Error: rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.mft
File:                     _4-lTp7iMzfZgPqm_xtMUoRP-Ng.mft (raw, json)
Hash identifier:          Mc3GUk8A09NpcYNaoVAwm0V7JBFjpIMMM9ef33lM6Lc=
Subject key identifier:   65:99:3A:17:8E:90:D7:F7:44:26:E2:A6:43:99:C6:82:D5:0D:F3:4D
Authority key identifier: FF:8F:A5:4E:9E:E2:33:37:D9:80:FA:A6:FF:1B:4C:52:84:4F:F8:D8
Certificate issuer:       /CN=F368B25FAF/serialNumber=FF8FA54E9EE23337D980FAA6FF1B4C52844FF8D8
Certificate serial:       37
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.mft
Manifest number:          36
Signing time:             Thu 24 Sep 2026 05:48:11 +0000
Manifest this update:     Thu 24 Sep 2026 05:48:10 +0000
Manifest next update:     Sat 26 Sep 2026 05:48:10 +0000
Files and hashes:         1: _4-lTp7iMzfZgPqm_xtMUoRP-Ng.crl (hash: xtRSfLMSCcBy2VJLFdxz1PuomImJWdYlwLDdECEPVSw=)
                          2: C40549888F0011F1918F32FFCE1D38B0.roa (hash: wFWmr0oJ7v1BsIvog0c7NfbbwrWinf932c1fPe3tfYg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:48:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B25FAF, serialNumber=FF8FA54E9EE23337D980FAA6FF1B4C52844FF8D8
        Validity
            Not Before: Sep 24 05:48:10 2026 GMT
            Not After : Sep 26 05:48:10 2026 GMT
        Subject: CN=6ab4b99b-8236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:e7:96:58:ad:84:a7:55:bc:f3:d1:29:ef:
                    fc:be:c1:2d:00:8b:a4:dd:61:4c:57:7c:36:73:e7:
                    ce:94:0e:a7:bf:81:37:54:45:77:ab:32:85:2f:b0:
                    70:58:99:31:51:6a:c7:94:59:c5:22:43:cb:9f:0d:
                    8c:52:12:b5:8e:14:7b:a0:57:d1:f8:bc:db:19:3c:
                    7f:9a:aa:44:ba:5e:61:0d:b2:f9:09:4c:31:e2:19:
                    30:8f:29:7c:8d:c7:11:c1:21:b4:bc:03:ed:07:6f:
                    0d:41:26:ba:2b:e3:80:b1:d3:84:d9:1a:78:da:87:
                    ca:41:0b:87:71:9a:26:5c:42:74:d1:6b:44:5f:ab:
                    db:98:fb:ac:a9:cf:94:0f:0b:87:d2:8a:d2:32:91:
                    14:61:09:76:86:5c:10:c9:d6:4d:1d:39:f1:de:25:
                    d4:48:72:41:66:a2:79:c9:ed:0a:de:7f:64:c2:d3:
                    7e:55:99:eb:94:71:6b:aa:78:a9:5c:2c:49:5f:dc:
                    41:2d:10:73:99:ed:a6:6f:3c:47:20:d3:de:d8:81:
                    6a:1a:e9:b1:c6:ae:96:36:b4:ad:21:99:ec:f0:aa:
                    32:7e:25:cf:45:ac:41:2b:cf:f8:61:58:7d:c0:78:
                    18:a1:2a:2c:1f:04:74:17:95:61:37:3f:ef:9e:9d:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:99:3A:17:8E:90:D7:F7:44:26:E2:A6:43:99:C6:82:D5:0D:F3:4D
            X509v3 Authority Key Identifier:
                keyid:FF:8F:A5:4E:9E:E2:33:37:D9:80:FA:A6:FF:1B:4C:52:84:4F:F8:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B25F/B696889A8EFE11F18E35ACF2CE1D38B0/_4-lTp7iMzfZgPqm_xtMUoRP-Ng.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:95:3f:d3:41:bb:71:97:21:f7:66:1e:25:4a:87:a9:3d:b7:
         c6:75:39:16:de:84:bb:53:ef:32:fa:d2:c8:21:cd:7f:12:46:
         78:11:fa:55:81:9a:d9:da:21:28:0d:7a:3d:1a:dc:74:ea:79:
         94:8e:fd:88:a8:63:75:29:7a:23:19:e1:b9:d3:9e:ed:7b:27:
         78:1d:50:11:33:61:fc:a5:11:f9:01:f7:00:d1:92:35:df:02:
         91:18:22:3c:d2:43:7b:64:f2:0c:57:7d:a3:99:43:6b:ee:95:
         8b:80:ea:49:fe:f2:2d:49:1c:22:7a:da:99:40:ac:61:85:70:
         d2:bc:dc:a3:f8:8e:b7:60:c2:62:89:0b:64:9b:03:80:4a:47:
         fe:ce:cc:4c:b2:f3:94:95:e5:e8:7a:e9:a7:c6:f6:29:f9:31:
         f2:29:db:57:47:5b:43:6c:ab:93:68:72:e3:56:ae:f0:76:69:
         ab:5e:92:8e:de:3a:4d:3a:46:bb:1f:bc:7b:2f:93:48:3d:41:
         a4:db:3d:07:b4:cb:85:c1:95:b0:ce:f2:3c:2c:d7:70:8f:ff:
         ed:2c:ec:50:59:99:1c:83:50:3b:23:a2:3a:61:01:fb:e0:1c:
         80:ef:3a:c8:70:d3:55:02:05:5e:6e:3e:e6:f8:11:fe:db:47:
         2a:b2:a7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:01:36 2026 by rpki-client