Error: rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
File:                     Sbrmff7enZUJuwOnxzLcVmFmt1o.mft (raw, json)
Hash identifier:          n4TQlD3+yFSKZABrBkFA+VQHm9Iinoc+Gu1yzSQ08Oo=
Subject key identifier:   F1:D4:19:25:3C:2A:A9:EC:BF:43:A0:A0:CB:89:E4:09:C1:9A:38:26
Authority key identifier: 49:BA:E6:7D:FE:DE:9D:95:09:BB:03:A7:C7:32:DC:56:61:66:B7:5A
Certificate issuer:       /CN=F36B0C44AF/serialNumber=49BAE67DFEDE9D9509BB03A7C732DC566166B75A
Certificate serial:       03E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
Manifest number:          03E3
Signing time:             Wed 23 Sep 2026 03:59:18 +0000
Manifest this update:     Wed 23 Sep 2026 03:59:17 +0000
Manifest next update:     Fri 25 Sep 2026 03:59:17 +0000
Files and hashes:         1: Sbrmff7enZUJuwOnxzLcVmFmt1o.crl (hash: orXjvk6ci9XJ0Gye/Y2F9vwK4EXhBNdBWDxEaYzfx9I=)
                          2: 96446AE6C04111EE9477E2A2775412E6.roa (hash: qXGiyWvqf9jjyOwcPQcuVS3D910J4Jz6Wlu+WbOF/zM=)
                          3: CE4C1BD8BF7D11EE97BCA7BF775412E6.roa (hash: yJpP30xuvTe5uFFB4LtOLOWEiDS7piREXKk0KFAJ23A=)
                          4: F1CA4556BF7F11EEBB4826C3775412E6.roa (hash: l40ZqirIPBTx/x+bNutVHtKD07PTBU26d+cCsLpIIBk=)
                          5: 070A0F76BF7D11EEB89736BE775412E6.roa (hash: grOTvQ1t6UyvliV5knhBI1h+ljufMPN9n26TEDv5AK8=)
                          6: FA0A71ACBF7D11EEAF08CABF775412E6.roa (hash: PfO9Y+c33Exyp9yfR1CWVhKzDN+Qro1W+mHbGnhyeOg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 03:59:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1001 (0x3e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B0C44AF, serialNumber=49BAE67DFEDE9D9509BB03A7C732DC566166B75A
        Validity
            Not Before: Sep 23 03:59:17 2026 GMT
            Not After : Sep 25 03:59:17 2026 GMT
        Subject: CN=6ab34e96-99ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:c6:e1:eb:19:91:9b:4f:dc:2f:89:94:01:
                    56:5a:17:ec:ef:21:e6:b3:d5:65:0b:e4:e6:ac:54:
                    98:47:34:30:54:61:77:64:cf:65:d9:49:a9:97:59:
                    1b:59:ea:c0:3d:7b:b4:c1:18:63:e7:d7:8a:fc:aa:
                    6c:dc:b1:8f:5a:f7:e6:cc:67:1f:93:f8:a2:82:d2:
                    25:36:ef:33:ea:c5:9d:90:fd:b5:b9:c8:dd:92:4d:
                    10:7f:d6:62:8c:bc:4f:f2:36:ba:2c:2c:ab:e5:48:
                    d6:de:5e:ae:73:15:95:e1:85:d8:67:e1:3d:15:64:
                    1c:1a:a7:33:c3:e6:a0:17:f1:4c:49:81:44:d0:04:
                    ef:ff:06:e2:ec:87:01:15:4a:fa:fc:e8:c9:7c:39:
                    e9:a3:46:0d:62:42:23:bb:7c:e1:69:cf:54:3b:b5:
                    c7:53:88:81:1b:4d:b3:39:11:88:79:4e:0b:b3:27:
                    e6:de:58:df:40:1c:6c:bb:53:c4:c0:97:ee:01:d5:
                    0a:d0:50:2c:e9:0e:8b:0c:24:04:46:9a:68:77:0c:
                    68:91:70:ac:ba:1c:29:41:3f:93:98:a4:03:6a:39:
                    bd:ff:6f:1d:88:f1:e7:4c:0f:6f:94:29:1a:cd:9c:
                    e3:fb:da:da:ed:1d:44:b2:14:8b:00:6f:1b:6f:6d:
                    dc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D4:19:25:3C:2A:A9:EC:BF:43:A0:A0:CB:89:E4:09:C1:9A:38:26
            X509v3 Authority Key Identifier:
                keyid:49:BA:E6:7D:FE:DE:9D:95:09:BB:03:A7:C7:32:DC:56:61:66:B7:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sbrmff7enZUJuwOnxzLcVmFmt1o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B0C44/DEB69BA6BF7811EE86CB6CB7775412E6/Sbrmff7enZUJuwOnxzLcVmFmt1o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:d2:5b:1e:7d:66:c3:59:ee:06:2a:26:e0:6a:ae:9c:d6:13:
         cc:c5:46:52:09:57:3d:05:ad:d3:2f:e9:a1:96:d9:7d:ad:41:
         83:fa:6a:56:81:39:ec:18:7a:62:1f:cb:3f:10:98:8b:d9:6f:
         5d:d9:03:9c:f0:a1:c4:99:70:4b:04:f4:2a:2b:eb:52:c8:3c:
         75:84:db:69:bc:de:c4:52:f6:03:f9:97:f4:c7:8b:84:88:d9:
         85:38:74:04:c7:11:55:66:88:e5:fb:69:01:75:91:30:ea:37:
         c4:83:a7:70:a8:2c:96:59:ab:d1:39:5d:ac:b7:6a:34:72:74:
         91:13:47:19:3a:8f:6e:ef:ad:c1:21:cc:27:a9:95:94:42:05:
         4b:f8:36:ba:ff:c7:da:ef:1c:32:ab:6d:c9:95:be:79:d5:88:
         51:35:56:8a:73:24:35:16:87:5e:e9:28:81:9e:c8:db:87:d9:
         24:56:dd:ad:52:3f:69:4a:37:25:5b:ef:9d:b4:e9:1f:a3:cd:
         02:4c:08:52:f3:42:b3:1d:cc:f3:83:8c:1f:80:3e:ee:26:b9:
         25:d8:da:f7:a6:d8:ae:b4:4c:d3:5b:2d:70:ec:1f:e4:f9:f5:
         ff:1d:9e:f4:00:2c:61:d5:00:f4:9b:3d:d6:80:21:b1:b0:2f:
         d7:85:56:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:52:16 2026 by rpki-client