Error: rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
File:                     jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft (raw, json)
Hash identifier:          BXE7FuG8ULbQ+yuA/Y6mZH1S9+vP1NMZUzkIphpaBT8=
Subject key identifier:   FC:2B:69:51:50:DF:D2:69:4D:BB:11:4D:06:C2:22:3D:72:E8:18:1A
Authority key identifier: 8C:15:15:F0:07:12:3A:A3:3E:CC:CF:7E:D5:CF:FB:15:AC:73:04:8E
Certificate issuer:       /CN=F364A64DAF/serialNumber=8C1515F007123AA33ECCCF7ED5CFFB15AC73048E
Certificate serial:       0BBF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
Manifest number:          6678
Signing time:             Mon 26 Oct 2026 01:15:19 +0000
Manifest this update:     Mon 26 Oct 2026 01:15:18 +0000
Manifest next update:     Wed 28 Oct 2026 01:15:18 +0000
Files and hashes:         1: jBUV8AcSOqM-zM9-1c_7FaxzBI4.crl (hash: ZhK5x7iU095D1XWOTqsG5XTDAJ6/0A7wuY++cswHYig=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 01:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3007 (0xbbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A64DAF, serialNumber=8C1515F007123AA33ECCCF7ED5CFFB15AC73048E
        Validity
            Not Before: Oct 26 01:15:18 2026 GMT
            Not After : Oct 28 01:15:18 2026 GMT
        Subject: CN=6adea9a7-912d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:b2:ff:33:e1:56:a2:3b:62:c0:ee:69:e0:
                    c9:59:12:88:0a:a0:63:97:d2:30:6b:a7:86:63:08:
                    b4:52:d1:56:0d:75:a4:af:9a:96:9f:27:04:50:09:
                    79:bb:ce:42:ba:81:39:39:09:ef:79:a0:e4:45:91:
                    8e:8b:ea:1d:78:56:93:60:92:ae:15:79:96:95:0a:
                    d6:80:bc:f0:9d:a2:fd:4a:39:84:61:f8:28:3c:9b:
                    a5:82:29:be:87:17:1a:57:15:8b:27:55:1e:8d:b5:
                    cc:12:b3:5b:84:13:1b:f1:df:0e:2a:eb:c1:5f:1f:
                    44:d6:90:10:f0:35:ee:15:bc:4b:44:f5:78:d7:47:
                    32:24:d8:68:21:6e:5b:aa:b4:86:5a:ef:2d:e6:c5:
                    73:93:c8:5e:0d:c3:9e:78:f1:7e:34:6b:49:1a:5e:
                    36:4d:64:d5:d2:c5:7e:7b:e6:41:e8:1e:f6:e6:41:
                    36:d2:49:f5:04:8e:14:cc:23:49:e8:6f:dd:99:f9:
                    08:ef:02:9a:0f:72:db:54:36:8d:1d:57:de:df:a3:
                    e9:6a:bc:cf:df:36:25:7d:0a:d7:14:1c:47:be:8b:
                    05:41:4e:d8:80:d7:a2:05:d0:ba:ba:63:17:75:d7:
                    72:d9:84:3f:15:ba:ce:78:cd:c9:84:54:f9:7a:f3:
                    f6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:2B:69:51:50:DF:D2:69:4D:BB:11:4D:06:C2:22:3D:72:E8:18:1A
            X509v3 Authority Key Identifier:
                keyid:8C:15:15:F0:07:12:3A:A3:3E:CC:CF:7E:D5:CF:FB:15:AC:73:04:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jBUV8AcSOqM-zM9-1c_7FaxzBI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/jBUV8AcSOqM-zM9-1c_7FaxzBI4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5c:c6:e4:6e:14:28:47:42:5d:59:24:0c:67:0f:9c:d7:9e:
         9f:e1:ce:85:c1:0e:ad:b4:5b:4d:79:16:3b:2b:98:3c:41:fe:
         f2:32:b9:22:b1:b4:f4:aa:e0:ab:9f:99:88:7d:9a:de:ec:19:
         ae:b8:b9:39:a9:24:fd:29:d9:6b:a4:15:f0:34:53:bf:64:b4:
         6f:d9:28:f1:a3:63:dc:56:22:91:0b:3e:60:ce:0d:93:80:11:
         9f:b0:ab:12:8d:84:38:09:6c:36:5e:3b:f0:90:d6:12:f6:dc:
         39:05:90:a4:6c:2a:5f:b0:07:63:ac:cd:3b:3d:9c:22:9c:34:
         43:43:36:e7:4c:c2:02:c3:01:90:18:b0:4d:45:69:9f:a1:da:
         b5:7c:a1:60:8c:1f:b4:98:fe:df:fa:52:9c:d8:48:40:19:9f:
         53:bd:dc:65:7d:47:8e:e9:fb:52:4d:56:8b:d4:0c:97:6c:0f:
         4c:d3:07:6a:eb:6f:3c:5b:ed:38:47:e7:de:60:5c:dc:9c:d0:
         31:10:04:34:b3:fd:a9:af:26:23:be:0f:a7:43:e8:54:5a:69:
         ad:ff:67:28:14:03:d5:6d:d1:20:2f:ac:e9:00:2f:3e:4e:00:
         20:39:15:c0:04:0a:00:c5:bb:02:44:d1:80:7d:11:61:66:5f:
         dd:98:37:90
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICC78wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEE2NERBRjExMC8GA1UEBRMoOEMxNTE1RjAwNzEyM0FBMzNFQ0NDRjdFRDVDRkZC
MTVBQzczMDQ4RTAeFw0yNjEwMjYwMTE1MThaFw0yNjEwMjgwMTE1MThaMBgxFjAU
BgNVBAMTDTZhZGVhOWE3LTkxMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNS7L/M+FWojtiwO5p4MlZEogKoGOX0jBrp4ZjCLRS0VYNdaSvmpafJwRQ
CXm7zkK6gTk5Ce95oORFkY6L6h14VpNgkq4VeZaVCtaAvPCdov1KOYRh+Cg8m6WC
Kb6HFxpXFYsnVR6NtcwSs1uEExvx3w4q68FfH0TWkBDwNe4VvEtE9XjXRzIk2Ggh
bluqtIZa7y3mxXOTyF4Nw5548X40a0kaXjZNZNXSxX575kHoHvbmQTbSSfUEjhTM
I0nob92Z+QjvApoPcttUNo0dV97fo+lqvM/fNiV9CtcUHEe+iwVBTtiA16IF0Lq6
Yxd113LZhD8Vus54zcmEVPl68/YTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/Ctp
UVDf0mlNuxFNBsIiPXLoGBowHwYDVR0jBBgwFoAUjBUV8AcSOqM+zM9+1c/7Faxz
BI4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRBNjRELzYyMzJDNUE2Q0M5ODExRThCRDkzRDE1N0Y4QUVBMjI4L2pCVVY4
QWNTT3FNLXpNOS0xY183RmF4ekJJNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pCVVY4QWNTT3FNLXpNOS0xY183RmF4ekJJNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEE2NEQvNjIzMkM1QTZDQzk4MTFFOEJEOTNEMTU3RjhB
RUEyMjgvakJVVjhBY1NPcU0tek05LTFjXzdGYXh6Qkk0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTXMbkbhQoR0JdWSQMZw+c156f4c6F
wQ6ttFtNeRY7K5g8Qf7yMrkisbT0quCrn5mIfZre7BmuuLk5qST9KdlrpBXwNFO/
ZLRv2Sjxo2PcViKRCz5gzg2TgBGfsKsSjYQ4CWw2XjvwkNYS9tw5BZCkbCpfsAdj
rM07PZwinDRDQzbnTMICwwGQGLBNRWmfodq1fKFgjB+0mP7f+lKc2EhAGZ9Tvdxl
fUeO6ftSTVaL1AyXbA9M0wdq6288W+04R+feYFzcnNAxEAQ0s/2pryYjvg+nQ+hU
Wmmt/2coFAPVbdEgL6zpAC8+TgAgORXABAoAxbsCRNGAfRFhZl/dmDeQ
-----END CERTIFICATE-----
Generated at Mon Oct 26 15:52:57 2026 by rpki-client