Error: rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
File:                     KVkcZVM-_QiXL0qXW-xBxltEXuA.mft (raw, json)
Hash identifier:          wVnBAL9kfhxlz48Oz1iphQvlH+Zd357elWY5Ac9B4t4=
Subject key identifier:   65:D4:F9:FE:F4:A9:44:AB:BF:DD:DC:9B:C6:21:23:17:DF:33:5E:81
Authority key identifier: 29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0
Certificate issuer:       /CN=F3670369AR/serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
Certificate serial:       06DD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
Manifest number:          06D5
Signing time:             Wed 16 Sep 2026 02:35:05 +0000
Manifest this update:     Wed 16 Sep 2026 02:35:04 +0000
Manifest next update:     Fri 18 Sep 2026 02:35:04 +0000
Files and hashes:         1: KVkcZVM-_QiXL0qXW-xBxltEXuA.crl (hash: GcvClcbJWw5YGAJ3kntDaw33wWdtis+YPQ9f+OpBWdk=)
                          2: FA488F2084E511F1ACE5B8D1CE1D38B0.roa (hash: Pd+84KPhPBsNkpBN1hVe9FHlx1CumYc3oDhGGRlaBgg=)
                          3: DE53055A2E1311EFAE851899762E951A.roa (hash: UcFSJfUBz/jAMPlBsM0sx0A7nrbCZ5eci3vzt8nRiuU=)
                          4: F05CDE6684E611F1886BCED9CE1D38B0.roa (hash: BKX3UcRCwM62AYLNiq8SzyAS2T5C7ScNOyMg7wplAWU=)
                          5: 2C82DE8284E611F19FB81CD2CE1D38B0.roa (hash: b3bTfsHITdYZ9ni2iIT1pWPRt5idzYLvZ2tzcXpea+8=)
                          6: EAF40C665BD311F0B32EE4A3DAE4EC9C.roa (hash: fL1+phnAmmLMQW8rzdMcPM0YqGLRk7qlgGhlyEQ369E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                          rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 18 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1757 (0x6dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AR, serialNumber=29591C65533EFD08972F4A975BEC41C65B445EE0
        Validity
            Not Before: Sep 16 02:35:04 2026 GMT
            Not After : Sep 18 02:35:04 2026 GMT
        Subject: CN=6aaa0059-b662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:4b:f2:b4:75:ca:ea:e4:d3:2d:32:a7:de:
                    a5:0b:84:80:e6:67:b8:07:06:ef:18:8a:9e:62:6e:
                    62:21:06:c9:e8:ce:65:c5:bf:28:26:ff:e9:a8:68:
                    91:5a:3b:f7:e0:b7:01:ff:41:18:9c:95:53:2d:30:
                    4c:3a:f5:ce:f8:e7:54:58:77:b7:b3:3e:34:8f:2b:
                    dd:92:a0:4a:0d:46:f2:4e:bc:f5:88:4a:0a:45:8a:
                    71:1a:ad:1d:2b:c6:c2:db:9b:77:23:8f:68:24:62:
                    e7:ac:95:89:c4:e6:65:81:58:2f:f8:a5:c3:76:c1:
                    ad:67:84:d3:55:a4:fb:fb:2f:88:f0:f4:c7:ae:a2:
                    11:dd:11:ab:ff:41:6a:16:e0:4a:ac:f5:28:a2:07:
                    40:77:3e:9a:27:ae:29:da:1c:62:c4:ca:19:35:f1:
                    cf:ac:de:f2:56:91:8a:a7:33:95:67:06:32:35:b6:
                    4d:7b:da:24:79:75:77:2e:ea:07:52:9c:98:9a:74:
                    d9:3a:cf:b1:92:b7:55:ba:b6:99:a1:83:06:ad:ef:
                    a0:ff:38:55:a5:35:37:e1:bf:e5:75:8b:b3:a9:b3:
                    16:3c:d4:3d:36:09:e9:0b:02:c1:15:cd:39:2e:78:
