Error: rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
File:                     PaPdrk_VdL362y_nUk1dMDdBNSw.mft (raw, json)
Hash identifier:          UD9Sr7gAED4UOElbY7AFRzPkttVJ8NQolqR94G6i7GU=
Subject key identifier:   82:CC:FF:4C:1F:A5:3D:95:B5:16:19:13:2D:E5:F2:07:E1:F3:02:8F
Authority key identifier: 3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
Certificate issuer:       /CN=F364321AAF/serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Certificate serial:       055D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
Manifest number:          054B
Signing time:             Sun 27 Sep 2026 03:18:34 +0000
Manifest this update:     Sun 27 Sep 2026 03:18:33 +0000
Manifest next update:     Tue 29 Sep 2026 03:18:33 +0000
Files and hashes:         1: PaPdrk_VdL362y_nUk1dMDdBNSw.crl (hash: n/2/e+XAAHYQaye3DiPVaKi1KFrWNhmCeC+zquvkzFE=)
                          2: 1A1D9BECEBCB11F09E0410EDDAE4EC9C.roa (hash: njBEAYyeE13L7hwKuylMPnhFqWs8iIjgMKwO4UOalDA=)
                          3: FA23FE86EBC911F098EC42E8DAE4EC9C.roa (hash: 6WEXWYnxvkmVQEP1jzW/Pz3xmGAn2g9CkuxNT4P4jmg=)
                          4: 992FA664EBCB11F0A7D619F1DAE4EC9C.roa (hash: zZRAIBdNfBKB6fz/DNNuYj5c+DfSvaBMkWqN6VwnGPM=)
                          5: F8A9F802EBCA11F0B9AFC4ECDAE4EC9C.roa (hash: nSknsDYYYJnn+lCfqpzwlbN0d4eI+Bn18dgOsKwvrvk=)
                          6: C9FD6A66EBCA11F0B1686FECDAE4EC9C.roa (hash: KWF2f6lklc+ISvDAOfQP/bnZ/qUCac/YisXkzWEtuAw=)
                          7: 6F48BC0AEBCB11F094B6D4F0DAE4EC9C.roa (hash: 4C7RxLwmS+HXtTI3Lpt4dwbN1rnFWByFUC0JY7JL8FA=)
                          8: 4955127EEBCA11F0AAE097E8DAE4EC9C.roa (hash: mISb5qk7uM7oKcgoTiGz0TVTQJ1Qe/xAOoe6Gs8i6hI=)
                          9: 3E2015A6EBCB11F0994B08EFDAE4EC9C.roa (hash: xyumajGBZo8f2Kt7CWNuZkx9MaepmHY8lnKOJNSa75E=)
                          10: 36DE8CDCBA9A11EE8EE57253775412E6.roa (hash: Ofy9Cj7JPi8QcyiEvVuGnm/0E9xZicOnWmScEweKsok=)
                          11: 7FB7EBF0DD3C11EE8D38ADB5775412E6.roa (hash: yMYM5ilbWZrOMGdDFP4fl7JNSPCdYUXOdgDCY0ZGvMA=)
                          12: 75C1E27EEBCA11F0B98197EADAE4EC9C.roa (hash: VUwaiFh2a52KhyQLVFXCDY0kMKiUeo37HnTzfGi7QQ4=)
                          13: 99017F56EBCA11F09168A1EADAE4EC9C.roa (hash: 9iWNRVakTa4Fkk+IlMpLZh0je4RlQDz/mrMuIloUDbc=)
                          14: 68A7680A595611EFA6EA977A762E951A.roa (hash: 4KvhV/9vsC0Llr34GI+s1jGqdxl+ushBovv44svidrk=)
                          15: 9A80C77C595611EF8984CD7A762E951A.roa (hash: ZdMpYI32B75UuK8vGc3RW46+xhLMuTA2Hwcvv0zVVdA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1373 (0x55d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAF, serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
