Error: rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
File:                     gvHGYRo6FGfbPXikpf7VCgilexM.mft (raw, json)
Hash identifier:          bYnmpiAvNN4A3GOfyr0sAflHdQS0QiIwKPv40GcnwJw=
Subject key identifier:   64:11:DC:52:67:5B:E6:BF:D9:75:75:61:1F:A7:0B:0D:71:61:EB:CD
Authority key identifier: 82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13
Certificate issuer:       /CN=F36A1CEFAF/serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
Certificate serial:       089E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
Manifest number:          0840
Signing time:             Wed 23 Sep 2026 02:19:30 +0000
Manifest this update:     Wed 23 Sep 2026 02:19:29 +0000
Manifest next update:     Fri 25 Sep 2026 02:19:29 +0000
Files and hashes:         1: gvHGYRo6FGfbPXikpf7VCgilexM.crl (hash: 5PLIxK1JdxbDg6I9UTSzSXj1LI4Y3TLriK2jQ/HADEM=)
                          2: 364CE70A334211F1BC84101ECF1D38B0.roa (hash: SzY0M69wl8kbhZdJv0mbrKWF59ghGQkBzNtNqRXdeks=)
                          3: EE287DA62D1811F1BD0A6C7ADAE4EC9C.roa (hash: pdJON2oLaF8IedNpv4LxRG7g+R9Qeyi4W75wQ52QQ1c=)
                          4: 3D4622F431BE11F1B0952483DAE4EC9C.roa (hash: 9codvlAei9UqHKLAiSqHgXThiO5HpMqG0grwQ1kO/0k=)
                          5: 478AB26031BF11F1A6BDDD88DAE4EC9C.roa (hash: Lv1cV1DETQTGDmZ6WDynxJ207w7/5uQQidy8jh7V8yI=)
                          6: DFA7A342B04911F187D1F3DFCE1D38B0.roa (hash: EQXjr+GeRZbv3c4OcOdL9TP+7SybAubMWSm6gSx0/6s=)
                          7: E76F4CF831C611F190C479B3DAE4EC9C.roa (hash: faD0G33rEe95uhhlPweEbpanRsZcsjWv3e68sG62k44=)
                          8: 77D3E0C6333C11F1805420FDCE1D38B0.roa (hash: YU4iJ8s6p9raAZL7JWDoAn+gjmxoRUJUec2K/33AiEA=)
                          9: 91EA49D8333B11F1B22EFDF6CE1D38B0.roa (hash: Leg6xrK4VU4HGI0NvQ1v004esZ1TDt8++lioLjxNeuE=)
                          10: 8DB94274288211F1A74615F3DAE4EC9C.roa (hash: B0UVviCFUnADjgeCgBwbY+DmzXyTTHx6vlKGunTI9IM=)
                          11: AC275DBC631B11F1A22A1419CF1D38B0.roa (hash: xoGazta3G0QJLsgZ7iZuJsXZt3X8rgvX9PE2KdUCQaM=)
                          12: C2372772334111F18BB80E1ACF1D38B0.roa (hash: Gwi4ueCCvJZIEZsnyEOTtAlQafyA/I+7H+Prmzi5eP8=)
                          13: EB475FF031C111F1A71AC296DAE4EC9C.roa (hash: Y9/MUITjWqXrHS2rgjPQqYV3XME+v0umVdBOKsh062M=)
                          14: 12E03A6431CC11F19A97B0CEDAE4EC9C.roa (hash: lFjlkbuuShNgq6PRvQFC/93Tiq0B/QhMlHkqwc1W/u4=)
                          15: EF98E58A333B11F19E91FDF8CE1D38B0.roa (hash: ag2v5reb+zDo0vsvEh1NsL0zM4GQBnL1uS0jIXx6S14=)
                          16: 74D18C2231CD11F1A17488D6DAE4EC9C.roa (hash: Ox6dJbpLiRALf6E85u1k7Yfr6Od7UQqYMnIso8XRqBo=)
                          17: 9C892C2631CC11F1A1108ED2DAE4EC9C.roa (hash: QnqI3tvcewW1sAf9rxjG6hGUqhmFIswnl1mqgcxGm5k=)
                          18: 9DB6F4F831C111F183F9D694DAE4EC9C.roa (hash: QcMFrNwLjMz1DFo2YDIDBDhUUpqBoNq1P1d/q0F+85M=)
                          19: 95AD80F831CE11F1B34C2DDEDAE4EC9C.roa (hash: 7GSszHcBSLoAhRcmrcuX+aOLze2LfqETieE1ohOZlfA=)
                          20: 653646CC2D1811F1BF3D1FF5DAE4EC9C.roa (hash: u3IUn4tj5zxayKjv7Mj9uwx0wbWiOsgT9S4T/OJURIU=)
