Error: rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
File:                     5z0wH5ENVuurehEQO-i-J1OItys.mft (raw, json)
Hash identifier:          Tfy5Xc+OhAm3BvlrwwAraDfFkn+laO6EQywbrvvuPbY=
Subject key identifier:   DC:84:CE:64:3E:46:47:75:B5:CB:99:EE:2D:12:95:5A:A7:FB:73:B0
Authority key identifier: E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B
Certificate issuer:       /CN=F363ADF7AF/serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
Certificate serial:       08C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
Manifest number:          08B2
Signing time:             Thu 29 Oct 2026 01:56:56 +0000
Manifest this update:     Thu 29 Oct 2026 01:56:55 +0000
Manifest next update:     Sat 31 Oct 2026 01:56:55 +0000
Files and hashes:         1: 5z0wH5ENVuurehEQO-i-J1OItys.crl (hash: SBU6s1UHDzNwnCyJ6PvMhGJS61koSSM2PofZ94e8SRc=)
                          2: A972CB4CB82511F189D826E2CE1D38B0.roa (hash: ycMZD0meczPvQ7qcyNlC83wzN6LpbIG2psOSy2vkwlQ=)
                          3: 0394C7BE8C0811F193C445DFCE1D38B0.roa (hash: wdURzVK1a/KpzEXG1RiX/4RwWa6X60ZGsVDf1L8Z7G0=)
                          4: F993BD0ABEB511EEBAC6E754775412E6.roa (hash: 3JLT8OIUDMXJEuKA30Z0Hs82Xjia4JOYeuiF60Mo7JY=)
                          5: 4AE8CA1ABEB611EEA24E4355775412E6.roa (hash: 6xGplpcSO+x7fDbdx9ixELJb7z+gA66jql4m5bkFDig=)
                          6: C484A6828C0911F183B5ADE7CE1D38B0.roa (hash: uRDuFvW2lVWA9yGsx3k6nMthjQ8cysNQ1k/Ga2/hVPs=)
                          7: 69B29C48C62711F1A12484E1CE1D38B0.roa (hash: 5MKg6+4IVWTTSzEx2GWe7m3uz+1m4QFeRmg7LmKc/54=)
                          8: 6B5A4C528C0811F1A9A46CDFCE1D38B0.roa (hash: TdE6MHQ0KGt4m1qusLE+tjlIvcBEmFTMHgsMuoar6zM=)
                          9: F97AD886BEB411EEB991F752775412E6.roa (hash: XrOk8G3LLPdrAcCIJDkR7Oh/qIv1o+Mi7UksbU+zoZc=)
                          10: D514022A8BFC11F1BED7081CCF1D38B0.roa (hash: 8nMb6U6Tz+uxAqHpjgBS4lqqodbbkdNuFKFmWeQpVtE=)
                          11: 606BFC868C0911F1AC7180E7CE1D38B0.roa (hash: CdaWPkfsHNEFk15V9H918ZavMnTus1bE/y1dfE+F8vc=)
                          12: 7BEBECA28C0711F1944332DBCE1D38B0.roa (hash: 0GdisvNBKAQVNYjNiaAy1vy/6cxgu3Qsnvbm2ot3VVg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 01:56:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247 (0x8c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363ADF7AF, serialNumber=E73D301F910D56EBAB7A11103BE8BE275388B72B
        Validity
            Not Before: Oct 29 01:56:55 2026 GMT
            Not After : Oct 31 01:56:55 2026 GMT
        Subject: CN=6ae2a7e8-ddb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a1:45:25:c8:94:a2:21:c8:86:2b:ba:2d:ff:
                    4d:df:c1:43:b7:a8:57:5c:70:96:3c:44:ef:ad:71:
                    68:8a:ef:9a:0a:cc:84:eb:dd:0b:c8:6d:f7:a5:c5:
                    86:ef:89:3c:89:6f:a2:6e:2d:3c:a4:18:53:86:e3:
                    e8:7b:8f:60:f8:b9:e0:d9:81:0b:33:1b:9a:0d:58:
                    83:44:2f:14:87:c5:ab:9b:31:70:98:fd:c5:c9:ca:
                    f7:e2:52:29:8d:38:a1:b8:c4:36:ef:f8:c8:3c:a3:
                    04:e8:aa:10:f1:59:d2:24:59:32:c2:9b:37:b8:2f:
                    01:71:4f:5e:c8:e6:fe:a4:97:5e:ed:81:31:9e:d3:
                    a4:0e:e4:16:8a:d6:ec:db:f0:3c:c4:a4:30:5e:34:
                    47:ea:89:b0:f1:18:0b:b8:40:ef:d1:71:a2:f7:87:
                    98:91:dc:4b:8c:ac:63:f7:28:15:f2:5e:e9:2b:36:
                    5b:02:f8:ee:9f:19:46:d5:10:93:3f:c0:c0:de:d2:
                    46:26:4a:2c:22:09:5c:eb:53:36:75:94:95:85:a9:
                    85:6e:d4:a1:7b:a4:9f:2d:84:75:3a:ba:5d:38:20:
                    8c:6a:4d:03:44:fd:ca:d2:da:8e:66:6d:d5:c0:6b:
                    bc:f8:36:de:f8:67:b2:4b:6e:e6:92:17:63:a8:bf:
                    27:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:84:CE:64:3E:46:47:75:B5:CB:99:EE:2D:12:95:5A:A7:FB:73:B0
            X509v3 Authority Key Identifier:
                keyid:E7:3D:30:1F:91:0D:56:EB:AB:7A:11:10:3B:E8:BE:27:53:88:B7:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5z0wH5ENVuurehEQO-i-J1OItys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363ADF7/B3123F903BBA11EBA94E9B1FF8AEA228/5z0wH5ENVuurehEQO-i-J1OItys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3f:d1:8b:6c:23:99:93:4e:fa:b9:b5:5d:78:d9:81:f5:d4:
         8c:d3:ed:3b:96:0c:b8:e6:41:1b:91:15:11:9f:6d:27:37:4e:
         55:ab:3a:9d:6b:05:3c:2c:09:d3:e2:aa:21:aa:08:eb:7e:ed:
         52:b1:a8:87:7e:65:d5:01:45:6b:79:4a:2b:15:9e:75:c5:37:
         eb:cc:02:22:0c:84:ca:87:f0:b0:26:ea:0a:69:f2:87:67:5e:
         44:17:3e:36:4f:bc:fc:cd:8c:98:6d:3c:5f:a3:58:ab:01:f8:
         7b:79:3b:ba:4f:80:58:2c:6e:1a:21:ea:a0:5d:ee:d4:f1:d2:
         18:44:aa:b9:2a:de:30:8c:52:07:3b:85:70:b4:d8:ea:20:82:
         be:74:48:34:a0:e7:94:db:82:23:28:ee:a5:2c:fa:1b:e2:ff:
         b3:aa:db:2b:cd:4f:7f:83:b1:7c:1b:a6:69:2f:af:5d:14:5c:
         90:3e:a7:42:1d:c9:a7:0e:f4:c1:0e:1c:e5:35:33:74:20:75:
         6f:a5:93:c3:ad:ce:9b:7d:a3:02:88:d7:bf:a6:b2:bf:a9:34:
         2e:1e:d9:48:4b:6f:91:8c:c1:39:0c:b3:7f:2b:43:24:c9:57:
         99:68:1c:80:8f:fe:fe:86:11:97:b4:6c:99:58:50:b4:64:f3:
         82:80:29:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:08:06 2026 by rpki-client