Error: rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
File:                     7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft (raw, json)
Hash identifier:          wwQK+b0DFgeIFwhk1w9DDQkWDc896I+zaDuAObvTVYo=
Subject key identifier:   6A:66:CA:D6:8E:5D:38:4B:DC:9E:36:99:83:31:44:CC:72:A3:14:CE
Authority key identifier: EE:B6:77:AA:50:CB:C6:9C:6D:BD:BF:69:5C:A1:99:D7:E1:47:A8:94
Certificate issuer:       /CN=F364E699AF/serialNumber=EEB677AA50CBC69C6DBDBF695CA199D7E147A894
Certificate serial:       0447
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
Manifest number:          0446
Signing time:             Mon 26 Oct 2026 03:51:33 +0000
Manifest this update:     Mon 26 Oct 2026 03:51:33 +0000
Manifest next update:     Wed 28 Oct 2026 03:51:33 +0000
Files and hashes:         1: 7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.crl (hash: 8pUdcVTuMgd8neQU1HiRA2KYLS0tWOV7Xr2kxnOagRQ=)
                          2: 5B2E23D224F711EFB578AD317DDC24C2.roa (hash: dJqx2tIQdNKOhw5rXNRRGr+piGM3e2LGv8rFqRIxuKM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1095 (0x447)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E699AF, serialNumber=EEB677AA50CBC69C6DBDBF695CA199D7E147A894
        Validity
            Not Before: Oct 26 03:51:33 2026 GMT
            Not After : Oct 28 03:51:33 2026 GMT
        Subject: CN=6adece45-661a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:96:2f:01:84:14:c8:bf:1e:c2:cf:df:6b:76:
                    9d:3e:e8:e3:8d:a1:3f:37:9e:3c:bb:94:57:2f:f4:
                    b8:5e:ef:e3:81:e7:19:c8:0f:c4:29:66:62:60:21:
                    e8:ab:9b:ba:68:e6:05:8f:b4:ce:06:5e:8a:d0:6f:
                    23:d0:f5:ea:a2:f9:28:71:c8:4e:34:d2:cc:a4:ab:
                    e2:f8:86:a2:0f:80:4c:dc:21:be:df:68:46:b1:ee:
                    59:57:b2:af:74:52:a1:cb:7f:93:ac:23:45:89:4c:
                    4a:71:f2:ea:cb:b7:35:03:47:96:26:76:98:5d:62:
                    18:0e:87:46:79:74:67:72:1b:04:bf:d7:d9:a2:9b:
                    2d:0d:75:bd:a0:ab:87:fe:e6:00:a4:fc:25:54:53:
                    51:6d:79:d7:b2:a7:4c:63:9b:11:1e:19:07:23:89:
                    3b:e8:7a:2c:54:84:49:e1:5d:d7:d4:f0:fc:e7:89:
                    f4:04:f3:fa:40:3c:fc:8a:94:66:a0:5c:e2:b9:5b:
                    7f:74:dc:14:c1:67:a7:08:68:07:d4:f1:d7:49:4c:
                    0c:6a:71:0d:5a:b1:f3:c8:b9:67:9e:3e:94:0e:ba:
                    7b:f7:59:3c:a6:94:47:69:01:69:a7:b4:3d:0b:3d:
                    3c:fd:f2:c3:7b:8a:99:08:b4:14:e2:5e:77:0c:a8:
                    57:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:66:CA:D6:8E:5D:38:4B:DC:9E:36:99:83:31:44:CC:72:A3:14:CE
            X509v3 Authority Key Identifier:
                keyid:EE:B6:77:AA:50:CB:C6:9C:6D:BD:BF:69:5C:A1:99:D7:E1:47:A8:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E699/9578AD3E87E811EE9774F3804AD9E6FC/7rZ3qlDLxpxtvb9pXKGZ1-FHqJQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:7f:49:f8:9f:a2:2a:1c:3e:7d:e0:43:d4:de:7e:fb:41:33:
         ee:d3:00:ab:21:9f:b1:8e:38:02:69:41:c5:75:b8:2f:17:1c:
         48:66:4c:20:8a:7b:f6:8a:b9:a0:c3:a5:36:2e:2f:c8:5f:78:
         fb:07:7e:7b:9a:d6:25:9f:bf:65:b6:6f:e7:cb:4a:3d:42:4a:
         96:2e:46:c1:81:9c:39:60:71:f5:60:3d:a6:af:b5:d3:5a:c2:
         b6:19:ba:20:75:99:c0:cf:90:6b:3d:0b:54:86:c1:f5:56:e6:
         85:be:80:60:8e:27:35:2b:81:52:e3:ca:ec:d1:d8:bb:60:5b:
         28:de:7c:63:dd:69:89:9b:77:f4:dc:28:d8:eb:a4:4a:9e:d9:
         8a:9f:98:6e:b8:c7:03:91:7a:b1:c7:6d:7b:d4:5f:99:75:90:
         6a:d0:24:2e:46:97:6d:84:4f:66:7a:d9:f3:ee:af:45:0f:5b:
         6d:53:37:44:12:98:c1:ff:91:b9:3c:ef:77:4b:9c:e0:41:e8:
         32:da:52:9e:16:89:ff:97:9d:0e:30:93:f9:0f:f7:fd:16:a4:
         dc:08:5a:b6:8a:0d:9e:ac:cf:7b:5c:b2:d5:60:ec:90:e3:ac:
         5a:e7:8e:da:8c:73:80:a6:c2:4b:6a:18:38:d2:50:97:de:8b:
         f3:71:45:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:58:26 2026 by rpki-client