Error: rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
File:                     RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft (raw, json)
Hash identifier:          rGGdmue2VePjSaWpF6L8BLS0PI5Y+5Qek36s04L0+Tk=
Subject key identifier:   DB:1F:6E:45:21:11:E1:FD:EF:C6:88:CF:38:8D:AF:63:11:F5:A8:ED
Authority key identifier: 45:6D:1C:9C:1A:7E:01:B6:3B:FC:B6:F8:BC:8B:C1:99:76:12:60:B2
Certificate issuer:       /CN=F3612066AF/serialNumber=456D1C9C1A7E01B63BFCB6F8BC8BC199761260B2
Certificate serial:       07
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
Manifest number:          06
Signing time:             Sat 19 Sep 2026 10:12:03 +0000
Manifest this update:     Sat 19 Sep 2026 10:12:02 +0000
Manifest next update:     Mon 21 Sep 2026 10:12:02 +0000
Files and hashes:         1: RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl (hash: EKF0lcrvPCgZj5/KBbyaeI2xHqMwUCD9vKiBtODG19g=)
                          2: 3226718CB1D711F189148CCACE1D38B0.roa (hash: nJ64FS+WCksILj46Guscx9vgjK0V1m37yzo+54WTWTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3612066AF, serialNumber=456D1C9C1A7E01B63BFCB6F8BC8BC199761260B2
        Validity
            Not Before: Sep 19 10:12:02 2026 GMT
            Not After : Sep 21 10:12:02 2026 GMT
        Subject: CN=6aae5ff3-a00b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:3e:69:a4:bb:8e:e5:41:92:79:80:3c:1a:52:
                    18:11:bb:3b:89:69:2a:0b:43:31:4b:04:06:3f:87:
                    5a:ab:4d:52:d0:9a:54:96:23:a1:70:04:29:c6:c1:
                    30:be:71:24:6f:72:ee:bc:78:d2:d0:d1:bd:a3:1d:
                    d4:44:db:fb:85:9f:8f:70:49:b5:80:bd:d2:76:2f:
                    14:b7:9e:3e:a0:a1:ad:f7:84:47:64:a8:66:50:02:
                    a4:6e:49:a3:32:2d:c9:3a:2a:f3:75:78:77:9f:59:
                    92:20:a1:83:1f:e7:f1:11:7a:83:2f:96:ee:eb:39:
                    5f:ea:5e:ff:9a:c0:36:6a:03:8b:e6:7f:04:b5:9c:
                    83:59:c1:91:5d:e9:82:9c:e1:ea:2f:c9:b5:64:22:
                    49:14:dc:55:a0:3c:91:26:d1:01:aa:cd:eb:97:be:
                    f5:a8:7a:4c:4d:1e:a2:29:61:63:b7:1e:6a:e8:91:
                    69:b3:a8:1f:8c:fd:59:e9:a4:e4:bb:23:48:88:cd:
                    c2:10:a7:17:89:05:48:15:67:93:47:d3:53:83:7d:
                    3c:8c:79:02:2c:82:14:40:bd:fb:90:96:45:1e:b9:
                    2e:09:b3:5b:b6:c9:e9:2b:6e:62:cf:03:3d:44:27:
                    6b:1e:ff:4d:c3:a9:9d:66:24:73:57:0f:52:b9:c9:
                    e9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1F:6E:45:21:11:E1:FD:EF:C6:88:CF:38:8D:AF:63:11:F5:A8:ED
            X509v3 Authority Key Identifier:
                keyid:45:6D:1C:9C:1A:7E:01:B6:3B:FC:B6:F8:BC:8B:C1:99:76:12:60:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:12:25:32:e8:06:17:9f:a0:0a:e4:03:8e:0e:50:c1:b5:12:
         a1:f5:5d:59:eb:c4:16:7b:33:0a:85:a4:0d:10:00:35:10:93:
         84:9d:16:0b:ae:36:89:13:39:f8:fa:ff:e9:98:e5:0d:e6:0e:
         fe:a4:4f:7d:08:96:9b:a9:1a:a4:42:ee:ad:09:26:4a:67:da:
         f2:c3:a1:a7:d0:db:c2:c4:8d:47:02:b0:8f:fc:97:2c:af:69:
         13:40:ac:95:8f:64:ef:25:d2:72:6c:7a:d1:e3:14:d5:fc:86:
         12:58:85:86:b1:f9:8f:7d:2f:f4:9b:7c:fb:4e:44:82:a1:bb:
         41:ab:1d:73:56:4b:d7:77:e1:06:c8:2f:0c:e0:61:d0:5e:55:
         f7:fd:77:e9:75:13:cb:7f:85:2c:43:5d:58:49:56:2e:12:04:
         d7:46:58:37:31:4e:3a:2a:69:32:75:30:0e:e7:c7:f5:0b:8f:
         56:17:0c:c7:78:05:9b:a1:d8:ea:90:a6:7c:9c:a5:24:9e:62:
         90:56:5d:98:1d:52:65:a3:44:00:74:e4:c2:1b:1e:99:b5:bb:
         ce:e3:00:13:91:4b:7c:c9:67:74:fa:b3:a6:6d:04:f0:b9:ee:
         68:89:f6:85:46:06:24:e0:84:4e:b2:c9:3a:96:40:83:ce:e4:
         3f:5c:04:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:06:25 2026 by rpki-client