Error: rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.mft
File:                     vrSxu7fVcIC59vRklvwUZwX0Mfc.mft (raw, json)
Hash identifier:          OJTd4U+20l3vJBEJ8B5FsQU0Vjq19NJhhln3YolVAD0=
Subject key identifier:   E5:EA:31:48:79:68:DE:34:32:9D:E2:84:B6:25:86:A0:ED:35:60:68
Authority key identifier: BE:B4:B1:BB:B7:D5:70:80:B9:F6:F4:64:96:FC:14:67:05:F4:31:F7
Certificate issuer:       /CN=F365765FAF/serialNumber=BEB4B1BBB7D57080B9F6F46496FC146705F431F7
Certificate serial:       0121
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vrSxu7fVcIC59vRklvwUZwX0Mfc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.mft
Manifest number:          011B
Signing time:             Sat 26 Sep 2026 05:20:46 +0000
Manifest this update:     Sat 26 Sep 2026 05:20:45 +0000
Manifest next update:     Mon 28 Sep 2026 05:20:45 +0000
Files and hashes:         1: vrSxu7fVcIC59vRklvwUZwX0Mfc.crl (hash: 9H9NQFsu02xYqAloo+cdqFxnzGJ5B5EWxPTbHpfF6Mg=)
                          2: 8CF30386058A11F1A72195A5DAE4EC9C.roa (hash: C95tO9TS1ZdCb5Dj1rN7bJt39X5z6UyZZBVb/aGhVvw=)
                          3: 3EF11F18020811F183569A86DAE4EC9C.roa (hash: LwF0R8Np+QyIRUBb++EGu0f4gRD7bktO+etHrbXuPpc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vrSxu7fVcIC59vRklvwUZwX0Mfc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365765FAF, serialNumber=BEB4B1BBB7D57080B9F6F46496FC146705F431F7
        Validity
            Not Before: Sep 26 05:20:45 2026 GMT
            Not After : Sep 28 05:20:45 2026 GMT
        Subject: CN=6ab7562e-d739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:34:72:72:26:77:65:bf:ee:6b:06:0f:9e:81:
                    37:a0:a8:4b:d6:3f:de:4b:cd:30:a1:57:89:1e:90:
                    3b:6d:2d:17:84:5e:32:72:98:70:2d:df:ae:8b:83:
                    08:22:17:00:ad:3c:57:67:ce:1d:14:4c:6a:6f:0a:
                    49:2c:37:64:bb:70:f2:a3:9d:5d:c9:7e:bb:54:0a:
                    c5:70:1e:1c:3a:da:db:c5:dd:19:95:72:77:ab:50:
                    ec:dd:53:68:64:b6:6a:30:8a:ef:1e:ed:8b:c2:24:
                    d7:86:b1:0c:be:d6:a2:42:f9:50:63:fe:a9:e2:80:
                    3c:f1:6a:05:f8:c2:f3:ac:34:88:3a:ae:ee:63:1e:
                    27:87:2f:05:f5:26:f8:34:ae:e2:96:f2:d9:2d:4b:
                    93:a8:44:d0:a8:86:d2:88:c4:5b:8d:81:e9:b3:cf:
                    20:21:25:d4:5c:a8:44:a4:fa:88:7d:0d:c9:8e:34:
                    03:87:90:9f:1d:3c:fa:8a:f6:d7:2e:0d:55:94:89:
                    6a:36:21:34:c3:bc:10:62:d3:a5:37:bd:d8:1d:14:
                    c6:3e:4a:c8:0f:1c:ad:92:19:5d:bf:3d:ab:4f:ce:
                    14:c4:e4:5b:3b:46:a4:68:75:f1:86:fd:4a:b6:35:
                    88:d8:93:bf:11:b0:5c:ec:05:5d:b8:29:1b:06:9a:
                    27:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EA:31:48:79:68:DE:34:32:9D:E2:84:B6:25:86:A0:ED:35:60:68
            X509v3 Authority Key Identifier:
                keyid:BE:B4:B1:BB:B7:D5:70:80:B9:F6:F4:64:96:FC:14:67:05:F4:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrSxu7fVcIC59vRklvwUZwX0Mfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365765F/E81D06FEE9FA11F09E5B33D1DAE4EC9C/vrSxu7fVcIC59vRklvwUZwX0Mfc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:db:39:42:13:23:90:76:5a:39:7e:e8:6a:07:64:0c:16:a7:
         1e:a1:fe:c1:58:46:b4:f1:fe:a6:c8:d8:89:b9:e3:90:42:15:
         f0:76:2e:7b:2b:28:c7:cc:70:d6:5d:25:19:ce:b0:67:b7:a0:
         5d:8d:d0:1a:75:46:48:e7:ca:6b:d8:72:78:7a:c4:af:a3:6d:
         7f:ee:38:f8:bd:6b:3c:dd:bc:ff:26:1d:c6:a1:b0:23:c1:37:
         80:b2:fc:2d:88:1c:2f:67:40:27:97:ad:a7:f8:dd:bc:82:06:
         eb:78:8b:e9:65:8f:4e:c5:5d:da:a9:74:54:d2:0d:ad:f8:0a:
         2e:d0:ae:dc:db:de:52:c9:05:2f:7c:90:18:47:25:bd:8a:d8:
         4c:6d:05:d4:8e:e5:c8:ca:af:97:b7:d4:47:52:96:b0:11:88:
         d2:83:d7:87:84:fa:3e:f9:1c:51:13:db:e1:f8:16:f8:56:9a:
         f1:dd:2f:c9:5c:17:c4:13:18:99:1f:df:8a:bd:fc:89:7c:74:
         f4:c6:3a:68:7b:68:4b:d8:9a:a4:1e:fc:23:58:25:5a:b2:44:
         d7:61:91:46:c0:26:3b:35:d7:c8:d2:ee:cb:95:00:57:9e:9e:
         02:ac:17:5a:32:19:98:fa:6f:f0:d5:74:01:8a:3c:3b:e3:f3:
         f9:6a:67:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:08:18 2026 by rpki-client