Error: rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
File:                     nDG_Ybi28H3SmbmF5zKd-qo84qc.mft (raw, json)
Hash identifier:          n97YAzSG+P0J04cOtL0jy0mmov936jc13UKfJ3KFLIY=
Subject key identifier:   A2:19:99:06:75:CA:2B:86:A0:C1:D6:7D:15:24:94:04:4B:F1:12:0F
Authority key identifier: 9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7
Certificate issuer:       /CN=F36E3D54AF/serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
Certificate serial:       E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
Manifest number:          E7
Signing time:             Sat 26 Sep 2026 05:27:00 +0000
Manifest this update:     Sat 26 Sep 2026 05:27:00 +0000
Manifest next update:     Mon 28 Sep 2026 05:27:00 +0000
Files and hashes:         1: nDG_Ybi28H3SmbmF5zKd-qo84qc.crl (hash: I0WJmecfpP8pS0eg3ajUyYtIloUovpnii2UFpwzahn4=)
                          2: FCE69F10077C11F1B6D7578EDAE4EC9C.roa (hash: l9w1XT16v5pOs6ZmyalOJI7UHw3oAkl12LArNgvLDY8=)
                          3: D03272A4077D11F1B2E27D92DAE4EC9C.roa (hash: MNGXrpINz1Q16hHZ2N8QvRAzr2kMre4hq/Y0Tbq6HLY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 05:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3D54AF, serialNumber=9C31BF61B8B6F07DD299B985E7329DFAAA3CE2A7
        Validity
            Not Before: Sep 26 05:27:00 2026 GMT
            Not After : Sep 28 05:27:00 2026 GMT
        Subject: CN=6ab757a4-c509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8d:c7:c6:6f:dd:a7:45:f0:da:7f:94:a5:a6:
                    2c:97:8d:a9:fc:2a:80:95:cd:5f:6c:85:65:2b:96:
                    75:d1:f5:50:7a:fa:b1:28:90:0d:53:a7:c3:25:0d:
                    ec:21:3f:fc:ca:11:18:8e:86:2f:77:0a:ab:69:fb:
                    b4:60:35:2d:d3:f1:b6:18:8c:cb:2b:2a:74:6e:3f:
                    21:7b:27:7b:f4:65:a5:67:8a:21:05:a0:ac:c5:f8:
                    54:9f:21:25:6c:05:a9:32:6f:07:df:54:dd:71:d3:
                    7e:2a:e2:4b:f8:3e:a4:b8:7a:14:db:00:35:dc:b3:
                    42:f7:f6:c0:b4:35:6f:d0:fd:bc:e9:43:5b:c8:93:
                    2a:6d:37:57:7e:66:06:76:be:2e:89:0d:28:7e:6a:
                    73:fe:c5:9f:3a:8d:f8:4c:78:d6:54:3b:cd:85:af:
                    80:96:96:9e:a1:56:24:fc:0b:c5:7a:69:cf:ea:5d:
                    12:69:15:f3:d7:91:f6:84:d8:30:2e:d9:6d:1b:c1:
                    77:1e:af:cd:6e:7d:c8:fa:57:f0:b2:a3:a6:7b:5e:
                    e8:9d:d8:f8:d5:c6:86:e8:71:a6:da:1b:3a:f3:43:
                    ea:1e:92:a9:4c:4f:5f:1b:b9:aa:b5:74:b9:2e:00:
                    98:04:fc:0e:61:24:e8:78:bd:be:98:4a:48:3c:04:
                    05:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:19:99:06:75:CA:2B:86:A0:C1:D6:7D:15:24:94:04:4B:F1:12:0F
            X509v3 Authority Key Identifier:
                keyid:9C:31:BF:61:B8:B6:F0:7D:D2:99:B9:85:E7:32:9D:FA:AA:3C:E2:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nDG_Ybi28H3SmbmF5zKd-qo84qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3D54/10D7FDF8077C11F18A9EE389DAE4EC9C/nDG_Ybi28H3SmbmF5zKd-qo84qc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:1f:78:7d:a3:23:41:5a:78:3b:01:42:2a:3c:51:45:e8:e1:
         c0:4c:66:bc:36:b0:55:99:df:ae:d1:1a:17:f5:ef:99:e1:6e:
         9b:ba:85:d2:23:92:3d:09:17:d1:65:cf:e3:12:6f:36:4d:1e:
         f3:fc:a4:ba:22:40:46:51:e0:08:15:1c:a9:14:2b:6d:30:dd:
         71:fe:e3:78:86:fe:22:18:03:c7:e0:35:bf:ac:fb:43:f3:91:
         3c:b9:70:7f:91:c7:79:c4:3b:1b:b6:ce:84:ea:a3:d2:a3:30:
         d7:f6:7d:fa:d2:75:2b:13:cf:59:84:14:c6:b9:4c:76:cb:ee:
         bd:bf:2f:80:e2:a8:37:d9:2f:d8:85:0c:cc:cd:f5:d8:f3:c0:
         ab:4b:09:ef:c6:d6:70:b5:00:74:14:ee:b8:59:40:b5:ca:59:
         6e:e6:52:98:24:11:d3:64:51:63:56:29:e5:36:f9:de:00:46:
         b8:12:65:44:3e:d4:55:30:f7:27:0b:c7:84:52:c2:ca:81:fb:
         41:25:56:66:e9:19:e5:72:96:be:c5:84:f5:fb:da:90:b2:39:
         6f:ca:6f:8b:52:4a:9b:8f:83:d4:e3:39:ef:a0:00:79:c9:e9:
         c4:e7:52:73:76:6f:b2:fe:56:5f:4b:d3:85:c5:1d:b5:cd:35:
         73:87:da:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:51:09 2026 by rpki-client