Error: rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
File:                     pfCiu4t57dbTfAd63-oIJRTAQg8.mft (raw, json)
Hash identifier:          laKdbwdCUbLRoK1YVJCCCxbRomU3W1G+AIQdwBOOOKc=
Subject key identifier:   7C:19:AB:ED:34:2A:4A:2F:DD:4C:0A:3A:23:88:6B:10:1C:DD:83:7B
Authority key identifier: A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F
Certificate issuer:       /CN=F36CB1BEAF/serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
Certificate serial:       03D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
Manifest number:          03B5
Signing time:             Wed 23 Sep 2026 04:06:33 +0000
Manifest this update:     Wed 23 Sep 2026 04:06:32 +0000
Manifest next update:     Fri 25 Sep 2026 04:06:32 +0000
Files and hashes:         1: pfCiu4t57dbTfAd63-oIJRTAQg8.crl (hash: 8wDACPbmt5oAUyr0yLJXOBRTGPsag/sY06+RWABrUCE=)
                          2: 245B6D34FBED11EE8128962C017001B1.roa (hash: TrN9lcQpNeQiZwKFjsOsULheFfvRBy2GwIMFcOXP5rY=)
                          3: 13B429E4A82B11F08C7A96A4DAE4EC9C.roa (hash: KYrcNRS9qGwFheXL1jyE5bvgElaJoQSziRbqOSDolOc=)
                          4: 34152306A2FC11F187B2C4D6CE1D38B0.roa (hash: L01OTzrX3QXgBOxOq9ygtuOFpcX4ssn+k1klJk+Qt0U=)
                          5: 284E09F2A09A11F19A2665E5CE1D38B0.roa (hash: u4s7W4AeX+9w69pBqCY0XiznrH9hxmJdxR9Yz6cFOgw=)
                          6: 4A3BF0B6E9F711EFB363B759762E951A.roa (hash: qnWjHMa6krZFafky4BYIbSFj8GVyr5kF/yN3x6ht2sE=)
                          7: 767E76B2405F11F0B14520EADAE4EC9C.roa (hash: Psp54N8Zwbl9ziN2Vbyl63/0vnVM4zrW11s0ypx3pl8=)
                          8: 0C6B2666405B11F09F43C8CCDAE4EC9C.roa (hash: /9Ds38E/Nlm7VcSD/FOkPtqxtWfZMJuAf/6Y8lnD5JQ=)
                          9: 3D55216081AE11F19AE998BECE1D38B0.roa (hash: tEb4cIz3DQXZxgjEItHyqv4eB8KzPNyX/c919+r53Mw=)
                          10: F6FBFB8E745D11F0BF6D9BD0DAE4EC9C.roa (hash: /YM80rpuDV3whpYSjJG05E1etVVfPSD6PQbBs+HcexM=)
                          11: E09561B85EE111F1A566E6D1CE1D38B0.roa (hash: TIZi3tWlJaC0A2I3Tmcgez2CRqE9zMNpFFToSyX14bA=)
                          12: 4D9876F65EE211F1A6C850D2CE1D38B0.roa (hash: h+9oIW6kC0vNgF4yIkhDZ/ikr8H7uXQtpONqwGk32N4=)
                          13: 624DB26AFC1411EEA32C1066017001B1.roa (hash: SAKc0hgZ+mEboWzvP3K7DMfU8rpiR8UT+kWecca89NE=)
                          14: 8C5EBF98B18D11EF93764599762E951A.roa (hash: LMCVfxRKPtEUcD+l4fHRZWVAaU9InzZT+jXi3ynNqyQ=)
                          15: 9BF619A8FCDC11EE8DA40146017001B1.roa (hash: po7czQ/bhDV7w3+Oz4IVCSJosx6dgGFsaZotpFYiUzU=)
                          16: 85158DEA815A11F1B3416CAECE1D38B0.roa (hash: 85eyGHwM0jbpgdjYqk4rzN/rwaRGR253BARYQ7rwefk=)
                          17: 46D951EEBB1511F0A9D258C2DAE4EC9C.roa (hash: 3T0iCVJnMl4lV9aDTA0q3pEQKQ32TVj85JAiwnswBVc=)
                          18: 80E7A5D28D4411F19F1A6EDBCE1D38B0.roa (hash: mInSDggQH3pxrqeQ7YDV3qxSrqmn8wfRlQ+MMfGbcSc=)
                          19: A1B5AEEC442811EFA24AB347762E951A.roa (hash: WU/tv+bio89mYf5sL7OB/fhjHoVOLu5YlrkO6ttjHNQ=)
                          20: 7AFAA29E1F6111EFB0C39B397DDC24C2.roa (hash: e2WypnmRsaISjVRYfT/t99mLnGdtDrlVSL5Ti5URVMc=)
