Error: rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
File:                     BrHYy0U_06Fn6NMS7FHliT3ZldY.mft (raw, json)
Hash identifier:          legmTbf+6KGTtLQEWq3W+pW0BYDU3WwwEoCMKGhha7w=
Subject key identifier:   BC:BE:95:31:71:A1:ED:92:E2:83:7F:46:8E:5E:5B:77:DC:FE:10:83
Authority key identifier: 06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6
Certificate issuer:       /CN=F36424BFAF/serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
Certificate serial:       B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
Manifest number:          AD
Signing time:             Fri 25 Sep 2026 05:33:47 +0000
Manifest this update:     Fri 25 Sep 2026 05:33:46 +0000
Manifest next update:     Sun 27 Sep 2026 05:33:46 +0000
Files and hashes:         1: BrHYy0U_06Fn6NMS7FHliT3ZldY.crl (hash: ququVelnwpIHicvChNXEr4QPd2bhg05Ai6HoeknEkkk=)
                          2: 4FCC04223A6811F1A30B30AACE1D38B0.roa (hash: kWGqFsDRkG7kv8ZBBDntu5jcnDPJI4Lk8Rn5mfMvSuc=)
                          3: E4A196DE6D3511F190F679C4CE1D38B0.roa (hash: DqqNtCv2J0m/YTmVgx1Zji0Sq7WVGYRU6ErfG4VCz8s=)
                          4: 477F59F8926B11F1A92F96AECE1D38B0.roa (hash: uQVq7Gjo93FvXWyjzsIebyIBSq67/k5Da2HjlS8In2E=)
                          5: 52A93FF2930F11F19CAE3214CF1D38B0.roa (hash: TJ6vhlA0WJoMlCTnSsE4i/vZ7IFEuMO0aOPBkm+ThW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:33:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36424BFAF, serialNumber=06B1D8CB453FD3A167E8D312EC51E5893DD995D6
        Validity
            Not Before: Sep 25 05:33:46 2026 GMT
            Not After : Sep 27 05:33:46 2026 GMT
        Subject: CN=6ab607bb-85a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:d3:4b:0a:2f:ad:b5:92:74:13:8d:22:56:
                    f6:d9:cc:9f:7b:9c:d0:01:eb:10:db:24:bc:7d:bb:
                    55:45:7f:7d:cf:65:2b:4c:f9:46:cc:4c:61:aa:c6:
                    8c:65:54:33:99:90:75:46:53:c7:56:bb:1c:97:3e:
                    3e:95:fb:d3:90:9d:71:77:91:cc:db:d7:eb:63:96:
                    eb:91:49:d4:9e:01:b5:a3:fd:02:85:d3:c6:60:d4:
                    c0:a5:9b:6d:12:95:6c:31:8d:e1:3e:25:20:2a:36:
                    08:15:ed:03:d1:db:c0:dc:5a:8d:fd:7b:fc:42:17:
                    5b:dc:79:bf:05:e7:60:d0:bd:25:63:09:3d:b5:a1:
                    ed:65:dc:c3:84:db:60:0e:c3:17:76:2e:ea:4c:7c:
                    50:cd:c9:f6:d4:7e:cc:97:8f:cc:1a:63:4b:84:31:
                    43:37:24:cf:a0:97:b8:2a:58:76:d5:06:e0:12:c5:
                    64:af:21:62:e5:65:c9:66:8e:3e:eb:4f:1a:bd:24:
                    07:ba:3b:36:8a:ba:f0:cb:6e:f3:3f:26:22:5f:e2:
                    39:55:bf:69:07:5d:18:44:b0:a2:f0:64:80:ed:40:
                    61:16:c8:4c:fe:0f:11:da:a6:d0:e7:1b:7d:b8:9f:
                    c2:4e:49:c0:6f:7d:0b:f0:ae:f9:1b:09:7a:cb:5d:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BE:95:31:71:A1:ED:92:E2:83:7F:46:8E:5E:5B:77:DC:FE:10:83
