Error: rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
File:                     YmHXJNC9IPWdDi44xn6JVKbUy98.mft (raw, json)
Hash identifier:          kNIEeww39+/vcTZuk9ciGF9T1zxqWB2pQGbbW4H7hnA=
Subject key identifier:   5F:01:67:FF:A2:9E:5E:0C:AC:4C:3C:C5:9F:F0:FB:6F:3C:A1:13:B4
Authority key identifier: 62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF
Certificate issuer:       /CN=F3610DE1AF/serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
Certificate serial:       0713
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
Manifest number:          0710
Signing time:             Mon 26 Oct 2026 02:33:53 +0000
Manifest this update:     Mon 26 Oct 2026 02:33:52 +0000
Manifest next update:     Wed 28 Oct 2026 02:33:52 +0000
Files and hashes:         1: YmHXJNC9IPWdDi44xn6JVKbUy98.crl (hash: B+Y136MeuLgMkPt5qR1SnNr62DmyRGfCbNUJLN9B1kI=)
                          2: EC347D644F7011F0B0E5A285DAE4EC9C.roa (hash: 7VqGdhK0QKVxfwrcQu0g+uIjAEEmddmp5+L+0+/1OA0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:33:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1811 (0x713)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610DE1AF, serialNumber=6261D724D0BD20F59D0E2E38C67E8954A6D4CBDF
        Validity
            Not Before: Oct 26 02:33:52 2026 GMT
            Not After : Oct 28 02:33:52 2026 GMT
        Subject: CN=6adebc11-ad3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e7:bc:1a:8b:44:d6:14:4b:62:62:53:7d:cb:
                    8a:fc:75:74:96:12:63:53:63:f0:6e:81:7b:40:36:
                    60:de:69:a2:6c:e4:9e:eb:ed:b6:56:14:39:bc:42:
                    24:b9:99:e6:d1:79:57:0c:3e:e5:64:8a:61:55:5a:
                    c6:57:c0:85:c2:0e:50:1e:3d:14:a0:c4:37:9b:2c:
                    94:ac:c0:f7:50:e7:a2:ba:0a:fa:a9:0f:8a:15:2d:
                    de:79:46:7d:5a:aa:75:a8:7c:d9:3d:dd:be:a8:6c:
                    95:8a:11:5e:a8:12:49:b2:ae:6e:89:f8:ce:27:04:
                    19:b4:b0:57:6c:45:df:28:b9:f7:48:8d:c0:a5:a5:
                    88:0d:c5:7b:cf:69:50:5b:c5:1f:41:e5:13:c8:f3:
                    09:7e:90:ba:72:68:60:8e:8a:a3:f0:5c:3d:85:47:
                    f7:d5:ad:b7:2f:ce:20:b0:63:97:ab:b2:1d:b8:15:
                    fd:7a:3e:65:5e:09:a0:66:5e:db:78:c4:83:5b:7f:
                    9a:5c:7a:38:2a:91:0f:40:ee:f6:e8:3d:9e:9f:cf:
                    16:72:6d:ac:61:02:fb:ec:26:e4:80:1e:06:d2:57:
                    39:60:d0:25:99:d2:01:21:88:86:f9:5d:ee:3f:ee:
                    63:d7:76:25:ba:33:dd:d6:13:46:bf:f7:f0:71:c8:
                    cc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:01:67:FF:A2:9E:5E:0C:AC:4C:3C:C5:9F:F0:FB:6F:3C:A1:13:B4
            X509v3 Authority Key Identifier:
                keyid:62:61:D7:24:D0:BD:20:F5:9D:0E:2E:38:C6:7E:89:54:A6:D4:CB:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YmHXJNC9IPWdDi44xn6JVKbUy98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610DE1/E9ABC710671F11EC86D5B8D95A40D577/YmHXJNC9IPWdDi44xn6JVKbUy98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:15:7a:82:11:7b:8f:3c:84:0a:ca:0d:d8:68:4c:7c:d4:
         6c:25:ca:22:44:62:c2:56:e4:7a:94:98:c5:55:9c:dc:db:0c:
         c7:ae:76:e1:7a:51:4a:ed:29:0d:9a:c9:4a:f5:3d:55:71:1e:
         96:af:31:56:93:78:0a:4c:86:f1:71:c5:35:78:4e:37:b2:c4:
         5d:c3:22:2e:f7:af:58:3c:1a:87:bf:c5:37:bd:83:95:63:1e:
         d7:b7:e8:f2:02:4b:b7:de:0a:90:6a:0d:68:82:55:ac:5d:11:
         bf:97:74:66:b4:8d:e1:e5:f5:3d:69:0f:3a:16:69:ba:ea:85:
         b9:6c:c3:27:18:76:f7:d6:26:20:71:c9:47:35:4f:83:aa:1b:
         ad:12:f9:96:57:b1:63:87:15:24:9e:bf:f4:c3:60:14:94:95:
         11:f1:63:14:35:3f:7e:65:5e:19:0c:15:66:f4:87:4b:81:5f:
         b1:28:62:64:37:6a:01:cd:4e:11:e4:ab:8f:1b:ad:54:6b:42:
         8d:9a:9f:f2:c0:65:40:eb:97:38:f8:c1:cd:d3:f5:c6:a9:d1:
         02:73:9c:93:e5:d3:49:f3:c2:38:05:0f:b6:b1:0b:b8:d2:7c:
         ad:32:f8:c7:be:04:e4:60:7b:ea:e6:75:a5:c1:1e:81:2e:02:
         14:18:ec:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:02:33 2026 by rpki-client