Error: rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
File:                     wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft (raw, json)
Hash identifier:          BsPRF2k0YtMkluLZOGrZXoJ3HyYLslQNY576gu/FFjc=
Subject key identifier:   F9:09:12:6D:15:F1:B7:A7:AC:27:06:65:82:70:B9:CE:02:07:F8:CA
Authority key identifier: C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34
Certificate issuer:       /CN=F369591CAF/serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
Certificate serial:       05C3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
Manifest number:          058E
Signing time:             Wed 28 Oct 2026 03:17:47 +0000
Manifest this update:     Wed 28 Oct 2026 03:17:46 +0000
Manifest next update:     Fri 30 Oct 2026 03:17:46 +0000
Files and hashes:         1: wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl (hash: LjSFD2zUJV7LnzeEmiuWOgpGjSRelcB4V60oj8+ZwL4=)
                          2: F43D6930A83511F0BC8A38E7DAE4EC9C.roa (hash: XTw1rTEthgk2g59vYMTm9U70mr47Am47T/ne830ENLk=)
                          3: 11B79A8857ED11F0BB37DCB6DAE4EC9C.roa (hash: LGj0TGBQ9PlzMfbB8gss/Pg+nTIpWMAk3qHnGrpm+ig=)
                          4: FD479F26078711F19A82A8CFDAE4EC9C.roa (hash: wFeP3modvmH5Mhqjv+CC64SA6dnMkJLe/UIwelKEa48=)
                          5: 03FBC8F8AE6211F0B670B7A7DAE4EC9C.roa (hash: Hero/puzDpVDLqxdHOb+QpKTo8YJgJsCdsLulnrwXls=)
                          6: 9EC7E0FC664011F099D444DEDAE4EC9C.roa (hash: T6NsArflMlR27ihl+RWlr6t/CZ4ImER2FSyy6Y2HGzo=)
                          7: 7D7FF4BEA36411F0B8DCB4B5DAE4EC9C.roa (hash: SBSFhFouBWocCQSNhqhVWZk69czQ66awyzRm3+xF0V0=)
                          8: C8304A84A21111F1A664A5D1CE1D38B0.roa (hash: ivUSpFyOs/r2dCFruezEKqFqXQ5W2nFd0bc9uCW2iwE=)
                          9: 5C4B7E90A20911F181D8BD1CCF1D38B0.roa (hash: QrdT+xqtFl3yZHpW8BeEj5Duv/p3Lz6vxX+Y5zIxp8w=)
                          10: BB921280582A11F082413EC0DAE4EC9C.roa (hash: uNGXnDI1G5CyDUQ0B2eKBb7/gWeHJujLDgmvv6LRYik=)
                          11: F8703DBCA9D311F0864DDECEDAE4EC9C.roa (hash: Oja+SAFoxpQD5GTECGpSo4HMoaVvions272/uyxavdc=)
                          12: 875E0D6EA36311F0AA6DF4AEDAE4EC9C.roa (hash: 4efvNiFyfuNVE4eXc9fh1MtJHKt6dZYGX7ugnMN6zH0=)
                          13: 7BE3DA509ECB11F0B8ED66DCDAE4EC9C.roa (hash: Yv9EYVsOa8ZtIz8yIrYaEcrbV+1DlYyUsMHPDQ29rmo=)
                          14: 3ABDEDA8C9D311F0BBC22FD0DAE4EC9C.roa (hash: fSg/sb50cK4+NHvdy1oLUkkc0MWNwOOhrIgIiKfNPBI=)
                          15: 079ED4EED4ED11F0B23179DDDAE4EC9C.roa (hash: mQiwz+Lyy5Wnp4r5beDcoqvBfm5DT/2V6ah49ZEkaZA=)
