Error: rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
File:                     UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft (raw, json)
Hash identifier:          RyGQ6IXv9RSp7+qcFs+mdta4jkzAWRZpn2+sCTcaDpw=
Subject key identifier:   3B:88:C3:1D:93:8E:88:F4:83:60:78:78:AE:83:DB:03:3F:36:F6:2C
Authority key identifier: 51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5
Certificate issuer:       /CN=F363FEF1AF/serialNumber=5152D4929CA85ED77223A26AF81459A9020F10A5
Certificate serial:       044B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
Manifest number:          0449
Signing time:             Sat 10 Oct 2026 03:49:05 +0000
Manifest this update:     Sat 10 Oct 2026 03:49:04 +0000
Manifest next update:     Mon 12 Oct 2026 03:49:04 +0000
Files and hashes:         1: UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl (hash: DqvSaoUUFcxbY1yCslQ9fPFqUCLJmmv0Jq4ZBfQjNok=)
                          2: E3258EFA826911EE8B24F4234AD9E6FC.roa (hash: eWu8r9rN4KOzqqY/XWlw6jqNH/cI2P6B/LwtjtABcNs=)
                          3: FA87AD5A799D11EE927FAF824AD9E6FC.roa (hash: w3PUKAmzr0cKU0yWoHF3R0NzFnNrAi3OPe5Is4QZlH4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1099 (0x44b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FEF1AF, serialNumber=5152D4929CA85ED77223A26AF81459A9020F10A5
        Validity
            Not Before: Oct 10 03:49:04 2026 GMT
            Not After : Oct 12 03:49:04 2026 GMT
        Subject: CN=6ac9b5b1-4193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ce:c9:af:fa:3d:8d:a7:da:46:1c:9f:02:bf:
                    0a:00:08:09:28:81:04:ed:22:b2:92:f2:71:32:29:
                    47:56:7d:ee:23:6d:43:0a:be:21:37:97:84:e8:4c:
                    9f:29:02:3b:66:58:35:5c:02:9e:5e:b5:77:b2:0b:
                    a9:20:09:1c:ba:29:8e:ec:7d:6d:78:37:ad:1b:89:
                    7a:10:2c:43:ac:5c:e1:32:f6:7f:70:ab:9b:64:8b:
                    40:d7:2a:41:84:52:23:7b:04:c3:43:4e:9f:7c:52:
                    b9:9a:63:c8:16:e8:41:8a:0f:28:ac:59:1a:42:6a:
                    36:41:ab:1d:f5:a0:d1:05:89:6c:b0:d3:2e:22:a8:
                    04:fc:b4:d5:e5:39:3c:ff:20:e2:15:b2:fc:65:da:
                    a0:c6:14:3b:21:66:a8:20:d6:d9:c0:02:73:aa:3f:
                    03:a0:75:3f:7b:b1:5c:6d:32:fa:68:83:0d:f4:1f:
                    cb:57:1d:f7:dd:09:c9:80:60:0c:b0:6d:f1:17:09:
                    ba:a0:95:dd:d4:d6:18:d7:fb:25:4b:dd:07:da:42:
                    00:a4:a4:b1:e4:a1:44:05:bc:2c:a0:e2:83:a3:55:
                    2a:5a:93:fd:42:fc:f7:98:ea:8d:43:ac:8c:2f:da:
                    69:de:de:b9:cd:f0:a3:bc:cb:bb:cd:48:f7:0c:b8:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:88:C3:1D:93:8E:88:F4:83:60:78:78:AE:83:DB:03:3F:36:F6:2C
            X509v3 Authority Key Identifier:
                keyid:51:52:D4:92:9C:A8:5E:D7:72:23:A2:6A:F8:14:59:A9:02:0F:10:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FEF1/38E9720A799D11EEA7E476804AD9E6FC/UVLUkpyoXtdyI6Jq-BRZqQIPEKU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0e:9c:e0:e8:aa:4d:53:98:73:a6:12:cd:95:00:ae:ea:c0:
         c5:be:21:98:ab:b2:fa:ea:25:b4:51:ef:e7:35:38:60:90:ea:
         9d:85:9e:9a:4f:89:38:23:7f:6f:98:67:f1:ef:4e:00:65:9d:
         b0:33:44:71:c7:31:86:5f:d3:e4:56:d6:2a:ed:48:7c:8d:91:
         48:c8:48:b3:60:23:22:c0:83:1a:db:d2:7a:09:be:ee:1a:dd:
         7a:90:cc:be:c8:a9:d5:40:8d:4f:ed:33:6f:d3:95:77:83:bd:
         ae:57:09:97:15:a2:86:3d:63:aa:f4:7b:d1:f1:f5:ad:f9:5f:
         b6:97:82:d2:4e:0f:6e:2f:1b:e6:a6:dc:c7:9f:c4:aa:16:42:
         b1:19:b6:10:49:9a:b2:fe:ac:6d:89:c4:85:7e:52:09:a0:3b:
         34:56:7c:49:92:ba:6a:db:45:00:c9:f8:23:64:98:20:6d:27:
         d8:ed:07:4c:62:39:ab:8e:7a:3c:e1:af:d8:11:51:ca:06:9c:
         c4:4a:18:d2:5e:e9:8d:fe:65:76:61:41:ed:88:3b:9d:81:ab:
         53:23:17:9f:a3:e7:f1:c5:f6:9f:6e:39:91:5e:ee:f2:44:a3:
         56:dc:d0:86:05:a9:7e:ef:b0:7b:3c:bd:0a:82:e0:92:55:62:
         65:83:fd:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 12:58:37 2026 by rpki-client