Error: rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft
File:                     ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft (raw, json)
Hash identifier:          1AKNtkZDusxxelzoybVNksWp6y4NXvg0jjMK5FMFbGU=
Subject key identifier:   B0:E3:90:88:EC:4E:50:23:F2:5F:51:54:64:7D:D4:AF:16:56:D8:51
Authority key identifier: 01:23:7A:CF:F9:64:53:2C:9C:53:15:87:5A:14:58:2E:AA:AA:B6:64
Certificate issuer:       /CN=F369F697AF/serialNumber=01237ACFF964532C9C5315875A14582EAAAAB664
Certificate serial:       026F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ASN6z_lkUyycUxWHWhRYLqqqtmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft
Manifest number:          026E
Signing time:             Mon 12 Oct 2026 04:46:56 +0000
Manifest this update:     Mon 12 Oct 2026 04:46:55 +0000
Manifest next update:     Wed 14 Oct 2026 04:46:55 +0000
Files and hashes:         1: ASN6z_lkUyycUxWHWhRYLqqqtmQ.crl (hash: sc7EaKkJ3gHHEKs8tHFr3kTp4nw7ejVRcKXSe0VqNZw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ASN6z_lkUyycUxWHWhRYLqqqtmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 04:46:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F697AF, serialNumber=01237ACFF964532C9C5315875A14582EAAAAB664
        Validity
            Not Before: Oct 12 04:46:55 2026 GMT
            Not After : Oct 14 04:46:55 2026 GMT
        Subject: CN=6acc6640-6599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:45:be:8f:36:1d:ba:23:c0:a0:72:54:6f:
                    65:f4:b9:21:09:60:d0:01:d0:31:20:ce:3e:e2:29:
                    38:ab:6e:98:28:07:7b:5e:48:21:bd:24:41:38:a8:
                    94:d3:e1:53:5f:97:44:78:c0:51:49:d2:98:63:4f:
                    24:63:ba:5f:38:1c:3f:7e:60:60:58:29:14:ec:c4:
                    ee:60:dd:f4:0a:e6:c6:cf:fe:1f:ad:86:4b:cd:79:
                    e9:6f:b0:8e:60:f0:d7:d8:db:85:1e:7e:94:1f:c8:
                    4b:d8:73:b6:81:2a:57:e3:3b:ee:79:0c:38:25:78:
                    a8:d8:60:ab:4f:43:af:0d:64:b5:ba:35:d0:d1:52:
                    4c:85:aa:11:30:0b:94:da:79:c6:d2:5a:2f:14:53:
                    94:76:0b:c8:68:03:2d:8e:9d:d6:21:b2:b0:cc:96:
                    ff:0d:1a:3d:6f:71:62:84:d0:d4:dc:20:8f:0f:ab:
                    34:60:a3:67:58:90:b0:5d:15:1b:58:50:f9:c7:36:
                    1b:00:46:11:2b:6c:1d:f7:6a:8a:14:11:7c:b7:ae:
                    ba:c9:a1:37:d0:57:46:7a:46:63:58:18:c9:5f:5a:
                    61:44:b9:9d:64:f4:86:9d:64:04:86:ee:44:50:b4:
                    92:29:73:a9:f4:c9:7a:97:e6:02:29:06:e5:10:fa:
                    f0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E3:90:88:EC:4E:50:23:F2:5F:51:54:64:7D:D4:AF:16:56:D8:51
            X509v3 Authority Key Identifier:
