Error: rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
File:                     SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft (raw, json)
Hash identifier:          pqUj6MqYhAYXLtQZxXsKdZikWVCMQ2OqpcgJPawFm0A=
Subject key identifier:   4F:8E:2C:EE:78:E6:BD:9C:78:91:ED:E7:53:80:65:CE:B1:D1:49:9B
Authority key identifier: 48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3
Certificate issuer:       /CN=F3642CB1AF/serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
Certificate serial:       036E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
Manifest number:          0355
Signing time:             Thu 10 Sep 2026 04:14:52 +0000
Manifest this update:     Thu 10 Sep 2026 04:14:51 +0000
Manifest next update:     Sat 12 Sep 2026 04:14:51 +0000
Files and hashes:         1: SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl (hash: FMzrvwlyG5hnpiHAND5dvtpAA+FS9XqQWXGK74qMyI4=)
                          2: FA56183C4A2E11EF935CD441762E951A.roa (hash: qasmLn0THzKUXPfZdrwuy9yINB8A6qwmZTMMTYcCuGE=)
                          3: 7A3144EE4A2211EFB67B7D60762E951A.roa (hash: j3JAykS4OQX/hDoFdEl316HNecziqAF0XC9NdGRUFKs=)
                          4: ACA70A7E4A1F11EFB750724B762E951A.roa (hash: jJTJnCCr3s4j/KC7iphB3k6ogrQ8G2LscLSFEQgVdg0=)
                          5: 9C73B5384A2611EF8F9A1380762E951A.roa (hash: nRAl69sp6vxHIEfCOCmW9Tz389R1auBc2Q7TENAtRGg=)
                          6: 148FD532495611EFAF07166C762E951A.roa (hash: ceOINoEGaKZPmp9jQxtF1qPs3DuclWxOvdxTt3Kbm/Q=)
                          7: B8A021FA4A2211EF8E185461762E951A.roa (hash: REvrDWvDpOLHYskkTXn9T4RA7HGDSP4fR+NvvGDn1uM=)
                          8: 6C108DB64A3611EF92C1C272762E951A.roa (hash: 3LWWxZduhASOp99bwc0yFeC4A2HSLl0PaRIJhKGmd80=)
                          9: 3CBFED64495411EFB6814C5D762E951A.roa (hash: rYrqlqO0kH8b1oM3UkYuWQ0BlyjcbnvQAaOtL36BdpY=)
                          10: 5452C2DA495911EFB60F9885762E951A.roa (hash: jm5I0TsEDHwv7ouFvepzTDlWJcMqPxPV2YIxH7RtI10=)
                          11: 498D37264A2711EFA1894F85762E951A.roa (hash: VQjB7QxkyWPW6zXkuLfk+fW9phqSykjKICBVdLaBH3M=)
                          12: BFD83C124A2E11EFB4893BBC762E951A.roa (hash: f5W6wC5Z6Pqj371DpiEXu2jOcFA6/nWQTPbxHnSrCKQ=)
                          13: A8B9E3A0D23211EFA0D093AD762E951A.roa (hash: TwodjfSPJtOum7H0x8fQ1+YqsoDP0TA/A3LbvBR8fR0=)
                          14: 0489B53CA44E11F0AC16C09CDAE4EC9C.roa (hash: a2XOlsngKOqqGq1EHjARQHyDrpnuVCxetumHZtqolnw=)
                          15: B5F67940495A11EFBD9D1F91762E951A.roa (hash: Fxf/e9tt77VXipQwVutTjXDkhsLGh3QnCmbowhMJuac=)
                          16: 6D2E74EC495A11EF8DD0F68C762E951A.roa (hash: Tx9oqh45dbtkEF/evkOGPsO3I8D+e6jKaajVRCuI6SI=)
                          17: 36179DCE456511EFB6170CA4762E951A.roa (hash: fW31+smtFp89q7DbRmjBn7koBQzEeA4McjXb/UoaZ+8=)
                          18: CD63089443D511EFBF754787762E951A.roa (hash: rXdaal/ApEINvTRYPpslBerAIR2l4UEEtidE419g51Q=)
