Error: rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
File:                     a5qEGbi8uumMQQnFsT9T3CAtmnk.mft (raw, json)
Hash identifier:          J3s7JypWI7uM3WSdJ33otiSb6bVy415RbbKesBbmmiw=
Subject key identifier:   C4:F4:26:3C:C4:01:44:B7:26:4B:D3:E7:C5:98:7E:EC:BE:8B:AA:94
Authority key identifier: 6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79
Certificate issuer:       /CN=F36250A1AF/serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
Certificate serial:       1D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
Manifest number:          1A
Signing time:             Sat 19 Sep 2026 10:07:41 +0000
Manifest this update:     Sat 19 Sep 2026 10:07:40 +0000
Manifest next update:     Mon 21 Sep 2026 10:07:40 +0000
Files and hashes:         1: a5qEGbi8uumMQQnFsT9T3CAtmnk.crl (hash: Py6Y9jJFPEmIvPB74zVlYB1PK4zzhlT36yI929ZHbcI=)
                          2: F312CFCEA5C711F1B3FC18CECE1D38B0.roa (hash: EFMA6YNMYBhoHPMBTT30p4Lctr0AmQ5qhgphyC0IGSw=)
                          3: BAF5007CA5C611F18A373AC4CE1D38B0.roa (hash: /F1vWOzW0fg+2W1kCzqXuu5VBgL5pobx9VVGHh2FCq4=)
                          4: 7C673F94A2A811F1AA24A8E7CE1D38B0.roa (hash: dxBgg9SKGVOPFMpt363i3eflK4txWh7F49pZpdKEnSs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36250A1AF, serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
        Validity
            Not Before: Sep 19 10:07:40 2026 GMT
            Not After : Sep 21 10:07:40 2026 GMT
        Subject: CN=6aae5eed-c961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a6:de:67:46:85:df:2a:5e:fe:65:4e:23:29:
                    73:e9:8e:29:7b:6a:0f:4a:fc:f7:2d:85:25:51:b1:
                    34:33:aa:a0:f5:7a:57:0d:77:77:df:e3:a0:f6:77:
                    94:4c:34:ae:e2:ed:e5:08:ec:bc:d9:d4:39:16:b9:
                    cf:05:16:8e:c6:66:56:3d:54:e3:e7:98:d8:2e:98:
                    bf:12:26:af:cc:35:5f:bc:17:6a:64:2e:76:90:67:
                    06:01:03:b4:f8:85:cf:b6:58:69:16:b8:88:f9:1a:
                    8e:82:53:c2:bd:52:5b:2c:20:c3:20:7f:a9:43:fc:
                    1a:d3:88:ee:15:fd:12:d2:73:d3:c5:61:55:e2:c1:
                    9f:6f:c8:a8:62:3c:05:0a:18:a4:d9:76:af:f6:bd:
                    6c:6c:0f:5e:05:14:2b:39:68:79:ff:77:4c:4b:93:
                    0e:43:ea:80:94:91:dd:80:29:49:f1:af:91:90:5d:
                    1f:74:1f:bf:71:6b:48:6e:f0:a3:5b:3f:29:1c:a4:
                    22:c8:cd:6c:77:7a:44:6e:c6:4f:c5:f9:e6:1b:b0:
                    b0:34:41:04:40:4b:65:e0:c6:2b:83:63:5a:ff:9a:
                    76:e2:7c:f8:7a:83:81:9d:88:52:68:43:cc:7d:c3:
                    25:ff:40:52:e8:4b:b4:27:6b:67:bc:71:8e:bb:5a:
                    f0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F4:26:3C:C4:01:44:B7:26:4B:D3:E7:C5:98:7E:EC:BE:8B:AA:94
