Error: rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
File:                     DTBvSAc93XLccOnbp6ScT27cvII.mft (raw, json)
Hash identifier:          Ft/dG+pXO8jEIxWlOlf+pbZNAULKsqTkWZJUKHuh0Mk=
Subject key identifier:   90:14:62:E5:91:7A:0D:76:33:22:B7:B0:30:8E:B2:E7:28:FF:A6:DC
Authority key identifier: 0D:30:6F:48:07:3D:DD:72:DC:70:E9:DB:A7:A4:9C:4F:6E:DC:BC:82
Certificate issuer:       /CN=F36E201DAF/serialNumber=0D306F48073DDD72DC70E9DBA7A49C4F6EDCBC82
Certificate serial:       049F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
Manifest number:          049C
Signing time:             Thu 24 Sep 2026 03:37:00 +0000
Manifest this update:     Thu 24 Sep 2026 03:37:00 +0000
Manifest next update:     Sat 26 Sep 2026 03:37:00 +0000
Files and hashes:         1: DTBvSAc93XLccOnbp6ScT27cvII.crl (hash: A9MP62Uju+7ErZs8Zr2WNW8WXILQ0G1AnlQdcEWtWK4=)
                          2: 167BE270311311EE90196C2D4AD9E6FC.roa (hash: dZ+rQksE6z+SZB/mbDVm25XJgP/+R2iDhZ47qWEyHqs=)
                          3: 74FF55AC311311EEAA4CBB2E4AD9E6FC.roa (hash: YFcZ13YkooKk8gZs9EKDPRGIE46mgixe3+C0QIIMAH0=)
                          4: 52FAF038311311EE9319652E4AD9E6FC.roa (hash: CPXHz3C00Kr9ga8MYMPZ99obmxz+ufFsJiCHPSIPn0I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E201DAF, serialNumber=0D306F48073DDD72DC70E9DBA7A49C4F6EDCBC82
        Validity
            Not Before: Sep 24 03:37:00 2026 GMT
            Not After : Sep 26 03:37:00 2026 GMT
        Subject: CN=6ab49adc-3839
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:60:e9:84:33:4e:63:4f:89:7d:19:1a:f6:
                    40:70:02:e2:ce:be:c3:e4:43:b1:b5:82:7c:52:ed:
                    fa:56:a4:00:b2:48:94:65:a6:57:74:07:c7:41:8f:
                    b6:fa:6b:37:7c:14:53:5a:a6:84:b2:cb:6f:96:e7:
                    41:26:ae:b6:c7:1a:23:43:af:00:94:f1:57:20:5b:
                    f9:b7:31:49:a0:cc:82:5c:08:2d:a1:54:3c:8a:c7:
                    b8:e8:55:af:48:b7:7e:d4:a0:1d:a3:c3:9a:32:64:
                    db:a5:61:2f:aa:4f:eb:3b:50:f2:c7:a0:5f:f7:b6:
                    6d:ca:fd:02:ca:43:f2:86:e6:75:93:5f:ab:81:30:
                    3a:e2:3a:08:ca:b5:4d:08:ff:88:ed:9e:fe:3d:24:
                    4a:f9:98:ac:6a:59:d4:7d:ce:5b:d5:21:9d:ea:3f:
                    68:f6:d6:12:3c:7b:f7:5a:7e:14:9b:46:6c:61:40:
                    ec:cd:84:86:a3:1f:63:37:ac:fc:8a:90:4c:a7:38:
                    e7:b1:7e:a2:42:4c:c9:ae:56:55:74:81:fd:3a:9d:
                    bb:a2:79:26:66:e1:fd:76:98:a3:4c:b9:f7:04:c6:
                    90:d0:95:62:03:e4:44:9a:cd:db:0c:d3:2b:d3:21:
                    34:6a:29:23:10:81:2c:e9:1c:20:d7:9d:6c:af:83:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:14:62:E5:91:7A:0D:76:33:22:B7:B0:30:8E:B2:E7:28:FF:A6:DC
            X509v3 Authority Key Identifier:
