:70:82:5c:26:72:89:d5:97:6d:ee:92:96:ba:
                    53:f0:8c:b4:6e:e0:24:ad:51:b4:a0:6a:23:9a:85:
                    f7:a0:ce:9f:83:18:2b:ca:06:b9:37:65:bb:e1:12:
                    5c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D1:5C:0A:01:6F:DD:EA:53:A8:A1:5A:62:60:E0:B8:A8:4B:E6:F9
            X509v3 Authority Key Identifier:
                keyid:D5:B8:FA:3A:AD:40:69:62:EF:AA:CA:DF:00:02:A1:CC:EF:84:B6:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1bj6Oq1AaWLvqsrfAAKhzO-EthA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363E214/871B4DD07D4A11E9AA09DF6FF8AEA228/1bj6Oq1AaWLvqsrfAAKhzO-EthA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:55:fd:29:a5:0a:3b:c2:c9:a3:e4:8c:a8:fa:4b:92:cf:
         9a:a2:a6:a1:dd:bc:9f:96:23:2c:22:58:2f:1c:77:fa:37:a2:
         95:73:95:b8:6b:a3:15:61:44:7a:3a:b5:33:0e:7f:32:f2:7b:
         8f:0c:a3:5a:83:e6:11:9d:f8:38:77:d3:6f:eb:1a:c2:fe:f2:
         f7:54:87:d4:b9:4f:9a:5b:dd:e1:db:e8:2e:bf:84:ab:82:11:
         63:71:36:88:dd:dc:bc:05:8f:6a:5a:c1:67:ca:7d:b0:48:31:
         ee:e4:3a:ba:a7:1e:01:bd:06:15:d1:c3:e2:20:eb:49:07:95:
         49:2b:66:43:ae:04:0f:1b:6b:99:a1:ca:4c:fc:67:1d:8e:7a:
         67:d9:19:87:57:d1:2b:57:c0:22:f1:7d:57:2c:31:e9:4b:ef:
         86:d1:25:c8:f7:ea:93:29:84:30:4d:a4:8a:29:60:b1:76:b3:
         89:c1:3a:81:0d:7a:ad:71:22:1a:db:6c:05:a9:29:bb:d7:d6:
         dd:9f:4b:47:9c:e1:d0:3d:61:a1:99:04:3f:71:e9:a3:6d:7d:
         32:72:6d:46:8e:ba:cd:2b:02:79:b5:b1:eb:02:70:db:d4:58:
         05:3b:b9:5a:7e:fe:9d:10:2a:65:3b:f9:c1:ca:3c:d8:37:f4:
         0b:f5:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:40:36 2026 by rpki-client