                keyid:01:23:7A:CF:F9:64:53:2C:9C:53:15:87:5A:14:58:2E:AA:AA:B6:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ASN6z_lkUyycUxWHWhRYLqqqtmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F697/78C36842E3AD11EF83884B8B762E951A/ASN6z_lkUyycUxWHWhRYLqqqtmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:e7:30:4f:96:cd:66:55:ef:e1:9b:5c:99:a5:44:ca:ae:3e:
         94:0e:5c:a5:07:ac:7f:2c:13:3f:81:02:63:9d:79:d3:50:a8:
         f0:d8:59:70:37:c0:f1:e3:bc:31:07:a9:79:ca:09:6d:06:b0:
         59:29:72:9b:86:b6:db:86:c5:c6:32:0f:9e:25:4e:52:74:78:
         5f:af:50:58:c0:86:29:fc:b1:c3:04:9c:23:92:70:9e:a5:39:
         da:83:dc:36:7f:3a:14:3d:15:d9:9b:50:dc:97:98:ff:26:10:
         40:19:88:40:dd:cf:25:e9:31:e2:13:7e:fd:3f:44:01:12:28:
         69:c5:ef:e7:8d:03:41:09:12:e0:61:fb:97:93:7c:0a:db:7e:
         89:f0:10:91:2f:26:9e:8e:2d:60:03:92:4e:7d:e3:f9:be:bb:
         a4:89:35:c2:23:58:63:1d:33:d0:ba:f8:33:fd:1c:5d:a7:8a:
         13:e2:93:fd:a3:c9:dd:95:b1:cb:61:c0:a8:e3:e9:1f:4d:63:
         12:1f:64:16:e9:1e:fb:ad:99:64:2f:d5:ab:17:ad:68:6f:a1:
         67:35:59:e4:64:5d:39:2c:a5:cb:ba:fc:f4:bd:93:56:b3:92:
         c1:7c:77:50:1e:20:7b:72:4f:1e:2e:6a:1a:a5:54:b8:d0:0c:
         85:a9:73:61
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAm8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUY2OTdBRjExMC8GA1UEBRMoMDEyMzdBQ0ZGOTY0NTMyQzlDNTMxNTg3NUExNDU4
MkVBQUFBQjY2NDAeFw0yNjEwMTIwNDQ2NTVaFw0yNjEwMTQwNDQ2NTVaMBgxFjAU
BgNVBAMTDTZhY2M2NjQwLTY1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAIUW+jzYduiPAoHJUb2X0uSEJYNAB0DEgzj7iKTirbpgoB3teSCG9JEE4
qJTT4VNfl0R4wFFJ0phjTyRjul84HD9+YGBYKRTsxO5g3fQK5sbP/h+thkvNeelv
sI5g8NfY24UefpQfyEvYc7aBKlfjO+55DDgleKjYYKtPQ68NZLW6NdDRUkyFqhEw
C5TaecbSWi8UU5R2C8hoAy2OndYhsrDMlv8NGj1vcWKE0NTcII8PqzRgo2dYkLBd
FRtYUPnHNhsARhErbB33aooUEXy3rrrJoTfQV0Z6RmNYGMlfWmFEuZ1k9IadZASG
7kRQtJIpc6n0yXqX5gIpBuUQ+vBRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsOOQ
iOxOUCPyX1FUZH3UrxZW2FEwHwYDVR0jBBgwFoAUASN6z/lkUyycUxWHWhRYLqqq
tmQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlGNjk3Lzc4QzM2ODQyRTNBRDExRUY4Mzg4NEI4Qjc2MkU5NTFBL0FTTjZ6
X2xrVXl5Y1V4V0hXaFJZTHFxcXRtUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FTTjZ6X2xrVXl5Y1V4V0hXaFJZTHFxcXRtUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUY2OTcvNzhDMzY4NDJFM0FEMTFFRjgzODg0QjhCNzYy
RTk1MUEvQVNONnpfbGtVeXljVXhXSFdoUllMcXFxdG1RLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC45zBPls1mVe/hm1yZpUTKrj6UDlyl
B6x/LBM/gQJjnXnTUKjw2FlwN8Dx47wxB6l5ygltBrBZKXKbhrbbhsXGMg+eJU5S
dHhfr1BYwIYp/LHDBJwjknCepTnag9w2fzoUPRXZm1Dcl5j/JhBAGYhA3c8l6THi
E379P0QBEihpxe/njQNBCRLgYfuXk3wK236J8BCRLyaeji1gA5JOfeP5vrukiTXC
I1hjHTPQuvgz/Rxdp4oT4pP9o8ndlbHLYcCo4+kfTWMSH2QW6R77rZlkL9WrF61o
b6FnNVnkZF05LKXLuvz0vZNWs5LBfHdQHiB7ck8eLmoapVS40AyFqXNh
-----END CERTIFICATE-----
Generated at Tue Oct 13 00:05:23 2026 by rpki-client