Error: rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
File:                     rC5S7pK7wgWiMP93oZBB3dUU2PA.mft (raw, json)
Hash identifier:          YR/b9iKZtv1twyBo4SSvirYvGOTf1TAdrH1WCW7spsg=
Subject key identifier:   4C:DB:CB:0E:A8:38:DD:81:3D:96:B5:D4:8C:DB:A9:80:14:02:01:9F
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Certificate issuer:       /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial:       09BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
Manifest number:          09AC
Signing time:             Thu 24 Sep 2026 01:43:56 +0000
Manifest this update:     Thu 24 Sep 2026 01:43:55 +0000
Manifest next update:     Sat 26 Sep 2026 01:43:55 +0000
Files and hashes:         1: rC5S7pK7wgWiMP93oZBB3dUU2PA.crl (hash: nCNTj2jIsMkR7BrVFB+J/aNWlFyNIOm4QFrchciJlAI=)
                          2: D5B46FA6C23211EBB5593A16F8AEA228.roa (hash: oX59+2BALwGM+ztTKboJ5zjbW8Hls8vuUFk164gb+sE=)
                          3: B7327FCAC23011EB8EB93013F8AEA228.roa (hash: FzBJ+LD8lsMOLZHdwigkJL90+es1pormijWMN0h6XiE=)
                          4: 3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (hash: lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=)
                          5: 88F6BBCEC23211EBBD21D715F8AEA228.roa (hash: 6D/mE5iRONvZimS8ac2OXzs/7V/jQV2FQOwxAWqpWYI=)
                          6: EB54553EC23111EBA9E0ED14F8AEA228.roa (hash: d6xcKTp32mia+OgefI0TfyXuPVcpWg3DEScglv+HMrY=)
                          7: B418664AC23211EB98B10F16F8AEA228.roa (hash: M//9HpMML29hfmlSXu9lsnbBB8fRM3Bjn7WpzCV2kL8=)
                          8: 43AF9CACC23211EBB3CE6515F8AEA228.roa (hash: c/Soa/93EsLQFmmPICHZAj3dDNjPlQJOplH1/UOW0ac=)
                          9: F1EEE55EC23011EB941AA913F8AEA228.roa (hash: yW4+Lfz5PGHi4Kx8TI9Rf9GfxFHBr9qFl92O6gcnuuU=)
                          10: 118B5046C23611EB8894801AF8AEA228.roa (hash: EdTXMixOen8QKO9g5Tn4JwTOrXpknviYLC1BSplg1UI=)
                          11: 69718BD0C23211EBADC2A715F8AEA228.roa (hash: TnY/7DA+BgejOFr04BM5hHh0ycu1/cZe42UI729de/E=)
                          12: A122BD06C23211EB87EB0616F8AEA228.roa (hash: tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=)
                          13: 7209CACE8DA611F19808DFBFCE1D38B0.roa (hash: TiQ0DTo83UHcuXxj5lRgHJU9J7T+GuSv6q0DBMkC+Xk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 01:43:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2493 (0x9bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAF, serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
        Validity
            Not Before: Sep 24 01:43:55 2026 GMT
            Not After : Sep 26 01:43:55 2026 GMT
        Subject: CN=6ab4805c-e795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:71:b6:80:7a:87:9f:cc:35:ab:fc:3c:d2:f3:
                    80:85:0b:0f:3e:10:15:dd:db:23:99:81:8f:5c:fd:
                    2d:33:73:38:79:47:02:b7:f5:8e:00:4a:73:fa:0c:
                    42:4b:d6:45:f9:28:d1:c4:27:93:e1:47:bc:cc:62:
                    43:2d:d0:31:53:21:30:a4:79:ad:49:06:f5:81:22:
                    3e:a0:0f:77:fa:cd:47:0e:95:3d:37:0f:30:74:dd:
                    00:7c:93:69:1d:0b:37:8a:c9:b2:b2:06:ca:8e:a9:
                    8a:f2:4e:3c:24:ee:19:cd:0a:db:55:2a:1c:8a:2c:
                    19:37:1e:c6:f7:8c:c2:ff:5d:bf:34:4f:3a:03:9d:
                    c8:71:c8:5b:2e:b8:19:61:f2:44:01:14:ef:00:5e:
                    b5:fb:86:d6:6c:c9:65:d3:34:20:9d:7c:ed:7d:25:
                    d7:d9:b4:2a:f7:ea:dd:ef:9f:ef:a7:13:0f:a5:27:
                    94:59:6e:bb:2a:81:4a:8d:da:d2:c6:31:b3:a1:1b:
                    d9:e0:7f:9f:cd:28:ed:89:de:15:57:91:8b:c3:27:
                    e0:08:30:5e:a0:1e:17:15:ed:f1:fd:11:aa:ac:87:
                    d3:8d:01:86:25:b5:b5:52:69:89:2f:03:e5:f0:bb:
                    a0:06:65:a6:39:71:43:59:e6:37:9f:79:98:84:0e:
                    e7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:DB:CB:0E:A8:38:DD:81:3D:96:B5:D4:8C:DB:A9:80:14:02:01:9F
            X509v3 Authority Key Identifier:
                keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:dd:4f:cf:8e:3a:40:02:b3:be:e1:65:3b:2b:1e:b0:d9:90:
         6b:7d:51:bc:71:bf:69:61:59:01:ad:21:cb:99:9b:98:91:cb:
         f9:fa:85:e4:af:35:7c:2f:eb:ad:5f:e2:47:38:7a:28:6d:a0:
         8f:ab:e1:27:03:34:f7:4b:75:6f:95:bd:42:3b:5f:d0:76:a6:
         29:ca:40:f8:37:a5:00:d0:05:16:50:5d:58:89:ea:b9:17:40:
         4f:61:54:d9:55:0c:0d:72:79:1d:b7:04:15:db:b3:91:df:06:
         70:90:fa:2c:86:71:15:22:80:27:0e:36:65:d0:85:f1:c6:8d:
         cc:97:44:ea:f0:45:93:06:06:b9:fe:ca:92:2e:bc:e2:fb:ba:
         0d:bc:49:42:cd:dd:f0:e4:3c:78:c3:81:c5:62:16:b9:39:b3:
         61:9a:13:ee:e4:19:8e:cf:05:a8:aa:b9:e5:8e:53:fd:e2:00:
         95:a4:c1:16:37:c0:b5:f6:2b:4c:bd:5b:2f:84:ac:b3:65:78:
         a3:c8:0b:2f:9b:cb:5c:2f:66:a7:14:04:45:cb:41:d4:e1:9d:
         26:9e:22:5c:44:b2:65:07:1c:6c:15:f3:77:31:21:b1:13:23:
         c2:d2:64:e3:04:34:33:53:71:dc:24:b2:b2:fb:e6:20:34:90:
         53:f0:ed:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:49:24 2026 by rpki-client