Error: rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
File:                     DcakyCEJ_yyznB0aWMOOMDPFoP4.mft (raw, json)
Hash identifier:          G2UI15yngybL74kjIqU0Opd98kyn6yQepMnDcqkxaNk=
Subject key identifier:   7E:02:63:C9:FF:14:15:20:15:C5:58:D9:35:8F:FC:56:8C:94:58:EC
Authority key identifier: 0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE
Certificate issuer:       /CN=F36877BBAF/serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
Certificate serial:       03D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
Manifest number:          03BB
Signing time:             Sat 24 Oct 2026 04:13:38 +0000
Manifest this update:     Sat 24 Oct 2026 04:13:37 +0000
Manifest next update:     Mon 26 Oct 2026 04:13:37 +0000
Files and hashes:         1: DcakyCEJ_yyznB0aWMOOMDPFoP4.crl (hash: RYzBdCAlchKyZ+oEUjGTwz9qSqdOlBSqxZZkt8qjzas=)
                          2: D36F9FC09E1211F0966632AEDAE4EC9C.roa (hash: bJSVRApPrsDM0DOSvCfvAqU85OY/qAv2av1QekfCggw=)
                          3: 840BAFE4D5CE11EF9F26DD77762E951A.roa (hash: sKdcVkYo4xUul2xhcopwWLTEZ0Coub2IAaU4zBm9Qoc=)
                          4: 5391E35A514E11F0B3FBEA9BDAE4EC9C.roa (hash: FgqtDyexUlItVpAKSV/WBoPJSeqrXF4SEH2sFDGm9KI=)
                          5: 44F7A312514D11F0BE5B7493DAE4EC9C.roa (hash: JjfCaY/DSyk/x0PG88+ivHyCCCQmlDsXI+ZkbsOp9Bk=)
                          6: C4B25498D5CF11EF8B385380762E951A.roa (hash: c0lIUY0MI/RJ9MopAqogt6LcUcP2aw6oEoJwJbuApDA=)
                          7: 7DD153FE514D11F0A35C1C97DAE4EC9C.roa (hash: 8bWJ3tM27kTbYQCS7pka2UKCEjGC//pzMPNEA8dwKMk=)
                          8: 7B24675800F311F18E4DA8EBDAE4EC9C.roa (hash: gxOS892rWa//UdGze2bCZeoQIzTnFobyOT8pCY9k+UM=)
                          9: F28EE676D5B911EFB1FFC972762E951A.roa (hash: EzqsSk1Co9k9NgSov+FZr7H05V+t9uoO/FrO5hKwcOM=)
                          10: 23D3EB78D5BA11EF86DD9F74762E951A.roa (hash: G4Ai8yoQfjwUNFDDrcLjtsPrrCfGiIRKwRB24pEHxY8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 983 (0x3d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36877BBAF, serialNumber=0DC6A4C82109FF2CB39C1D1A58C38E3033C5A0FE
        Validity
            Not Before: Oct 24 04:13:37 2026 GMT
            Not After : Oct 26 04:13:37 2026 GMT
        Subject: CN=6adc3072-15c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:8b:9e:e7:c5:a3:dc:a2:7e:8a:60:79:0f:
                    75:a8:3e:49:0d:62:27:d9:e6:c7:1e:4b:9a:dc:6e:
                    c6:cd:58:48:a5:13:a3:e5:99:e1:28:f5:c4:e8:96:
                    c8:4d:4a:0d:01:13:97:f3:cb:dc:5e:ea:d4:7d:2f:
                    b2:eb:9e:15:94:ce:30:12:c7:86:fb:58:b9:d0:1b:
                    26:ee:53:a6:18:69:42:c6:09:50:8e:e6:e7:bd:30:
                    b9:3c:e1:8c:1a:23:b0:35:9b:7a:3c:2e:b9:48:bc:
                    23:c5:51:8e:32:0d:6f:8b:4f:ee:68:21:9e:41:7a:
                    3b:2f:81:a2:7a:0a:59:50:08:6e:e4:b2:58:f7:7b:
                    69:4a:6e:2a:08:f0:9d:1b:30:d6:3c:e0:55:22:14:
                    57:8f:55:9e:a9:40:d7:e0:5a:7b:45:a1:d4:ba:a5:
                    ec:17:e2:69:c3:da:86:47:08:f8:68:8d:26:2b:a7:
                    25:00:a7:56:7b:01:83:80:aa:f0:d4:bc:60:9b:85:
                    a3:0b:ad:5b:a0:6e:aa:42:fd:80:f2:16:8a:4a:a1:
                    2f:7c:e6:e4:11:55:e2:41:5d:00:a2:1b:ea:e6:ac:
                    34:73:83:90:02:7e:3f:2d:88:e6:b4:aa:31:be:ae:
                    2b:44:57:2b:f6:e8:6b:54:48:c6:b9:69:74:34:3d:
                    68:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:02:63:C9:FF:14:15:20:15:C5:58:D9:35:8F:FC:56:8C:94:58:EC
            X509v3 Authority Key Identifier:
                keyid:0D:C6:A4:C8:21:09:FF:2C:B3:9C:1D:1A:58:C3:8E:30:33:C5:A0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcakyCEJ_yyznB0aWMOOMDPFoP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36877BB/3887CD041CF711EFAEF87C1E7DDC24C2/DcakyCEJ_yyznB0aWMOOMDPFoP4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:b7:f9:ed:ce:af:2a:ec:7b:8f:5e:30:fb:05:c6:9b:2b:
         9e:88:d9:38:90:0f:9d:54:13:c9:f3:f2:16:5f:7f:bb:1e:27:
         5e:9c:2f:33:c8:d9:f6:0d:f4:d0:6a:8f:80:45:e4:0f:59:12:
         18:dc:7d:8e:df:ea:ea:51:47:c6:b2:14:05:c7:02:e7:26:83:
         cc:d6:b1:44:b1:57:17:ac:a6:de:2d:b3:58:99:b3:f1:a0:fc:
         4f:86:2c:de:d3:25:4f:39:a9:ca:e3:d4:39:45:f6:c7:70:17:
         eb:1c:38:28:2d:f4:65:48:be:40:30:ab:d9:5c:8b:fc:94:b7:
         d6:26:9f:4c:7e:2e:ee:53:80:43:48:42:83:1f:4c:76:12:91:
         e7:1b:a8:7c:33:90:f2:e1:7d:e6:28:db:44:d2:6d:50:f7:6c:
         b2:69:d3:22:3c:2c:60:c9:94:49:63:f5:db:43:6a:45:4e:7b:
         43:a6:3c:c1:90:18:8f:ac:c5:f3:87:73:b6:3e:99:8a:c3:1f:
         59:9d:40:09:5e:79:fa:61:61:f1:46:6b:95:70:01:fa:3c:fa:
         60:ed:3b:c9:6d:0e:e2:fc:aa:5c:37:03:1c:3c:ca:e2:b2:65:
         78:10:bb:74:a4:b3:7d:94:1d:d0:1b:b5:ea:6c:6b:8f:00:c9:
         73:de:ed:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:38:35 2026 by rpki-client