                    af:27:0c:8c:84:64:a0:f2:63:ff:4a:82:08:b0:bf:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D4:F9:FE:F4:A9:44:AB:BF:DD:DC:9B:C6:21:23:17:DF:33:5E:81
            X509v3 Authority Key Identifier:
                keyid:29:59:1C:65:53:3E:FD:08:97:2F:4A:97:5B:EC:41:C6:5B:44:5E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/KVkcZVM-_QiXL0qXW-xBxltEXuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/565052907E7811EC9FAD14CB5A40D577/KVkcZVM-_QiXL0qXW-xBxltEXuA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:4f:50:0d:33:65:32:1f:a6:ce:4f:f3:3b:52:a7:74:3d:1d:
         3f:f0:87:db:03:8d:60:e3:1f:c6:c4:db:12:37:27:a7:a8:82:
         36:21:84:36:a4:77:c7:db:fd:38:9f:9c:9e:22:43:54:cf:4e:
         36:72:cb:94:1c:fb:07:79:04:23:cb:a6:56:65:6d:2d:07:d0:
         28:c1:30:02:50:6a:71:ce:4f:73:89:ef:b4:cb:cd:93:78:e7:
         d9:2c:7e:37:03:59:b4:7a:5a:e3:8e:ce:ba:84:a8:3b:80:1a:
         08:5e:34:f3:01:0f:f0:99:12:29:1f:63:3c:db:dd:9c:9f:9d:
         aa:8e:06:a6:4d:f3:a2:9b:88:d0:a6:3a:57:1b:9b:e9:25:3c:
         7a:39:ec:ba:01:a5:4e:18:24:4f:36:91:81:27:e8:df:db:e9:
         99:55:97:2f:68:49:60:2a:35:40:36:0c:c9:f1:86:62:12:16:
         a7:18:0f:11:4a:d0:86:a2:cf:b5:35:40:ae:5d:3f:bd:36:b2:
         11:ac:09:c2:69:0a:ef:48:97:0c:f5:02:08:87:62:ae:23:38:
         2e:eb:9f:27:57:cd:ea:cc:6d:ea:c2:39:99:db:d5:1b:ae:d2:
         9b:87:7e:ea:a6:04:9c:ca:8d:82:0e:ff:fc:32:ec:a0:86:7e:
         40:e1:b3:d5
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzAzNjlBUjExMC8GA1UEBRMoMjk1OTFDNjU1MzNFRkQwODk3MkY0QTk3NUJFQzQx
QzY1QjQ0NUVFMDAeFw0yNjA5MTYwMjM1MDRaFw0yNjA5MTgwMjM1MDRaMBgxFjAU
BgNVBAMTDTZhYWEwMDU5LWI2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1zUvytHXK6uTTLTKn3qULhIDmZ7gHBu8Yip5ibmIhBsnozmXFvygm/+mo
aJFaO/fgtwH/QRiclVMtMEw69c7451RYd7ezPjSPK92SoEoNRvJOvPWISgpFinEa
rR0rxsLbm3cjj2gkYueslYnE5mWBWC/4pcN2wa1nhNNVpPv7L4jw9MeuohHdEav/
QWoW4Eqs9SiiB0B3PponrinaHGLEyhk18c+s3vJWkYqnM5VnBjI1tk172iR5dXcu
6gdSnJiadNk6z7GSt1W6tpmhgwat76D/OFWlNTfhv+V1i7OpsxY81D02CekLAsEV
zTkueK8nDIyEZKDyY/9Kggiwv8TVAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUZdT5
/vSpRKu/3dybxiEjF98zXoEwHwYDVR0jBBgwFoAUKVkcZVM+/QiXL0qXW+xBxltE
XuAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwMzY5LzU2NTA1MjkwN0U3ODExRUM5RkFEMTRDQjVBNDBENTc3L0tWa2Na
Vk0tX1FpWEwwcVhXLXhCeGx0RVh1QS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0tWa2NaVk0tX1FpWEwwcVhXLXhCeGx0RVh1QS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzAzNjkvNTY1MDUyOTA3RTc4MTFFQzlGQUQxNENCNUE0MEQ1
NzcvS1ZrY1pWTS1fUWlYTDBxWFcteEJ4bHRFWHVBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsT1ANM2UyH6bOT/M7Uqd0PR0/8IfbA41g
4x/GxNsSNyenqII2IYQ2pHfH2/04n5yeIkNUz042csuUHPsHeQQjy6ZWZW0tB9Ao
wTACUGpxzk9zie+0y82TeOfZLH43A1m0elrjjs66hKg7gBoIXjTzAQ/wmRIpH2M8
292cn52qjgamTfOim4jQpjpXG5vpJTx6Oey6AaVOGCRPNpGBJ+jf2+mZVZcvaElg
KjVANgzJ8YZiEhanGA8RStCGos+1NUCuXT+9NrIRrAnCaQrvSJcM9QIIh2KuIzgu
658nV83qzG3qwjmZ29UbrtKbh37qpgScyo2CDv/8Muyghn5A4bPV
-----END CERTIFICATE-----
Generated at Thu Sep 17 01:32:53 2026 by rpki-client