Error: rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
File:                     udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft (raw, json)
Hash identifier:          NbcEY63bRkrmVg2ROaCNMxUuYmq16Vo5P/0lav04VqI=
Subject key identifier:   C9:9B:11:3B:E6:37:0A:1C:56:59:52:00:7D:CA:23:61:FE:AF:59:29
Authority key identifier: B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04
Certificate issuer:       /CN=F36D4684AF/serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
Certificate serial:       07CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
Manifest number:          07C9
Signing time:             Sun 04 Oct 2026 02:12:30 +0000
Manifest this update:     Sun 04 Oct 2026 02:12:29 +0000
Manifest next update:     Tue 06 Oct 2026 02:12:29 +0000
Files and hashes:         1: udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl (hash: 5kb8BjGbwPHUF9owApzPIoJnNfIoLx0LEHdO9s2+K2U=)
                          2: 7E8D503E195411F1A25C2AB8DAE4EC9C.roa (hash: LndX4htGhh1sJgeBAywfbXKEn72T5/YVdtcKjiz/a2g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1996 (0x7cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D4684AF, serialNumber=B9D73914770F5F38E2F178B574F69562194E8B04
        Validity
            Not Before: Oct  4 02:12:29 2026 GMT
            Not After : Oct  6 02:12:29 2026 GMT
        Subject: CN=6ac1b60e-8dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:95:11:fc:2d:c6:cb:81:cd:35:c4:3f:d1:
                    8e:dd:6e:a5:e8:ec:25:8a:ff:d4:b4:d1:8c:6d:09:
                    9f:7c:92:4b:e7:3f:f1:26:06:b9:0d:b9:77:ab:95:
                    35:ee:6e:87:27:83:65:72:e5:2b:e3:77:1d:cb:65:
                    33:39:6f:53:b8:9f:2a:7b:40:34:fe:6f:7d:9f:90:
                    26:a0:e0:aa:db:02:a3:b2:76:c8:be:db:13:5d:a7:
                    96:3c:7f:a7:c2:87:d0:d2:e4:71:b7:02:73:64:f7:
                    2a:d8:3e:60:01:79:b8:8b:50:7b:8b:0f:c1:6e:c9:
                    56:4c:29:60:55:fe:e8:fe:c2:c1:a9:01:9a:9d:85:
                    56:83:c1:da:14:ed:2c:7c:18:36:4d:4b:4c:01:54:
                    5b:68:d3:6b:09:20:73:5d:9c:b5:72:42:b9:b3:29:
                    30:7a:e3:9a:b3:e1:1e:62:14:b1:07:84:0c:54:97:
                    1b:b8:12:64:2b:f6:95:76:4d:c3:0e:9a:05:48:29:
                    e0:49:b8:a0:95:98:e4:da:04:65:89:ec:77:3c:9c:
                    0a:ae:1c:30:ed:b7:2a:2b:7c:41:60:4b:0d:21:dc:
                    bc:4f:e0:3d:da:37:89:97:97:24:8c:aa:14:3d:54:
                    7f:b9:06:28:15:5d:cd:d8:a0:15:e8:13:67:2c:ea:
                    0e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9B:11:3B:E6:37:0A:1C:56:59:52:00:7D:CA:23:61:FE:AF:59:29
            X509v3 Authority Key Identifier:
                keyid:B9:D7:39:14:77:0F:5F:38:E2:F1:78:B5:74:F6:95:62:19:4E:8B:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/udc5FHcPXzji8Xi1dPaVYhlOiwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D4684/8E89028ACDA511EB92DBCF3CF8AEA228/udc5FHcPXzji8Xi1dPaVYhlOiwQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9f:53:1e:82:89:e9:1d:a6:a8:a2:8f:a6:d5:47:eb:b6:ed:
         8a:ca:80:08:d4:03:3f:c2:9c:53:f2:76:87:a6:ce:76:e3:72:
         d7:cd:e9:03:69:34:97:23:7c:09:29:4c:f5:8b:13:05:12:c8:
         36:dd:ed:bc:d6:22:1a:bf:5c:2c:cf:f6:b2:57:5c:51:46:52:
         86:b2:6d:82:41:62:d2:f9:a8:1b:7a:5e:5e:33:a6:f8:3a:bc:
         db:33:a8:83:ab:78:02:08:ed:cf:72:30:63:77:5a:73:d5:07:
         c6:6c:25:b6:a2:9f:9b:26:b7:0f:46:b9:f9:75:f7:f0:c7:25:
         33:b6:65:0e:d9:dc:07:13:a4:59:c0:fa:1f:3b:dd:ce:51:95:
         b1:a2:d3:fd:c8:3d:3e:5e:13:00:13:dc:fc:fd:50:17:73:3e:
         bd:7f:94:03:14:d9:f1:7d:ef:38:b0:9c:6a:3c:7e:92:af:d7:
         16:c6:52:ca:fb:e7:d3:1b:ce:c8:cf:33:f8:a2:b5:10:ee:ae:
         00:12:94:08:97:08:89:93:cc:de:7a:a8:8b:6d:8a:d5:d2:b9:
         db:55:a8:79:2e:92:ca:28:5d:c3:fe:e2:d6:26:62:77:d0:80:
         2c:47:4c:47:8b:31:75:bc:a2:bb:ad:d6:c0:fa:dd:d4:6d:f7:
         36:87:45:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:47:42 2026 by rpki-client