        Validity
            Not Before: Sep 27 03:18:33 2026 GMT
            Not After : Sep 29 03:18:33 2026 GMT
        Subject: CN=6ab88b0a-e868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:08:0b:f6:32:59:3a:0c:57:c1:7c:a8:5f:fe:
                    39:d8:9a:70:39:d3:61:19:95:09:d5:d6:36:02:60:
                    9e:f0:da:de:6f:87:7b:24:23:f0:9b:fd:31:e4:a8:
                    85:4a:04:88:cb:6b:f1:bc:a3:77:78:e5:60:79:bf:
                    00:ca:a6:0c:4b:d0:22:43:51:cc:15:45:8a:37:08:
                    5f:33:47:d3:45:8b:25:2c:74:99:0c:62:88:31:0c:
                    5c:6e:d8:b3:bc:67:21:4f:f4:0b:d1:f1:cd:0d:a2:
                    b8:87:7a:c8:cd:3f:83:74:2c:fe:a2:5c:9e:11:70:
                    4e:6b:d3:27:cf:1d:d7:54:9c:6d:87:19:1c:41:bf:
                    ca:24:f9:92:09:d9:61:07:fc:f5:34:2b:9d:b6:ec:
                    f9:3b:b4:5f:19:f4:de:f7:c1:df:6d:4a:8f:81:f7:
                    63:8d:f5:01:e2:ea:42:d5:66:3f:5d:ad:94:e9:0f:
                    27:47:fc:03:7e:f9:05:5b:3b:07:f3:23:78:88:96:
                    eb:a1:86:b2:58:58:e2:e0:38:24:92:54:99:d0:06:
                    ea:f4:71:ff:03:3b:90:2d:e3:53:bd:70:fe:bc:07:
                    5d:f3:98:2d:bf:21:e5:10:80:77:1d:fa:a2:3b:dd:
                    13:1e:ca:6a:33:d2:93:59:55:6d:b4:4e:25:7c:91:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CC:FF:4C:1F:A5:3D:95:B5:16:19:13:2D:E5:F2:07:E1:F3:02:8F
            X509v3 Authority Key Identifier:
                keyid:3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:0e:5e:a2:12:6a:a7:c2:b3:e3:1f:15:7c:08:9d:4f:72:c2:
         3b:63:82:9f:ba:f7:b6:f3:24:7c:d8:5b:85:cb:f2:4a:49:20:
         3d:f9:01:23:47:36:cc:71:98:1a:f0:32:aa:ad:62:51:72:ae:
         2d:4d:cf:19:65:e4:80:8d:6e:d5:f7:d2:3b:6f:45:b8:48:14:
         ac:bd:d4:4c:f9:a4:cf:b5:a9:2f:af:2b:d6:41:6c:48:14:9c:
         97:0d:08:c1:06:69:33:46:4d:0c:46:96:58:53:93:04:a9:28:
         11:fc:75:14:2f:8f:b0:3c:f9:b3:a1:52:17:be:32:11:6b:23:
         11:f6:2c:c7:ad:23:26:16:bd:ca:03:5e:bc:ab:2b:75:0b:12:
         3c:38:8c:a6:d7:42:67:91:a7:93:7e:ac:e4:2c:88:93:c0:33:
         df:00:e3:92:b9:5b:14:66:7d:62:d6:f6:42:b6:bb:b9:84:bd:
         d2:5f:32:86:cb:7d:ec:0b:0b:29:eb:59:fc:ea:32:99:82:8f:
         59:d6:82:fe:8e:b6:17:2f:35:c3:10:4a:a7:20:85:bf:a6:99:
         42:da:f1:e5:f3:a2:ba:c8:3f:05:a9:ad:87:68:4f:97:da:36:
         31:73:c5:5c:11:b2:24:74:0a:ab:38:3e:e6:3f:6f:85:2f:e4:
         71:0a:7b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:07:17 2026 by rpki-client