Error: rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.mft
File:                     JidxiY20jWjVQw_A45EeyQNlu_U.mft (raw, json)
Hash identifier:          Rg0VsTDc3Dt6tRYSYt0crQywfJp7uCswDc+33IpUXlY=
Subject key identifier:   EC:2A:0B:2E:5B:0B:DD:2A:1E:35:30:39:44:80:C3:BE:C4:B1:42:30
Authority key identifier: 26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5
Certificate issuer:       /CN=F36C29E6AR/serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
Certificate serial:       0203
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.mft
Manifest number:          01F8
Signing time:             Tue 29 Sep 2026 04:55:02 +0000
Manifest this update:     Tue 29 Sep 2026 04:55:01 +0000
Manifest next update:     Thu 01 Oct 2026 04:55:01 +0000
Files and hashes:         1: JidxiY20jWjVQw_A45EeyQNlu_U.crl (hash: zU6567zQ+1c3872VgfRMrIPxaml+aFay52AgUhHDIFY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.mft
                          rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C29E6AR, serialNumber=262771898DB48D68D5430FC0E3911EC90365BBF5
        Validity
            Not Before: Sep 29 04:55:01 2026 GMT
            Not After : Oct  1 04:55:01 2026 GMT
        Subject: CN=6abb44a6-a708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:36:17:4f:fe:26:a7:50:bf:78:c5:a2:11:
                    45:f9:6b:bc:f7:0c:ea:ac:0c:06:93:74:a8:bc:b6:
                    eb:f5:a8:2f:89:5e:9e:05:dd:2c:bc:2b:41:f9:dd:
                    f7:bb:06:d8:aa:aa:73:a6:9d:dd:6d:71:ad:03:30:
                    aa:45:2b:f2:fd:08:8a:7f:98:5b:75:98:3a:6e:94:
                    c8:37:32:d9:53:f6:f9:19:73:14:05:29:a4:07:e6:
                    3e:e4:fa:88:86:71:a8:ce:e5:5c:8a:cb:25:c7:05:
                    dd:ec:09:f0:a0:2a:a4:5a:64:71:92:b9:bb:b7:28:
                    e1:1e:6a:10:93:5a:09:f0:1d:5a:4a:17:e9:8d:d4:
                    f8:41:00:81:03:f1:44:35:22:71:77:11:c4:bc:fb:
                    6e:87:c1:cb:d2:b6:be:d4:c4:dc:56:d6:91:86:33:
                    b9:b6:67:d6:b5:74:3e:6f:fa:9c:d6:cc:67:4c:6a:
                    84:ff:d3:1a:50:99:31:e1:6a:59:f2:10:6f:f4:66:
                    db:1e:9c:d4:bd:ef:52:7c:ee:ab:d1:10:3e:ee:3a:
                    d5:72:34:5f:c8:40:e8:53:ed:f6:b6:55:5d:da:4b:
                    20:94:5a:1c:38:57:e6:9d:c6:31:c4:3c:65:6f:19:
                    88:1a:44:2a:36:4d:a2:f9:2e:91:f3:fd:d2:f1:82:
                    85:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2A:0B:2E:5B:0B:DD:2A:1E:35:30:39:44:80:C3:BE:C4:B1:42:30
            X509v3 Authority Key Identifier:
                keyid:26:27:71:89:8D:B4:8D:68:D5:43:0F:C0:E3:91:1E:C9:03:65:BB:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JidxiY20jWjVQw_A45EeyQNlu_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/A03CAAF63D7011F0B10B60D3DAE4EC9C/JidxiY20jWjVQw_A45EeyQNlu_U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:e3:ba:1a:12:f1:ff:2d:70:c8:02:44:2b:56:85:96:77:
         cb:a9:b8:b3:9a:be:7b:38:6f:b1:dd:fb:a7:96:3e:8c:cd:39:
         af:0e:40:2f:27:0c:ae:4e:06:7e:46:96:3e:69:4b:ef:c2:81:
         8b:d6:9d:bc:36:4a:3b:a3:00:d3:7f:be:8a:05:70:dc:53:50:
         70:0e:22:60:8d:b3:4b:bd:53:d1:a6:c1:fb:40:12:87:6d:57:
         5c:1a:ba:4e:0e:78:9c:30:98:2d:9e:c6:71:d8:0a:4c:6d:08:
         21:cc:de:f6:70:72:d2:4a:78:05:df:da:c5:76:c2:b5:9d:31:
         c1:c5:1c:a9:e8:8e:43:03:6d:66:21:05:a5:b8:1d:7d:e0:19:
         0a:9d:75:eb:4e:a9:77:27:58:93:6b:9d:b2:d4:06:5a:54:c1:
         17:9d:33:d7:e3:ec:a7:d5:dc:9e:23:07:60:5b:48:c8:b7:03:
         12:7f:01:06:54:46:64:a5:cd:b9:1d:63:f6:ce:08:3a:6a:dd:
         2e:4e:7e:dd:5b:70:e5:cc:1f:3f:62:6f:eb:33:f3:19:40:45:
         0d:b6:3b:ff:3c:9e:aa:5c:4b:61:ea:9b:69:38:47:7b:e7:72:
         50:26:22:a5:5f:85:c2:88:48:94:2a:0a:dd:d3:ed:21:89:05:
         64:2f:68:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:08:19 2026 by rpki-client