Error: rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
File:                     3XSZqMjBKrZ-FetJKAimku1LWfQ.mft (raw, json)
Hash identifier:          6JwvW0Br1rSjj9LmlLUT8aO0g66CZ0h8fPGaTIYY7P8=
Subject key identifier:   E1:A3:98:F2:24:A5:BD:40:CA:6E:C3:B6:1E:67:16:BE:76:0E:BD:C6
Authority key identifier: DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4
Certificate issuer:       /CN=F365C79EAF/serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
Certificate serial:       07FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
Manifest number:          07F5
Signing time:             Sun 25 Oct 2026 02:09:37 +0000
Manifest this update:     Sun 25 Oct 2026 02:09:36 +0000
Manifest next update:     Tue 27 Oct 2026 02:09:36 +0000
Files and hashes:         1: 3XSZqMjBKrZ-FetJKAimku1LWfQ.crl (hash: l4dffWgaVuLqdgjF1gjuIp5LYm28t9L1KMQ7ntcGRBY=)
                          2: F2AE5BA0270C11F186A655EADAE4EC9C.roa (hash: 9JorJHXWwq0sbJOBnfh0uYUZoXJy5k1Hxib4ZHL4hlA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C79EAF, serialNumber=DD7499A8C8C12AB67E15EB492808A692ED4B59F4
        Validity
            Not Before: Oct 25 02:09:36 2026 GMT
            Not After : Oct 27 02:09:36 2026 GMT
        Subject: CN=6add64e1-5683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:b0:59:7e:f3:5f:90:d3:d4:ae:f6:b6:c6:
                    82:84:45:cb:a7:8d:9d:06:8b:ef:8d:fa:cc:0d:ec:
                    fc:ea:3c:23:d6:84:8d:dd:36:9c:ea:df:0c:94:a3:
                    5b:29:a6:64:89:c4:fb:25:18:21:2b:6f:cc:23:85:
                    23:c0:48:95:95:d9:72:c7:e5:84:09:bc:49:42:84:
                    5b:26:e4:48:3c:4f:34:d2:b6:93:0d:03:59:e9:3e:
                    06:45:9f:91:af:5a:51:27:1c:fe:90:76:e0:6d:d2:
                    55:82:17:3f:b8:b7:c2:d9:5b:5c:44:34:7b:22:a2:
                    0c:c0:31:13:29:13:1a:3e:1a:b9:b8:6d:14:e7:3f:
                    0e:bd:87:29:08:be:fc:c6:16:99:4e:e4:3b:60:49:
                    f6:ec:a4:75:13:77:e7:01:86:ec:a3:d4:62:f8:38:
                    12:74:17:0c:03:bf:dc:c8:a8:76:b5:f9:3e:ce:fd:
                    89:9e:f8:72:92:bc:f6:25:76:5e:d3:b8:e3:1a:c4:
                    63:80:49:9f:81:ae:ae:be:37:7d:aa:c7:20:ee:83:
                    f7:3f:36:56:dd:a6:a5:ee:0c:d0:ae:c0:43:16:45:
                    da:ba:ae:27:75:f6:a9:86:b6:2c:01:ad:23:50:0f:
                    3a:fc:50:e4:74:51:d4:e1:f8:bd:18:53:c5:9c:ba:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A3:98:F2:24:A5:BD:40:CA:6E:C3:B6:1E:67:16:BE:76:0E:BD:C6
            X509v3 Authority Key Identifier:
                keyid:DD:74:99:A8:C8:C1:2A:B6:7E:15:EB:49:28:08:A6:92:ED:4B:59:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3XSZqMjBKrZ-FetJKAimku1LWfQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C79E/1FC34BE6BEDA11EB8F5CE243F8AEA228/3XSZqMjBKrZ-FetJKAimku1LWfQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:64:79:e2:a5:b1:ca:97:ba:f1:c2:8d:61:d8:e2:bc:e3:
         e5:cf:b1:93:f2:0c:ee:1f:c2:17:ee:85:78:36:56:84:fd:19:
         ab:a5:eb:4f:f5:bd:f1:eb:08:e1:26:78:09:8a:b0:d8:b8:d1:
         b5:fb:86:9e:f4:2e:91:5f:fe:15:20:b6:6b:40:eb:2c:f0:fa:
         07:8e:fa:6d:ec:fd:eb:5b:e2:58:75:8b:26:d0:47:74:40:13:
         26:29:82:71:31:16:48:8f:a7:bf:50:73:ef:fe:cd:04:14:62:
         38:aa:2c:3d:29:e6:5a:20:74:af:a7:ee:ab:7e:a4:5d:0b:10:
         8d:36:57:17:62:5a:b1:0c:85:e0:dd:a0:05:0c:32:f5:dd:d8:
         d6:a4:00:f5:0d:b6:81:d7:aa:0c:c7:8a:c8:83:a4:c5:27:93:
         00:61:81:76:c2:5b:89:c9:2f:3e:73:74:5a:3f:18:8e:c9:22:
         f3:17:19:0c:17:96:ec:6c:7a:1b:8b:df:5a:58:b3:91:59:82:
         95:2a:ac:3f:f6:0d:ac:59:3e:c6:9d:ed:41:17:34:29:19:c6:
         e1:e8:f1:09:4c:38:9a:38:48:8c:e7:58:04:07:94:21:5e:c0:
         0e:85:57:ce:e3:39:ba:4b:ee:ff:97:59:1d:27:d3:a2:51:95:
         06:26:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:54:00 2026 by rpki-client