Error: rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
File:                     7KUu1usrGLOvGbp5LPM-AO_td-o.mft (raw, json)
Hash identifier:          gNvaFqBwusbyrg4TtcEeapKpSfS7PXhp9n2bFh/vqhw=
Subject key identifier:   9F:D4:AC:CF:36:13:77:FB:D4:DB:57:4A:19:60:2D:37:94:5B:0A:F2
Authority key identifier: EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA
Certificate issuer:       /CN=F3678D2DAF/serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
Certificate serial:       0A20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
Manifest number:          0A1E
Signing time:             Wed 04 Nov 2026 01:40:42 +0000
Manifest this update:     Wed 04 Nov 2026 01:40:42 +0000
Manifest next update:     Fri 06 Nov 2026 01:40:42 +0000
Files and hashes:         1: 7KUu1usrGLOvGbp5LPM-AO_td-o.crl (hash: TT8tdbkR+nbbCVuHRbEFlKJ2CiVf2zs63J+oxVi2JHc=)
                          2: 72E4BD0412B111EA9EACDA3AF8AEA228.roa (hash: lEGlEyNpK2D28OfWSczq5nyD+T86uHXMrbx63t8Ft0s=)
                          3: 5142A9C212B111EAAF53AF3AF8AEA228.roa (hash: xG/mwLzjMt/AD4VCyWzSqQgk/KYhEOItbq9UQDh1nvU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2592 (0xa20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678D2DAF, serialNumber=ECA52ED6EB2B18B3AF19BA792CF33E00EFED77EA
        Validity
            Not Before: Nov  4 01:40:42 2026 GMT
            Not After : Nov  6 01:40:42 2026 GMT
        Subject: CN=6aea8d1a-80b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:16:8b:df:a1:6f:f9:b9:2f:a8:0a:54:fe:3d:
                    a7:64:e0:9e:30:9c:b6:2c:34:ed:e9:51:b7:dc:17:
                    bf:5d:6c:f9:a7:00:60:03:80:9b:db:06:c4:d2:9a:
                    12:1f:1b:de:a2:08:13:e7:c0:e7:f1:c0:b4:51:1d:
                    32:2d:54:02:ea:0b:86:93:26:8f:3a:29:a3:ee:69:
                    f1:63:93:85:08:ee:1b:ef:10:85:4c:ad:8d:64:19:
                    c5:b7:14:c8:2f:f8:b9:fc:52:3d:5d:19:f5:87:fd:
                    28:2d:bf:7b:bc:39:ce:c6:92:d8:c3:d4:6c:d4:22:
                    1f:c6:3e:f5:d0:17:2e:05:19:2d:d1:33:12:e7:49:
                    03:a8:a3:b7:cd:27:4f:6d:81:08:ab:dc:11:28:37:
                    85:25:08:0f:eb:f0:79:90:59:b9:d6:76:1f:0d:14:
                    aa:66:52:27:e0:c8:ef:3f:a0:f4:c3:4c:06:f7:02:
                    9d:6b:b4:d7:f7:50:5a:9a:06:bc:0e:70:ce:ac:af:
                    60:2a:37:1b:ef:d0:c9:ea:e3:ea:6e:d3:9a:08:fc:
                    dd:b9:cb:e9:55:69:bb:8d:4b:22:56:17:a9:68:ea:
                    8a:fc:74:04:4b:93:e2:49:d5:6d:f3:20:cc:74:9f:
                    c5:42:4e:a8:25:16:2a:01:49:ea:05:4f:91:dc:78:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:D4:AC:CF:36:13:77:FB:D4:DB:57:4A:19:60:2D:37:94:5B:0A:F2
            X509v3 Authority Key Identifier:
                keyid:EC:A5:2E:D6:EB:2B:18:B3:AF:19:BA:79:2C:F3:3E:00:EF:ED:77:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7KUu1usrGLOvGbp5LPM-AO_td-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678D2D/186D29CE12B111EA8C9E843AF8AEA228/7KUu1usrGLOvGbp5LPM-AO_td-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:3c:7b:e9:94:a5:9e:65:62:91:06:a1:c2:22:dc:b1:84:c5:
         72:7e:bc:73:48:19:e1:66:d8:f9:c8:71:98:5b:ad:67:69:af:
         7e:79:a1:60:f1:97:7a:b4:bf:17:7f:87:3a:93:1c:77:37:4a:
         e1:28:75:8c:2a:9d:17:10:70:95:07:2f:6d:34:db:93:e3:db:
         14:75:85:ce:2c:54:40:18:ea:cc:01:34:87:69:aa:7d:20:05:
         85:9a:55:a0:49:a1:36:5d:bf:87:4c:26:01:fd:21:07:fb:b1:
         25:f9:8b:d1:ec:1a:0f:97:db:e0:a9:69:5b:04:a0:08:28:94:
         dd:d7:d8:15:0b:c2:da:67:e8:bd:36:86:df:61:38:0b:94:e4:
         ff:1c:bc:e5:46:48:9e:1b:bc:d2:69:3c:a6:06:f3:e6:42:3e:
         0b:11:8d:8f:98:b1:2d:40:24:2b:22:f4:bb:87:df:3e:34:7f:
         75:45:9d:8d:af:d7:c3:2b:f8:f6:07:44:1e:26:72:bd:b6:be:
         7e:18:95:a3:48:d9:63:37:b2:d4:d8:27:e8:35:f8:cc:ff:63:
         7a:db:d5:38:cb:ec:e3:96:db:1e:14:be:0e:bb:2f:17:4e:e2:
         98:54:60:f6:ce:de:83:40:c5:5e:63:0c:d6:71:13:84:a1:d6:
         a5:93:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 05:32:10 2026 by rpki-client