Error: rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
File:                     kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft (raw, json)
Hash identifier:          UnhR8QMEkpJHiS7p1i1sb476EvMnXGWCP0P/rn7FTgE=
Subject key identifier:   56:A7:9D:2A:44:86:28:05:8E:E2:2A:DC:43:40:DD:5C:08:57:9F:5D
Authority key identifier: 90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D
Certificate issuer:       /CN=F366F2B5AF/serialNumber=9093645F56187261E65B708274DBD52C00DF250D
Certificate serial:       032A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
Manifest number:          0328
Signing time:             Sun 15 Nov 2026 04:28:27 +0000
Manifest this update:     Sun 15 Nov 2026 04:28:26 +0000
Manifest next update:     Tue 17 Nov 2026 04:28:26 +0000
Files and hashes:         1: kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl (hash: UkZlbkQWUSwfcZvezH4IzadOD/D8EkcSCocuAA+kJEU=)
                          2: 6217C884742E11EFA821E659762E951A.roa (hash: DqF+PQ0X8r1rRPiZ8RZ4fS3gA5sEXR5BPLyS3G+8cdE=)
                          3: 132CDF5C741511EFA9C5BABD762E951A.roa (hash: 02xv9vPnDrOOLcJupKl7YdL1bTFmoSlfefstM9Glp04=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F2B5AF, serialNumber=9093645F56187261E65B708274DBD52C00DF250D
        Validity
            Not Before: Nov 15 04:28:26 2026 GMT
            Not After : Nov 17 04:28:26 2026 GMT
        Subject: CN=6af934eb-4af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5f:75:78:22:b5:b3:42:26:2a:46:89:a0:dc:
                    9e:8e:cd:84:ba:e5:f6:dc:8e:9f:d1:a7:20:75:2f:
                    b0:14:ff:51:0a:ac:e9:38:d1:2e:2f:7d:10:42:89:
                    1b:aa:3d:e9:6e:7f:c9:a5:4a:e8:eb:8e:24:de:f8:
                    0a:ae:a7:3c:28:80:9c:79:91:fb:d5:ed:0e:a3:9a:
                    4f:d2:62:6a:61:bd:e3:87:57:0f:2c:f4:45:c9:3b:
                    e6:d4:86:b1:c5:a7:db:59:fb:be:86:9f:bb:67:f3:
                    ac:41:07:d9:c0:c8:cd:45:ce:23:e7:d2:e7:a4:32:
                    d5:05:a7:d8:1e:82:14:20:ad:d9:1e:fa:74:21:14:
                    2d:3b:41:0d:8b:47:f4:86:0b:93:01:f2:0c:7d:40:
                    84:67:24:eb:ae:54:c1:de:bc:56:a9:6f:e0:3a:e0:
                    34:2e:4d:4a:92:a3:9a:a8:ac:81:c9:70:ca:24:fa:
                    f6:95:67:86:1b:47:18:42:f2:5d:12:22:ec:5a:f6:
                    c0:57:3a:9f:21:cc:40:ad:ad:6b:a6:72:82:6d:53:
                    2d:82:c2:f4:b2:21:78:41:c1:9e:5e:1c:b4:5a:4a:
                    6a:92:2e:80:4b:96:99:3e:93:16:36:3c:3f:6b:b3:
                    1d:aa:c1:11:f6:a8:b9:7a:67:03:75:d3:dd:30:01:
                    c1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A7:9D:2A:44:86:28:05:8E:E2:2A:DC:43:40:DD:5C:08:57:9F:5D
