Error: rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
File:                     PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft (raw, json)
Hash identifier:          S9V68jflvCuUP6/7oNGEp8uDg4l+VbRLJDwjKLAgg60=
Subject key identifier:   01:F1:6E:9D:33:C3:37:C2:52:82:72:A6:70:F8:7A:22:F7:50:A4:DC
Authority key identifier: 3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B
Certificate issuer:       /CN=F36886B3AF/serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
Certificate serial:       05B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
Manifest number:          057F
Signing time:             Wed 30 Sep 2026 03:16:53 +0000
Manifest this update:     Wed 30 Sep 2026 03:16:52 +0000
Manifest next update:     Fri 02 Oct 2026 03:16:52 +0000
Files and hashes:         1: PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl (hash: Zn96K4waz2nrNmLZFZXVMNLVuijOCqijxgm0g2Q6p4Y=)
                          2: A3918A548C1C11F19273FED9CE1D38B0.roa (hash: hF2dEVZkD0Ggf+lQuG/vPMQF/5HRXVpdinwiBOpx39s=)
                          3: 34264AD8164711F1B352B4F1DAE4EC9C.roa (hash: klCDYvFVBjZ3oiEdBt07KN4j6VYueC0votUF9VvFxWo=)
                          4: 4D0338788A9511F184230300CF1D38B0.roa (hash: t9IRq+toZsXNBmaE+ZpRm1vEIhItOa5ZwQgpCblZhzI=)
                          5: 3CBEB5CE164511F1A59262E5DAE4EC9C.roa (hash: OG1AZjOphf+scFlo1ouZYzEDVGkXMX/NrBYlcyp5+6U=)
                          6: 8AC4F086164911F1A8774280DAE4EC9C.roa (hash: TsEXsAOb1P1Z9SBrBAp6WkxB87bKGdHI81a+X5aibs8=)
                          7: 58036B02164211F188DEC5D4DAE4EC9C.roa (hash: qBvs+zBtSWZ2syrfcr2Sybpe86KxjWYVw0mHSHIH5u4=)
                          8: B39CD71E8C2111F1BC117FFACE1D38B0.roa (hash: h10DexEobmdM4gW17VPgUNBUXUHclUvgqVJ9JTvZJTI=)
                          9: 7D919404164511F18A849AE5DAE4EC9C.roa (hash: Arm2hMJT3U6HXbhseUSybg4jmYI715/aw8K4eS7R4LQ=)
                          10: EF38CCF8164511F197C88AE9DAE4EC9C.roa (hash: 3Od/gwdm8Wl29GBZU7GWEUTDGRNRpY32PEFWtqP1X/M=)
                          11: A06E66B0164911F19FC75D80DAE4EC9C.roa (hash: zQG6NBde7f60yejhCyQCfywn4EgQqwkyQn47sGDO1nM=)
                          12: 9CA81DC2164511F1A1815FE7DAE4EC9C.roa (hash: Sb/v0PBhIkOqNzHtr0zcsQuWwyO6uld2vdtueV+uHWo=)
                          13: 6127A85E164911F198970680DAE4EC9C.roa (hash: lvJbkV9iOualn8rIcX9xHM4+DO+zDl5ClBfAxui6rfA=)
                          14: D3889C5416FE11F1868C37DDDAE4EC9C.roa (hash: e9aj0AyfiLUBHA5SdIZzslx9F5Gw9A9kMebTQ3dTtAg=)
                          15: 365143168C1D11F1883C10DECE1D38B0.roa (hash: /Uc5b7yoavZNs+iYDnoEsqLI1Tv+J/339qlE9yuicL8=)
                          16: BE851408164111F19290A0CFDAE4EC9C.roa (hash: 09vsbYIiJwzWVsF7G8Ziw4EcwesZAX6sNWXeTtzD58A=)
                          17: 65BA9240164A11F183199984DAE4EC9C.roa (hash: 0PpnjPDEZX2Uyo4ELJgCnz4oxks68BGasobjbPLelzY=)
                          18: 0C01B516164611F185CEA9E9DAE4EC9C.roa (hash: MmsGyXA8xUkCHxnXraWAox4Zhvs8Iq+PCNsjK9YBGY8=)
                          19: D380DA288A9411F1976AF7FBCE1D38B0.roa (hash: uTjYz9/X9gCbOTJlU7RYAGsETCEB37t1llBGHImuB9g=)
                          20: F50135428C1C11F1924B01DECE1D38B0.roa (hash: Js+BheTI1SaXbPkJrEShKicPgauq6Ja+ijmKK3wgL58=)
                          21: 220602C48A9311F1B633AEF3CE1D38B0.roa (hash: gFjavoDJQPcxCaRNT4k544rzazhj6zhLdZAdXbkDoUk=)
