Error: rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
File:                     YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json)
Hash identifier:          B2S1nnFvvlgdbTLo4X9umEQ9dSGQ9qJujY3fG3/L678=
Subject key identifier:   42:16:BB:89:13:5B:83:7C:4F:A2:9E:F4:7A:FD:AE:B8:8A:9F:93:9A
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       08CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
Manifest number:          0816
Signing time:             Thu 17 Sep 2026 02:34:00 +0000
Manifest this update:     Thu 17 Sep 2026 02:33:59 +0000
Manifest next update:     Sat 19 Sep 2026 02:33:59 +0000
Files and hashes:         1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: JXXSZqJq02pNnF3CNIqGQ7q0DmL2sZ6tbKzxiVXsfS8=)
                          2: 2857AB583E0F11F1BBCF171ECF1D38B0.roa (hash: zXKX4+aphgAq7cWal19QXfuEMLB96KnGjV9AjHPPGP0=)
                          3: D3C6F716A11D11F185E12A0BCF1D38B0.roa (hash: 6+X7QD8dnyD+V/9YrZA8+9arXhf+cPGFgwri8CwcPtY=)
                          4: BC9C52986C5811F099231397DAE4EC9C.roa (hash: HouG8yLobXovUgqovzMNrrKkzd8yvO2tiqmIiHxJg5I=)
                          5: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=)
                          6: 675B538879D111F1806496E2CE1D38B0.roa (hash: bp+YaCSeLhLpcUdTFTWzyzlCYsw83e8JSVdbDNSccAA=)
                          7: 702BAEE858AA11F0AE7EFB8BDAE4EC9C.roa (hash: HZftb7SkoPVv8c3p79wmuz6GJ/7AyE9u3ys6HyH6VV8=)
                          8: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=)
                          9: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=)
                          10: 11B6AE7E838F11F1994E2B1DCF1D38B0.roa (hash: 107O5Hc0T8kufuDN9DDsdJ548skzB1wVpr+HsKnPrE0=)
                          11: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=)
                          12: 4EFCF00622C111F1AAA1EFF2DAE4EC9C.roa (hash: 3D+Quaj4BMO4jtOSxnbnu0sxbAWpBZqh6HWx8W4zicM=)
                          13: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=)
                          14: D55D1A00A11E11F1942F2513CF1D38B0.roa (hash: yc8Tj6om4r5yEqpo2YY2Xb6OiBaaTOc1OQMdrdH03F4=)
                          15: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=)
                          16: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=)
                          17: BA9BAA3C22C111F1ACA8CAF4DAE4EC9C.roa (hash: GYZpxLycHzLHmSDiBRqQ7uyBVa2S5xBQXI3/KUPkbHc=)
                          18: 21FFF270243711F19BF46CF5DAE4EC9C.roa (hash: y+yR/BjY5lbVDSiSHrjGsQSh+U1LLc7b06ohNZElnJ0=)
                          19: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=)
                          20: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=)
                          21: 97CCC2681C5C11F1AE1F85A3DAE4EC9C.roa (hash: DsBjO5rK+mU2qS73wFVI/SMQlpsQmkwrtPwNgodDHRk=)
                          22: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=)
                          23: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 02:33:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2252 (0x8cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Sep 17 02:33:59 2026 GMT
            Not After : Sep 19 02:33:59 2026 GMT
        Subject: CN=6aab5198-192e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:1b:35:f8:b3:91:f8:e2:49:df:13:10:78:
                    12:2e:b5:ce:29:45:76:09:8c:5f:4f:4d:f9:92:78:
                    69:7c:36:7e:95:f7:16:2b:81:43:54:2d:89:c7:c8:
                    a2:f4:77:e4:87:36:42:dc:64:62:3d:0d:db:0e:51:
                    e0:c9:d2:26:2c:b7:c0:a7:c2:ad:bd:0e:f0:81:a9:
                    4d:e4:8d:ca:9c:29:2f:e6:c4:8c:03:b7:73:c0:53:
                    de:f8:23:33:2c:b8:0b:e0:8f:c0:9c:c9:c4:6d:8b:
                    b2:06:bb:c0:aa:43:ef:a1:e8:1e:45:33:c3:4a:52:
                    99:11:ca:25:4a:99:6d:81:38:77:e2:cf:4b:02:46:
                    d5:3c:09:8d:2e:1b:4f:92:5c:2c:f3:5f:d3:88:08:
                    b1:84:cd:da:55:2b:85:81:0f:f6:b2:fd:c3:f2:a8:
                    2c:bd:ba:ca:4a:9c:25:35:91:07:04:cc:ef:39:8d:
                    5d:f3:b2:92:72:b8:bf:83:73:89:a6:9f:c9:d4:be:
                    98:98:a5:f6:fc:14:aa:a7:61:91:b8:68:e7:6a:22:
                    a1:8f:d4:01:3e:20:33:51:ca:06:b8:02:92:55:e9:
                    52:8f:93:21:e4:67:b8:32:48:03:b2:b7:ac:7e:3a:
                    29:22:c7:8d:03:07:79:fa:0a:81:37:ec:09:fd:04:
                    40:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:16:BB:89:13:5B:83:7C:4F:A2:9E:F4:7A:FD:AE:B8:8A:9F:93:9A
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:db:aa:38:71:37:ec:be:78:70:7d:5f:d2:07:a5:10:53:ba:
         76:d3:e5:14:f4:86:98:11:dd:fb:a2:1e:3d:e6:b4:42:9f:ee:
         13:be:2a:3b:03:27:0a:c8:f9:11:e4:23:ef:cf:98:a6:9c:ac:
         5e:56:c6:bf:51:ee:e3:27:1a:70:37:1c:b9:03:f0:99:22:83:
         48:95:c9:0b:b3:8d:53:fd:51:8d:b4:82:70:77:8e:de:f6:2e:
         35:22:6f:a2:82:cb:f0:5d:30:ae:41:b6:fd:69:f5:a8:54:11:
         9b:f4:5f:9a:3d:c5:a1:2a:d3:59:90:7f:42:82:62:9a:7b:89:
         03:4e:30:c7:f8:32:f2:61:49:43:aa:f3:d9:22:d8:51:4d:67:
         b0:a1:e5:0f:3f:62:f2:20:84:1b:19:36:c5:40:ac:4d:e7:71:
         4e:55:6e:80:7e:d5:4e:79:c5:c9:d0:ca:20:e7:cb:57:50:42:
         8b:d0:71:fd:7b:c9:8f:3d:b8:f5:45:e7:70:07:0d:7a:56:c3:
         d1:70:86:0f:56:13:05:01:2d:ac:58:a9:78:48:eb:ad:d6:2c:
         c7:3f:10:44:f7:86:1d:33:c7:1c:fc:0e:ee:e9:6a:3e:c9:d7:
         9a:24:92:af:66:e9:19:1b:0f:5a:40:aa:93:35:84:d5:ce:81:
         af:0c:4c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 22:47:52 2026 by rpki-client