Error: rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
File:                     U0PDi98uSRgxOaWKxC8Rb6mWc80.mft (raw, json)
Hash identifier:          ftfcniu/tEAEjL+Ib4kQBOdw9XOw8VyiiY9fL+FJ4cs=
Subject key identifier:   8A:5F:EF:2F:E4:5D:31:5C:40:2E:5B:3D:7F:94:1F:42:2D:8D:84:18
Authority key identifier: 53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD
Certificate issuer:       /CN=F36EADB7AF/serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
Certificate serial:       0621
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
Manifest number:          061B
Signing time:             Thu 24 Sep 2026 02:53:57 +0000
Manifest this update:     Thu 24 Sep 2026 02:53:57 +0000
Manifest next update:     Sat 26 Sep 2026 02:53:57 +0000
Files and hashes:         1: U0PDi98uSRgxOaWKxC8Rb6mWc80.crl (hash: ajKNMepy0D6hiQTLNAcQI034hRscb6MVb55A4favxrs=)
                          2: FDDEDCAC21D011F18474A17CDAE4EC9C.roa (hash: SZFd5PkVE834obyPBshtPMz+lsFfdRXHPh1ZlI1rujI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:53:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EADB7AF, serialNumber=5343C38BDF2E49183139A58AC42F116FA99673CD
        Validity
            Not Before: Sep 24 02:53:57 2026 GMT
            Not After : Sep 26 02:53:57 2026 GMT
        Subject: CN=6ab490c5-7671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:8e:4c:d5:96:e3:5b:dc:1d:31:84:e6:2c:
                    56:51:78:c0:cf:df:f3:3e:80:44:65:5e:c5:38:ab:
                    79:9c:60:f2:0b:10:8d:9a:b4:49:f4:a6:14:3f:4a:
                    48:bc:67:a6:04:2c:c2:1f:cc:34:dd:a3:c5:f6:6f:
                    01:aa:0c:e5:d9:17:01:b4:a6:4a:2b:6d:5d:68:19:
                    b7:f2:d0:85:84:ac:bb:c1:f7:8b:d1:4e:ef:4b:33:
                    52:93:82:92:8f:d4:a5:a1:9d:56:21:c7:55:79:5c:
                    b8:55:00:f0:51:a3:db:21:51:4d:d7:04:0f:6f:47:
                    51:98:9d:9d:7a:52:92:39:5c:b7:36:62:86:9c:d8:
                    1b:7e:fa:4d:ac:ed:bf:2f:da:e1:15:0e:5b:80:74:
                    6f:d6:68:5c:b3:3e:11:cb:d1:e6:24:92:cf:69:e8:
                    ae:4c:5a:0a:18:6a:20:53:03:b1:ff:5f:f7:56:bf:
                    cd:a8:3a:66:d6:4a:7f:58:cf:f5:38:0e:b3:60:2d:
                    be:f2:f0:97:00:67:09:76:2b:8c:3e:3e:38:7a:18:
                    d3:74:83:7a:a0:b0:f3:8c:61:89:dc:80:4c:cf:fb:
                    8f:41:71:90:93:a6:c7:e8:28:56:8c:67:77:7e:55:
                    6c:0f:f8:3a:97:63:ce:6b:d7:90:00:29:03:96:64:
                    df:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:5F:EF:2F:E4:5D:31:5C:40:2E:5B:3D:7F:94:1F:42:2D:8D:84:18
            X509v3 Authority Key Identifier:
