Error: rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
File:                     MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft (raw, json)
Hash identifier:          VAeSCC8YlmhNNT+VOL9X9lTTJpSfmFOTeGiEnIDAKYs=
Subject key identifier:   36:4F:35:FE:C0:0D:01:01:AD:01:ED:CA:C0:22:29:F6:17:8C:E4:E8
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Certificate issuer:       /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial:       0455
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
Manifest number:          0454
Signing time:             Sun 11 Oct 2026 03:47:11 +0000
Manifest this update:     Sun 11 Oct 2026 03:47:10 +0000
Manifest next update:     Tue 13 Oct 2026 03:47:10 +0000
Files and hashes:         1: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl (hash: hay3bX+t4oJ+2UDbzpcrbHoCTof330ZJr91/5Ftk5OA=)
                          2: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (hash: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                          rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AR, serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
        Validity
            Not Before: Oct 11 03:47:10 2026 GMT
            Not After : Oct 13 03:47:10 2026 GMT
        Subject: CN=6acb06bf-c8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e7:ee:b4:e0:d4:2c:32:1b:f0:5e:cc:3a:7b:
                    63:dc:9b:55:f7:89:31:0b:50:1b:bb:b1:1e:fb:92:
                    a3:df:7a:81:a1:3e:1d:20:43:07:3b:e2:21:81:94:
                    42:df:af:cf:40:8b:8d:7d:97:e3:95:59:56:ca:5a:
                    5d:75:b4:4e:b3:a3:87:c8:bd:7b:78:fa:dd:46:54:
                    d8:c8:7b:aa:3f:0b:42:c8:8b:e1:02:da:31:01:8a:
                    40:72:74:6b:1b:88:41:7a:3a:a5:4f:d9:a1:7e:36:
                    e9:01:d7:92:51:26:4f:89:54:ae:b8:f3:39:32:da:
                    e9:f7:ac:28:5e:54:b3:d4:50:cf:24:cf:fc:15:21:
                    ce:37:21:51:5a:c0:82:07:83:7a:cd:72:df:fa:e2:
                    51:b9:ec:d9:cf:a0:e9:ed:d8:e5:d3:d3:51:29:ea:
                    3b:6a:bb:67:45:8c:16:30:d4:da:77:12:12:d8:56:
                    3b:f6:89:34:2a:f3:fb:00:00:ac:dc:ac:78:6d:66:
                    73:b4:57:ff:c3:59:11:a6:58:62:c8:2b:b7:b5:a7:
                    94:fd:5f:d2:fd:ed:3e:fc:9a:b5:34:01:f9:a1:61:
                    54:f1:66:ed:0f:e1:f9:e5:28:69:c5:31:ef:c0:28:
                    a1:c4:d1:1b:d9:f9:64:59:23:55:69:66:cc:d3:55:
                    b6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:4F:35:FE:C0:0D:01:01:AD:01:ED:CA:C0:22:29:F6:17:8C:E4:E8
            X509v3 Authority Key Identifier:
                keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:8a:fc:c9:68:f5:7a:18:18:f4:59:3d:7d:b2:0c:ee:55:19:
         6e:7c:30:ba:55:5e:61:fb:26:dc:c0:79:43:db:af:ad:92:89:
         c8:48:0e:1e:3e:16:55:20:71:f5:ae:82:b6:3a:d5:ac:31:58:
         65:24:1b:b2:53:71:9b:68:ab:8a:ee:20:dd:52:91:65:03:f9:
         c0:b2:cb:3d:1d:c5:d7:75:f3:fe:15:ee:f3:88:46:e0:72:b4:
         9e:8e:cb:8c:ea:df:9a:0b:72:a1:73:d8:5a:80:36:55:3b:cf:
         2f:8b:a8:57:fc:37:98:7a:b3:7b:9d:2e:89:8a:ed:06:aa:fc:
         31:9d:ae:b4:44:ff:a4:26:0f:97:1e:a9:7c:9a:d9:d7:3f:4b:
         c2:55:55:8b:67:69:a3:36:96:7f:d8:58:23:ec:11:0f:bd:5f:
         12:35:12:e5:73:07:e3:a7:2e:4f:1e:f5:ba:2a:a7:a6:69:e9:
         82:91:31:35:12:3f:71:ee:fa:2c:2b:3e:ea:ff:c0:d2:ac:a9:
         28:0c:68:a9:61:32:c0:f2:78:96:02:6f:c9:7c:28:4e:a2:c3:
         51:73:b7:9f:03:9e:d0:c5:45:88:17:68:58:12:87:77:45:73:
         d9:b8:b4:6d:70:8a:c7:20:a8:c2:f8:18:af:d3:2b:0f:48:6f:
         80:93:eb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:37:56 2026 by rpki-client