Error: rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File:                     nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier:          LIayzDZLE3QkKC06+B6DjJSmgCAy0Nb540SzDgFJaqc=
Subject key identifier:   15:C4:7E:E1:19:D3:68:CF:AD:5C:D6:6A:3B:CF:9F:60:74:20:39:42
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer:       /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial:       1054
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number:          103D
Signing time:             Tue 06 Oct 2026 00:55:30 +0000
Manifest this update:     Tue 06 Oct 2026 00:55:30 +0000
Manifest next update:     Thu 08 Oct 2026 00:55:30 +0000
Files and hashes:         1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: B2ShkVQXGK8cVYszjbU3IRSp/hXhXdEqxcXbOe6kDug=)
                          2: 65B8CDA0902211F1ADB723D1CE1D38B0.roa (hash: Xim1UGEgD9YF60xXopB/o337VqTBiStau5CZPIWZdWo=)
                          3: 39A15096902411F1B016B3D9CE1D38B0.roa (hash: jJJbAx5djHh+tei5Tazc3X/5MjMzwGLT3ZzM0dUmwmE=)
                          4: 7C3E55B4902111F19C3D6FC9CE1D38B0.roa (hash: 3YAgaNCMWja+XqVqVSO6d1a05F3nuNn9YgnY9uBJFx0=)
                          5: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
                          6: 058F87F0901F11F1B4372CBDCE1D38B0.roa (hash: rPHef9QQYZd+LvUX8tkf0SC7wdAVqHDLQMDNntxfd2o=)
                          7: 63911742901F11F18E1340BDCE1D38B0.roa (hash: VoYbPhNHZSIv7q3e/cQMepOJ/LmJ7pp8vT7io8/IP9M=)
                          8: 4B47C07C902511F1855BC0E1CE1D38B0.roa (hash: LMHsEgxxHhrC80yn+QmfSbx1JlHBlW1LGksapRgWHNU=)
                          9: D050B396902011F1BEB96DC5CE1D38B0.roa (hash: DBovRPK1Tx1TXVFD1e46J7QxRI4i4W1he+qGL0PV53k=)
                          10: 94C0EE66902211F1BE0B89D1CE1D38B0.roa (hash: H2VqM3Al4tnne65f7bzWE3hlso64x9ApyHj1wPBG8sA=)
                          11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
                          12: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 00:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4180 (0x1054)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
        Validity
            Not Before: Oct  6 00:55:30 2026 GMT
            Not After : Oct  8 00:55:30 2026 GMT
        Subject: CN=6ac44702-8f35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bf:57:57:4c:0b:6c:b3:b9:03:09:4e:13:1d:
                    e0:ac:89:41:aa:ff:0c:7f:55:55:e3:7c:57:e7:64:
                    4e:8a:64:d1:92:bf:2f:8d:da:63:e6:ee:d5:20:70:
                    a1:41:7f:9b:b5:95:1b:00:7f:a8:b3:4d:25:be:e5:
                    dc:b4:cd:e5:e1:b5:3a:2b:3c:0d:68:37:c3:4a:19:
                    99:bf:6a:02:84:ba:a8:a5:7d:96:56:ef:95:09:5d:
                    20:96:6a:75:61:86:f5:9a:b2:c8:3f:ba:1b:3b:91:
                    88:b1:55:61:55:17:e5:9e:a4:08:b1:17:7d:b1:96:
                    ec:a2:e1:37:32:f9:4e:9c:26:8d:ee:57:83:56:86:
                    77:02:a6:4f:64:84:a2:02:60:3f:7b:34:a5:0f:ed:
                    c8:a9:7f:b0:c3:c9:a8:96:6d:74:bb:1a:5c:03:2d:
                    d3:45:25:1b:c0:f3:60:1b:cb:77:86:27:29:f0:29:
                    05:2a:d1:07:19:ab:d7:0b:8d:94:d3:51:cc:96:6e:
                    01:5d:13:4c:42:94:0d:f8:17:76:34:eb:d7:c1:c8:
                    d0:cd:0f:29:47:a3:d6:75:d0:45:f2:7e:f1:38:36:
                    5f:1a:03:62:d4:44:89:8f:f3:0d:62:9e:4a:74:bc:
                    b6:9d:90:10:e6:90:80:54:64:4b:c5:2c:cc:94:ce:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C4:7E:E1:19:D3:68:CF:AD:5C:D6:6A:3B:CF:9F:60:74:20:39:42
            X509v3 Authority Key Identifier:
                keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7d:ac:75:ba:55:11:a2:9e:57:50:e8:5a:05:30:0f:28:cb:
         07:6c:be:54:71:11:c9:0a:83:53:4e:69:cd:80:af:e6:f0:23:
         ef:36:6b:f9:37:25:5d:71:6d:e6:0a:2f:9c:35:d0:4d:a1:b6:
         63:b5:aa:82:de:69:65:43:d2:2f:dd:e0:0a:ef:cf:d0:ff:4b:
         7b:a5:2a:f0:b0:3e:14:c3:55:c2:b7:b0:54:c9:cb:2f:6f:ca:
         84:ce:62:20:55:fd:99:bb:56:86:13:5d:7c:5a:d9:c6:bd:9d:
         24:5e:06:39:2b:26:35:e4:07:b2:cf:7e:5d:a3:97:34:e4:d1:
         7e:b1:b0:7e:32:10:ee:77:e2:94:e1:3a:f9:30:28:31:c9:2a:
         9e:5e:66:49:a2:c6:dc:9a:1c:3f:ee:14:5c:45:c9:7e:55:51:
         eb:1f:63:e0:10:79:00:3b:0d:b3:99:e2:70:ad:35:c3:11:1a:
         e2:58:97:80:9f:17:61:bc:9f:56:93:5c:1f:0c:ca:a1:f4:e7:
         ca:ab:03:91:dc:8a:a1:47:1d:44:5c:4c:ae:51:41:75:74:87:
         1e:fd:83:16:37:11:3b:e5:f8:59:0a:b8:4a:4d:01:1f:a9:14:
         01:1e:8f:21:b3:76:df:a0:a6:48:b0:04:fb:b5:97:74:4c:4e:
         03:c0:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 02:27:36 2026 by rpki-client