Error: rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
File:                     W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft (raw, json)
Hash identifier:          Z+6S4pVWPNqeLFD5j6O5UOSo145JguPmQ/kb289cTvw=
Subject key identifier:   2F:58:03:9E:F1:A5:11:9F:94:A8:AF:9C:D1:F0:53:74:40:8B:DD:62
Authority key identifier: 5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41
Certificate issuer:       /CN=F36B1FB2AR/serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
Certificate serial:       093F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
Manifest number:          093C
Signing time:             Wed 23 Sep 2026 01:50:36 +0000
Manifest this update:     Wed 23 Sep 2026 01:50:35 +0000
Manifest next update:     Fri 25 Sep 2026 01:50:35 +0000
Files and hashes:         1: W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl (hash: 8DfteS7pFmKDBLaweQ99sKhCHa9kHO+M0Hu6RpL7Xvc=)
                          2: 8DD8A63E9F8811EA9E1CD13BF8AEA228.roa (hash: 4gla00WyKnybWEMMlGQqnQZbh5T6kkOr0Aikoc7oSJA=)
                          3: 24F52F7A9F8811EA8771673BF8AEA228.roa (hash: yndl0tOhUDwQ6Y3ExagHGGbpgAi1l8sO07zu0poxd34=)
                          4: 55A993D69F8811EA97099D3BF8AEA228.roa (hash: +ElbU+52e+mg4AC3l85DIIIn/EFrafBGdzVbGsEBQHw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
                          rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2367 (0x93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1FB2AR, serialNumber=5B524E4B3F19E841BC6164E963BFD23D38CD3241
        Validity
            Not Before: Sep 23 01:50:35 2026 GMT
            Not After : Sep 25 01:50:35 2026 GMT
        Subject: CN=6ab3306b-0c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:c2:64:a4:91:a2:9c:02:7e:37:42:25:35:
                    0b:9a:ba:9c:75:90:c2:e6:88:1b:c0:84:16:33:1b:
                    a9:1d:a0:2d:1f:7a:7b:0b:4c:4b:75:05:b6:1f:f4:
                    24:f8:23:80:c1:6c:e7:e1:e6:33:8e:ca:32:fe:db:
                    5e:9c:f5:1c:e8:64:84:af:38:d9:0d:94:7d:1c:24:
                    25:1d:51:29:9c:ac:85:74:a1:de:b5:8a:d1:b7:c7:
                    35:cf:4d:73:45:19:07:fa:8a:36:e6:02:0a:bc:6c:
                    e8:42:d6:7b:a9:99:9f:29:df:05:e3:52:85:fc:cc:
                    8c:3e:89:14:f1:c5:29:25:33:2c:42:a6:21:a0:b7:
                    8a:e6:1e:71:00:4a:30:f8:c6:25:44:79:76:d5:9b:
                    83:df:3a:53:6d:ba:a3:21:d1:71:91:24:4b:71:cd:
                    a7:c8:6f:64:08:54:a5:24:f1:53:f3:1e:ef:f3:fb:
                    d3:a0:d1:0c:bc:5f:dc:6c:70:12:36:20:24:85:b1:
                    68:20:d6:70:b6:85:5b:b5:5d:2d:ee:42:70:ce:c5:
                    f6:16:ca:e9:94:74:f6:22:d7:d2:b6:e2:85:07:c4:
                    64:c7:bb:b9:77:fb:9a:bb:46:74:6f:8e:e4:5a:ef:
                    35:f3:58:27:44:f2:50:05:a1:04:e2:86:cb:9c:68:
                    bb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:58:03:9E:F1:A5:11:9F:94:A8:AF:9C:D1:F0:53:74:40:8B:DD:62
            X509v3 Authority Key Identifier:
                keyid:5B:52:4E:4B:3F:19:E8:41:BC:61:64:E9:63:BF:D2:3D:38:CD:32:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/FBA714029F8311EAB22B3D37F8AEA228/W1JOSz8Z6EG8YWTpY7_SPTjNMkE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ee:cb:14:b9:3b:f8:8a:30:45:4e:37:47:1e:98:2f:76:cf:
         90:86:94:97:8c:4c:4b:ca:fe:55:a2:41:7f:7d:71:db:2e:76:
         7b:9b:38:53:09:57:a3:0f:51:0e:7a:76:65:04:73:d0:ac:ff:
         38:80:4a:bd:0c:c6:4d:5c:b8:a4:36:2e:8a:59:4d:5a:80:91:
         f1:c2:77:d9:52:77:78:37:fc:ef:a8:f1:b2:9d:cd:69:b6:05:
         72:05:2d:11:53:04:32:38:41:a4:34:36:ac:7d:0d:29:fe:57:
         50:98:55:21:49:9c:16:51:1d:f8:9b:52:18:d4:7f:fc:64:b7:
         47:eb:3b:08:2c:f8:12:95:67:45:41:d1:ad:aa:16:53:37:92:
         f9:91:dd:4c:06:c7:ad:49:ab:90:65:ea:ff:dd:c8:72:c2:48:
         b9:05:12:9e:81:31:ff:d5:e0:01:e9:02:5a:22:65:d1:56:3a:
         64:bc:c8:7e:ab:00:ad:1e:37:96:31:55:7b:b0:60:7e:ab:8a:
         08:b1:5c:c6:89:61:f3:e6:b6:08:90:07:cc:8f:7b:64:11:30:
         da:49:2f:9d:d9:24:6f:c3:d1:61:6f:90:d4:cd:bd:df:01:e8:
         5f:98:d3:a4:00:32:53:3e:dc:a2:5c:52:6a:25:b8:80:44:0e:
         eb:6f:e1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:28:27 2026 by rpki-client