Error: rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft
File:                     Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft (raw, json)
Hash identifier:          KZ74vQE5HP1PEb+zpgDbucZt2nXhY6gNTUU4m+CxNHw=
Subject key identifier:   4E:43:E6:DD:8F:09:A4:57:20:FB:2D:EF:3C:97:9B:C0:43:05:FB:23
Authority key identifier: 4A:38:7F:12:5A:C9:D2:18:9D:36:B1:BE:9A:14:60:16:E8:A9:B5:C5
Certificate issuer:       /CN=F3630A7FAF/serialNumber=4A387F125AC9D2189D36B1BE9A146016E8A9B5C5
Certificate serial:       0A2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sjh_ElrJ0hidNrG-mhRgFuiptcU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft
Manifest number:          0A26
Signing time:             Tue 03 Nov 2026 01:41:07 +0000
Manifest this update:     Tue 03 Nov 2026 01:41:06 +0000
Manifest next update:     Thu 05 Nov 2026 01:41:06 +0000
Files and hashes:         1: Sjh_ElrJ0hidNrG-mhRgFuiptcU.crl (hash: Xm03jasbIIFvnYAglFZv66iBoKMSw/c+F+JldA6SM4Q=)
                          2: 2381AD62926111F1896CF2F0CE1D38B0.roa (hash: 3fE1G3OZX4rK59CibbFC1tONmpKbJxHlS8TcyqOCkoM=)
                          3: AA540066926011F1A332FEEECE1D38B0.roa (hash: uESD6pgA/ktgYvMCFOgYx2X8JsFNCARuhLdvxt7oFjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sjh_ElrJ0hidNrG-mhRgFuiptcU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2604 (0xa2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630A7FAF, serialNumber=4A387F125AC9D2189D36B1BE9A146016E8A9B5C5
        Validity
            Not Before: Nov  3 01:41:06 2026 GMT
            Not After : Nov  5 01:41:06 2026 GMT
        Subject: CN=6ae93bb3-89fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:85:ec:03:f1:b2:18:f8:16:e3:a4:a8:eb:b1:
                    a3:2b:4f:fa:4b:78:12:c1:45:40:40:9c:dc:1e:8d:
                    d3:89:a3:92:eb:ee:44:3c:59:15:3a:90:d2:17:ab:
                    7e:97:70:a2:8c:cb:7e:f2:43:74:63:c1:58:5a:a8:
                    24:23:34:4f:99:68:57:75:ac:fd:21:9f:b2:20:7e:
                    6a:ae:57:1d:bc:69:7c:c7:9f:88:9a:ff:b3:55:23:
                    e1:d0:a4:2d:62:8d:ed:c5:65:d4:24:9c:82:8c:d9:
                    17:b0:c3:f8:f8:77:1b:03:2e:b6:82:8b:8c:d4:d1:
                    a2:19:6c:97:75:21:57:f4:56:a8:c1:e6:98:81:85:
                    19:ff:41:71:b6:38:18:1f:49:4c:ba:78:22:67:52:
                    2f:c7:89:3b:c8:4c:ed:42:ed:72:61:58:41:4c:16:
                    78:f3:f1:81:fc:2a:4c:49:d8:a0:2d:14:43:c2:b0:
                    34:65:8a:ed:52:c2:c0:ec:1f:69:5e:88:c1:d0:34:
                    29:90:a9:3a:95:44:02:c7:30:54:31:74:62:f2:81:
                    2f:4b:b5:b5:aa:d0:b1:4d:53:c6:fc:8a:c8:02:b4:
                    bd:e3:8c:5e:bc:9c:71:b3:93:c9:7a:26:25:25:16:
                    60:d8:9a:06:77:73:7f:ec:f8:74:1f:22:cb:84:69:
                    ad:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:43:E6:DD:8F:09:A4:57:20:FB:2D:EF:3C:97:9B:C0:43:05:FB:23