                          22: 49A743C4164911F1A002F37FDAE4EC9C.roa (hash: 6ziOXL7xTMB7y5RXWLYaaIXiB3GajxxgogmWFu6io7s=)
                          23: 2CFC017C635311F19D993FE1CE1D38B0.roa (hash: V7H3wtUO2XKKRWwYHk9LANumJZEQooTT5n654l3o9Ow=)
                          24: 2CB9DC088A9411F19A99A4F9CE1D38B0.roa (hash: oaKBGoRMDwTNiV9HPdcfvbUfbqccc1dM936/D4gdD4k=)
                          25: 7A0D547C164411F1BEFD3EE1DAE4EC9C.roa (hash: 1yqgoCPv+tTcS1c+xWc3aFjlpsc66OUaItf6n/p3XP4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1458 (0x5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AF, serialNumber=3D6ED905037C83C573780B0CCDC70D5D8CEF038B
        Validity
            Not Before: Sep 30 03:16:52 2026 GMT
            Not After : Oct  2 03:16:52 2026 GMT
        Subject: CN=6abc7f24-a557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0e:1d:e6:c9:14:d3:3e:9f:5a:de:e2:1b:3d:
                    1d:95:fc:5b:b4:9d:dc:b0:ce:28:ea:1a:0a:1d:ca:
                    b4:5d:8a:e8:b2:5c:ee:7f:82:69:5a:85:e1:0c:e0:
                    93:12:2d:f0:58:ab:c0:97:11:85:ad:c1:15:0a:45:
                    4e:00:96:eb:39:f1:ca:26:8a:6d:9d:2f:43:3d:ca:
                    b2:5c:c3:b9:98:08:d8:f5:9f:8c:1e:6a:7a:b9:09:
                    9c:83:82:9b:cf:06:5b:a5:2e:39:13:2b:8e:a6:e5:
                    f0:7a:2d:b4:ce:d5:d6:fa:01:2e:3b:6a:60:22:ef:
                    39:f6:4e:05:bd:22:65:22:3c:c2:57:be:44:c4:4a:
                    56:2d:c6:e7:f6:df:3a:c2:7d:6d:5e:c1:11:cb:02:
                    e2:ad:4c:0e:80:d0:c4:bc:a3:ca:34:73:e4:e2:2d:
                    ee:c1:7f:0e:5a:26:b6:92:5a:5d:b0:13:1c:88:c4:
                    78:3f:51:aa:61:7b:0e:f9:c7:4f:b7:b4:b2:4b:a7:
                    c4:dd:e4:29:29:09:ff:d7:75:00:9e:a9:9d:e9:15:
                    7a:af:1d:e9:9d:38:b0:33:d0:a5:63:77:bb:9d:c6:
                    4a:6d:ff:af:0a:39:32:12:96:ed:a9:f6:63:86:d1:
                    4e:51:e7:b5:71:43:72:4a:75:d0:9e:cb:00:23:f2:
                    42:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F1:6E:9D:33:C3:37:C2:52:82:72:A6:70:F8:7A:22:F7:50:A4:DC
            X509v3 Authority Key Identifier:
                keyid:3D:6E:D9:05:03:7C:83:C5:73:78:0B:0C:CD:C7:0D:5D:8C:EF:03:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PW7ZBQN8g8VzeAsMzccNXYzvA4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/3535CA1AB8EF11EDA9B341DAF1222468/PW7ZBQN8g8VzeAsMzccNXYzvA4s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:bb:3b:d0:51:54:b6:38:9b:f4:6e:66:d4:49:b5:06:de:c2:
         ee:7d:ed:3b:58:de:62:2f:0d:f7:cf:3d:c7:54:49:aa:f6:b9:
         25:66:b4:52:62:88:71:fe:93:a3:52:e3:8c:99:94:50:1a:c4:
         29:8c:1a:55:b0:63:6a:0b:6d:79:25:86:23:90:2f:c9:65:ab:
         1b:c2:7a:bd:17:62:c6:18:29:9f:e8:4c:1e:1b:20:72:05:d4:
         03:52:c0:98:44:ec:70:d2:b2:b9:ec:c9:f8:91:dd:79:08:1b:
         83:0c:2e:5f:26:bb:9e:92:3e:2d:f1:98:9d:50:19:ae:56:85:
         0c:e3:fe:0a:9f:eb:75:62:dd:8a:9d:7a:57:d4:0c:32:45:fb:
         9f:e5:41:46:5f:02:cc:5b:59:2a:c9:a2:a6:5c:b3:6c:b7:db:
         48:09:75:48:43:c6:80:12:88:3a:d4:0b:3c:95:8a:07:e1:c9:
         1c:16:f2:9b:9f:11:e2:b2:66:b3:62:35:ba:c5:0e:fc:17:20:
         69:99:b9:41:b3:1e:6a:04:e7:27:0b:ed:96:19:f4:0e:da:97:
         a3:c9:56:01:b2:09:be:ff:1f:d6:8f:61:e4:4a:db:e9:7f:de:
         80:c0:a0:b2:f4:fd:23:ba:0e:78:0d:0e:c3:d8:c0:c8:86:54:
         e4:c5:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:40:52 2026 by rpki-client