            X509v3 Authority Key Identifier:
                keyid:6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a5:2e:ac:10:c3:1a:08:13:c6:56:d7:5b:cd:ae:dd:b6:e7:
         b9:80:b2:c7:8f:b5:f4:6c:5d:5c:5f:97:07:a8:1b:e3:0a:a0:
         45:93:31:64:75:88:dc:bb:87:49:53:01:50:d7:68:0f:31:c8:
         0d:47:d9:5e:cd:3a:e1:ac:b8:ce:35:2c:43:0e:2e:fb:71:24:
         4d:5d:6c:c0:b4:a4:5a:7f:92:39:34:87:16:ec:81:29:8b:5f:
         f2:ab:d5:aa:09:bb:13:e7:09:82:85:9b:eb:68:b0:86:40:47:
         f3:90:56:54:3c:09:66:f5:ed:73:1c:d0:d6:c0:b4:8b:42:0e:
         d1:1c:48:7c:c3:72:d7:35:23:ea:aa:9f:03:14:ef:5f:61:a7:
         66:18:00:f9:dc:de:65:96:28:b8:20:71:02:2d:b7:d1:71:7e:
         a3:c0:1e:d9:16:5b:39:15:ab:14:8e:07:e3:49:48:50:4a:f4:
         08:e5:0a:a1:05:8e:54:93:54:53:98:f3:b8:0c:e2:e7:5e:30:
         7d:7f:ee:0e:bb:e8:4c:06:bb:0f:18:87:d8:4c:21:59:77:3e:
         2c:ed:38:03:6b:46:0d:a4:48:c8:77:0a:c0:d7:01:e1:19:c0:
         0f:9d:82:90:d2:0d:f5:4d:8f:09:22:bb:f4:a3:e9:8b:d4:58:
         81:28:6a:fa
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBHTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
NTBBMUFGMTEwLwYDVQQFEyg2QjlBODQxOUI4QkNCQUU5OEM0MTA5QzVCMTNGNTNE
QzIwMkQ5QTc5MB4XDTI2MDkxOTEwMDc0MFoXDTI2MDkyMTEwMDc0MFowGDEWMBQG
A1UEAxMNNmFhZTVlZWQtYzk2MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALam3mdGhd8qXv5lTiMpc+mOKXtqD0r89y2FJVGxNDOqoPV6Vw13d9/joPZ3
lEw0ruLt5QjsvNnUORa5zwUWjsZmVj1U4+eY2C6YvxImr8w1X7wXamQudpBnBgED
tPiFz7ZYaRa4iPkajoJTwr1SWywgwyB/qUP8GtOI7hX9EtJz08VhVeLBn2/IqGI8
BQoYpNl2r/a9bGwPXgUUKzloef93TEuTDkPqgJSR3YApSfGvkZBdH3Qfv3FrSG7w
o1s/KRykIsjNbHd6RG7GT8X55huwsDRBBEBLZeDGK4NjWv+aduJ8+HqDgZ2IUmhD
zH3DJf9AUuhLtCdrZ7xxjrta8KECAwEAAaOCArgwggK0MB0GA1UdDgQWBBTE9CY8
xAFEtyZL0+fFmH7svouqlDAfBgNVHSMEGDAWgBRrmoQZuLy66YxBCcWxP1PcIC2a
eTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MjUwQTEvMEMxNDZCNUVBMkE4MTFGMThGQTg4MEU3Q0UxRDM4QjAvYTVxRUdi
aTh1dW1NUVFuRnNUOVQzQ0F0bW5rLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYTVxRUdiaTh1dW1NUVFuRnNUOVQzQ0F0bW5rLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYyNTBBMS8wQzE0NkI1RUEyQTgxMUYxOEZBODgwRTdDRTFE
MzhCMC9hNXFFR2JpOHV1bU1RUW5Gc1Q5VDNDQXRtbmsubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAImlLqwQwxoIE8ZW11vNrt2257mAsseP
tfRsXVxflweoG+MKoEWTMWR1iNy7h0lTAVDXaA8xyA1H2V7NOuGsuM41LEMOLvtx
JE1dbMC0pFp/kjk0hxbsgSmLX/Kr1aoJuxPnCYKFm+tosIZAR/OQVlQ8CWb17XMc
0NbAtItCDtEcSHzDctc1I+qqnwMU719hp2YYAPnc3mWWKLggcQItt9FxfqPAHtkW
WzkVqxSOB+NJSFBK9AjlCqEFjlSTVFOY87gM4udeMH1/7g676EwGuw8Yh9hMIVl3
PiztOANrRg2kSMh3CsDXAeEZwA+dgpDSDfVNjwkiu/Sj6YvUWIEoavo=
-----END CERTIFICATE-----
Generated at Sat Sep 19 12:25:11 2026 by rpki-client