Error: rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
File:                     2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft (raw, json)
Hash identifier:          ye2VBd6uEPnK15ftNxzA5vP98Ja6YLFqDxsp+f0seJA=
Subject key identifier:   05:86:BB:CC:EB:F9:69:AD:2F:5F:D1:FD:E2:CA:FC:87:84:CD:AE:3B
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Certificate issuer:       /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial:       05C2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
Manifest number:          058B
Signing time:             Sat 03 Oct 2026 03:16:06 +0000
Manifest this update:     Sat 03 Oct 2026 03:16:05 +0000
Manifest next update:     Mon 05 Oct 2026 03:16:05 +0000
Files and hashes:         1: 2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl (hash: 5nIjHg/bLnDdLkJWt5XXQb1KSWhTL5DU41Dfpc4iO+4=)
                          2: 65C358568A9111F1ACF111E9CE1D38B0.roa (hash: JaU5nH8aptEvSi4nGdjy1c2XIZ9FUS2u9voNPYY/cdY=)
                          3: 01F4B7DC164911F1AA82037CDAE4EC9C.roa (hash: SJBq2f5PEAQ7jMq2RDwqV4pd3LXt7LixkprBqHneLz0=)
                          4: 86664F868A9211F19A6099EFCE1D38B0.roa (hash: rIungNY5EVspbMIGcy76MQ1oYEJ0edvK146736oLfvE=)
                          5: 6D3EBE72164711F19F64E7F1DAE4EC9C.roa (hash: yLI6smy3lVo+VEqO6BS2sNIl22GUPaCfOV/LStarXLY=)
                          6: 15D6A7D4164811F18DF4F4F5DAE4EC9C.roa (hash: 14smMykXcFq93duH/vGIC38LPO0s9E/b96sonJX6BGk=)
                          7: 6FF913CA16FF11F1A85261DFDAE4EC9C.roa (hash: iQniiQsV4FPnDcQIFs8/PL97KT4obDA4lMn2n96y9AE=)
                          8: AF498724164811F18B4BC67BDAE4EC9C.roa (hash: 4CjEu1vpm+wP9BTwYGqYW9uzMDMzsV6XNuV1HbMfl9g=)
                          9: 76FBD6B0164311F1BD56F3DADAE4EC9C.roa (hash: Gj9pS0NU6aD4F5/RLKRtgqvJR42xaOuVLePBdK86QyQ=)
                          10: 112931EA16FF11F189EF5EDDDAE4EC9C.roa (hash: ZgZBnTWvmwDnOvNrILpi9EmkaK0Jj9X9JXHSy8EVaWA=)
                          11: 61C5A06E164811F19DC45379DAE4EC9C.roa (hash: OTKMR3kuYYZvbI08rUILdh06l0vzSxxr/G4T2Y9Nw7o=)
                          12: 005F57B0164411F1BAFF55DDDAE4EC9C.roa (hash: FNAoTrUV+u0/qrkFEdnS32oasDVOtwHwST38Ns3Twkw=)
                          13: 4C318CCA164A11F19A859484DAE4EC9C.roa (hash: Fi5vn1JhkR8Vqf8Cp06SqG2EQ+vwVXe6FRuFoKYg4pc=)
                          14: F5CC513E16FE11F1952149DDDAE4EC9C.roa (hash: ewGQNs4bpNDJfZJL7/NDfboXQleDBS/jOqXleweJ0Ow=)
                          15: DFD2B32A164811F1831AF77BDAE4EC9C.roa (hash: x3mxEyaa11oMqg1KAkOGBWsSUvRy6oN81BPBKnojwr0=)
                          16: 02FCDA2A8A9211F1A51C89EBCE1D38B0.roa (hash: kaE23hHrEaGcX+JU9kKbhbl9cGhGBvp+953IjP3cM7s=)
                          17: 8B5CC092164811F191889C7BDAE4EC9C.roa (hash: lSB9/WEXqq3+A7EAEzssfuCjG/BvQRzkvd1f1Gn35v8=)
                          18: AAC6E05E8A9011F18378F7E4CE1D38B0.roa (hash: JIjslw1y4PxMG8w0bVuRsS73DTXnWqqEjqzGJCLK+DY=)
                          19: 2E2D703A16FF11F1AE9583DDDAE4EC9C.roa (hash: +XqUdRwBEEbCB2RNCdbzmLthsuLaA1iKWwIhtLwPD8M=)
                          20: 475E0D62164611F1865584EBDAE4EC9C.roa (hash: gVZ9dFpQtlyacvHFfLqr5zzatWzgyOJrPVlqDGNVe6g=)
                          21: D3BA0E0C164411F190617BE1DAE4EC9C.roa (hash: I6gL9OWppOVojAbbO/0MhbpSXxWSJ/sKvKIETher/Vk=)
                          22: 0B19DF248A9111F1A2F431E7CE1D38B0.roa (hash: vhoxmYwsSQulDdm74mm4Hcep+k5eg56/9gWsR/B37S4=)
