Error: rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft
File:                     vy5RyFo6gX_2x_zGkwZPizx6mcY.mft (raw, json)
Hash identifier:          SJo1Gj/sc1Idh/1ZvYzfKzzLIROAmEXcrTrlbZ9yBWw=
Subject key identifier:   5E:DA:D2:62:93:EB:7C:8E:44:33:6B:8A:F7:7F:D1:C3:24:A9:24:96
Authority key identifier: BF:2E:51:C8:5A:3A:81:7F:F6:C7:FC:C6:93:06:4F:8B:3C:7A:99:C6
Certificate issuer:       /CN=F3660137AR/serialNumber=BF2E51C85A3A817FF6C7FCC693064F8B3C7A99C6
Certificate serial:       072F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/vy5RyFo6gX_2x_zGkwZPizx6mcY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft
Manifest number:          072C
Signing time:             Tue 03 Nov 2026 02:33:25 +0000
Manifest this update:     Tue 03 Nov 2026 02:33:24 +0000
Manifest next update:     Thu 05 Nov 2026 02:33:24 +0000
Files and hashes:         1: vy5RyFo6gX_2x_zGkwZPizx6mcY.crl (hash: XFno4sO5qBfOX9b/ADnvAYap5lKeD4uhNXU3k3JfNg8=)
                          2: 8733436A26A111F1A5D7988BDAE4EC9C.roa (hash: 4L+8Spl7mYLOf3F7diVAcemEBR1eKJGI+SB45GI3D5s=)
                          3: 4BF1039E1D2A11F1881091D5DAE4EC9C.roa (hash: Ta3ExWtG/xnsGfr3bzc8pu3vt1ny8YqPsH1y4+jMpic=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft
                          rsync://rpki.afrinic.net/repository/arin/vy5RyFo6gX_2x_zGkwZPizx6mcY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1839 (0x72f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660137AR, serialNumber=BF2E51C85A3A817FF6C7FCC693064F8B3C7A99C6
        Validity
            Not Before: Nov  3 02:33:24 2026 GMT
            Not After : Nov  5 02:33:24 2026 GMT
        Subject: CN=6ae947f5-3b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f6:30:65:db:8d:f1:00:c8:e1:c4:04:5b:11:
                    65:fc:15:d6:86:de:64:cd:c4:c6:8a:15:29:eb:5d:
                    4e:34:26:d1:b2:e5:41:1d:ef:2a:7f:aa:3a:00:d0:
                    67:ae:bd:b4:86:b1:10:fa:f7:32:af:21:0f:db:e2:
                    c1:80:43:df:61:a3:7b:da:82:16:d6:29:e3:8e:4c:
                    a2:d0:a7:1e:16:1a:48:20:e1:bd:9e:b1:95:57:26:
                    f6:04:f8:52:73:99:c2:4e:43:f6:ed:bf:24:20:eb:
                    d3:1c:14:40:b9:a9:1f:ce:36:5d:60:ba:02:eb:0c:
                    5c:1b:fd:97:ed:d6:3a:f4:51:ea:94:06:50:63:96:
                    4a:58:8c:4c:ae:9a:66:6b:58:e2:c6:73:84:ac:f0:
                    d7:80:f4:e1:f1:56:70:53:c9:ad:aa:d4:44:f5:d7:
                    18:39:29:2d:a7:0b:bd:78:85:90:d1:2a:ff:25:bf:
                    26:41:d3:b8:0e:00:bf:6b:35:0e:4f:33:ab:cf:9e:
                    ae:0e:f3:15:e2:a3:9e:98:9e:e6:64:e7:3f:01:90:
                    2e:1d:c2:24:18:13:81:1e:6d:52:7d:00:d5:cc:5e:
                    95:57:e2:70:c7:1a:e5:c5:35:bc:6a:02:aa:79:fb:
                    c3:22:9d:2a:ef:c8:19:33:6c:bc:b5:6b:57:a9:cf:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:D2:62:93:EB:7C:8E:44:33:6B:8A:F7:7F:D1:C3:24:A9:24:96
            X509v3 Authority Key Identifier:
                keyid:BF:2E:51:C8:5A:3A:81:7F:F6:C7:FC:C6:93:06:4F:8B:3C:7A:99:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/vy5RyFo6gX_2x_zGkwZPizx6mcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660137/341D643E5C1C11ECBD6FEB6D5A40D577/vy5RyFo6gX_2x_zGkwZPizx6mcY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:c7:83:98:61:c2:94:03:35:5b:ec:38:a3:a2:7a:bc:e4:
         8c:ff:0a:e9:5c:c0:e7:bf:d2:1c:c7:37:9f:1f:4b:f8:a1:e2:
         65:0f:0a:59:c8:cb:ec:bc:97:42:e9:d7:93:2c:45:b2:38:6a:
         af:d6:31:94:7f:47:a0:7b:f4:6e:f0:45:13:dd:a4:eb:56:a7:
         00:7c:87:77:95:f2:44:2c:c5:e1:b2:c4:3d:2f:02:9b:77:82:
         0d:f5:1c:82:3e:1c:d0:58:a3:c9:58:4b:91:28:43:18:e6:b5:
         08:33:3a:f3:23:bb:b0:a0:6c:1b:65:7c:35:55:c7:5a:21:bb:
         22:d7:be:b9:4d:3d:47:55:54:0a:86:78:f9:02:a4:f4:b2:16:
         5c:9c:9c:1e:c1:27:80:e8:44:29:4f:61:4d:ac:36:59:87:fe:
         06:44:5e:8a:03:72:c6:af:38:94:f0:fa:3b:23:f0:50:f1:7e:
         57:be:93:d4:0a:1b:5f:a8:72:72:ab:e3:69:f4:b8:be:f8:9a:
         65:d0:65:67:d7:82:a9:45:e7:c5:c8:45:2e:33:16:00:71:a9:
         e0:57:88:65:dd:fe:99:e8:e7:fb:6e:a4:43:e6:c8:09:b0:f2:
         a8:38:bf:74:68:25:ce:d3:b4:1f:e7:c1:52:85:c0:1d:26:eb:
         b2:81:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 06:40:58 2026 by rpki-client