                          16: B56BBAFEA8E411F0B7F402CFDAE4EC9C.roa (hash: Bla5/qlHkrSmFTwSMnkRCjGp7wHs2L6Dvpf24nq6H+s=)
                          17: 78BA33620CAB11F19F8C1DF0DAE4EC9C.roa (hash: EfhNEtZHgHwV8LkqrvptXWv59SROsB2B1QqIwRftAKo=)
                          18: 016C59AA582B11F0AEBD90C0DAE4EC9C.roa (hash: BQmO7rUNBXqX5CcwT82RJ6WRtMVErbG+OZzMCXemw38=)
                          19: 6E002B7A582911F081D681B7DAE4EC9C.roa (hash: CTaTj5YF4V+bg4KJYXYIAmso8T3i1fhFShVXU2Snf5k=)
                          20: 7585C434A36211F0B49A83AADAE4EC9C.roa (hash: mzEcLu+I7zJJUaAnBgEPPDoKGrDo3rYdMmkKp6vkaKk=)
                          21: F5D219905CAD11F0A4E9D9ACDAE4EC9C.roa (hash: E0mIDm1W7m6U3cc2aBTow4RrHyw/dh4ay5EbgUAHlvk=)
                          22: 21D354BA576211F098BCD5A6DAE4EC9C.roa (hash: 4xF4q1aGLDqPWO/lN87jtt4mzGDncXf1cKquoSVh8Jo=)
                          23: 639B8948582B11F09C9191C4DAE4EC9C.roa (hash: bR5HPR1uB5A3pUPtLMp4f5jA1hg81oOVbLGlF7vSFUE=)
                          24: 4DF5B646A83E11F0B115F29CDAE4EC9C.roa (hash: 1I4QlyRJtH58+FmbvgaBVwb8TmvTGwmLG/FBtNGEc2U=)
                          25: C2C1572A575B11F09F7D4F7FDAE4EC9C.roa (hash: oT7LXoUtdT1Oeg52MZHLEf/CMeovLLw6njnrby9Y2rA=)
                          26: 5F59381C737E11F0AE9654A5DAE4EC9C.roa (hash: +eQGH4JWW6JBqSSbTejgVwja+jvovxrHQh1cSQUlKf8=)
                          27: 6535223A5B2A11F084BE7DCFDAE4EC9C.roa (hash: E6XUO21M1WiWOfXgXoIJnViWEjPsKZ84YPJ9VFWP2jo=)
                          28: 74513D12A50C11F1BF7DBDDCCE1D38B0.roa (hash: KImqWuGcyK/xSqlvfkitwOsE6fNi/G1Sdbv0r9bpscE=)
                          29: 9517B13E6DEF11F086048BF0DAE4EC9C.roa (hash: EnBy4oFHyBx7vgZfUV3uQ+WB9FIGDXRiwzC8lkvrLEU=)
                          30: 3075B79AA83B11F08DE4178BDAE4EC9C.roa (hash: MTFce5WtJZPL9HdIzD6xgiNe/EZ7LlPCAda85tZnCIE=)
                          31: 577E3F28B40811F0A66FB7E7DAE4EC9C.roa (hash: dQbd5fRxrAAu/Hiu4+U2Iipe1G2HBR1VErL8Q9yTXkU=)
                          32: 5BFD5FF2628C11F08702BDA9DAE4EC9C.roa (hash: 3qER9AVYL3rqbEnQkEA/pNLjhLYQCepw4beWhWdIRqw=)
                          33: 4FC9F8B0582A11F0926B49BCDAE4EC9C.roa (hash: cJA24+0QFZHgLG+qNh475FbEtKunGho9e7RUrnJHRT4=)
                          34: 1D61636AAD9111F0B6C802E0DAE4EC9C.roa (hash: BBiMtDq1924b0zXtKlwj6WdODrF5fjfJCdIU/dUthSg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAF, serialNumber=C1090D37DA9FFEEE1A9C229BAFF1190BD22E8934
        Validity
            Not Before: Oct 28 03:17:46 2026 GMT
            Not After : Oct 30 03:17:46 2026 GMT
        Subject: CN=6ae1695b-91ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:0c:6a:61:e2:01:9f:44:a9:1a:69:4c:f8:
