Error: rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
File:                     aQoBi0Pk6yF6DApLdmMnY8piBic.mft (raw, json)
Hash identifier:          sFUJkyD9K9SRQTeKCb0omoaCkmUNnxMZnV/DGBOwSc4=
Subject key identifier:   4C:C1:DB:A1:08:12:4B:5B:CA:64:C1:03:FA:D5:F8:C6:71:25:4D:24
Authority key identifier: 69:0A:01:8B:43:E4:EB:21:7A:0C:0A:4B:76:63:27:63:CA:62:06:27
Certificate issuer:       /CN=F362AEDFAF/serialNumber=690A018B43E4EB217A0C0A4B76632763CA620627
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
Manifest number:          22
Signing time:             Fri 23 Oct 2026 05:59:47 +0000
Manifest this update:     Fri 23 Oct 2026 05:59:47 +0000
Manifest next update:     Sun 25 Oct 2026 05:59:47 +0000
Files and hashes:         1: aQoBi0Pk6yF6DApLdmMnY8piBic.crl (hash: VlgbYuu9UjsIgmMSWGEp0++YJHdUXr6/RKcoaHqA6wY=)
                          2: 3D973C18B75911F190FE8FACCE1D38B0.roa (hash: zRMNBBlDa8FKzDxgX7XPCSVqHDBLcFHvrrlFOoPZZIw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 05:59:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AEDFAF, serialNumber=690A018B43E4EB217A0C0A4B76632763CA620627
        Validity
            Not Before: Oct 23 05:59:47 2026 GMT
            Not After : Oct 25 05:59:47 2026 GMT
        Subject: CN=6adaf7d3-a177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d1:7b:ff:7e:ed:cf:83:70:b3:47:ec:a8:be:
                    a9:1e:ab:ac:68:27:8a:f0:14:73:d3:ac:d4:ff:ce:
                    5f:2b:52:9f:3a:8a:9b:fb:f8:d9:d0:19:06:eb:c4:
                    ac:dd:f5:65:f1:63:c4:44:e2:c3:6a:14:65:44:38:
                    cf:76:52:4a:0b:65:6f:66:7b:9d:42:79:97:d6:6b:
                    93:d0:8e:77:30:6f:19:fe:56:7e:ce:ab:35:b6:b8:
                    fa:03:ff:09:e3:d7:dc:c8:13:7d:3d:7e:41:b9:20:
                    8b:e9:6b:60:5b:a0:f4:ac:36:43:1e:4e:e5:e0:0d:
                    d4:b3:67:00:1a:33:0d:5d:1a:3d:18:06:00:53:10:
                    d1:83:e3:91:b4:7e:66:e9:1d:05:72:22:b4:1f:d3:
                    5a:b8:55:19:ba:7f:e4:6a:59:63:50:12:f5:d3:84:
                    12:17:f4:cb:1c:44:9f:50:89:f1:6e:9d:22:22:ec:
                    a1:4b:b1:9b:c9:0b:42:2a:05:02:5a:fd:df:a4:47:
                    be:04:5e:19:1c:18:53:e0:92:9e:ec:60:25:7c:a7:
                    84:09:e9:9c:10:ca:7f:2b:69:53:54:11:46:af:8e:
                    b8:71:c0:a8:32:42:e1:63:96:7e:d7:26:89:cd:8d:
                    a7:a6:1d:8e:17:d2:d0:fd:9a:15:3e:70:f6:b4:d9:
                    9b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C1:DB:A1:08:12:4B:5B:CA:64:C1:03:FA:D5:F8:C6:71:25:4D:24
            X509v3 Authority Key Identifier:
