Error: rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
File:                     PaPdrk_VdL362y_nUk1dMDdBNSw.mft (raw, json)
Hash identifier:          D6rSBN4zneswQZ9LlW1Byj49StoLmnS4fYoSG6ET10k=
Subject key identifier:   16:25:86:7D:FE:27:8D:FC:7B:69:9E:7D:38:E5:93:9F:64:0B:F1:E1
Authority key identifier: 3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C
Certificate issuer:       /CN=F364321AAF/serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
Certificate serial:       054E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
Manifest number:          053C
Signing time:             Sat 12 Sep 2026 03:18:14 +0000
Manifest this update:     Sat 12 Sep 2026 03:18:13 +0000
Manifest next update:     Mon 14 Sep 2026 03:18:13 +0000
Files and hashes:         1: PaPdrk_VdL362y_nUk1dMDdBNSw.crl (hash: RDtS8/hkU8ntNZnEtU5cnedJk/vA4iGBWjl4XNjPwMU=)
                          2: 1A1D9BECEBCB11F09E0410EDDAE4EC9C.roa (hash: njBEAYyeE13L7hwKuylMPnhFqWs8iIjgMKwO4UOalDA=)
                          3: FA23FE86EBC911F098EC42E8DAE4EC9C.roa (hash: 6WEXWYnxvkmVQEP1jzW/Pz3xmGAn2g9CkuxNT4P4jmg=)
                          4: 992FA664EBCB11F0A7D619F1DAE4EC9C.roa (hash: zZRAIBdNfBKB6fz/DNNuYj5c+DfSvaBMkWqN6VwnGPM=)
                          5: F8A9F802EBCA11F0B9AFC4ECDAE4EC9C.roa (hash: nSknsDYYYJnn+lCfqpzwlbN0d4eI+Bn18dgOsKwvrvk=)
                          6: C9FD6A66EBCA11F0B1686FECDAE4EC9C.roa (hash: KWF2f6lklc+ISvDAOfQP/bnZ/qUCac/YisXkzWEtuAw=)
                          7: 6F48BC0AEBCB11F094B6D4F0DAE4EC9C.roa (hash: 4C7RxLwmS+HXtTI3Lpt4dwbN1rnFWByFUC0JY7JL8FA=)
                          8: 4955127EEBCA11F0AAE097E8DAE4EC9C.roa (hash: mISb5qk7uM7oKcgoTiGz0TVTQJ1Qe/xAOoe6Gs8i6hI=)
                          9: 3E2015A6EBCB11F0994B08EFDAE4EC9C.roa (hash: xyumajGBZo8f2Kt7CWNuZkx9MaepmHY8lnKOJNSa75E=)
                          10: 36DE8CDCBA9A11EE8EE57253775412E6.roa (hash: Ofy9Cj7JPi8QcyiEvVuGnm/0E9xZicOnWmScEweKsok=)
                          11: 7FB7EBF0DD3C11EE8D38ADB5775412E6.roa (hash: yMYM5ilbWZrOMGdDFP4fl7JNSPCdYUXOdgDCY0ZGvMA=)
                          12: 75C1E27EEBCA11F0B98197EADAE4EC9C.roa (hash: VUwaiFh2a52KhyQLVFXCDY0kMKiUeo37HnTzfGi7QQ4=)
                          13: 99017F56EBCA11F09168A1EADAE4EC9C.roa (hash: 9iWNRVakTa4Fkk+IlMpLZh0je4RlQDz/mrMuIloUDbc=)
                          14: 68A7680A595611EFA6EA977A762E951A.roa (hash: 4KvhV/9vsC0Llr34GI+s1jGqdxl+ushBovv44svidrk=)
                          15: 9A80C77C595611EF8984CD7A762E951A.roa (hash: ZdMpYI32B75UuK8vGc3RW46+xhLMuTA2Hwcvv0zVVdA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Sep 2026 00:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1358 (0x54e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364321AAF, serialNumber=3DA3DDAE4FD574BDFADB2FE7524D5D303741352C
