Error: rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft
File:                     vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft (raw, json)
Hash identifier:          3bY/blKo7sawNRuwN+3r9vE6qXvagsRKtmryuW1vV/s=
Subject key identifier:   63:80:E3:85:AA:96:07:56:42:DF:FD:4F:E7:4E:73:38:85:BB:D1:CA
Authority key identifier: BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E
Certificate issuer:       /CN=F36C6E82AF/serialNumber=BE9E6AB26887E04D556E850C54A5E7F1324DBD9E
Certificate serial:       06E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft
Manifest number:          06E0
Signing time:             Mon 12 Oct 2026 02:36:28 +0000
Manifest this update:     Mon 12 Oct 2026 02:36:27 +0000
Manifest next update:     Wed 14 Oct 2026 02:36:27 +0000
Files and hashes:         1: vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl (hash: BLi47gi8XRxpdZSDo/aXd45EElhQegl8LlZovA0Pc9Y=)
                          2: 50AFFF0ADD5E11EF9528EA76762E951A.roa (hash: X/76grUx+yq5QwPbiP76boks2mvwi+U8qIBcIC9zkRk=)
                          3: DE984A9CDD5F11EF97FAAB81762E951A.roa (hash: fUANEwPxt+FMRtzoia+WBkgjHhKhDNEr9B25Cto/vac=)
                          4: 981DE518DD5F11EFA9C15D7F762E951A.roa (hash: WU63DMCmbQDZq2LBTtRZnwwYc2gn9fKgVZ3QXsL3MLQ=)
                          5: 6A0C7B08DD5F11EFAC5D7A7C762E951A.roa (hash: PbOc0rH6HsLdll3C/DDTeZ+xtTIsbBYGvnSDWgrs3mk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 02:36:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1765 (0x6e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E82AF, serialNumber=BE9E6AB26887E04D556E850C54A5E7F1324DBD9E
        Validity
            Not Before: Oct 12 02:36:27 2026 GMT
            Not After : Oct 14 02:36:27 2026 GMT
        Subject: CN=6acc47ac-02e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:b4:ee:c6:1e:bb:02:f9:f7:a9:0c:1b:f8:
                    b1:99:64:b0:4e:59:f4:64:39:f6:22:67:5b:68:fa:
                    bb:85:44:b6:42:db:18:46:64:9b:b9:91:85:d7:6c:
                    0d:99:19:ac:38:af:1f:c8:a6:f8:b8:0c:79:4d:e7:
                    df:a7:11:27:f1:25:ca:9e:8a:5b:cc:aa:9e:87:b6:
                    03:e8:d1:71:67:ba:a5:6f:28:ec:af:d7:8c:03:ec:
                    5a:8c:da:90:98:19:ca:ec:c9:86:c6:d1:0f:b9:43:
                    9d:94:43:41:e8:02:39:39:de:76:bf:bd:61:71:47:
                    54:57:48:e4:b4:42:24:1e:8a:87:f9:d6:be:33:e3:
                    9a:e2:16:ab:af:75:16:fd:c3:c1:ab:9e:ac:f1:49:
                    72:c4:be:a7:11:c2:e7:30:d8:44:84:4c:d4:e0:9e:
                    16:d5:cf:c3:74:65:5b:d1:cb:f5:a9:2c:9b:5c:5b:
                    5d:b9:1f:87:f5:fa:07:53:76:3c:b9:34:af:88:25:
                    9c:16:39:ec:22:bf:cd:f0:0e:39:af:fc:24:4b:54:
                    d2:20:2e:1c:57:62:82:57:cd:2b:c2:41:7b:93:c6:
                    ba:98:7a:1e:4f:a8:ae:be:b0:72:38:87:9c:92:1d:
                    20:fb:fb:d1:ae:7b:20:e2:5a:83:d5:a4:b6:98:2d:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:80:E3:85:AA:96:07:56:42:DF:FD:4F:E7:4E:73:38:85:BB:D1:CA
            X509v3 Authority Key Identifier:
                keyid:BE:9E:6A:B2:68:87:E0:4D:55:6E:85:0C:54:A5:E7:F1:32:4D:BD:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vp5qsmiH4E1VboUMVKXn8TJNvZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E82/1F291064836D11EC8C0D5DD55A40D577/vp5qsmiH4E1VboUMVKXn8TJNvZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f4:13:89:5d:e1:41:8f:fc:5f:61:f5:75:c2:a2:a9:fd:ae:
         82:bd:a5:d4:72:6f:d1:02:87:dc:c8:eb:a4:09:a2:43:97:85:
         bd:9c:4b:d1:b6:5a:c1:f9:4a:9a:20:ee:76:ae:ac:99:f9:b4:
         ed:0f:c3:15:18:dd:32:d7:b3:86:70:f2:e4:1c:7f:b0:1d:1e:
         4a:a1:06:2b:97:05:97:93:1b:8d:29:c2:c3:32:45:2c:48:7c:
         1c:f8:b2:f8:01:d3:4d:4b:6e:c3:aa:d6:eb:2b:11:26:d6:60:
         85:bf:e1:f3:5b:74:c9:a4:c0:c9:c9:ed:af:35:61:0a:c4:29:
         8a:a1:21:34:90:e7:69:28:32:b7:ae:03:1b:76:81:e1:69:b7:
         98:db:9c:ae:47:2e:05:4e:f1:9b:b1:47:96:2e:53:4b:31:5d:
         bf:7e:7d:69:fd:57:a4:af:36:45:8e:71:66:7d:d9:62:67:93:
         8a:a1:43:22:a7:1e:76:12:2b:8c:bd:30:0b:0b:ff:ea:a1:cb:
         3c:02:d0:4b:1f:b1:3b:23:32:89:30:16:a2:1c:9b:d4:c8:be:
         09:5e:23:0a:f7:28:e7:40:57:14:36:47:3f:51:92:bb:66:a1:
         cf:ba:72:81:81:02:6d:ee:11:4c:00:fd:98:62:4e:14:fc:b0:
         9e:24:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:21:08 2026 by rpki-client