                keyid:69:0A:01:8B:43:E4:EB:21:7A:0C:0A:4B:76:63:27:63:CA:62:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1d:1a:4d:7d:a9:8d:fc:9d:10:8c:d6:55:19:1f:4a:b5:b8:
         f6:0a:e9:93:86:10:7e:0b:98:4e:93:18:1e:32:a2:09:a1:aa:
         6f:4b:4e:67:a2:ef:69:05:4d:c5:69:ec:be:50:83:f9:1d:41:
         4e:83:3d:bf:02:71:bf:f0:16:68:12:f6:7d:83:47:7d:e9:97:
         d6:b3:44:36:e4:55:42:7a:af:64:15:ae:0e:e8:0a:93:69:47:
         87:2e:8b:9f:9b:f6:7b:5b:81:34:51:2f:fa:19:e0:db:c0:78:
         81:df:a8:fb:85:85:6c:6e:34:cc:0f:46:82:35:76:02:ad:2a:
         94:17:a4:36:a8:5d:fe:cf:98:26:94:b7:91:aa:54:82:78:0d:
         ba:c5:58:39:05:a2:d6:cf:f8:2a:9e:b4:00:2c:33:11:33:3e:
         b7:1f:12:d3:4f:04:21:37:ad:ee:b4:92:5f:fb:e6:83:93:1f:
         17:20:35:66:f6:fe:b4:fa:e6:21:a0:e1:2a:47:73:a4:fc:e1:
         8a:f3:67:a2:6b:35:38:4c:9d:e5:a7:7b:29:03:2f:15:51:33:
         06:2b:64:85:1d:20:3c:cc:57:0d:e4:3f:9d:a1:8b:6a:a5:28:
         a0:12:2d:4f:88:84:bc:7b:34:4e:36:d6:75:5d:e7:05:58:42:
         9d:62:6f:df
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBIzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QUVERkFGMTEwLwYDVQQFEyg2OTBBMDE4QjQzRTRFQjIxN0EwQzBBNEI3NjYzMjc2
M0NBNjIwNjI3MB4XDTI2MTAyMzA1NTk0N1oXDTI2MTAyNTA1NTk0N1owGDEWMBQG
A1UEAxMNNmFkYWY3ZDMtYTE3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM7Re/9+7c+DcLNH7Ki+qR6rrGgnivAUc9Os1P/OXytSnzqKm/v42dAZBuvE
rN31ZfFjxETiw2oUZUQ4z3ZSSgtlb2Z7nUJ5l9Zrk9COdzBvGf5Wfs6rNba4+gP/
CePX3MgTfT1+Qbkgi+lrYFug9Kw2Qx5O5eAN1LNnABozDV0aPRgGAFMQ0YPjkbR+
ZukdBXIitB/TWrhVGbp/5GpZY1AS9dOEEhf0yxxEn1CJ8W6dIiLsoUuxm8kLQioF
Alr936RHvgReGRwYU+CSnuxgJXynhAnpnBDKfytpU1QRRq+OuHHAqDJC4WOWftcm
ic2Np6YdjhfS0P2aFT5w9rTZm10CAwEAAaOCArgwggK0MB0GA1UdDgQWBBRMwduh
CBJLW8pkwQP61fjGcSVNJDAfBgNVHSMEGDAWgBRpCgGLQ+TrIXoMCkt2YydjymIG
JzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkFFREYvQzVBRDEzQzhCNzU2MTFGMTgyQTQ4QTFCQ0YxRDM4QjAvYVFvQmkw
UGs2eUY2REFwTGRtTW5ZOHBpQmljLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYVFvQmkwUGs2eUY2REFwTGRtTW5ZOHBpQmljLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYyQUVERi9DNUFEMTNDOEI3NTYxMUYxODJBNDhBMUJDRjFE
MzhCMC9hUW9CaTBQazZ5RjZEQXBMZG1Nblk4cGlCaWMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIIdGk19qY38nRCM1lUZH0q1uPYK6ZOG
EH4LmE6TGB4yogmhqm9LTmei72kFTcVp7L5Qg/kdQU6DPb8Ccb/wFmgS9n2DR33p
l9azRDbkVUJ6r2QVrg7oCpNpR4cui5+b9ntbgTRRL/oZ4NvAeIHfqPuFhWxuNMwP
RoI1dgKtKpQXpDaoXf7PmCaUt5GqVIJ4DbrFWDkFotbP+CqetAAsMxEzPrcfEtNP
BCE3re60kl/75oOTHxcgNWb2/rT65iGg4SpHc6T84YrzZ6JrNThMneWneykDLxVR
MwYrZIUdIDzMVw3kP52hi2qlKKASLU+IhLx7NE421nVd5wVYQp1ib98=
-----END CERTIFICATE-----
Generated at Sat Oct 24 05:19:35 2026 by rpki-client