                          23: D40A53188A9211F1888E83F1CE1D38B0.roa (hash: 7JtghGAE7gng9Fkb6j1avA8wH4Ce7zgj/HHbwH7T4RI=)
                          24: BAD1C0B2164211F1A5140FD5DAE4EC9C.roa (hash: LrKfPDaa2A9ec4OA/JYHGSq5CzhJGUqJ1ollvsbr8wI=)
                          25: 4F2349C6164711F19BD3C8F1DAE4EC9C.roa (hash: t/sQT9zOtUxK/aumZF4eGuu6FrtnQZBtft6dvkz36IM=)
                          26: FE1B57A8164611F1BE809CEFDAE4EC9C.roa (hash: Ve3RCW/q/y2pFA0BJHu2+tRYVuEEJVi+vVpApROhl0c=)
                          27: 20E578B6164911F184B5D47DDAE4EC9C.roa (hash: GjT6tvvAwcdiXjyTcs5xoFxiRyrpZUNEZqRr7lISbHE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
                          rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 03:16:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
        Validity
            Not Before: Oct  3 03:16:05 2026 GMT
            Not After : Oct  5 03:16:05 2026 GMT
        Subject: CN=6ac07376-7f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:d4:d2:4f:d0:f2:50:02:73:fb:01:33:40:
                    d9:f7:2f:e7:f3:9b:82:9c:2d:89:2c:ca:89:70:bb:
                    89:e1:2d:e2:38:c4:bb:ae:e7:58:31:04:b5:7a:87:
                    5b:3c:99:eb:67:1f:5a:f7:59:03:02:80:16:99:f3:
                    9d:ad:34:6b:4d:4b:73:a9:d6:22:69:dd:52:d3:14:
                    27:1c:5c:1b:6e:fe:6e:4a:5c:52:98:3b:48:9b:2d:
                    8e:80:ec:a1:0f:f2:d3:bd:82:c5:52:d5:20:6f:8c:
                    d0:00:50:12:d3:40:99:16:a3:bb:7f:de:ee:37:a2:
                    36:28:4b:37:a4:98:4b:be:a8:47:a2:a1:92:a0:63:
                    33:4f:fe:e3:38:d2:14:d8:72:c0:59:ed:64:84:f6:
                    11:27:17:a9:3c:ae:90:64:21:f0:64:c8:80:bf:6f:
                    f0:1e:7e:92:76:18:e7:00:76:97:1e:3b:78:ad:48:
                    60:97:55:8a:37:f0:db:ad:4e:25:ba:95:67:95:b4:
                    79:4f:a1:ba:82:a4:72:1e:c3:5c:b4:45:f1:8b:17:
                    c5:d9:d6:c4:d8:24:3c:84:f5:4c:05:39:ad:26:19:
                    84:b9:e8:44:23:b3:5d:d1:94:3e:dc:7e:6e:17:70:
                    40:7c:f2:01:44:7c:8d:04:1d:f6:20:6c:32:2a:f7:
                    85:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:86:BB:CC:EB:F9:69:AD:2F:5F:D1:FD:E2:CA:FC:87:84:CD:AE:3B
            X509v3 Authority Key Identifier:
                keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:93:e6:6d:d9:bd:c6:8a:48:11:40:06:17:e4:5a:27:0f:bb:
         c6:db:6f:a2:f9:f4:88:f4:bd:ea:93:32:ea:3a:32:36:8c:3c:
         e5:52:51:2d:39:54:bd:d3:0e:48:31:f6:22:de:4f:8d:7d:a1:
         91:29:c9:0c:f8:91:45:e1:e3:78:93:d9:27:26:aa:58:7f:e4:
         bb:7a:af:4f:df:08:a0:b2:01:e4:c9:ec:bf:c9:3c:cc:23:5f:
         fd:05:d0:fc:9c:1c:91:1f:ba:29:35:3f:90:9c:05:2d:f2:e2:
         27:38:c1:02:83:a8:a2:50:b9:15:48:57:59:82:b7:19:e6:7e:
         9c:9b:f0:26:8c:70:02:6e:90:d7:ed:02:c4:9b:79:e0:6a:bd:
         65:7e:cb:02:13:18:f1:bc:39:86:60:03:7a:dc:9c:70:36:26:
         28:42:11:ac:46:d3:ed:33:a2:d2:b3:ef:92:bc:93:4a:7e:87:
         7f:39:3b:8f:7e:47:91:18:ad:84:d3:05:01:ba:bd:d6:94:c6:
         c6:ed:6b:e8:96:20:26:f2:9b:0b:54:a1:4a:8d:bd:62:17:90:
         ca:da:80:1c:77:ec:63:32:6f:b7:0b:0e:11:5b:4f:95:1b:50:
         51:b0:b1:d1:47:d1:cd:0a:9e:86:4f:33:6f:d9:24:46:b2:29:
         50:5f:ca:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:39:16 2026 by rpki-client