Error: rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
File:                     YAxslYLhTzef1aWysY2CLjZRry4.mft (raw, json)
Hash identifier:          YLsL6t1Ny6rw9AjfIa+00gvQx9mqypQuPq1aBgLvjXg=
Subject key identifier:   95:FC:7C:0A:11:AF:BE:5C:05:28:66:A5:AA:A9:84:0F:F8:B9:A1:35
Authority key identifier: 60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E
Certificate issuer:       /CN=F363BA19AR/serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
Certificate serial:       0817
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
Manifest number:          07A1
Signing time:             Mon 26 Oct 2026 02:37:15 +0000
Manifest this update:     Mon 26 Oct 2026 02:37:15 +0000
Manifest next update:     Wed 28 Oct 2026 02:37:15 +0000
Files and hashes:         1: YAxslYLhTzef1aWysY2CLjZRry4.crl (hash: LgvQQV2nLVIZRwbGP8vxKJjc5L3EBuN3ngZmaC2QfSw=)
                          2: 857E4CA2244111F1A8C6B2B2DAE4EC9C.roa (hash: m5OtoTpW6phlm0aXdZoDM0YYNH3uQ6eY7U5iJ1biBMw=)
                          3: 4DF66326D83511F0A06E9EECDAE4EC9C.roa (hash: Mt30U+3JekQtJlgL5One9QbNJOW56mjt7rAXjtb9ne0=)
                          4: C80B2372D10A11F0B5B7C089DAE4EC9C.roa (hash: Ogf85IZ2aBBn88U4P8dUY/MHy4VLrhlT9S9HUIQR9qg=)
                          5: E3D9DE9CB72611F1AED694EACE1D38B0.roa (hash: +Q8CceJsrdJsbQuhKhglLI6UGk9fOwb8itMoOZgZzYY=)
                          6: 6E6378307A9F11F1A7102FC8CE1D38B0.roa (hash: DhcNXqZdrARutT4oYhOcfeE8a505EkJuKdTIxF2JBmg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                          rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363BA19AR, serialNumber=600C6C9582E14F379FD5A5B2B18D822E3651AF2E
        Validity
            Not Before: Oct 26 02:37:15 2026 GMT
            Not After : Oct 28 02:37:15 2026 GMT
        Subject: CN=6adebcdb-0f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0d:97:d9:06:ac:4b:ef:44:34:1d:2c:06:e2:
                    35:ee:c4:19:14:21:5a:71:02:bd:a3:1a:86:35:79:
                    f6:f8:10:12:e0:9a:1c:f0:e6:aa:a4:7f:b3:a6:8c:
                    89:a5:94:25:19:80:67:9c:f8:81:bb:aa:9d:66:c5:
                    1f:07:fe:93:6e:c4:d5:eb:4a:d5:f5:b8:22:6f:e6:
                    d5:9c:6a:a2:10:25:41:29:2e:3c:a0:15:c9:3f:47:
                    8c:97:b6:8a:ec:06:38:56:7e:a9:02:3c:7b:90:ad:
                    e0:12:72:74:0e:74:68:f9:ed:57:b1:17:39:c6:44:
                    54:6c:0f:dc:df:83:a2:95:e6:39:39:51:07:36:5b:
                    3b:e2:60:c6:6b:29:d3:82:06:52:0f:1d:53:bb:05:
                    c8:fa:32:a3:60:ab:a4:27:78:56:4d:6c:08:6e:51:
                    98:cd:26:4f:66:e6:a1:a1:16:50:61:16:f0:8d:d2:
                    cd:39:88:d9:9c:e3:2c:d2:c2:ba:31:c3:51:5a:6c:
                    74:7b:00:87:b2:8e:07:f0:83:3b:68:c6:34:97:eb:
                    ed:49:50:de:38:5e:31:1d:fa:42:1b:16:5c:43:a6:
                    1a:1d:03:2b:43:03:3e:b9:70:5b:4f:d2:e8:0d:70:
                    ff:51:20:38:bc:07:1b:de:8b:51:1e:fc:0f:bb:c0:
