Error: rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
File:                     aRHVUPOKT27JEBz-cu1_bZFhR3E.mft (raw, json)
Hash identifier:          XKNwWIfbVEOnNqE+hnYt4sO6NeC44kCkC824HGMZoqI=
Subject key identifier:   B8:72:F8:E7:3F:A8:46:95:00:6F:83:7F:1C:3C:CD:7E:3F:17:4F:49
Authority key identifier: 69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71
Certificate issuer:       /CN=F3615826AF/serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
Certificate serial:       07A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
Manifest number:          07A7
Signing time:             Mon 26 Oct 2026 02:17:22 +0000
Manifest this update:     Mon 26 Oct 2026 02:17:21 +0000
Manifest next update:     Wed 28 Oct 2026 02:17:21 +0000
Files and hashes:         1: aRHVUPOKT27JEBz-cu1_bZFhR3E.crl (hash: QVWRagmwC4f3DJ+ntwhAqRS1a5Ia2AyPlN4MaGBNsvU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:17:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1959 (0x7a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826AF, serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
        Validity
            Not Before: Oct 26 02:17:21 2026 GMT
            Not After : Oct 28 02:17:21 2026 GMT
        Subject: CN=6adeb832-8929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:8f:64:22:2c:d6:c7:f2:81:c3:83:5d:c9:
                    12:40:18:ba:d1:24:74:0a:ad:d0:f1:48:12:7a:b5:
                    6b:a5:14:65:00:b5:8a:96:37:d7:f6:dd:a2:22:f1:
                    6f:e0:b8:6a:a4:64:73:04:ee:08:0e:b8:0c:cb:3e:
                    9b:2d:5f:3e:c7:c1:02:cd:4a:71:14:99:d5:10:ff:
                    58:82:0a:22:6b:a1:01:39:43:f7:26:cd:b7:be:7a:
                    6e:01:a5:60:dd:bf:77:88:3a:0f:42:06:a6:29:d8:
                    96:1a:f3:9c:22:93:fd:f7:a3:52:b3:13:a8:73:63:
                    f2:52:ba:c0:e9:c1:aa:b6:2b:97:e5:f8:1d:b5:36:
                    20:2d:ac:af:1a:16:2d:72:b2:51:e3:95:f1:e9:d3:
                    cd:25:74:49:23:51:56:26:b4:b6:96:f3:86:10:3f:
                    bf:83:9a:2c:1e:0f:c5:67:83:9b:94:9d:17:54:20:
                    13:a3:46:d2:58:70:7f:f4:ce:57:00:50:e6:bf:34:
                    9f:4e:02:20:a7:f7:7b:4a:09:b8:52:4d:d5:c4:85:
                    08:62:31:ca:f2:f4:ba:da:3c:f8:06:22:b5:e5:97:
                    04:d9:9e:88:bf:8f:14:d6:8f:f9:3b:f3:5f:37:f0:
                    cb:4f:a8:08:be:b8:59:30:fb:68:9c:83:59:ec:39:
                    02:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:72:F8:E7:3F:A8:46:95:00:6F:83:7F:1C:3C:CD:7E:3F:17:4F:49
            X509v3 Authority Key Identifier:
                keyid:69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0e:88:5b:d8:33:34:40:f9:94:0c:d6:0b:c4:d2:bf:fa:39:
         3b:eb:cc:3e:63:ff:65:ff:4e:bf:54:83:cb:69:c8:7f:b1:87:
         5a:14:6e:e5:e8:4f:1b:d0:61:cd:c4:8b:60:a7:3b:53:28:78:
         17:85:3d:e1:de:12:1d:6b:eb:49:dd:3f:ad:5d:a1:27:e0:a9:
         24:18:a0:69:6e:93:e0:e7:6e:4d:07:72:b0:30:b7:3a:42:78:
         e2:7d:4b:70:bb:37:43:98:a2:4c:15:3e:ec:5a:29:cc:05:b3:
         2b:98:fe:18:4c:9b:ee:9e:51:9d:22:63:13:3d:6d:56:43:50:
         4a:1f:9d:96:ba:2c:36:8c:41:9e:91:25:3f:8a:ae:9a:90:1e:
         8a:cf:33:a9:c8:1d:ba:d0:5a:a1:b8:cf:7b:8a:69:73:4d:a1:
         e7:4e:37:21:8a:0a:a4:7c:e0:d4:15:80:d6:77:69:5e:e7:17:
         3d:2d:c6:aa:46:a6:00:2f:c5:01:04:ea:b3:40:03:1b:95:af:
         69:02:69:7f:d1:46:ee:e1:f5:d0:b9:ff:a4:e6:03:15:b1:7d:
         07:33:06:05:2f:ec:b6:17:46:4e:27:a2:0e:e5:05:18:61:39:
         83:67:1f:77:b1:83:99:0a:f7:05:0c:af:50:2a:d4:b0:be:35:
         6a:c4:54:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:40 2026 by rpki-client