            X509v3 Authority Key Identifier:
                keyid:06:B1:D8:CB:45:3F:D3:A1:67:E8:D3:12:EC:51:E5:89:3D:D9:95:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BrHYy0U_06Fn6NMS7FHliT3ZldY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/8B42A2923A6611F1AA691F1ECF1D38B0/BrHYy0U_06Fn6NMS7FHliT3ZldY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6b:54:a7:ba:0e:eb:96:9c:7f:2b:d0:63:ab:e7:be:df:3e:
         6b:8d:60:55:14:3f:ce:35:37:fd:62:8f:d9:a8:75:87:c4:12:
         ad:75:ff:0c:f4:50:f2:45:cd:e0:8f:16:45:fb:de:14:d1:b7:
         35:77:b3:57:2d:26:09:1a:86:d2:51:b2:65:58:d7:32:46:60:
         43:61:f9:c2:15:3a:ff:7a:13:af:6f:17:4d:fd:93:7e:09:22:
         da:dc:34:70:88:09:e9:c6:3b:bd:bf:14:73:6e:f7:47:13:e8:
         e3:61:ab:1f:09:ec:7c:0f:44:84:b3:fe:5f:6f:d4:f1:52:96:
         56:a5:30:c4:cc:62:be:86:66:a0:80:64:40:d1:e0:7a:c3:53:
         47:55:b3:22:e8:53:0a:9d:b8:6a:a8:3b:a2:c7:a6:07:a3:39:
         93:89:d9:a9:ca:25:69:8f:0d:62:2a:ae:6a:68:e3:d7:4f:84:
         76:e7:26:6e:81:c2:9d:ab:03:41:90:ae:74:11:3c:6e:ef:89:
         3f:39:4f:b5:12:e9:57:9d:20:76:a5:20:15:b5:5b:83:af:ac:
         9c:7b:be:53:3e:85:46:2a:68:ee:ba:4e:d3:fa:69:b1:9a:c9:
         d5:0c:f4:fc:c9:98:b6:0b:2e:61:a9:17:9b:2f:1b:a4:2d:63:
         1d:6a:a1:5c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICALMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDI0QkZBRjExMC8GA1UEBRMoMDZCMUQ4Q0I0NTNGRDNBMTY3RThEMzEyRUM1MUU1
ODkzREQ5OTVENjAeFw0yNjA5MjUwNTMzNDZaFw0yNjA5MjcwNTMzNDZaMBgxFjAU
BgNVBAMTDTZhYjYwN2JiLTg1YTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQOdNLCi+ttZJ0E40iVvbZzJ97nNAB6xDbJLx9u1VFf33PZStM+UbMTGGq
xoxlVDOZkHVGU8dWuxyXPj6V+9OQnXF3kczb1+tjluuRSdSeAbWj/QKF08Zg1MCl
m20SlWwxjeE+JSAqNggV7QPR28DcWo39e/xCF1vceb8F52DQvSVjCT21oe1l3MOE
22AOwxd2LupMfFDNyfbUfsyXj8waY0uEMUM3JM+gl7gqWHbVBuASxWSvIWLlZclm
jj7rTxq9JAe6OzaKuvDLbvM/JiJf4jlVv2kHXRhEsKLwZIDtQGEWyEz+DxHaptDn
G324n8JOScBvfQvwrvkbCXrLXUWVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvL6V
MXGh7ZLig39Gjl5bd9z+EIMwHwYDVR0jBBgwFoAUBrHYy0U/06Fn6NMS7FHliT3Z
ldYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyNEJGLzhCNDJBMjkyM0E2NjExRjFBQTY5MUYxRUNGMUQzOEIwL0JySFl5
MFVfMDZGbjZOTVM3RkhsaVQzWmxkWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0JySFl5MFVfMDZGbjZOTVM3RkhsaVQzWmxkWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDI0QkYvOEI0MkEyOTIzQTY2MTFGMUFBNjkxRjFFQ0Yx
RDM4QjAvQnJIWXkwVV8wNkZuNk5NUzdGSGxpVDNabGRZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCma1Snug7rlpx/K9Bjq+e+3z5rjWBV
FD/ONTf9Yo/ZqHWHxBKtdf8M9FDyRc3gjxZF+94U0bc1d7NXLSYJGobSUbJlWNcy
RmBDYfnCFTr/ehOvbxdN/ZN+CSLa3DRwiAnpxju9vxRzbvdHE+jjYasfCex8D0SE
s/5fb9TxUpZWpTDEzGK+hmaggGRA0eB6w1NHVbMi6FMKnbhqqDuix6YHozmTidmp
yiVpjw1iKq5qaOPXT4R25yZugcKdqwNBkK50ETxu74k/OU+1EulXnSB2pSAVtVuD
r6yce75TPoVGKmjuuk7T+mmxmsnVDPT8yZi2Cy5hqRebLxukLWMdaqFc
-----END CERTIFICATE-----
Generated at Sat Sep 26 08:24:46 2026 by rpki-client