                    a3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FC:7C:0A:11:AF:BE:5C:05:28:66:A5:AA:A9:84:0F:F8:B9:A1:35
            X509v3 Authority Key Identifier:
                keyid:60:0C:6C:95:82:E1:4F:37:9F:D5:A5:B2:B1:8D:82:2E:36:51:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YAxslYLhTzef1aWysY2CLjZRry4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/FBCC73B6962911EC95B7B1E05A40D577/YAxslYLhTzef1aWysY2CLjZRry4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:91:a0:ee:6a:74:1d:08:00:1f:c9:28:52:9a:57:cc:aa:89:
         d1:03:0f:3e:67:da:be:b9:47:80:32:6a:28:63:e5:b0:6e:95:
         83:02:f6:7e:99:91:2f:27:98:f8:de:d2:7c:17:98:41:f9:25:
         3c:ad:21:8e:08:b9:01:de:66:41:2c:96:00:62:94:32:c5:ac:
         17:54:37:3b:28:fd:5b:cd:5a:1a:50:f3:65:b5:5c:5e:e0:c7:
         4f:d1:81:20:73:00:08:31:bb:3f:2c:11:67:e1:8e:8c:29:25:
         10:b1:97:05:e0:db:85:ea:26:ed:b7:29:ee:a1:d5:e3:35:f8:
         b6:5d:c6:41:19:80:dd:28:5a:79:15:ad:a1:9f:44:fb:3e:9f:
         3b:4a:31:cb:0b:13:8b:d2:ff:97:6e:5e:2f:d8:82:21:70:52:
         99:e8:48:af:ac:6f:e5:c5:15:1f:3d:ad:b8:8e:a9:b8:66:4d:
         a4:9e:bb:82:07:d9:74:49:fc:dc:c1:c7:3e:ba:9f:01:ff:44:
         25:c7:a3:28:28:9c:56:6f:37:41:c7:a5:d2:8b:e7:13:28:ba:
         48:03:10:2c:d7:d9:3a:13:04:f6:4a:19:a0:9a:df:bd:23:6a:
         e1:46:63:13:00:a0:3e:15:52:91:f1:42:23:80:82:c6:06:20:
         cb:a7:68:a0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCBcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0JBMTlBUjExMC8GA1UEBRMoNjAwQzZDOTU4MkUxNEYzNzlGRDVBNUIyQjE4RDgy
MkUzNjUxQUYyRTAeFw0yNjEwMjYwMjM3MTVaFw0yNjEwMjgwMjM3MTVaMBgxFjAU
BgNVBAMTDTZhZGViY2RiLTBmM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiDZfZBqxL70Q0HSwG4jXuxBkUIVpxAr2jGoY1efb4EBLgmhzw5qqkf7Om
jImllCUZgGec+IG7qp1mxR8H/pNuxNXrStX1uCJv5tWcaqIQJUEpLjygFck/R4yX
torsBjhWfqkCPHuQreAScnQOdGj57VexFznGRFRsD9zfg6KV5jk5UQc2WzviYMZr
KdOCBlIPHVO7Bcj6MqNgq6QneFZNbAhuUZjNJk9m5qGhFlBhFvCN0s05iNmc4yzS
wroxw1FabHR7AIeyjgfwgztoxjSX6+1JUN44XjEd+kIbFlxDphodAytDAz65cFtP
0ugNcP9RIDi8Bxvei1Ee/A+7wKOJAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUlfx8
ChGvvlwFKGalqqmED/i5oTUwHwYDVR0jBBgwFoAUYAxslYLhTzef1aWysY2CLjZR
ry4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCQTE5L0ZCQ0M3M0I2OTYyOTExRUM5NUI3QjFFMDVBNDBENTc3L1lBeHNs
WUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1lBeHNsWUxoVHplZjFhV3lzWTJDTGpaUnJ5NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2M0JBMTkvRkJDQzczQjY5NjI5MTFFQzk1QjdCMUUwNUE0MEQ1
NzcvWUF4c2xZTGhUemVmMWFXeXNZMkNMalpScnk0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZkaDuanQdCAAfyShSmlfMqonRAw8+Z9q+
uUeAMmooY+WwbpWDAvZ+mZEvJ5j43tJ8F5hB+SU8rSGOCLkB3mZBLJYAYpQyxawX
VDc7KP1bzVoaUPNltVxe4MdP0YEgcwAIMbs/LBFn4Y6MKSUQsZcF4NuF6ibttynu
odXjNfi2XcZBGYDdKFp5Fa2hn0T7Pp87SjHLCxOL0v+Xbl4v2IIhcFKZ6EivrG/l
xRUfPa24jqm4Zk2knruCB9l0Sfzcwcc+up8B/0Qlx6MoKJxWbzdBx6XSi+cTKLpI
AxAs19k6EwT2Shmgmt+9I2rhRmMTAKA+FVKR8UIjgILGBiDLp2ig
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:27:28 2026 by rpki-client