                          21: 1F57366AAD9E11F0834ED8B4DAE4EC9C.roa (hash: Zr7KgVk21J1guGSwDPBmYm/QDl0oDd0+ZlvGGCwRB7s=)
                          22: 7ABC7650641E11F19351D3B4CE1D38B0.roa (hash: vU0h95lDgAxSIzbpmav0a02fs24DfcjVOpzDPENILEU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 04:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB1BEAF, serialNumber=A5F0A2BB8B79EDD6D37C077ADFEA082514C0420F
        Validity
            Not Before: Sep 23 04:06:32 2026 GMT
            Not After : Sep 25 04:06:32 2026 GMT
        Subject: CN=6ab35049-f643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:16:9f:0d:c2:ff:33:9b:bf:c3:2e:d5:8e:1c:
                    2e:37:0a:ca:e1:16:71:8f:d0:72:55:2f:ab:b6:28:
                    7a:40:c0:c7:72:cd:10:28:59:46:8a:2d:c3:06:cf:
                    fd:80:a0:27:cd:ce:b6:79:4f:85:74:ca:34:6f:3b:
                    7e:00:df:41:1f:fb:03:ac:60:b5:08:07:e1:62:03:
                    f2:55:27:67:91:f4:28:1c:34:d0:02:b6:bc:34:8d:
                    2f:b7:f1:f9:f3:44:bd:19:f0:01:44:ea:d1:e3:85:
                    dc:69:cc:f9:be:34:d9:25:50:df:58:23:ef:2a:19:
                    c5:ea:f8:bb:4c:53:28:67:25:49:0f:b3:5e:89:7e:
                    26:44:29:2e:e3:26:ad:a8:38:12:6b:b8:2b:5a:93:
                    55:7b:19:be:39:c9:1a:70:ac:f6:59:d9:cd:e4:b6:
                    77:6a:c6:17:1b:27:b1:a9:1f:e7:2a:cb:e4:31:71:
                    df:47:b5:10:86:c4:02:7e:fd:c9:a5:97:df:69:c1:
                    26:a9:42:22:a2:fe:89:84:77:6c:b7:cc:8d:8a:8a:
                    69:60:f4:21:1b:ef:3b:29:a2:72:88:91:70:bd:60:
                    33:2a:22:b8:25:62:23:55:c5:d5:22:b0:4d:3e:ba:
                    5c:d0:f2:f8:0f:11:d2:89:09:3c:09:fe:79:d9:34:
                    e2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:19:AB:ED:34:2A:4A:2F:DD:4C:0A:3A:23:88:6B:10:1C:DD:83:7B
            X509v3 Authority Key Identifier:
                keyid:A5:F0:A2:BB:8B:79:ED:D6:D3:7C:07:7A:DF:EA:08:25:14:C0:42:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfCiu4t57dbTfAd63-oIJRTAQg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB1BE/F3228E86F0EE11EEA3BE0F58775412E6/pfCiu4t57dbTfAd63-oIJRTAQg8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f8:66:68:d1:f8:84:bf:3e:b8:5c:60:e2:7d:b6:8a:69:14:
         8a:e4:7d:cb:4a:ce:3a:cd:39:ab:06:a9:b5:ee:f9:ab:3e:7b:
         83:94:99:41:1f:16:7d:a0:09:bb:5c:cb:2c:92:ae:8c:2f:2b:
         50:92:2d:6b:30:a9:93:28:28:a9:13:57:33:df:2d:e1:97:37:
         a8:ab:35:aa:d4:3a:38:08:19:b2:45:3a:d8:e8:c1:f0:a2:2f:
         6b:cc:e6:36:a8:0e:b0:d6:5c:53:b4:81:79:c5:6a:20:d5:23:
         1e:c0:31:a8:04:0f:a0:56:e2:34:70:28:81:18:f2:4b:d0:09:
         0a:9b:41:17:a7:13:d6:d1:0f:2a:20:11:a4:2d:62:ff:db:ae:
         b0:24:87:20:cc:ad:9c:23:c9:3a:66:bc:b0:c7:ea:fc:af:95:
         97:ca:f3:b8:b1:97:df:a7:87:56:37:5e:b6:08:80:93:2b:ff:
         6a:3e:7e:b3:f4:ee:42:9d:e3:7c:ce:73:7e:79:27:6e:70:06:
         cc:99:0d:98:68:2d:c0:55:0b:6e:8d:ee:17:5d:82:a1:24:34:
         e5:f9:4e:47:19:5f:39:96:69:5a:3a:20:b0:0b:49:ec:b4:4e:
         c2:d7:f9:25:93:5f:db:c0:24:34:82:2a:23:7f:0b:e3:02:75:
         01:5b:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:49:47 2026 by rpki-client