Error: rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
File:                     qEB8UNNVEmlZXYTPEkOl86_4EHA.mft (raw, json)
Hash identifier:          L8cMct/7vvcVGaNEK7Bj6EQubaB2etTyz8xj6G5rr3E=
Subject key identifier:   61:B7:CC:34:2E:C6:76:50:F8:90:82:3A:CA:FF:73:45:9D:C7:78:A7
Authority key identifier: A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70
Certificate issuer:       /CN=F365C895RI/serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
Certificate serial:       0AA0
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
Manifest number:          0A9E
Signing time:             Sat 05 Sep 2026 01:24:41 +0000
Manifest this update:     Sat 05 Sep 2026 01:24:40 +0000
Manifest next update:     Mon 07 Sep 2026 01:24:40 +0000
Files and hashes:         1: qEB8UNNVEmlZXYTPEkOl86_4EHA.crl (hash: RKD+7T/X8KlsA6/q0VBkGX0TK/5GRykGyfZVNO8NoXg=)
                          2: 42E0DF7E85E011E989E4CF0DF8AEA228.roa (hash: ub04iL+FdrPKe6xm0DlU5EWb8IsSt+07XZ7Am9PMCkI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                          rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2720 (0xaa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C895RI, serialNumber=A8407C50D3551269595D84CF1243A5F3AFF81070
        Validity
            Not Before: Sep  5 01:24:40 2026 GMT
            Not After : Sep  7 01:24:40 2026 GMT
        Subject: CN=6a9b6f59-2b5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:35:6c:50:f1:f8:77:ed:bb:27:15:89:61:88:
                    0b:48:1a:16:f6:85:68:62:8b:f9:a1:3c:07:bb:82:
                    64:c1:d9:17:a3:bd:99:5d:07:25:67:98:76:df:cc:
                    66:c0:5a:73:5d:e0:09:35:99:20:d1:88:94:9e:2f:
                    a3:49:3d:c5:cf:e5:f9:d0:63:c1:1f:fc:db:4f:8d:
                    14:ed:af:54:c7:00:15:79:df:bd:7a:b5:e5:71:e9:
                    0b:9f:dc:b7:39:f1:4c:2e:39:02:b6:bd:c1:2c:92:
                    9e:a5:f2:34:cf:4e:2d:88:92:c6:4c:5c:d1:25:ff:
                    05:fb:b7:fb:8e:2f:63:3d:d5:39:62:4e:75:23:54:
                    e3:82:0f:2e:a6:5e:04:02:d4:fa:78:4c:28:66:24:
                    6b:92:28:46:7f:a1:4c:2a:02:b9:12:3d:f5:bc:64:
                    02:f1:22:3b:66:97:12:7b:c1:bf:94:53:b9:82:54:
                    89:af:89:f2:c1:09:bc:22:e2:41:57:54:9a:57:15:
                    4f:df:6d:6d:5a:7d:56:ec:56:dd:6e:7c:8d:a2:68:
                    0a:b4:4c:f9:dc:03:79:94:b3:58:6c:bc:8a:c4:9f:
                    24:0f:fc:32:12:d7:44:e6:38:23:a4:6a:42:57:a2:
                    80:16:f9:4b:1c:2e:b6:fd:d4:40:d1:22:85:2a:3d:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B7:CC:34:2E:C6:76:50:F8:90:82:3A:CA:FF:73:45:9D:C7:78:A7
            X509v3 Authority Key Identifier:
