Error: rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft
File:                     RBxm0uJ-FF16atySlsDDULxxi2U.mft (raw, json)
Hash identifier:          OpO7T+/Q/Rku5d4UIVHNQSYCrbjmrPgTb3kaLYC4RNQ=
Subject key identifier:   00:4B:48:70:11:29:38:7C:49:7D:5F:DC:0D:0B:46:53:43:3C:37:31
Authority key identifier: 44:1C:66:D2:E2:7E:14:5D:7A:6A:DC:92:96:C0:C3:50:BC:71:8B:65
Certificate issuer:       /CN=F3616C70AF/serialNumber=441C66D2E27E145D7A6ADC9296C0C350BC718B65
Certificate serial:       C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RBxm0uJ-FF16atySlsDDULxxi2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft
Manifest number:          BF
Signing time:             Mon 26 Oct 2026 05:38:26 +0000
Manifest this update:     Mon 26 Oct 2026 05:38:26 +0000
Manifest next update:     Wed 28 Oct 2026 05:38:26 +0000
Files and hashes:         1: RBxm0uJ-FF16atySlsDDULxxi2U.crl (hash: rqL+iS0U5E2B82P2rn6eV3Ej0gaXWNJY3LyN5zaP8wE=)
                          2: AADE53CA3FD511F1B4AE12F8CE1D38B0.roa (hash: i/TGMJEr4Iy+SC3OLf7KXhOgRufP1/hjUTCS/FesiFU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RBxm0uJ-FF16atySlsDDULxxi2U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616C70AF, serialNumber=441C66D2E27E145D7A6ADC9296C0C350BC718B65
        Validity
            Not Before: Oct 26 05:38:26 2026 GMT
            Not After : Oct 28 05:38:26 2026 GMT
        Subject: CN=6adee752-c92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6a:ec:26:df:ef:3d:bc:e4:03:1a:1f:de:84:
                    81:c0:6b:a1:a7:0f:c5:0f:a9:ec:4e:61:ca:da:65:
                    e6:61:ae:1f:5a:3b:f9:e6:49:85:e4:2e:e6:1c:5f:
                    53:32:0e:31:68:79:c9:23:13:bd:1e:f7:53:88:31:
                    1a:19:3c:05:54:79:e3:18:de:36:e2:5a:b4:d7:49:
                    27:76:6d:71:35:26:1c:3b:e1:fc:3a:ef:ab:37:92:
                    70:1c:f0:9a:f5:d0:e4:36:b2:c5:62:d9:a6:8f:c9:
                    9c:15:b6:59:7a:44:30:7b:9b:d8:48:55:cf:b7:1b:
                    93:ba:96:73:2a:ec:8d:70:a0:3c:f3:8c:9c:5a:73:
                    04:0b:e6:88:a6:3d:de:d8:4f:bb:27:11:d1:87:fd:
                    79:ff:f6:45:c7:a9:2c:73:66:af:62:0c:de:d3:13:
                    99:f7:76:99:33:8f:46:36:f5:65:ab:03:d5:d5:49:
                    7e:24:ff:1a:55:a0:6f:a1:4d:03:5c:82:b0:f7:f6:
                    5f:a2:7c:0a:57:70:ea:8c:f6:89:ee:b4:91:dd:a3:
                    bd:50:c8:18:a3:01:00:16:a3:7e:23:2f:f8:4e:1a:
                    4d:e3:1d:60:4c:da:e2:06:63:e3:1a:6f:d1:3d:13:
                    03:dd:ea:52:e8:93:04:6f:4d:73:a5:46:21:75:45:
                    27:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:4B:48:70:11:29:38:7C:49:7D:5F:DC:0D:0B:46:53:43:3C:37:31
            X509v3 Authority Key Identifier:
