Error: rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
File:                     zjU-BgcibJUeYP1ogM7M-5jSvEg.mft (raw, json)
Hash identifier:          4xnXjSf7getPZeG0XY9r3hZ41DxrnlPY1TF1ts1Md7E=
Subject key identifier:   94:0E:2C:F4:3C:7F:65:A5:AE:03:4A:4F:26:C3:09:05:78:62:53:4D
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Certificate issuer:       /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial:       0513
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
Manifest number:          0510
Signing time:             Mon 26 Oct 2026 03:26:44 +0000
Manifest this update:     Mon 26 Oct 2026 03:26:43 +0000
Manifest next update:     Wed 28 Oct 2026 03:26:43 +0000
Files and hashes:         1: zjU-BgcibJUeYP1ogM7M-5jSvEg.crl (hash: epIBHWM0KD565x4XW/QVvTUe5Ds1/ff7wBv7+4zmvao=)
                          2: 7FBA47FAF6EF11F0BB93DCCEDAE4EC9C.roa (hash: o3L0vuoDmUBUb+//mBzsTCTXHyVLpl7JtPp6VuXXuk8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1299 (0x513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362EFF3AF, serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
        Validity
            Not Before: Oct 26 03:26:43 2026 GMT
            Not After : Oct 28 03:26:43 2026 GMT
        Subject: CN=6adec874-bff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:be:1f:c2:2c:6f:85:89:70:d6:e8:db:50:
                    78:d4:ba:1b:2c:e3:21:df:de:66:a3:eb:d4:08:88:
                    ac:06:3c:fd:2e:1c:5c:cc:8d:a9:53:83:fc:07:c0:
                    cb:7d:13:95:2d:3e:cd:3a:6a:e4:13:58:b4:69:39:
                    7c:fd:44:26:54:36:82:c4:9f:4b:a5:ac:db:bd:a3:
                    01:c0:4b:47:a8:a2:85:34:7d:91:3b:25:2e:5f:0d:
                    84:3d:af:1a:4d:74:67:a4:5b:8d:2b:75:e8:92:09:
                    93:44:10:6b:f3:cb:c2:78:66:dc:21:f0:f2:6b:f9:
                    51:2d:8a:83:96:fb:ba:77:c0:eb:4e:c9:aa:dc:66:
                    cd:56:a0:a7:52:03:3f:d6:e6:0c:cd:18:6c:c4:78:
                    96:90:c4:c3:c1:8d:db:5b:a6:af:93:a5:7b:41:bf:
                    17:22:34:ef:41:b0:83:02:d5:99:88:de:bc:83:3f:
                    a6:8c:13:1c:99:ff:37:7a:0e:d5:80:dd:15:df:a5:
                    4a:75:f5:38:c1:4b:f3:94:05:72:6b:02:5b:c7:84:
                    b5:36:52:fb:1d:ad:0b:01:25:b3:7b:25:7b:85:5e:
                    d6:b4:3d:fe:78:c2:68:cb:40:a3:03:ae:56:54:5c:
                    d4:91:7c:4b:6d:0d:44:0b:5c:43:39:bd:e1:41:ad:
                    53:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:0E:2C:F4:3C:7F:65:A5:AE:03:4A:4F:26:C3:09:05:78:62:53:4D
            X509v3 Authority Key Identifier:
                keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:60:ac:e2:a3:47:c3:f8:50:35:67:29:f4:1c:a0:d4:a8:88:
         e1:52:f6:c5:d8:67:1a:39:8b:84:dc:1a:d6:3e:86:59:7b:01:
         a9:24:45:89:f7:d9:b7:ec:20:88:53:03:c8:ef:18:72:5c:60:
         0a:e4:c9:19:47:7e:48:b5:6c:42:26:a4:81:0c:9a:0d:33:4b:
         74:7e:6c:fe:03:72:98:e1:24:26:30:71:eb:b8:68:87:dc:f1:
         84:07:1a:86:16:73:a0:21:6a:33:ac:10:f0:c5:15:30:31:88:
         77:0f:60:b4:fb:5d:c9:84:93:8c:f7:c3:8a:88:4b:1b:99:db:
         45:b8:d6:d7:ca:93:c8:59:99:4d:43:33:00:41:5a:1e:d7:65:
         dd:9e:cb:cd:76:07:58:a1:65:07:f2:9a:d9:a7:41:00:25:3e:
         8a:fd:6b:e4:7f:f0:d6:4a:58:72:e9:c9:1c:9f:70:66:e3:0a:
         5d:3d:68:a5:39:65:07:85:a2:5e:08:6e:e4:9b:13:3e:5d:5a:
         28:b1:66:f4:38:69:68:94:f9:55:d4:14:95:e4:23:be:83:dd:
         2c:b1:3b:d9:9d:a4:ee:82:76:3d:51:ac:19:e1:94:a9:0a:07:
         7a:f7:de:99:b1:4c:39:09:5c:c6:64:c7:5a:2c:aa:13:89:c7:
         15:f0:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:54:32 2026 by rpki-client