                keyid:0D:30:6F:48:07:3D:DD:72:DC:70:E9:DB:A7:A4:9C:4F:6E:DC:BC:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DTBvSAc93XLccOnbp6ScT27cvII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E201D/BE11947C2FCD11EE8CE3D7484AD9E6FC/DTBvSAc93XLccOnbp6ScT27cvII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:d3:50:4d:7e:1f:39:73:0d:bd:44:e7:8a:a2:7a:a2:f7:30:
         1b:7d:f7:69:84:5b:22:d9:fe:d5:4a:b2:a2:90:e6:0c:23:9d:
         34:b1:c1:17:b7:54:ab:43:c2:37:8d:bf:52:d7:a1:7e:da:67:
         d7:6f:76:ad:c7:d2:ad:d0:e7:a0:7f:e4:33:a6:af:d8:f0:78:
         e1:37:18:46:bc:b8:e1:a6:c3:f8:5d:65:9a:d0:0d:22:a2:0b:
         38:a5:75:85:4d:a7:95:59:42:a2:07:5f:fe:7d:37:cf:8b:88:
         fc:3d:ef:f7:8b:ca:e3:81:8c:e6:40:80:ab:9f:55:21:fd:a8:
         c8:0f:96:6d:ee:dc:5d:56:cc:2d:33:4e:ac:e0:69:c2:fb:9d:
         0d:fd:b6:38:22:84:67:61:e0:86:32:a4:24:61:85:2f:a2:5a:
         c0:da:67:42:12:e2:b6:4e:18:76:6c:87:71:a6:5e:ea:50:ea:
         78:ed:af:cd:54:68:e9:05:d7:c8:2c:19:6e:21:14:6a:47:06:
         3b:3b:d3:9f:1c:9b:29:a1:31:93:e2:d9:db:fe:ae:09:6b:a5:
         3c:fa:3a:30:bb:0c:c3:94:69:08:65:a9:0b:ef:87:3b:19:61:
         b1:bb:14:08:58:9f:d5:78:31:a1:18:94:84:8f:4a:44:a2:bb:
         a2:61:2f:7b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBJ8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTIwMURBRjExMC8GA1UEBRMoMEQzMDZGNDgwNzNEREQ3MkRDNzBFOURCQTdBNDlD
NEY2RURDQkM4MjAeFw0yNjA5MjQwMzM3MDBaFw0yNjA5MjYwMzM3MDBaMBgxFjAU
BgNVBAMTDTZhYjQ5YWRjLTM4MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYXGDphDNOY0+JfRka9kBwAuLOvsPkQ7G1gnxS7fpWpACySJRlpld0B8dB
j7b6azd8FFNapoSyy2+W50EmrrbHGiNDrwCU8VcgW/m3MUmgzIJcCC2hVDyKx7jo
Va9It37UoB2jw5oyZNulYS+qT+s7UPLHoF/3tm3K/QLKQ/KG5nWTX6uBMDriOgjK
tU0I/4jtnv49JEr5mKxqWdR9zlvVIZ3qP2j21hI8e/dafhSbRmxhQOzNhIajH2M3
rPyKkEynOOexfqJCTMmuVlV0gf06nbuieSZm4f12mKNMufcExpDQlWID5ESazdsM
0yvTITRqKSMQgSzpHCDXnWyvg8E9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkBRi
5ZF6DXYzIrewMI6y5yj/ptwwHwYDVR0jBBgwFoAUDTBvSAc93XLccOnbp6ScT27c
vIIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyMDFEL0JFMTE5NDdDMkZDRDExRUU4Q0UzRDc0ODRBRDlFNkZDL0RUQnZT
QWM5M1hMY2NPbmJwNlNjVDI3Y3ZJSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RUQnZTQWM5M1hMY2NPbmJwNlNjVDI3Y3ZJSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTIwMUQvQkUxMTk0N0MyRkNEMTFFRThDRTNENzQ4NEFE
OUU2RkMvRFRCdlNBYzkzWExjY09uYnA2U2NUMjdjdklJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ01BNfh85cw29ROeKonqi9zAbffdp
hFsi2f7VSrKikOYMI500scEXt1SrQ8I3jb9S16F+2mfXb3atx9Kt0Oegf+Qzpq/Y
8HjhNxhGvLjhpsP4XWWa0A0iogs4pXWFTaeVWUKiB1/+fTfPi4j8Pe/3i8rjgYzm
QICrn1Uh/ajID5Zt7txdVswtM06s4GnC+50N/bY4IoRnYeCGMqQkYYUvolrA2mdC
EuK2Thh2bIdxpl7qUOp47a/NVGjpBdfILBluIRRqRwY7O9OfHJspoTGT4tnb/q4J
a6U8+jowuwzDlGkIZakL74c7GWGxuxQIWJ/VeDGhGJSEj0pEoruiYS97
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:40:02 2026 by rpki-client