                keyid:A8:40:7C:50:D3:55:12:69:59:5D:84:CF:12:43:A5:F3:AF:F8:10:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/qEB8UNNVEmlZXYTPEkOl86_4EHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C895/F420C6A485DC11E98087BF0BF8AEA228/qEB8UNNVEmlZXYTPEkOl86_4EHA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4b:c3:be:fc:70:93:ba:28:22:cb:14:c7:57:d3:05:34:c2:
         59:5b:23:57:7a:4c:eb:f7:3a:1a:99:bf:37:c5:21:04:12:98:
         30:aa:56:20:7e:20:9a:06:73:f7:53:ef:74:b4:48:19:2d:65:
         32:ac:e3:6d:ca:72:d0:ad:e1:11:34:e3:52:16:d9:b8:72:54:
         ff:e6:43:fd:35:4a:68:5c:f5:9a:de:fc:05:41:72:f8:60:69:
         90:1e:06:68:a3:d5:ce:77:cd:da:0c:fa:70:8a:ee:9d:76:ae:
         c6:3d:d3:ec:48:80:67:f8:f4:c4:f9:99:53:e5:9c:42:2d:95:
         15:35:d5:51:24:b7:3a:ca:b4:e8:b5:8f:a0:5f:ae:f9:38:8a:
         be:b4:bc:70:99:08:a6:04:8f:52:68:47:fc:16:3f:17:f1:2c:
         8a:43:6c:9d:1a:91:e2:07:6e:17:34:11:e0:48:5f:34:57:ea:
         9e:9c:5b:f8:0e:9b:a5:df:c5:bf:4b:a0:06:a8:ba:da:a9:be:
         ce:8a:09:ed:6a:d6:63:1c:93:14:5e:df:72:dc:26:d0:53:b8:
         0a:83:87:bd:9f:a6:e6:58:da:75:da:71:ac:15:db:f0:2b:62:
         24:62:01:18:39:f6:f0:82:cb:b1:f9:51:85:62:e2:e5:31:b6:
         58:ae:63:2c
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCqAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUM4OTVSSTExMC8GA1UEBRMoQTg0MDdDNTBEMzU1MTI2OTU5NUQ4NENGMTI0M0E1
RjNBRkY4MTA3MDAeFw0yNjA5MDUwMTI0NDBaFw0yNjA5MDcwMTI0NDBaMBgxFjAU
BgNVBAMTDTZhOWI2ZjU5LTJiNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCXNWxQ8fh37bsnFYlhiAtIGhb2hWhii/mhPAe7gmTB2RejvZldByVnmHbf
zGbAWnNd4Ak1mSDRiJSeL6NJPcXP5fnQY8Ef/NtPjRTtr1THABV53716teVx6Quf
3Lc58UwuOQK2vcEskp6l8jTPTi2IksZMXNEl/wX7t/uOL2M91TliTnUjVOOCDy6m
XgQC1Pp4TChmJGuSKEZ/oUwqArkSPfW8ZALxIjtmlxJ7wb+UU7mCVImvifLBCbwi
4kFXVJpXFU/fbW1afVbsVt1ufI2iaAq0TPncA3mUs1hsvIrEnyQP/DIS10TmOCOk
akJXooAW+UscLrb91EDRIoUqPSSRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUYbfM
NC7GdlD4kII6yv9zRZ3HeKcwHwYDVR0jBBgwFoAUqEB8UNNVEmlZXYTPEkOl86/4
EHAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVDODk1L0Y0MjBDNkE0ODVEQzExRTk4MDg3QkYwQkY4QUVBMjI4L3FFQjhV
Tk5WRW1sWlhZVFBFa09sODZfNEVIQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L3FFQjhVTk5WRW1sWlhZVFBFa09sODZfNEVIQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUM4OTUvRjQyMEM2QTQ4NURDMTFFOTgwODdCRjBCRjhBRUEy
MjgvcUVCOFVOTlZFbWxaWFlUUEVrT2w4Nl80RUhBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjS8O+/HCTuigiyxTHV9MFNMJZWyNXekzr
9zoamb83xSEEEpgwqlYgfiCaBnP3U+90tEgZLWUyrONtynLQreERNONSFtm4clT/
5kP9NUpoXPWa3vwFQXL4YGmQHgZoo9XOd83aDPpwiu6ddq7GPdPsSIBn+PTE+ZlT
5ZxCLZUVNdVRJLc6yrTotY+gX675OIq+tLxwmQimBI9SaEf8Fj8X8SyKQ2ydGpHi
B24XNBHgSF80V+qenFv4Dpul38W/S6AGqLraqb7OigntatZjHJMUXt9y3CbQU7gK
g4e9n6bmWNp12nGsFdvwK2IkYgEYOfbwgsux+VGFYuLlMbZYrmMs
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:31:15 2026 by rpki-client