Error: rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
File:                     UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft (raw, json)
Hash identifier:          i13mHE2fmPl1J9ivjJe+WH2XUb/Yd/siovFPohe4NlA=
Subject key identifier:   42:E5:C9:CD:7A:A7:2E:BE:AE:4E:9D:55:E9:39:50:55:7A:F3:2D:13
Authority key identifier: 50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82
Certificate issuer:       /CN=F364EFD6AF/serialNumber=50AE14B67E0A9AFF28A02F456C7E2F3A3D6CD282
Certificate serial:       01C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
Manifest number:          01C4
Signing time:             Mon 26 Oct 2026 05:05:50 +0000
Manifest this update:     Mon 26 Oct 2026 05:05:50 +0000
Manifest next update:     Wed 28 Oct 2026 05:05:50 +0000
Files and hashes:         1: UK4Utn4Kmv8ooC9FbH4vOj1s0oI.crl (hash: 7aaWNVK7/tmKCrQlJVlU9he/UxPedDGrCPwE+NlM+3w=)
                          2: 9541AB3072C511F0B751A3EADAE4EC9C.roa (hash: vPBn+oWUe69PAp7QQWCoYxx3fdMV6cty84al8xby7/E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364EFD6AF, serialNumber=50AE14B67E0A9AFF28A02F456C7E2F3A3D6CD282
        Validity
            Not Before: Oct 26 05:05:50 2026 GMT
            Not After : Oct 28 05:05:50 2026 GMT
        Subject: CN=6adedfae-2337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:64:03:83:fa:53:53:b6:90:82:30:48:d6:
                    11:72:8c:90:39:ee:b9:a7:1c:46:3f:6f:ce:dd:32:
                    b8:ce:6b:12:2f:34:df:0d:27:24:f1:e9:11:fb:9c:
                    03:2a:c1:f1:17:b8:74:cf:cc:5a:5d:eb:8f:74:c7:
                    c7:9f:2d:7d:16:ab:b8:4c:4c:81:03:53:90:13:66:
                    de:e2:4e:e0:03:ca:c3:d7:ce:28:36:75:88:30:f8:
                    27:51:2e:00:21:f4:de:39:66:17:31:cb:2c:d6:dd:
                    1f:31:e7:e5:0a:26:89:ee:b3:d7:41:ed:bd:3c:d7:
                    19:06:24:50:6f:33:71:bb:01:fb:e4:33:5d:20:31:
                    36:d3:b2:21:8d:34:58:53:b2:6a:6a:60:6a:cc:4a:
                    ef:e1:f4:8a:b0:59:69:3b:91:ab:93:7c:7b:8b:ed:
                    83:a6:ef:0b:6c:b8:8d:af:c9:91:1d:22:a8:14:9e:
                    1b:13:12:96:1c:00:09:63:6c:fd:8c:39:e6:25:4d:
                    39:2f:97:7e:3f:e2:06:08:9f:39:ca:2d:80:23:6b:
                    c9:b5:65:6e:11:5b:3b:fc:e0:7a:67:e9:7f:eb:b8:
                    0e:1e:d8:23:ad:07:53:43:bb:cf:eb:c6:9c:b7:92:
                    69:d4:65:0d:b9:82:c4:b7:b3:f7:fc:31:6d:f6:6e:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E5:C9:CD:7A:A7:2E:BE:AE:4E:9D:55:E9:39:50:55:7A:F3:2D:13
            X509v3 Authority Key Identifier:
                keyid:50:AE:14:B6:7E:0A:9A:FF:28:A0:2F:45:6C:7E:2F:3A:3D:6C:D2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364EFD6/57F2CD8872C311F0A0E953DDDAE4EC9C/UK4Utn4Kmv8ooC9FbH4vOj1s0oI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:25:85:68:47:d8:f4:71:fd:ee:0c:fc:9c:ef:cd:d9:4b:32:
         5e:de:0f:9c:74:a0:33:9f:0d:d0:a2:16:6d:d7:1a:45:53:e1:
         5d:aa:e5:26:23:d2:c4:18:9b:db:39:2a:af:c8:15:73:9a:84:
         b7:14:ff:cd:50:0d:b9:99:ae:79:e9:c0:fb:3e:69:3c:1c:51:
         32:4d:90:c1:be:ee:84:74:05:36:9f:63:dd:67:ff:81:49:cd:
         27:80:ec:70:40:7b:0a:cf:f3:50:b0:94:77:ea:86:76:7b:4b:
         95:fa:03:ea:17:13:ed:e2:11:fa:43:f6:0a:75:b8:78:b8:32:
         06:a7:c0:8b:bf:ef:8a:8a:9f:5c:b3:da:a0:db:e0:a7:2f:79:
         f1:59:0f:e6:1b:d5:eb:8c:79:75:f7:9d:c5:ba:6d:a6:8b:ac:
         b9:39:2e:4f:c4:c1:01:ac:b9:25:19:f3:8e:1a:a0:57:a5:f6:
         6d:8c:a3:6c:f9:35:9e:70:39:e5:6e:2e:31:b8:ae:46:5c:6a:
         e2:fa:99:82:a2:93:3f:d5:cb:10:79:0f:3a:03:ef:a5:54:f1:
         d4:c9:f2:8e:71:95:a0:0c:c6:8e:09:ae:58:43:30:77:c7:1f:
         3a:bb:17:79:2e:3e:e5:22:1e:98:ba:ec:7d:47:a1:12:5d:46:
         06:02:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:57 2026 by rpki-client