            X509v3 Authority Key Identifier:
                keyid:90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:8e:6f:da:f0:24:e9:76:08:cf:01:32:ac:70:6e:90:ca:
         43:97:87:07:f9:0b:96:9c:de:30:4e:43:c9:ad:3e:27:66:5c:
         f8:04:6f:aa:cf:67:e3:f8:cc:9c:11:a3:01:27:af:fa:1a:1f:
         9e:a4:a7:52:43:32:23:d4:0c:3a:51:29:45:68:43:04:6f:55:
         83:2b:fa:de:7e:27:03:33:6b:f7:3c:09:f2:5b:c3:18:58:fc:
         2f:38:ee:51:63:1c:be:97:fb:77:77:15:93:84:51:f5:d4:f2:
         94:4d:1a:44:97:03:ad:82:30:5a:45:cf:54:0d:7e:c2:ab:5b:
         c0:cb:d5:e0:a5:9f:8d:e9:79:80:1a:81:ed:b1:5e:e0:1e:7d:
         22:f9:97:e8:ec:9d:a6:cc:2e:0f:9d:09:6d:a7:f1:25:37:eb:
         61:0b:d2:39:b0:3c:22:2f:6b:cc:cc:16:4c:18:3a:9f:c6:5d:
         53:2e:f0:26:ff:89:6a:1b:3f:c9:64:ca:27:bb:27:cd:af:4a:
         03:d6:aa:06:53:9e:94:2e:36:4e:7b:bd:eb:49:2a:d3:7d:75:
         eb:30:c1:c9:85:ff:e8:b4:d9:5e:df:6f:4b:5c:04:ab:68:9d:
         08:13:75:a5:f9:d3:32:11:10:a3:68:fb:c7:db:25:56:d7:87:
         18:ef:01:3e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAyowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkYyQjVBRjExMC8GA1UEBRMoOTA5MzY0NUY1NjE4NzI2MUU2NUI3MDgyNzREQkQ1
MkMwMERGMjUwRDAeFw0yNjExMTUwNDI4MjZaFw0yNjExMTcwNDI4MjZaMBgxFjAU
BgNVBAMTDTZhZjkzNGViLTRhZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCXX3V4IrWzQiYqRomg3J6OzYS65fbcjp/RpyB1L7AU/1EKrOk40S4vfRBC
iRuqPeluf8mlSujrjiTe+AqupzwogJx5kfvV7Q6jmk/SYmphveOHVw8s9EXJO+bU
hrHFp9tZ+76Gn7tn86xBB9nAyM1FziPn0uekMtUFp9geghQgrdke+nQhFC07QQ2L
R/SGC5MB8gx9QIRnJOuuVMHevFapb+A64DQuTUqSo5qorIHJcMok+vaVZ4YbRxhC
8l0SIuxa9sBXOp8hzECtrWumcoJtUy2CwvSyIXhBwZ5eHLRaSmqSLoBLlpk+kxY2
PD9rsx2qwRH2qLl6ZwN1090wAcE1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVqed
KkSGKAWO4ircQ0DdXAhXn10wHwYDVR0jBBgwFoAUkJNkX1YYcmHmW3CCdNvVLADf
JQ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGMkI1L0E5QzA2QThDNzQxMTExRUY4QjBBOURBODc2MkU5NTFBL2tKTmtY
MVlZY21IbVczQ0NkTnZWTEFEZkpRMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tKTmtYMVlZY21IbVczQ0NkTnZWTEFEZkpRMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkYyQjUvQTlDMDZBOEM3NDExMTFFRjhCMEE5REE4NzYy
RTk1MUEva0pOa1gxWVljbUhtVzNDQ2ROdlZMQURmSlEwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhn45v2vAk6XYIzwEyrHBukMpDl4cH
+QuWnN4wTkPJrT4nZlz4BG+qz2fj+MycEaMBJ6/6Gh+epKdSQzIj1Aw6USlFaEME
b1WDK/reficDM2v3PAnyW8MYWPwvOO5RYxy+l/t3dxWThFH11PKUTRpElwOtgjBa
Rc9UDX7Cq1vAy9XgpZ+N6XmAGoHtsV7gHn0i+Zfo7J2mzC4PnQltp/ElN+thC9I5
sDwiL2vMzBZMGDqfxl1TLvAm/4lqGz/JZMonuyfNr0oD1qoGU56ULjZOe73rSSrT
fXXrMMHJhf/otNle329LXASraJ0IE3Wl+dMyERCjaPvH2yVW14cY7wE+
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:58:45 2026 by rpki-client