                          19: 335AE6084A2F11EF9F06A342762E951A.roa (hash: +Jag2XtPaReW28LLYskeApEkdXybNuIZuhATM6amnqA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 04:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878 (0x36e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AF, serialNumber=482DEEC29130ED202D8399D69A13269AA612AFD3
        Validity
            Not Before: Sep 10 04:14:51 2026 GMT
            Not After : Sep 12 04:14:51 2026 GMT
        Subject: CN=6aa22ebc-fdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:ad:e9:2a:dd:14:7b:b3:57:87:4a:be:2f:24:
                    1a:3d:c1:db:57:b8:36:9e:0a:4e:0d:71:d4:01:e1:
                    4a:eb:2e:a8:2e:c4:a2:31:81:57:8b:db:3e:32:b5:
                    fe:51:3b:96:e7:83:1e:46:94:6d:8c:8f:cd:72:d4:
                    5f:b1:f8:88:94:2d:20:6f:f1:8e:42:69:a3:bd:52:
                    25:3a:f6:cc:56:fb:19:31:45:67:fd:4f:19:d6:83:
                    e6:a1:b1:41:09:d8:b7:f1:e6:9e:29:21:6e:dd:3a:
                    b3:cc:7e:8d:c3:e8:a7:4f:a3:e7:40:e6:6c:92:d8:
                    91:f4:63:ed:f9:df:0a:12:88:00:7e:88:8b:a9:3a:
                    86:5e:c3:62:81:a4:a6:23:38:07:98:48:f3:51:8b:
                    4b:05:b3:90:a1:81:51:34:e2:f7:92:fb:d4:52:98:
                    ea:73:ba:6c:62:59:75:bf:bc:46:26:66:0e:05:ea:
                    79:2d:26:0f:4a:a9:62:39:e2:5e:ea:62:58:b9:ee:
                    cb:a2:06:3b:5d:4a:01:0a:5c:65:47:3f:65:65:a5:
                    0f:2d:13:52:84:a9:cf:38:d4:8b:f6:75:6f:d1:d2:
                    36:f2:66:aa:a9:4b:cb:1e:80:8e:a9:db:c3:fa:05:
                    51:ec:41:bc:ed:95:fa:20:7d:a7:c0:f6:bb:5a:6c:
                    32:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8E:2C:EE:78:E6:BD:9C:78:91:ED:E7:53:80:65:CE:B1:D1:49:9B
            X509v3 Authority Key Identifier:
                keyid:48:2D:EE:C2:91:30:ED:20:2D:83:99:D6:9A:13:26:9A:A6:12:AF:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SC3uwpEw7SAtg5nWmhMmmqYSr9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/2A238452348911EF96C98D9E762E951A/SC3uwpEw7SAtg5nWmhMmmqYSr9M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:12:a7:06:83:bf:cd:e8:f8:b2:1f:a1:4e:ee:8b:92:01:f1:
         9f:06:aa:18:8a:7f:67:84:c4:5f:e1:2e:30:c8:44:e4:92:0f:
         f0:8e:e1:a2:0d:03:84:b6:1b:c6:3e:ca:e2:d9:0c:b6:28:13:
         24:25:ba:cd:15:48:9b:12:55:3f:0c:ab:27:a2:ba:f6:2c:84:
         23:4d:91:d7:b9:60:36:ac:15:a6:00:cc:b0:52:88:4a:e1:0e:
         6e:ae:2e:f3:c9:c0:05:75:10:5f:00:45:08:22:17:a9:f0:e8:
         de:3f:92:ce:dd:a8:5d:48:51:15:17:17:ee:bd:ee:f6:ed:ce:
         14:ff:a6:cc:09:05:05:c6:9d:88:d7:a4:cc:5b:e6:37:59:ff:
         e1:39:9e:3c:db:9a:96:4b:54:29:c7:0d:16:e7:58:5b:34:ec:
         21:01:3f:43:7a:b7:9f:56:78:68:88:81:1c:96:7a:c7:b7:3c:
         13:0c:f3:71:b1:09:2b:8c:79:06:e7:b5:99:b0:7c:9a:eb:02:
         fb:0f:77:54:04:a5:73:59:f1:5d:14:7d:f2:7e:a3:3c:61:f6:
         17:18:5d:65:d5:0a:e3:79:4a:86:4b:c6:37:c1:78:c4:80:f9:
         c5:65:03:1b:8c:d9:23:05:8d:4d:3b:8b:34:1d:80:71:4c:b7:
         3f:9f:5a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:23:27 2026 by rpki-client