                          21: 5C5FD9AC31C611F19419AEAFDAE4EC9C.roa (hash: Vfi3YXIFXtroc+xlvW/NnuJNGpVT1vqCm7HLYJu9x5o=)
                          22: 9B8752862DBB11F189ED3DB1DAE4EC9C.roa (hash: 5W62VXfhv8h4fla6dJXbBmlFhR3DzFBJKL2EWMvoUbg=)
                          23: E27323D22DCF11F1AA18CAA5DAE4EC9C.roa (hash: 4BxkClyTNHcRQAjTgzhuIwOnw53YqhmtdQmVdBzKibE=)
                          24: A662608285F011F1B19268A4CE1D38B0.roa (hash: UMIy7Die2cFrodGJSjrF5fxQ8Z0dpn4wV5XE1qmScCk=)
                          25: C54D1BE2333C11F1B6BD59FDCE1D38B0.roa (hash: p6RZ8QJpgz3xEcvp6tMRCbchfnm4VVw01lhILVzRfjA=)
                          26: 8058325C291811F1BCA469E5DAE4EC9C.roa (hash: tn84rYgdhGNCGvc6GHqAV2yntcG3hM0yk13lx2/0f0g=)
                          27: 32A4F74C31CA11F1A89426C5DAE4EC9C.roa (hash: 6PvDVTzGzqpsU1NuvcWjmyoaxR1Pmky5CuTuNIv3Vuk=)
                          28: 3CA9E5062D1811F1B62BFBF4DAE4EC9C.roa (hash: i9e2Z/xX/L9oVfHEoB5qHiCLB71AT9kMB03oQMgB07s=)
                          29: 1E751F0431CF11F1A29171E0DAE4EC9C.roa (hash: Wva+Ot8drC807YhHscETaYZc4/LMLEyI5FKmSQmkMb0=)
                          30: 8F5F9A36334211F1952ABDA1CE1D38B0.roa (hash: TRLftW7bQP4YHkozq600eml5OVZhzd6UoYvqA+Pi6rY=)
                          31: 5F6C45B02D1911F19C780B7BDAE4EC9C.roa (hash: bOxuL7xuj8ZVGs3jT5rSLBPTBOPxm9e39rt/LXAf8q4=)
                          32: BEFF110C2D1811F1A1F97CF5DAE4EC9C.roa (hash: 3agqaHMVa66E4J+qH2SRoSQKzgeQvz+LrhURDFz8B1I=)
                          33: 24407F2431DD11F1B2EF6FB0DAE4EC9C.roa (hash: swExoTSzr/HphO/RuiYU4vF1Uh5yVj5x3/uO3edAUWw=)
                          34: 901DEFCA2D1811F1A30C24F5DAE4EC9C.roa (hash: idx082MQgEGFii3PMe5uhvENRLBGqI2MvkDj/0s+aOo=)
                          35: 095EF0C031E011F190717FC1DAE4EC9C.roa (hash: dzflDoxOpzpUgSIWiEA972HPgxMsTyqLlK8yrYd0ey4=)
                          36: 3F0F0F7031C211F19F838798DAE4EC9C.roa (hash: n7CiBbLyLhTC5G5W9u5fi8nfjYNPB7ln0RUmNgrJ9zI=)
                          37: 31CEFF34333C11F1A29948F9CE1D38B0.roa (hash: vwXLDZXZzTg/OEkNIbZZslfRneJP1AMm64AZWINF7J8=)
                          38: 1306C5242D0A11F1ACE79FA2DAE4EC9C.roa (hash: Yap6AiBkD3ixZ9mWZ1ZB8OCM/j6jVoGOnv3+2v/DDNI=)
                          39: 14B3FDF031C511F19BFBF3A7DAE4EC9C.roa (hash: yki70wMJjkF8GK10Y244hzfzk5cj+gAW3eBV96fUOME=)
                          40: 83A6A4D4334011F1A7D0E413CF1D38B0.roa (hash: 74QB8V26zqay7IX5/bDpPWmQodgpJK1gmMK9RYjD57I=)
                          41: CC2DC63031BD11F1991EE480DAE4EC9C.roa (hash: BOHs5+10RMjUndeT2FzPUD4KqFm+1OkeMgiCuz86fDw=)
                          42: 9FF9476C31BB11F1BEBBC5F1DAE4EC9C.roa (hash: ng+xI/QLSvaWcBtYJKU3+sh8o2b7s+XTpnLUsVJRDNQ=)
                          43: 637EEFD031BB11F1B9968FF1DAE4EC9C.roa (hash: 8v1K6f5pVaGEkN0RYF56XSCdk82jOyqLTbXIL2m0YSQ=)
                          44: 48690C5431C911F1981D27BFDAE4EC9C.roa (hash: EUVMx+SXkeZ58/9y3EmTr96W5XKI9Y2B6lAIh14TtcI=)
                          45: B2FA3840288211F1BDB7ECF4DAE4EC9C.roa (hash: 5/ROpgAZwkQdj2BqP/MW/qlEH7eR3MDQUUaLt+Ee2ao=)
                          46: 5527F30431D011F1958427E9DAE4EC9C.roa (hash: AIvtBN5UUEa0IW3TZyf90eURXW/vkLS6CaLRuEgcyQM=)
