Error: rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
File:                     Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft (raw, json)
Hash identifier:          xhX7x6C/PBkzXT8Gr4SlbyOoS9S/DmQZq9NXBEx6TQk=
Subject key identifier:   9B:E0:B5:FC:8D:40:CB:2D:9E:CD:FB:C9:4F:CF:2F:E1:F8:64:85:4A
Authority key identifier: 63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4
Certificate issuer:       /CN=F36F1344AF/serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
Certificate serial:       0646
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
Manifest number:          0640
Signing time:             Wed 23 Sep 2026 02:49:18 +0000
Manifest this update:     Wed 23 Sep 2026 02:49:17 +0000
Manifest next update:     Fri 25 Sep 2026 02:49:17 +0000
Files and hashes:         1: Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl (hash: 7UKWIO1oXhX4XrFuILYV0XLBtsYBgajZSR08Fa2GBgE=)
                          2: FA0A10268D8011F18F4379E0CE1D38B0.roa (hash: isvF0Tax/20iYi7ZXFeg6uIx+YUxx5ER2b6kv6sd4Js=)
                          3: DEB2A540851511F19367D3F0CE1D38B0.roa (hash: sYepgmDznNmmNReOcG4umYZCEZRALxnqg21zsuyQF/k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:49:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1606 (0x646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1344AF, serialNumber=63E0A90C2B2A4B42A44AD44C8570E4BFFBF75CF4
        Validity
            Not Before: Sep 23 02:49:17 2026 GMT
            Not After : Sep 25 02:49:17 2026 GMT
        Subject: CN=6ab33e2e-b674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4f:8d:93:f9:7a:35:15:02:66:dd:73:02:f8:
                    24:74:ef:bf:56:f0:2b:71:2f:59:15:b7:82:f6:29:
                    09:f3:e2:55:42:e9:80:15:5d:f4:a8:4e:e5:d8:8f:
                    d4:f3:82:5f:99:0f:d0:2b:6e:c5:eb:26:82:04:ac:
                    15:49:ee:01:64:80:ce:f6:36:19:d7:11:71:a6:f0:
                    b7:5c:8c:30:2d:36:15:f2:6d:0c:ec:55:c6:fe:5e:
                    31:4b:81:f0:e8:7c:a2:96:6d:57:87:21:39:0d:43:
                    60:33:80:b7:c4:b2:32:db:b9:2c:9d:fa:04:bd:76:
                    d4:19:65:2a:af:af:82:a2:6f:71:9c:0e:43:48:59:
                    4b:02:3f:5d:7c:4f:2e:ff:78:fd:ac:05:40:c6:36:
                    14:79:19:06:46:33:b1:a6:6b:d1:c6:f1:fe:3a:19:
                    b0:14:72:85:15:92:8d:c1:a4:41:9f:ae:19:be:af:
                    6c:b4:11:78:1d:28:64:46:f7:2d:0f:32:21:98:89:
                    24:b4:bd:91:ae:e3:f1:0f:85:c6:c8:5c:58:34:b4:
                    77:a0:64:aa:45:e7:34:6c:9f:e9:fd:b7:3b:a0:27:
                    9c:b9:22:45:d3:c9:39:bd:64:42:4e:79:36:77:05:
                    1b:b6:60:c2:e2:45:3b:1f:96:f9:5f:49:63:68:ee:
                    89:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E0:B5:FC:8D:40:CB:2D:9E:CD:FB:C9:4F:CF:2F:E1:F8:64:85:4A
