Error: rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
File:                     BWiAuMNgRKWRJvERqjVFvCDBKGI.mft (raw, json)
Hash identifier:          W70/ePnJZR0aHaFyempEibg+UWANumLCQWiFzbzDLQc=
Subject key identifier:   72:6F:B0:6B:F0:FC:76:32:E0:D5:B2:DB:CB:5D:E5:F5:E8:98:61:A8
Authority key identifier: 05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62
Certificate issuer:       /CN=F36FC328AR/serialNumber=056880B8C36044A59126F111AA3545BC20C12862
Certificate serial:       073F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
Manifest number:          073D
Signing time:             Sat 14 Nov 2026 02:30:09 +0000
Manifest this update:     Sat 14 Nov 2026 02:30:08 +0000
Manifest next update:     Mon 16 Nov 2026 02:30:08 +0000
Files and hashes:         1: BWiAuMNgRKWRJvERqjVFvCDBKGI.crl (hash: qtFlCrYRzorR5U+bE8eoMmOYPh9AIu2H5GkdNvSQEc0=)
                          2: EB8BB54C228A11F19208D6B6DAE4EC9C.roa (hash: 5ahKQTUHbsT6qmsjyp5i17NZTsk325A7dnAXmVyCtMk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
                          rsync://rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1855 (0x73f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC328AR, serialNumber=056880B8C36044A59126F111AA3545BC20C12862
        Validity
            Not Before: Nov 14 02:30:08 2026 GMT
            Not After : Nov 16 02:30:08 2026 GMT
        Subject: CN=6af7c7b1-0599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:db:bb:3d:ce:3e:c0:1d:4d:c1:13:e0:53:16:
                    f4:8f:c2:c8:7a:6f:97:4b:ab:15:65:da:f9:78:96:
                    67:19:34:02:a7:41:ce:4b:47:4e:e1:b4:9c:d6:e5:
                    12:92:e9:ec:c8:12:b7:46:ce:2a:98:c6:fb:4f:b7:
                    0d:37:e9:9d:bb:7b:9e:16:d5:6f:0b:75:60:0d:bf:
                    29:11:0b:17:31:23:00:39:49:87:a0:78:58:0a:25:
                    3c:c2:fb:6a:eb:45:60:7a:ee:93:41:6c:86:2a:b1:
                    21:3e:2c:0f:4b:16:ff:4b:d5:b2:1f:57:8e:d0:11:
                    c3:c3:3c:eb:09:63:f3:77:e1:86:56:5e:c4:f5:9a:
                    e8:9c:ff:6e:20:bb:0f:93:ed:ea:f2:24:05:61:d2:
                    25:65:ba:eb:6c:a8:77:d2:b5:ca:97:d9:11:20:9b:
                    f2:0e:07:5c:c2:49:16:ff:74:07:14:2d:a8:b9:3b:
                    4a:11:bd:6b:1c:fc:9f:9f:5c:f0:dd:0e:ef:2a:fc:
                    fb:6d:b9:52:ba:2b:33:6c:cd:a4:62:d8:5e:b2:d5:
                    1f:78:f7:f7:03:28:ee:9c:08:5c:aa:ec:c8:cf:07:
                    67:92:41:d2:b9:c2:db:f6:be:91:8d:df:3c:3b:0d:
                    d0:7b:b1:fe:e2:9d:7f:92:f3:bc:de:1c:c4:76:6e:
                    e0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6F:B0:6B:F0:FC:76:32:E0:D5:B2:DB:CB:5D:E5:F5:E8:98:61:A8
            X509v3 Authority Key Identifier:
                keyid:05:68:80:B8:C3:60:44:A5:91:26:F1:11:AA:35:45:BC:20:C1:28:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/BWiAuMNgRKWRJvERqjVFvCDBKGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/2976E2BA511F11EC9329157DD8A014CE/BWiAuMNgRKWRJvERqjVFvCDBKGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:7a:e8:b6:2c:a0:9c:d0:1e:0a:e1:6c:86:c8:bb:94:f4:
         90:fb:68:54:af:f3:17:ae:aa:4c:b8:d6:90:ab:26:60:cf:44:
         4d:f8:49:d8:14:05:50:03:3d:99:2c:e7:5a:89:35:1c:6b:7a:
         bb:a2:b0:e2:59:38:3b:c7:b4:2f:91:57:09:71:bd:36:bd:9a:
         0b:65:90:8a:7c:ad:b5:0e:88:74:cf:72:58:49:ea:62:fa:01:
         5b:d5:0d:ab:08:ef:c4:84:e4:f9:c5:6c:92:e6:75:6b:b7:65:
         f6:1c:02:69:25:2d:a9:fd:00:c0:57:95:8f:6f:ca:53:0f:af:
         77:d7:66:79:67:71:bf:a6:c7:57:7b:74:19:be:18:53:8e:e2:
         90:4c:56:2d:7f:0e:c7:07:a5:1b:88:cd:15:04:7c:12:a2:f2:
         d5:53:d4:35:0a:7c:fe:4f:7c:fe:d8:df:fe:d9:21:e0:2c:34:
         14:e9:6e:85:21:d3:89:89:e1:63:f0:df:d1:89:ff:28:35:83:
         39:44:31:6b:25:0a:b2:7b:9e:cf:2f:0f:52:e4:e5:59:35:39:
         d9:26:c6:8e:75:59:28:3d:9b:79:aa:e5:1a:22:34:33:56:ff:
         b9:29:57:3c:bf:5c:7b:49:db:34:a9:6f:f1:c0:8b:4e:3c:a2:
         8c:f8:c6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 21:46:00 2026 by rpki-client