                          47: 45C2EF7E333B11F1ADF4D3F4CE1D38B0.roa (hash: V86xrnh/y+DTVy0ksoIWIJSKRIobCwk+V5t+KofAi+I=)
                          48: 181970DA552211F1B9642311CF1D38B0.roa (hash: FrqgJULwxDs9PKgC0s454c8XZzkNJcz5Z/71KciqL8E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2206 (0x89e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAF, serialNumber=82F1C6611A3A1467DB3D78A4A5FED50A08A57B13
        Validity
            Not Before: Sep 23 02:19:29 2026 GMT
            Not After : Sep 25 02:19:29 2026 GMT
        Subject: CN=6ab33732-baba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9d:c5:be:48:4c:15:03:be:f6:3c:da:f5:ec:
                    27:22:07:6c:a8:b5:b2:3d:1a:51:1a:a4:ae:2f:9e:
                    24:dd:1e:b0:4b:88:29:45:86:4a:0d:54:af:90:f5:
                    ab:d0:fc:ea:89:09:5e:45:3b:0d:85:a8:3e:a1:2b:
                    0d:9f:c5:58:a7:4a:ab:af:d7:17:33:a8:66:b8:1c:
                    35:78:91:33:f6:f7:d9:60:db:be:02:e9:45:8f:0b:
                    55:51:fe:dd:3b:eb:f6:b7:d0:61:8e:46:62:ae:47:
                    13:3d:83:48:08:99:9c:c4:37:1d:71:70:89:73:90:
                    a1:9d:9e:5b:6e:2c:a3:51:59:70:6d:16:de:71:f2:
                    35:fe:26:b6:c6:11:de:92:3c:62:ff:cb:45:f9:ee:
                    43:f8:8e:cc:7e:6f:d7:ba:60:47:7c:74:5b:f8:b8:
                    c8:24:ab:0b:ac:39:77:88:07:db:c2:7d:64:bb:65:
                    4e:6d:95:3b:89:3f:a3:c7:5b:db:af:c2:58:c0:8e:
                    b3:5d:3f:cd:b3:f4:52:6b:13:8e:bf:8d:8b:69:07:
                    06:20:d6:ed:76:bb:3d:1f:c0:a7:ac:c1:de:bb:f1:
                    00:8c:b7:b4:d7:cd:2e:8a:c6:2a:af:bb:81:21:f7:
                    b7:7b:30:55:99:b0:81:03:27:77:8b:ea:e4:3d:d9:
                    41:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:11:DC:52:67:5B:E6:BF:D9:75:75:61:1F:A7:0B:0D:71:61:EB:CD
            X509v3 Authority Key Identifier:
                keyid:82:F1:C6:61:1A:3A:14:67:DB:3D:78:A4:A5:FE:D5:0A:08:A5:7B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gvHGYRo6FGfbPXikpf7VCgilexM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/7F388DE4F13811EB917FD717D8A014CE/gvHGYRo6FGfbPXikpf7VCgilexM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:63:9b:78:54:55:ed:a5:d5:d8:d0:89:17:a4:86:be:e8:67:
         48:e4:91:a3:7c:75:80:6b:e1:18:8a:06:55:8b:9f:c1:24:03:
         45:e1:d5:a2:5f:73:17:d9:8c:ab:e5:14:39:6d:e1:55:a5:cb:
         f0:75:43:8a:70:f6:3e:e8:14:67:c0:19:05:da:a7:4f:68:dc:
         74:54:21:1b:5d:1f:de:94:3b:2d:35:69:20:5f:a3:0e:03:a2:
         0b:9e:2d:8d:b2:5c:15:e6:c9:9f:49:5a:05:73:23:9f:8d:28:
         83:75:ce:3f:51:a9:6e:f1:e2:4e:94:e3:04:e7:aa:9e:70:26:
         7f:55:cf:6c:3a:0c:51:7a:a9:8f:a0:5b:0c:1e:bf:52:0c:29:
         9b:fc:b0:be:86:c8:21:82:b1:2b:9c:b8:2a:ac:31:89:f2:83:
         1a:eb:8e:1b:04:02:6f:ef:60:1e:dd:fb:a6:de:99:54:4a:d3:
         5c:62:98:31:f7:5e:f0:38:94:05:d7:13:45:17:5c:7c:d0:a1:
         eb:dc:f4:dd:d1:d2:a8:a4:df:81:08:bc:61:d1:e4:ec:de:cc:
         1b:b4:94:ee:0a:1e:2f:25:b0:6f:fc:ab:23:37:65:31:50:2c:
         fc:61:8a:4a:b3:8c:af:51:e5:4e:2b:a5:8d:7e:a3:09:aa:f9:
         0f:60:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:00:09 2026 by rpki-client