                keyid:53:43:C3:8B:DF:2E:49:18:31:39:A5:8A:C4:2F:11:6F:A9:96:73:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U0PDi98uSRgxOaWKxC8Rb6mWc80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB7/3C8EB292132011ED9CAE43EEF1222468/U0PDi98uSRgxOaWKxC8Rb6mWc80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:60:6d:20:2d:be:16:94:b5:be:e3:05:eb:10:74:d2:f8:98:
         6d:02:2a:a3:14:72:aa:df:20:e3:3d:06:16:1b:5f:f6:b5:ef:
         54:ee:d9:b7:f7:90:87:c5:36:24:bd:68:0c:f6:fd:6a:41:8c:
         41:fb:b0:8b:68:6c:ec:08:e4:0e:cb:a5:fc:c2:bf:5f:65:5f:
         e9:e8:21:4d:d1:3f:90:63:25:9e:f4:a0:95:16:e7:55:c0:80:
         90:4d:c3:3a:e1:15:fc:2f:93:35:f3:9a:da:b4:6b:b4:ee:ab:
         c3:37:9a:05:61:fa:24:78:1d:ad:27:d8:a8:79:08:89:20:37:
         47:89:a5:16:fd:c9:ff:95:5b:f8:8d:77:58:06:b7:a1:9a:a3:
         94:98:63:2d:5f:13:63:8f:af:e0:44:25:47:64:f0:19:72:8e:
         11:7b:b7:9c:45:09:92:0e:ad:6a:ba:29:36:90:e7:53:44:d1:
         f4:d8:e3:55:ed:3d:e9:3e:bb:d4:bf:44:71:8e:5a:33:f1:55:
         45:5a:73:45:d4:66:91:8a:fb:0f:ad:1a:8e:4d:d4:34:05:6f:
         c0:5f:e3:64:84:f9:ed:7b:5e:3a:4d:5d:4e:26:aa:64:5d:df:
         2b:c8:be:99:3c:93:f0:83:1e:a8:63:1e:91:0b:e1:bb:05:d9:
         d5:13:c0:fb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBiEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUFEQjdBRjExMC8GA1UEBRMoNTM0M0MzOEJERjJFNDkxODMxMzlBNThBQzQyRjEx
NkZBOTk2NzNDRDAeFw0yNjA5MjQwMjUzNTdaFw0yNjA5MjYwMjUzNTdaMBgxFjAU
BgNVBAMTDTZhYjQ5MGM1LTc2NzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+L45M1ZbjW9wdMYTmLFZReMDP3/M+gERlXsU4q3mcYPILEI2atEn0phQ/
Ski8Z6YELMIfzDTdo8X2bwGqDOXZFwG0pkorbV1oGbfy0IWErLvB94vRTu9LM1KT
gpKP1KWhnVYhx1V5XLhVAPBRo9shUU3XBA9vR1GYnZ16UpI5XLc2Yoac2Bt++k2s
7b8v2uEVDluAdG/WaFyzPhHL0eYkks9p6K5MWgoYaiBTA7H/X/dWv82oOmbWSn9Y
z/U4DrNgLb7y8JcAZwl2K4w+Pjh6GNN0g3qgsPOMYYncgEzP+49BcZCTpsfoKFaM
Z3d+VWwP+DqXY85r15AAKQOWZN+dAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUil/v
L+RdMVxALls9f5QfQi2NhBgwHwYDVR0jBBgwFoAUU0PDi98uSRgxOaWKxC8Rb6mW
c80wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVBREI3LzNDOEVCMjkyMTMyMDExRUQ5Q0FFNDNFRUYxMjIyNDY4L1UwUERp
OTh1U1JneE9hV0t4QzhSYjZtV2M4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1UwUERpOTh1U1JneE9hV0t4QzhSYjZtV2M4MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUFEQjcvM0M4RUIyOTIxMzIwMTFFRDlDQUU0M0VFRjEy
MjI0NjgvVTBQRGk5OHVTUmd4T2FXS3hDOFJiNm1XYzgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApYG0gLb4WlLW+4wXrEHTS+JhtAiqj
FHKq3yDjPQYWG1/2te9U7tm395CHxTYkvWgM9v1qQYxB+7CLaGzsCOQOy6X8wr9f
ZV/p6CFN0T+QYyWe9KCVFudVwICQTcM64RX8L5M185ratGu07qvDN5oFYfokeB2t
J9ioeQiJIDdHiaUW/cn/lVv4jXdYBrehmqOUmGMtXxNjj6/gRCVHZPAZco4Re7ec
RQmSDq1quik2kOdTRNH02ONV7T3pPrvUv0Rxjloz8VVFWnNF1GaRivsPrRqOTdQ0
BW/AX+NkhPnte146TV1OJqpkXd8ryL6ZPJPwgx6oYx6RC+G7BdnVE8D7
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:13:52 2026 by rpki-client