Error: rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
File:                     pTjdXtaOO2Wy07oa0USnQKUu7iA.mft (raw, json)
Hash identifier:          +ImOCobodNg5uLWhSHltsC+Yrn0gSmH18flndaBJN8Q=
Subject key identifier:   BC:86:5E:75:DE:6D:68:17:6C:62:35:86:D7:9D:FC:98:BB:7B:80:18
Authority key identifier: A5:38:DD:5E:D6:8E:3B:65:B2:D3:BA:1A:D1:44:A7:40:A5:2E:EE:20
Certificate issuer:       /CN=F362DADDAF/serialNumber=A538DD5ED68E3B65B2D3BA1AD144A740A52EEE20
Certificate serial:       011A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
Manifest number:          0119
Signing time:             Sun 25 Oct 2026 05:23:57 +0000
Manifest this update:     Sun 25 Oct 2026 05:23:57 +0000
Manifest next update:     Tue 27 Oct 2026 05:23:57 +0000
Files and hashes:         1: pTjdXtaOO2Wy07oa0USnQKUu7iA.crl (hash: DeH8o0hWHj81VI8HFLQgBja54Vjj93H9kFVSl7wKgJg=)
                          2: E72B9468F5F311F08EFD37C7DAE4EC9C.roa (hash: 1C/7HOab3vyutf0SGY+FlZjRvHSbsMFtBxbIEsIXzQY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362DADDAF, serialNumber=A538DD5ED68E3B65B2D3BA1AD144A740A52EEE20
        Validity
            Not Before: Oct 25 05:23:57 2026 GMT
            Not After : Oct 27 05:23:57 2026 GMT
        Subject: CN=6add926d-a828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:18:c5:c8:83:e5:90:6d:94:2b:fc:2a:61:
                    88:0a:5a:14:1f:56:c9:9f:91:ef:aa:72:1d:d3:09:
                    39:ad:7b:ec:2e:b9:d5:ef:e7:57:48:f0:78:f0:45:
                    55:d5:ea:fe:98:b7:7c:3d:f0:61:9b:c7:f4:51:b6:
                    f6:76:23:4b:6b:cc:d3:df:26:4d:98:eb:ab:6a:00:
                    ac:39:be:b5:77:6f:cf:fd:40:b2:a3:29:13:1c:52:
                    e9:14:65:74:a2:98:19:e9:84:2e:3f:db:5e:4e:6d:
                    84:a7:4b:7a:2d:67:3a:64:e2:c7:42:a1:29:8f:75:
                    6d:f8:50:32:df:eb:57:93:72:9f:ef:68:f6:f2:8f:
                    b7:83:14:d2:41:f7:18:96:8e:f9:5c:22:00:cc:f1:
                    c9:88:50:f5:59:2e:bd:02:09:2d:c5:02:24:f7:04:
                    59:9b:2a:2f:9a:5a:8a:6d:d3:74:d1:82:8e:f2:c7:
                    e5:5e:af:00:58:55:f4:be:c5:d9:7c:27:48:60:34:
                    ab:67:55:95:16:64:f0:e7:9f:e5:91:81:6f:1e:d4:
                    4b:66:b6:b3:a7:99:65:9b:12:24:1a:b2:0e:5e:b2:
                    9e:63:d1:27:f3:10:3d:bd:4e:d9:5c:51:1c:57:1b:
                    05:a7:65:17:ac:2f:79:03:5d:fd:c1:f8:df:a9:85:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:86:5E:75:DE:6D:68:17:6C:62:35:86:D7:9D:FC:98:BB:7B:80:18
            X509v3 Authority Key Identifier:
                keyid:A5:38:DD:5E:D6:8E:3B:65:B2:D3:BA:1A:D1:44:A7:40:A5:2E:EE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pTjdXtaOO2Wy07oa0USnQKUu7iA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362DADD/5CB707BEF5F211F0AF9B05BFDAE4EC9C/pTjdXtaOO2Wy07oa0USnQKUu7iA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:59:28:21:30:9d:f0:68:b5:fb:90:cc:d6:74:f3:b5:88:bc:
         1b:b5:21:62:c6:d3:f1:b5:59:0d:5b:e1:83:00:ce:57:93:0d:
         2b:81:eb:d2:bd:f6:18:fa:a3:a6:c1:65:c9:71:03:25:90:1c:
         e7:43:6c:04:66:5a:8e:fa:92:26:40:c3:5f:a1:b2:ce:47:4c:
         01:c8:40:b1:4a:02:85:f2:e5:b1:a8:e1:12:ce:f5:67:85:3d:
         51:26:52:9c:e2:dc:01:7c:f0:59:3f:79:a9:bb:5d:98:08:67:
         df:5a:27:a5:26:01:43:27:73:8f:2d:18:06:2b:81:56:1b:ee:
         ec:77:1e:dd:b1:2e:c5:bf:d2:67:9b:e4:16:4a:f0:40:f5:10:
         1c:2f:fb:5d:ac:ff:24:ef:ee:c4:c4:84:38:4e:f8:66:6c:d3:
         1e:95:26:a4:39:8b:41:34:a2:c3:a5:d5:04:ca:2b:f7:a8:2f:
         c9:89:ec:e3:62:65:c9:00:67:fb:41:94:b0:ba:f9:c6:e6:9f:
         67:bf:a8:30:1e:02:9f:1c:72:3c:15:01:99:06:0a:08:dc:5c:
         0d:c5:70:c0:e9:d5:b6:29:88:f1:06:21:d0:7b:ce:02:ec:78:
         ba:66:f0:9b:c2:cf:0d:b1:4c:36:14:a5:72:33:3e:0b:8a:1d:
         09:a9:0e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:06:39 2026 by rpki-client