            X509v3 Authority Key Identifier:
                keyid:63:E0:A9:0C:2B:2A:4B:42:A4:4A:D4:4C:85:70:E4:BF:FB:F7:5C:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1344/6C278A18F61711EC8170AAABF1222468/Y-CpDCsqS0KkStRMhXDkv_v3XPQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:4c:84:5c:25:e9:8c:b2:8e:fc:1e:5d:35:01:63:ab:16:6e:
         32:ea:35:98:50:8d:38:06:3f:d8:15:4f:dd:52:5d:2c:54:f9:
         8b:63:a2:97:8e:e9:50:67:a7:4e:25:4e:e8:cf:bb:12:e8:e0:
         7c:1f:84:c0:93:9c:d1:9b:0e:3b:d2:37:cc:16:56:cb:9e:ea:
         c4:1b:c5:3d:a2:ff:f0:32:e2:6b:eb:4b:58:ed:3b:8a:2a:35:
         97:61:f5:9f:0e:09:ea:9e:ab:97:c1:bf:04:60:78:61:f7:f2:
         ff:20:56:14:56:e4:0b:1c:5b:5d:8c:94:0f:bd:cc:38:82:e2:
         c3:3b:6e:1b:fa:a1:3b:a8:0c:f4:27:40:53:39:b4:04:bb:0c:
         67:61:7e:b9:35:d0:78:e7:c0:7c:b3:3b:a7:42:a7:49:7e:0e:
         7b:94:fe:67:2b:c5:a0:69:5b:8d:21:fb:f5:7a:e9:0c:ad:13:
         b0:98:0f:66:b1:0c:b4:23:f4:73:2b:f1:69:cd:75:52:3a:21:
         67:34:4b:85:29:fd:9d:22:04:0b:e9:0b:cd:e1:24:48:5c:6b:
         ca:c9:ec:2e:3a:bb:92:79:b3:23:c3:7d:b5:7b:2d:f7:c5:b2:
         83:1b:82:43:3c:2a:38:f8:3d:59:af:7c:50:7a:cd:93:e2:f7:
         f4:a1:22:57
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBkYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjEzNDRBRjExMC8GA1UEBRMoNjNFMEE5MEMyQjJBNEI0MkE0NEFENDRDODU3MEU0
QkZGQkY3NUNGNDAeFw0yNjA5MjMwMjQ5MTdaFw0yNjA5MjUwMjQ5MTdaMBgxFjAU
BgNVBAMTDTZhYjMzZTJlLWI2NzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBT42T+Xo1FQJm3XMC+CR0779W8CtxL1kVt4L2KQnz4lVC6YAVXfSoTuXY
j9Tzgl+ZD9ArbsXrJoIErBVJ7gFkgM72NhnXEXGm8LdcjDAtNhXybQzsVcb+XjFL
gfDofKKWbVeHITkNQ2AzgLfEsjLbuSyd+gS9dtQZZSqvr4Kib3GcDkNIWUsCP118
Ty7/eP2sBUDGNhR5GQZGM7Gma9HG8f46GbAUcoUVko3BpEGfrhm+r2y0EXgdKGRG
9y0PMiGYiSS0vZGu4/EPhcbIXFg0tHegZKpF5zRsn+n9tzugJ5y5IkXTyTm9ZEJO
eTZ3BRu2YMLiRTsflvlfSWNo7onrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUm+C1
/I1Ayy2ezfvJT88v4fhkhUowHwYDVR0jBBgwFoAUY+CpDCsqS0KkStRMhXDkv/v3
XPQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYxMzQ0LzZDMjc4QTE4RjYxNzExRUM4MTcwQUFBQkYxMjIyNDY4L1ktQ3BE
Q3NxUzBLa1N0Uk1oWERrdl92M1hQUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ktQ3BEQ3NxUzBLa1N0Uk1oWERrdl92M1hQUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjEzNDQvNkMyNzhBMThGNjE3MTFFQzgxNzBBQUFCRjEy
MjI0NjgvWS1DcERDc3FTMEtrU3RSTWhYRGt2X3YzWFBRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkTIRcJemMso78Hl01AWOrFm4y6jWY
UI04Bj/YFU/dUl0sVPmLY6KXjulQZ6dOJU7oz7sS6OB8H4TAk5zRmw470jfMFlbL
nurEG8U9ov/wMuJr60tY7TuKKjWXYfWfDgnqnquXwb8EYHhh9/L/IFYUVuQLHFtd
jJQPvcw4guLDO24b+qE7qAz0J0BTObQEuwxnYX65NdB458B8szunQqdJfg57lP5n
K8WgaVuNIfv1eukMrROwmA9msQy0I/RzK/FpzXVSOiFnNEuFKf2dIgQL6QvN4SRI
XGvKyewuOruSebMjw321ey33xbKDG4JDPCo4+D1Zr3xQes2T4vf0oSJX
-----END CERTIFICATE-----
Generated at Wed Sep 23 22:32:10 2026 by rpki-client