Error: rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
File:                     7XZlKQ0TEj69LBHPCH2D_1DLck8.mft (raw, json)
Hash identifier:          nT3e5quGItmBBDzUotDo2b5nALBj+CZfy5Pf3kJRGjs=
Subject key identifier:   56:31:F6:4C:5A:5E:AD:BC:EB:74:F4:74:39:32:19:14:02:C1:B7:2E
Authority key identifier: ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
Certificate issuer:       /CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Certificate serial:       04E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
Manifest number:          04E2
Signing time:             Sun 04 Oct 2026 03:26:48 +0000
Manifest this update:     Sun 04 Oct 2026 03:26:48 +0000
Manifest next update:     Tue 06 Oct 2026 03:26:48 +0000
Files and hashes:         1: 7XZlKQ0TEj69LBHPCH2D_1DLck8.crl (hash: YdWIpmP6sfvFBmR/HuALm5OM/AaoVNTvq3HcUxBDxUk=)
                          2: 4B8EEDB40A2F11EEA86653594AD9E6FC.roa (hash: XtlDMiWVbKF1PyU7Dxovz8F8BLVHU9h4HjWuTp4MLtA=)
                          3: 1C76C5A02A1211F1AA077E8EDAE4EC9C.roa (hash: /VACYuxoqTTaL5gmeBG07ODh6HS3FM68Nf+7j7dfxrk=)
                          4: D7EB6984752A11EEB254CC514AD9E6FC.roa (hash: e8Yg1q8uhr1rstOhjFp5SdC4n2JFQo6GzBoRmLQV7es=)
                          5: 8E2AFAC4048E11EEA671536C4AD9E6FC.roa (hash: 6Jqn2aGmjDcmImvw5mjB/z8k1HYXJolq+lf84m8vfCY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 03:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1254 (0x4e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C329AF, serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
        Validity
            Not Before: Oct  4 03:26:48 2026 GMT
            Not After : Oct  6 03:26:48 2026 GMT
        Subject: CN=6ac1c778-94a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4c:87:0a:0f:40:fa:7d:f5:78:79:4d:a5:ab:
                    5b:85:fe:59:1f:89:15:06:f7:2d:a3:25:ff:80:0b:
                    63:e3:c8:d8:35:13:5e:31:e6:85:49:54:57:c5:47:
                    d3:b9:b1:0b:30:53:1b:77:80:26:69:25:e4:24:a5:
                    79:27:66:81:15:3f:48:ce:8a:70:42:2f:98:87:da:
                    2b:cb:4e:be:db:ba:ea:0d:69:5f:18:96:2b:bd:2e:
                    ea:6f:77:54:14:2d:ac:27:1c:2f:3e:16:00:cc:96:
                    0c:68:2c:79:53:19:b3:7a:23:3f:8a:70:7f:91:86:
                    37:ed:9a:c0:c3:b0:26:55:b2:84:44:62:75:71:39:
                    da:ab:6b:ec:70:4b:5e:31:04:2d:bc:a3:10:39:0b:
                    4b:16:4b:b4:68:2f:2e:ff:5e:7b:d6:ca:12:2f:e8:
                    05:bd:69:82:0c:76:77:94:45:91:32:93:40:64:c6:
                    3b:07:9e:80:13:4b:58:06:74:06:f2:86:ac:e8:65:
                    5a:a9:99:4b:35:27:61:91:d1:42:1b:c2:f1:b9:6e:
                    60:f5:72:0e:00:ea:12:d6:a0:9c:a8:b7:98:8e:03:
                    c7:41:6a:12:50:8f:6e:31:66:92:cb:36:e2:bf:0f:
                    c7:70:92:b0:e1:55:69:bc:9b:f8:98:e0:20:b3:c9:
                    f8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:31:F6:4C:5A:5E:AD:BC:EB:74:F4:74:39:32:19:14:02:C1:B7:2E
            X509v3 Authority Key Identifier:
                keyid:ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:63:37:3d:91:e0:0b:64:f5:de:81:65:da:47:c3:f5:6f:
         e3:ff:0b:ee:39:6b:9f:5a:1f:6c:1e:99:1c:3e:c0:59:36:b2:
         64:28:df:5d:b2:e9:d6:5c:d5:8c:93:35:95:f0:31:0a:d1:10:
         84:1b:3d:fe:b6:53:04:a7:ca:d4:a3:9b:64:10:60:51:39:11:
         36:5a:c4:0a:90:4d:e5:58:eb:af:73:e1:f5:24:36:cd:02:e0:
         5f:ad:19:5e:59:c6:18:d6:df:0b:a0:3d:11:ac:1c:c1:cf:b5:
         7f:7e:1b:1d:ca:f4:8e:7c:fd:48:97:12:36:6c:a9:d4:9d:66:
         18:2b:10:38:8b:52:32:68:b2:ed:4b:e6:20:a0:a1:0e:5f:b8:
         c6:3c:e3:8a:af:cb:5c:00:13:a5:83:41:4f:5d:4a:b2:93:e1:
         0b:42:2b:c5:d9:86:53:1f:da:c1:d2:c6:5b:f3:72:de:81:2e:
         35:b4:7b:cc:69:9b:b0:ce:18:de:26:6a:f4:d1:82:71:b9:5a:
         a9:b9:10:e0:2d:e5:7b:25:6a:32:fa:df:c4:cd:1f:e9:43:56:
         7f:55:f4:61:b6:c3:43:db:f6:fa:37:a1:b0:58:be:38:af:04:
         5b:24:fc:e3:3a:c1:bd:b9:66:59:83:aa:68:96:e4:f4:ed:c5:
         d9:d8:c8:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 12:58:33 2026 by rpki-client