        Validity
            Not Before: Sep 12 03:18:13 2026 GMT
            Not After : Sep 14 03:18:13 2026 GMT
        Subject: CN=6aa4c476-24d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:6c:e4:22:0b:31:68:ce:e6:f2:ec:ce:66:
                    d1:1b:77:c8:ae:c3:ef:bd:08:d2:60:d8:a3:81:98:
                    be:f0:f2:0d:b7:74:b8:f1:dd:89:59:d1:66:e9:29:
                    d9:68:eb:0b:4a:8f:38:d0:14:9a:c1:c1:30:b1:ef:
                    04:82:20:93:b2:5e:8e:5e:1a:f3:fb:4d:3b:01:0d:
                    2c:e4:7c:b7:df:66:78:05:72:b4:ee:c3:c6:ac:f9:
                    bc:5a:c0:03:c4:a2:e1:d6:ac:2d:35:a3:d6:f4:7f:
                    39:49:0e:85:70:52:13:dc:12:75:00:f2:32:a2:2c:
                    76:1b:81:73:10:ce:1f:d3:f4:b6:52:1b:59:1b:b6:
                    06:81:34:c6:de:75:ac:6a:85:63:cd:44:cc:d8:5f:
                    fd:f9:f6:21:11:37:65:5f:30:ab:5f:b2:55:bd:60:
                    fc:25:44:05:f4:2d:01:e7:43:cf:a3:dc:d0:13:2d:
                    59:75:ec:f3:b0:68:c1:57:b0:0f:4c:b2:fb:8b:ec:
                    c4:6d:5f:3a:94:51:76:50:fe:c1:f7:8a:9d:54:93:
                    92:85:0c:09:4d:3e:ea:a1:5a:c5:37:ce:0c:b5:44:
                    73:ed:7d:7c:be:9d:6e:33:98:a6:a3:80:a7:96:1f:
                    a7:ce:1b:24:73:f6:53:44:9d:ff:f1:5f:60:5a:64:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:25:86:7D:FE:27:8D:FC:7B:69:9E:7D:38:E5:93:9F:64:0B:F1:E1
            X509v3 Authority Key Identifier:
                keyid:3D:A3:DD:AE:4F:D5:74:BD:FA:DB:2F:E7:52:4D:5D:30:37:41:35:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PaPdrk_VdL362y_nUk1dMDdBNSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364321A/2F1373BEBCDA11EDACA5CAAFF1222468/PaPdrk_VdL362y_nUk1dMDdBNSw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9b:31:99:a6:dc:ed:01:0b:6e:e5:4e:a9:36:c5:f0:b6:13:
         5b:4b:61:99:ba:15:be:54:d2:39:16:7b:bc:73:dd:8a:fa:e4:
         0b:6b:92:f3:31:ca:29:42:8c:69:43:7d:3e:b1:82:e5:9f:e5:
         a0:41:47:29:71:8f:a8:13:51:4f:53:90:e5:67:37:22:85:be:
         03:63:72:d6:c9:5a:7f:a4:28:e8:0d:64:74:8d:d5:f3:fc:36:
         d1:a7:d4:c7:09:8a:13:83:63:0a:42:78:e5:b5:94:bb:48:5c:
         10:6b:73:c4:92:de:6a:c2:3f:12:ab:d5:d0:8c:ab:13:b6:24:
         25:d6:e6:cd:cb:38:74:a9:e2:3d:17:89:59:05:1e:f5:87:51:
         e1:70:2c:14:1f:99:99:be:c5:7b:86:98:a9:68:87:e0:23:a3:
         02:6f:7f:7e:22:c9:2a:e1:96:be:d7:dc:93:cf:a6:6a:f4:01:
         1a:a6:9a:1d:d6:b2:01:f7:d6:0b:c7:f0:c4:7a:6f:2b:8b:83:
         4f:97:51:8c:05:26:2c:26:6a:a8:92:0c:8f:57:88:e2:ab:9d:
         55:08:85:29:d6:4f:7e:63:dc:62:e6:ff:ff:c2:eb:65:f5:07:
         fe:15:e7:15:9e:9f:77:e5:91:85:28:c2:55:ff:81:98:5b:48:
         06:90:c9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 09:38:48 2026 by rpki-client