Error: rpki.afrinic.net/repository/member_repository/F3693F0F/83B982CA5FF011F19DD36BD0CE1D38B0/jc2lHerhcUI9N-_PG_JgNsj-U0s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693F0F/83B982CA5FF011F19DD36BD0CE1D38B0/jc2lHerhcUI9N-_PG_JgNsj-U0s.mft
File:                     jc2lHerhcUI9N-_PG_JgNsj-U0s.mft (raw, json)
Hash identifier:          cWklwEfUlW6XjZlCaE/nKYy0GdqAuceUFuEi8AW5D0s=
Subject key identifier:   A8:43:93:9B:B7:EE:DA:EA:84:75:5E:02:59:ED:F5:60:56:21:2F:5A
Authority key identifier: 8D:CD:A5:1D:EA:E1:71:42:3D:37:EF:CF:1B:F2:60:36:C8:FE:53:4B
Certificate issuer:       /CN=F3693F0FAF/serialNumber=8DCDA51DEAE171423D37EFCF1BF26036C8FE534B
Certificate serial:       7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jc2lHerhcUI9N-_PG_JgNsj-U0s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/83B982CA5FF011F19DD36BD0CE1D38B0/jc2lHerhcUI9N-_PG_JgNsj-U0s.mft
Manifest number:          7A
Signing time:             Sat 26 Sep 2026 05:39:52 +0000
Manifest this update:     Sat 26 Sep 2026 05:39:51 +0000
Manifest next update:     Mon 28 Sep 2026 05:39:51 +0000
Files and hashes:         1: jc2lHerhcUI9N-_PG_JgNsj-U0s.crl (hash: NiMkzS51GVcVMRazTDppi1J8Y8OPb7I9EAZsJ/4eF1s=)
                          2: B95F77C45FF811F1B23C6C02CF1D38B0.roa (hash: /N7Eji9q9wfccWf1HfZnYAfyNQ17sZ5mHVOr0C6Cwr8=)
                          3: AFCB87625FF711F1A8DA1BFCCE1D38B0.roa (hash: KNFgx4Y7qNd1DKcA9Cv6RjoV/HO1kZjxmkSRiG1PMU4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/83B982CA5FF011F19DD36BD0CE1D38B0/jc2lHerhcUI9N-_PG_JgNsj-U0s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/83B982CA5FF011F19DD36BD0CE1D38B0/jc2lHerhcUI9N-_PG_JgNsj-U0s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jc2lHerhcUI9N-_PG_JgNsj-U0s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693F0FAF, serialNumber=8DCDA51DEAE171423D37EFCF1BF26036C8FE534B
        Validity
            Not Before: Sep 26 05:39:51 2026 GMT
            Not After : Sep 28 05:39:51 2026 GMT
        Subject: CN=6ab75aa8-9922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:49:b6:da:6e:7c:ff:2b:38:22:84:ae:55:6c:
                    5a:b7:28:63:97:71:ec:f3:d1:10:4e:29:4c:c3:a8:
                    10:34:7d:71:b0:05:d0:1f:73:ed:b9:a4:6c:55:4d:
                    d4:64:21:5b:8a:55:cc:09:5e:76:06:f2:28:65:5d:
                    8b:8e:30:c2:85:e7:d2:ae:af:89:97:c6:93:90:d1:
                    98:b2:73:8f:b5:91:47:a0:ab:11:6e:08:b6:c7:43:
                    8d:0e:87:c5:a9:cc:16:81:80:9e:e5:77:a1:cc:bf:
                    2c:5b:2e:6e:8f:05:ff:16:ae:52:a1:14:bd:df:28:
                    b2:4f:85:08:bf:27:bc:a7:25:b8:12:82:8e:7f:7a:
                    08:50:5c:31:b5:9a:f3:88:c8:48:d5:04:d3:76:a1:
                    f1:2c:46:c4:b5:50:ee:48:de:5e:69:9e:20:e5:ed:
                    4c:0c:67:84:0b:96:62:b4:e1:86:48:ac:6b:32:1b:
                    fd:c6:0a:1d:7b:55:42:34:46:8e:48:a9:52:9d:c5:
                    80:82:49:90:8c:ef:10:f1:8c:97:da:5c:3f:da:45:
                    d4:90:1b:46:0f:57:be:c6:c3:b2:0a:1f:9a:77:e1:
                    d9:6f:76:ba:ed:5c:dc:e7:d9:f1:74:ca:b6:2b:f4:
                    31:85:6b:12:a3:7d:f9:59:24:7d:2c:90:5a:f6:7e:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:93:9B:B7:EE:DA:EA:84:75:5E:02:59:ED:F5:60:56:21:2F:5A
            X509v3 Authority Key Identifier:
                keyid:8D:CD:A5:1D:EA:E1:71:42:3D:37:EF:CF:1B:F2:60:36:C8:FE:53:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/83B982CA5FF011F19DD36BD0CE1D38B0/jc2lHerhcUI9N-_PG_JgNsj-U0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jc2lHerhcUI9N-_PG_JgNsj-U0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693F0F/83B982CA5FF011F19DD36BD0CE1D38B0/jc2lHerhcUI9N-_PG_JgNsj-U0s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:9f:b2:66:6c:ac:43:92:c1:cb:3c:d1:58:08:c2:2d:79:1a:
         a8:3a:15:44:05:db:f1:b9:b6:9b:8a:39:4a:38:2d:93:e5:57:
         0c:f6:2c:eb:de:5b:be:7a:e0:2e:8f:91:8d:af:48:dd:d9:56:
         b0:91:dd:8e:12:fd:89:c1:e2:a0:f2:cd:a6:0b:14:fb:f8:5b:
         14:a0:92:48:4f:39:d4:53:d8:47:05:fc:2e:3b:8e:10:6a:e7:
         2b:f2:64:1d:a6:0d:82:03:37:af:1f:84:df:40:5b:88:30:0b:
         15:ab:ab:81:f1:c4:f9:8c:a4:ac:d3:eb:47:e2:49:68:b9:64:
         c5:f3:24:36:4f:aa:b9:d2:b3:51:da:cd:2f:09:37:f7:14:78:
         66:f5:af:a8:c4:70:53:36:cb:a4:2c:68:3d:9b:7c:7b:f9:89:
         66:1a:99:58:e9:f5:9a:2f:39:87:98:82:5c:a1:2c:11:11:ac:
         e1:49:49:86:77:9a:81:0c:42:8b:6f:c2:16:b4:78:40:bc:38:
         a8:26:86:27:2f:38:66:c5:64:4d:6d:85:78:5e:b1:9c:9d:0b:
         be:b6:f5:16:df:37:e8:60:31:50:2c:05:fc:4e:d7:91:a9:26:
         b2:41:a2:11:01:8c:da:99:c0:71:61:dc:03:e4:54:92:ae:10:
         57:20:58:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:07:36 2026 by rpki-client