            X509v3 Authority Key Identifier:
                keyid:4A:38:7F:12:5A:C9:D2:18:9D:36:B1:BE:9A:14:60:16:E8:A9:B5:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sjh_ElrJ0hidNrG-mhRgFuiptcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630A7F/CEC2CC6A12B111EABD58233BF8AEA228/Sjh_ElrJ0hidNrG-mhRgFuiptcU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:56:bc:07:2d:89:e7:4d:e5:9b:d8:53:27:b4:40:2a:23:2d:
         e9:35:46:68:8a:12:cd:b8:4b:aa:9e:7a:2e:f7:4a:e7:91:90:
         4a:7a:13:b7:18:b4:8b:c8:36:9d:c6:71:e2:c5:ec:d9:07:35:
         bf:9a:e5:f0:e9:38:f5:e9:ee:26:71:8b:9c:3b:73:ff:3e:63:
         17:97:01:6d:d5:c3:24:3c:fe:3a:58:22:3b:a1:4b:d6:a6:72:
         e9:af:d2:5b:bb:c3:c3:0f:32:89:b3:e2:9a:40:a3:b9:61:ee:
         b4:c5:6e:b8:ab:c0:f0:01:58:6d:21:d9:a3:42:e5:7b:0a:c0:
         61:1f:c9:e6:2e:79:c8:a0:a2:25:c2:77:bd:30:f0:fc:4d:9f:
         af:65:7f:87:f7:e8:16:56:15:51:ac:1f:3e:c8:51:26:3f:63:
         c2:cb:3c:77:e0:e2:12:2e:af:84:aa:0a:e3:39:43:2b:f7:eb:
         71:7b:7e:57:e1:e5:21:05:ef:71:47:95:ab:d1:84:1e:92:6c:
         46:14:95:31:9d:f3:18:a9:b0:85:8c:05:41:37:74:99:8e:79:
         d0:5a:f3:be:43:36:ef:f3:81:95:8f:72:d0:6a:55:45:3e:82:
         64:57:ba:c3:30:67:6f:08:90:4a:f9:cf:64:84:e4:1f:22:39:
         47:bd:98:ff
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCiwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzBBN0ZBRjExMC8GA1UEBRMoNEEzODdGMTI1QUM5RDIxODlEMzZCMUJFOUExNDYw
MTZFOEE5QjVDNTAeFw0yNjExMDMwMTQxMDZaFw0yNjExMDUwMTQxMDZaMBgxFjAU
BgNVBAMTDTZhZTkzYmIzLTg5ZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDchewD8bIY+BbjpKjrsaMrT/pLeBLBRUBAnNwejdOJo5Lr7kQ8WRU6kNIX
q36XcKKMy37yQ3RjwVhaqCQjNE+ZaFd1rP0hn7IgfmquVx28aXzHn4ia/7NVI+HQ
pC1ije3FZdQknIKM2Reww/j4dxsDLraCi4zU0aIZbJd1IVf0VqjB5piBhRn/QXG2
OBgfSUy6eCJnUi/HiTvITO1C7XJhWEFMFnjz8YH8KkxJ2KAtFEPCsDRliu1SwsDs
H2leiMHQNCmQqTqVRALHMFQxdGLygS9LtbWq0LFNU8b8isgCtL3jjF68nHGzk8l6
JiUlFmDYmgZ3c3/s+HQfIsuEaa33AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTkPm
3Y8JpFcg+y3vPJebwEMF+yMwHwYDVR0jBBgwFoAUSjh/ElrJ0hidNrG+mhRgFuip
tcUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMwQTdGL0NFQzJDQzZBMTJCMTExRUFCRDU4MjMzQkY4QUVBMjI4L1NqaF9F
bHJKMGhpZE5yRy1taFJnRnVpcHRjVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1NqaF9FbHJKMGhpZE5yRy1taFJnRnVpcHRjVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzBBN0YvQ0VDMkNDNkExMkIxMTFFQUJENTgyMzNCRjhB
RUEyMjgvU2poX0VsckowaGlkTnJHLW1oUmdGdWlwdGNVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnVrwHLYnnTeWb2FMntEAqIy3pNUZo
ihLNuEuqnnou90rnkZBKehO3GLSLyDadxnHixezZBzW/muXw6Tj16e4mcYucO3P/
PmMXlwFt1cMkPP46WCI7oUvWpnLpr9Jbu8PDDzKJs+KaQKO5Ye60xW64q8DwAVht
IdmjQuV7CsBhH8nmLnnIoKIlwne9MPD8TZ+vZX+H9+gWVhVRrB8+yFEmP2PCyzx3
4OISLq+EqgrjOUMr9+txe35X4eUhBe9xR5Wr0YQekmxGFJUxnfMYqbCFjAVBN3SZ
jnnQWvO+Qzbv84GVj3LQalVFPoJkV7rDMGdvCJBK+c9khOQfIjlHvZj/
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:46:45 2026 by rpki-client