                    7b:05:51:6e:6e:62:28:81:7d:85:17:33:35:5d:b4:
                    da:69:8b:26:bb:ab:f0:40:f9:1a:85:6e:be:1b:74:
                    44:b8:d2:71:f2:27:fb:b9:07:71:03:72:9a:bd:aa:
                    b5:83:58:47:cd:02:81:cd:d7:fd:44:eb:94:e0:31:
                    9e:77:41:cf:94:fe:3f:c8:90:5e:f9:ac:80:6b:f9:
                    d6:41:43:da:51:05:63:22:f5:c3:4c:90:50:3e:6b:
                    67:2e:57:58:f6:5f:7c:d1:12:63:56:92:3a:93:14:
                    1e:a9:f1:46:93:e1:04:f3:45:19:60:50:27:6b:89:
                    5b:f6:0a:38:ab:83:a6:47:9a:f9:47:66:0a:cf:df:
                    8b:1e:fe:20:6b:1d:5c:fc:d2:be:e6:aa:21:37:55:
                    c3:d3:ad:4c:55:58:11:9a:e2:5e:b3:69:99:c9:1f:
                    7c:8b:e6:f0:ac:b4:97:99:b4:51:70:48:a0:55:91:
                    ba:59:82:ed:fc:a1:37:c9:60:7b:67:98:a9:3a:17:
                    d5:25:bf:45:58:a8:5b:4a:ef:07:cc:13:f6:a9:9d:
                    43:83:1b:3f:71:ae:fc:9b:1e:14:bf:a3:53:a5:40:
                    1c:b8:b1:ab:39:93:58:c5:6e:c4:0b:7b:73:20:f3:
                    2c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:09:12:6D:15:F1:B7:A7:AC:27:06:65:82:70:B9:CE:02:07:F8:CA
            X509v3 Authority Key Identifier:
                keyid:C1:09:0D:37:DA:9F:FE:EE:1A:9C:22:9B:AF:F1:19:0B:D2:2E:89:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wQkNN9qf_u4anCKbr_EZC9IuiTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/3474032EC24711EDAFA6C79FF1222468/wQkNN9qf_u4anCKbr_EZC9IuiTQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:7c:27:f2:28:91:6a:5c:fa:20:f9:3f:3d:a7:cb:92:69:
         15:50:8c:43:a5:a1:c2:00:75:3e:50:4f:91:9a:d3:88:c5:59:
         b6:5f:c9:00:18:f9:28:67:1a:35:27:38:f1:b7:a6:d7:ef:3b:
         db:f5:1c:34:59:32:3f:33:f4:5f:47:1e:ef:7c:f7:12:76:6c:
         cc:3c:64:1b:bc:77:e2:3e:03:e9:e6:77:c9:52:76:2e:c8:00:
         79:99:e3:8b:07:be:38:4d:41:19:c8:d5:c2:60:88:df:7d:d1:
         7c:1b:cd:ff:ec:a6:d8:fd:5f:2e:40:f5:80:f2:13:5d:2f:4f:
         b4:3b:65:3e:87:ae:02:5f:d0:59:1f:b2:18:1f:f9:e9:54:f6:
         dc:fd:19:0d:02:b2:8b:e4:24:27:f8:53:49:8d:a0:41:36:f5:
         01:ac:6d:64:aa:88:42:06:64:c6:38:1f:80:96:03:0d:16:54:
         5a:d6:00:f6:c1:0e:46:22:58:46:7e:a6:03:d6:42:a3:5e:60:
         9d:39:f3:85:0e:ed:5a:e9:c6:58:d6:d1:e7:e9:ef:eb:75:d2:
         aa:41:8e:1c:24:ac:c7:19:cc:24:b5:38:97:96:c3:83:95:7f:
         b0:81:8d:16:22:b8:2f:6b:d2:36:3e:be:b4:01:22:6a:b1:9a:
         4b:3e:fc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:41:32 2026 by rpki-client