Error: rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
File:                     K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft (raw, json)
Hash identifier:          RM8gbAEDzab8bvvmg7QXtAeyTDtDt1as8/lKO04vuVc=
Subject key identifier:   C0:B9:B2:1D:6E:15:67:2B:54:2F:3C:99:A9:91:13:5B:1B:9D:9F:CD
Authority key identifier: 2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4
Certificate issuer:       /CN=F365BBDAAF/serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
Certificate serial:       81
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
Manifest number:          7D
Signing time:             Sun 25 Oct 2026 05:42:37 +0000
Manifest this update:     Sun 25 Oct 2026 05:42:36 +0000
Manifest next update:     Tue 27 Oct 2026 05:42:36 +0000
Files and hashes:         1: K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl (hash: 7eQsW/ABIZBsTiqtnw9x88l5evhzrt+4VTfhYQrJAAI=)
                          2: 21D46A1A76F811F1937C3B0DCF1D38B0.roa (hash: MKCYxKjd2uNuwqyT9k0lVtIuI9mAGX3CL0R0CGuQ8yA=)
                          3: 763AA698B2B011F1A0A5E9E8CE1D38B0.roa (hash: f1EzEvOJM51WdQleA7NLcVBr5xI58ejbgvs5g3oD3t0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BBDAAF, serialNumber=2B9374F53672AE4C133CDBB6FBC61951819D32B4
        Validity
            Not Before: Oct 25 05:42:36 2026 GMT
            Not After : Oct 27 05:42:36 2026 GMT
        Subject: CN=6add96cd-2eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f6:aa:fb:a6:ab:d7:60:59:a8:64:e2:d4:07:
                    4c:be:a7:34:c4:fe:4d:a3:1c:fb:4c:cc:e3:93:a5:
                    9b:54:4a:3f:a5:94:c9:37:a7:fd:fd:20:80:82:14:
                    7c:22:33:b4:d2:bd:31:57:13:ed:50:68:ca:f4:f7:
                    91:3d:21:82:5e:ca:d3:6c:32:da:41:69:83:cf:4b:
                    af:92:76:44:62:bc:1e:30:48:1d:51:c6:09:52:91:
                    e7:0e:59:65:c2:2d:cf:e9:98:cd:df:4e:91:89:06:
                    64:8a:20:f5:20:8d:0b:09:37:06:d1:6b:9a:82:0a:
                    dc:49:a6:ea:06:0f:7d:3c:0e:a3:70:c0:b1:14:1e:
                    04:7a:8a:05:38:09:c2:d7:c3:67:37:43:fe:c8:69:
                    be:8c:e7:47:a4:86:68:1b:6a:7a:72:23:53:e4:2c:
                    cf:46:b4:7d:ab:a0:92:15:6f:4d:52:83:98:1c:40:
                    08:e6:ac:a2:b0:5a:02:87:4e:c2:44:d4:9d:0d:4d:
                    46:f2:66:31:79:b3:f6:2e:d0:ab:0e:4b:97:87:a4:
                    e6:b5:ff:91:4d:4c:74:ad:29:7c:37:a5:f9:8e:b2:
                    90:20:58:10:0b:24:e0:8b:b1:f0:71:70:a0:89:ae:
                    73:94:12:8e:25:f8:c1:85:96:38:c7:e6:dc:30:7c:
                    08:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B9:B2:1D:6E:15:67:2B:54:2F:3C:99:A9:91:13:5B:1B:9D:9F:CD
            X509v3 Authority Key Identifier:
                keyid:2B:93:74:F5:36:72:AE:4C:13:3C:DB:B6:FB:C6:19:51:81:9D:32:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/K5N09TZyrkwTPNu2-8YZUYGdMrQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BBDA/0C3AA9B073DF11F1931D9EB6CE1D38B0/K5N09TZyrkwTPNu2-8YZUYGdMrQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:35:a0:dd:a9:ea:1d:00:0d:a1:af:a0:48:6e:6c:a3:7e:ac:
         11:4c:d7:1b:bc:7c:73:d9:77:3e:aa:89:be:5c:27:ba:18:32:
         da:0b:4f:30:a2:fb:1a:8d:fd:65:8d:e4:97:8e:d9:75:38:65:
         91:b9:0b:77:76:34:2a:6f:f5:7c:67:60:88:fb:52:1e:31:6a:
         24:09:fa:34:7f:82:50:1c:47:bf:f1:ee:8a:8b:c9:3f:04:ad:
         2f:2a:03:0d:51:42:7c:14:f0:3b:52:2a:84:bc:d2:5d:b9:4a:
         24:bc:ff:03:28:70:ac:56:4f:c3:74:f3:3e:95:2a:05:8e:cc:
         69:4d:aa:d0:b0:9d:c6:d0:86:26:21:63:d0:c0:b4:16:f8:e4:
         08:0b:8a:2e:3c:3b:38:9d:08:0c:c3:8a:25:42:71:29:b8:8f:
         e5:70:10:87:3b:5e:fe:44:94:04:d0:93:dc:a2:76:f6:f4:a0:
         7d:11:47:69:20:83:c9:e7:0e:5e:b9:b1:77:e8:ed:1f:b1:f7:
         70:85:9d:0b:96:b2:6c:98:5d:86:31:83:bf:34:9f:ba:f5:4f:
         79:48:ff:0e:27:a7:58:11:57:78:24:bf:96:62:d1:95:a9:fb:
         f5:2d:d7:a9:35:6d:a3:5f:63:fd:54:0d:59:b0:89:0b:70:23:
         08:90:0e:69
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAIEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJCREFBRjExMC8GA1UEBRMoMkI5Mzc0RjUzNjcyQUU0QzEzM0NEQkI2RkJDNjE5
NTE4MTlEMzJCNDAeFw0yNjEwMjUwNTQyMzZaFw0yNjEwMjcwNTQyMzZaMBgxFjAU
BgNVBAMTDTZhZGQ5NmNkLTJlYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC99qr7pqvXYFmoZOLUB0y+pzTE/k2jHPtMzOOTpZtUSj+llMk3p/39IICC
FHwiM7TSvTFXE+1QaMr095E9IYJeytNsMtpBaYPPS6+SdkRivB4wSB1RxglSkecO
WWXCLc/pmM3fTpGJBmSKIPUgjQsJNwbRa5qCCtxJpuoGD308DqNwwLEUHgR6igU4
CcLXw2c3Q/7Iab6M50ekhmgbanpyI1PkLM9GtH2roJIVb01Sg5gcQAjmrKKwWgKH
TsJE1J0NTUbyZjF5s/Yu0KsOS5eHpOa1/5FNTHStKXw3pfmOspAgWBALJOCLsfBx
cKCJrnOUEo4l+MGFljjH5twwfAi1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwLmy
HW4VZytULzyZqZETWxudn80wHwYDVR0jBBgwFoAUK5N09TZyrkwTPNu2+8YZUYGd
MrQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCQkRBLzBDM0FBOUIwNzNERjExRjE5MzFEOUVCNkNFMUQzOEIwL0s1TjA5
VFp5cmt3VFBOdTItOFlaVVlHZE1yUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0s1TjA5VFp5cmt3VFBOdTItOFlaVVlHZE1yUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJCREEvMEMzQUE5QjA3M0RGMTFGMTkzMUQ5RUI2Q0Ux
RDM4QjAvSzVOMDlUWnlya3dUUE51Mi04WVpVWUdkTXJRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB6NaDdqeodAA2hr6BIbmyjfqwRTNcb
vHxz2Xc+qom+XCe6GDLaC08wovsajf1ljeSXjtl1OGWRuQt3djQqb/V8Z2CI+1Ie
MWokCfo0f4JQHEe/8e6Ki8k/BK0vKgMNUUJ8FPA7UiqEvNJduUokvP8DKHCsVk/D
dPM+lSoFjsxpTarQsJ3G0IYmIWPQwLQW+OQIC4ouPDs4nQgMw4olQnEpuI/lcBCH
O17+RJQE0JPconb29KB9EUdpIIPJ5w5eubF36O0fsfdwhZ0LlrJsmF2GMYO/NJ+6
9U95SP8OJ6dYEVd4JL+WYtGVqfv1LdepNW2jX2P9VA1ZsIkLcCMIkA5p
-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:48 2026 by rpki-client