                keyid:44:1C:66:D2:E2:7E:14:5D:7A:6A:DC:92:96:C0:C3:50:BC:71:8B:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RBxm0uJ-FF16atySlsDDULxxi2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616C70/2541A90A3FD111F18FE9BCDBCE1D38B0/RBxm0uJ-FF16atySlsDDULxxi2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c0:94:ba:07:c8:da:8a:bb:e1:0e:8c:65:69:7f:8e:c3:1c:
         5c:82:ab:48:4e:25:79:65:d5:5e:f4:c6:30:53:79:88:1e:89:
         fe:ca:8c:3c:fa:fb:0c:20:b9:af:c2:83:52:1f:b7:f6:4d:3e:
         55:5b:51:9d:60:e2:e0:f5:bb:2b:71:ae:75:f4:4e:25:5d:ab:
         99:d3:a9:8c:ad:ea:a7:ff:67:12:e3:d8:45:8a:3d:0f:5f:46:
         c6:56:da:d8:8d:4e:de:0b:e9:c9:b7:30:e1:f2:1e:b0:c8:ac:
         de:24:98:3b:74:17:33:5a:7d:01:fa:43:87:f8:c3:83:cf:c7:
         37:b7:3f:0d:4e:28:31:78:de:8e:b2:80:00:54:22:91:17:90:
         58:1d:17:f1:f9:84:f2:19:87:4b:99:81:93:69:ae:36:d4:7c:
         e0:2c:57:69:ee:19:63:e7:5b:ec:5c:89:ab:cc:1e:73:f5:5d:
         59:00:c8:0b:2c:92:fc:03:04:c7:cc:09:e9:2c:80:84:ab:40:
         2c:78:4e:ab:42:78:a6:6c:04:58:a6:6a:9a:a6:71:ed:ea:ec:
         f6:0a:b7:13:60:e2:cf:50:ba:63:82:eb:7b:df:2d:99:21:3b:
         a0:8e:f2:49:68:84:11:16:a3:af:78:07:92:56:3a:c0:9b:5c:
         96:9d:1a:56
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTZDNzBBRjExMC8GA1UEBRMoNDQxQzY2RDJFMjdFMTQ1RDdBNkFEQzkyOTZDMEMz
NTBCQzcxOEI2NTAeFw0yNjEwMjYwNTM4MjZaFw0yNjEwMjgwNTM4MjZaMBgxFjAU
BgNVBAMTDTZhZGVlNzUyLWM5MmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjauwm3+89vOQDGh/ehIHAa6GnD8UPqexOYcraZeZhrh9aO/nmSYXkLuYc
X1MyDjFoeckjE70e91OIMRoZPAVUeeMY3jbiWrTXSSd2bXE1Jhw74fw676s3knAc
8Jr10OQ2ssVi2aaPyZwVtll6RDB7m9hIVc+3G5O6lnMq7I1woDzzjJxacwQL5oim
Pd7YT7snEdGH/Xn/9kXHqSxzZq9iDN7TE5n3dpkzj0Y29WWrA9XVSX4k/xpVoG+h
TQNcgrD39l+ifApXcOqM9onutJHdo71QyBijAQAWo34jL/hOGk3jHWBM2uIGY+Ma
b9E9EwPd6lLokwRvTXOlRiF1RSdJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAEtI
cBEpOHxJfV/cDQtGU0M8NzEwHwYDVR0jBBgwFoAURBxm0uJ+FF16atySlsDDULxx
i2UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE2QzcwLzI1NDFBOTBBM0ZEMTExRjE4RkU5QkNEQkNFMUQzOEIwL1JCeG0w
dUotRkYxNmF0eVNsc0REVUx4eGkyVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1JCeG0wdUotRkYxNmF0eVNsc0REVUx4eGkyVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTZDNzAvMjU0MUE5MEEzRkQxMTFGMThGRTlCQ0RCQ0Ux
RDM4QjAvUkJ4bTB1Si1GRjE2YXR5U2xzRERVTHh4aTJVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgwJS6B8jairvhDoxlaX+OwxxcgqtI
TiV5ZdVe9MYwU3mIHon+yow8+vsMILmvwoNSH7f2TT5VW1GdYOLg9bsrca519E4l
XauZ06mMreqn/2cS49hFij0PX0bGVtrYjU7eC+nJtzDh8h6wyKzeJJg7dBczWn0B
+kOH+MODz8c3tz8NTigxeN6OsoAAVCKRF5BYHRfx+YTyGYdLmYGTaa421HzgLFdp
7hlj51vsXImrzB5z9V1ZAMgLLJL8AwTHzAnpLICEq0AseE6rQnimbARYpmqapnHt
6uz2CrcTYOLPULpjgut73y2ZITugjvJJaIQRFqOveAeSVjrAm1yWnRpW
-----END CERTIFICATE-----
Generated at Mon Oct 26 16:07:51 2026 by rpki-client