Error: rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft
File:                     lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft (raw, json)
Hash identifier:          72M6Y0p1tTFXvv966hnX/GSvw5isCuJ/0FuOmWwNqsk=
Subject key identifier:   71:CE:A4:CA:EF:37:EC:61:C4:43:F3:57:C6:5C:D7:9A:36:15:B4:51
Authority key identifier: 94:E8:15:94:24:16:33:32:76:44:BC:4D:57:D1:93:31:48:52:41:B0
Certificate issuer:       /CN=F366A108AF/serialNumber=94E81594241633327644BC4D57D19331485241B0
Certificate serial:       4C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft
Manifest number:          4B
Signing time:             Sat 03 Oct 2026 05:44:56 +0000
Manifest this update:     Sat 03 Oct 2026 05:44:56 +0000
Manifest next update:     Mon 05 Oct 2026 05:44:56 +0000
Files and hashes:         1: lOgVlCQWMzJ2RLxNV9GTMUhSQbA.crl (hash: 0vHGLkZ19gcNoofJ4X3VpERHBvQLJNj41eNeGz21gK0=)
                          2: 5DA612BC85CD11F1BE9695CFCE1D38B0.roa (hash: JUY5CSxrl4d2MBblacg+dxuEsUvd0vuB9NNTqSIPLJI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A108AF, serialNumber=94E81594241633327644BC4D57D19331485241B0
        Validity
            Not Before: Oct  3 05:44:56 2026 GMT
            Not After : Oct  5 05:44:56 2026 GMT
        Subject: CN=6ac09658-3c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8e:8e:e8:d3:23:ca:31:af:37:b0:c3:8c:ef:
                    1e:94:fc:08:0f:b6:97:a8:c9:d7:6e:84:25:ff:de:
                    d0:f8:f4:c4:2f:98:f6:ff:b6:f9:b3:d3:bf:74:a9:
                    24:47:89:e7:41:b7:85:7d:d8:63:84:e6:04:6c:68:
                    65:66:15:98:a0:8d:83:16:45:31:da:c0:1c:f0:17:
                    4b:4b:ca:44:79:18:ce:65:cf:17:37:74:d3:06:e9:
                    1b:8e:76:ad:91:e5:21:35:5a:94:5f:2d:cb:ba:92:
                    35:38:88:fc:45:94:37:56:13:f6:37:f0:ea:51:51:
                    be:f5:23:1b:8f:fb:16:9b:99:2f:2a:9a:dc:c1:ec:
                    eb:f0:eb:52:88:1a:47:73:0f:10:ec:64:28:04:b9:
                    45:8e:5a:0c:8f:09:96:7a:15:dc:7f:e8:a9:c2:b6:
                    d6:3c:b9:02:7b:74:8f:1b:a3:96:a9:c0:55:ee:9f:
                    93:cd:ff:c7:d5:7f:53:e8:b2:5c:20:06:eb:6e:c0:
                    02:2d:09:49:30:5f:de:2f:3d:96:42:9c:be:43:de:
                    81:c8:e8:0c:c7:01:30:10:4c:c2:7c:f9:cc:60:ac:
                    34:c2:e0:48:37:10:9e:d5:c6:75:c0:c6:27:c8:cc:
                    4a:4d:42:bb:4b:17:f0:2f:fa:32:73:b1:ab:d7:ce:
                    6a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CE:A4:CA:EF:37:EC:61:C4:43:F3:57:C6:5C:D7:9A:36:15:B4:51
            X509v3 Authority Key Identifier:
                keyid:94:E8:15:94:24:16:33:32:76:44:BC:4D:57:D1:93:31:48:52:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:15:2e:47:28:00:b2:b1:f7:90:68:3a:4a:9c:e8:86:5d:89:
         01:10:e0:d1:ec:73:f0:62:c4:b4:d3:c7:af:a0:cd:8c:ee:c8:
         03:b4:58:16:0f:f3:eb:07:45:c9:e7:49:98:7d:0d:1a:72:49:
         e1:cf:c2:26:aa:be:89:92:de:ce:7d:78:ea:e5:7f:85:61:53:
         7b:86:9c:73:53:b2:6d:d2:7a:6d:bf:9d:d4:67:a2:6d:40:69:
         f5:6e:63:06:dd:20:06:cb:f2:b9:72:ad:3f:7d:0a:c9:e7:35:
         ce:72:78:6b:5e:51:6c:74:2b:78:54:e4:20:6c:b0:33:ab:52:
         ae:5c:18:39:ec:f4:8d:14:94:3b:41:2d:50:40:b1:b1:c7:b4:
         71:6f:0e:05:e5:c5:bb:9e:3d:0c:65:42:6f:a3:2d:a5:4e:62:
         ab:6a:a8:45:f4:2b:b9:b1:54:9c:40:ce:dc:c1:e9:7a:e3:42:
         9a:00:aa:4a:35:b3:20:65:75:80:37:32:6d:4c:d1:f4:f8:f2:
         65:3e:7e:12:f5:90:6e:bc:9a:90:7d:94:bc:fd:e6:99:31:8d:
         79:2e:82:de:a8:8a:e3:45:95:cb:fd:f2:d9:0a:9b:52:8a:3b:
         ff:5d:05:9a:b9:c0:73:c1:63:28:4b:3f:1e:ed:fc:aa:fd:4b:
         bc:96:10:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 20:15:41 2026 by rpki-client