Error: rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
File:                     ByjJuEVcZZd_owmH3klB3wGMZRw.mft (raw, json)
Hash identifier:          kH/Ok+nmVmcLnKTLC4Mm2QuErmLDGC+gKTpJeUtjkN4=
Subject key identifier:   D5:2B:8E:DE:1C:0A:2C:69:33:BB:38:6C:08:03:25:B7:54:A4:B1:AB
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Certificate issuer:       /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial:       0553
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
Manifest number:          053C
Signing time:             Thu 10 Sep 2026 03:18:28 +0000
Manifest this update:     Thu 10 Sep 2026 03:18:27 +0000
Manifest next update:     Sat 12 Sep 2026 03:18:27 +0000
Files and hashes:         1: ByjJuEVcZZd_owmH3klB3wGMZRw.crl (hash: oQ6ygO6ny855rdtAa4tYUZV2pDFs45kGaD1FzUQDtJ8=)
                          2: 9884A7A6DC1611F08554FAC6DAE4EC9C.roa (hash: gWmtab9NB6YFJ1wPo16mnZTzUWphKA4gz/9pRUM2s8I=)
                          3: F67B1080078511F1A61271C3DAE4EC9C.roa (hash: DZEJ0kUrfFd+Ajbj7HFMNY2JqNwV+R+8KRQFU30o23s=)
                          4: BC91F744A83F11F090E6C7A5DAE4EC9C.roa (hash: Elm2i50rmkaGMEnrw4x6Jh8AjBNyfQZZJ8St5A5jh94=)
                          5: C8A598A47F3D11F093F96AD7DAE4EC9C.roa (hash: SX7VFRi6fja/lVzFn5u30dJTc0ojT/jkc4MDx+ibGA4=)
                          6: 317186825E5911F0BF0E56D6DAE4EC9C.roa (hash: 6apzxpSV9toddFW0ywLW65SIvt6/6D8w0xhl0KtVvGE=)
                          7: 5A6198AED59411F0985D177EDAE4EC9C.roa (hash: PE7nKz1fS34J7ek36L+PYwmWDnMXZGfg9zXwU8sOHbs=)
                          8: 1FD4E33E881A11F0B7B498A6DAE4EC9C.roa (hash: fsPwiXCwWpyl3VMVIS2dW1m76owZ/IrLRf2lMDpLzbU=)
                          9: 658663044E9D11F1B9523EEDCE1D38B0.roa (hash: N/DWLujuKv3pb5Dgqai2QU5o1RyKed2CARH+avVSMT8=)
                          10: 5C48C5E6D59111F0A35986E9DAE4EC9C.roa (hash: Q9vbh4IVguIiKXFgG//hRIq3VlksMG3g9OlCGUmxIek=)
                          11: 0CDA35DA8E4C11F0BF2C7C8ADAE4EC9C.roa (hash: FbqPhXgVxRFKRyej1hOMFhCZh8mpxY1cmyW2uqTiFs0=)
                          12: 30E1FE12A36511F09C462CBBDAE4EC9C.roa (hash: IGbqX5D5gUHKh2mdGEwDIbF4kqA4Xmhcc0VKgu4AfmU=)
                          13: 7F6EBC8C0B2F11F1904C61CCDAE4EC9C.roa (hash: jQGUKe3rg4/PLd3kSJUPsEAaJxqYjO4wUsN/Bu7W0uA=)
                          14: 36EA05F2D59711F0822F868FDAE4EC9C.roa (hash: EojrboZehKIGXK2BaidudpldxYrlMEfVrQIxHcWgYWc=)
                          15: 002215BE68C711F180D0CEFBCE1D38B0.roa (hash: v5F6X6ITuLHIHFcWFhURETKbMJ28InX1tSbdWhh89yc=)
                          16: 7023BF7ED59811F0AECA0E99DAE4EC9C.roa (hash: 0M4moWZIc1pWgW115yDoCQcKwuM3v5jTr3xkTdFI04c=)
                          17: 2CC09D9AF79B11F0B2CC95F0DAE4EC9C.roa (hash: GqpKo6qbPlIx2jVnFfAJCJZciNlgCHzuokWLGajhcgA=)
                          18: 3F8563360B3011F1952D8DD1DAE4EC9C.roa (hash: ywRwAGyvq53R6hNtJgtpMHcYkRZeZDea56O4hCBnArk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
                          rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
        Validity
            Not Before: Sep 10 03:18:27 2026 GMT
            Not After : Sep 12 03:18:27 2026 GMT
        Subject: CN=6aa22184-69d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:a9:eb:0d:42:13:09:85:00:a3:6d:fa:d3:
                    05:13:77:62:cd:93:ae:52:74:5d:10:9a:25:26:df:
                    40:4e:ed:ab:97:8d:e2:41:8d:b5:7f:40:17:22:f4:
                    13:0e:60:81:9d:c0:b3:0f:93:a5:27:d6:5e:d8:f2:
                    6f:47:58:b6:96:43:46:5d:1e:80:5c:eb:31:c5:e5:
                    b2:68:df:d3:a4:06:ef:60:63:42:00:73:19:e6:d6:
                    1b:80:3c:be:11:1b:6e:48:14:96:73:f0:2d:3e:27:
                    c9:68:72:2c:ef:d0:f2:04:10:3d:5f:02:e4:c7:9f:
                    06:39:71:19:b8:2c:23:34:80:f4:f5:57:e5:20:de:
                    8d:69:d1:c1:f7:9d:07:98:55:48:e2:e6:8a:27:11:
                    f3:1a:35:e2:1c:5a:f1:b2:e0:4c:7d:93:12:80:af:
                    8f:df:e5:96:f2:ef:e7:f9:e9:ac:a6:06:74:6a:f5:
                    22:56:86:4a:fe:54:d7:57:67:3f:91:50:fd:60:6f:
                    04:04:46:79:8b:97:6a:60:34:c8:57:51:e8:97:b9:
                    f7:53:82:cc:39:b7:0c:57:77:fe:8e:84:e8:a2:33:
                    70:b8:40:ae:49:b4:98:d5:d3:ab:c3:60:a6:10:46:
                    4d:d5:88:46:bf:40:78:5e:db:a1:d0:fa:b3:4b:31:
                    57:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2B:8E:DE:1C:0A:2C:69:33:BB:38:6C:08:03:25:B7:54:A4:B1:AB
            X509v3 Authority Key Identifier:
                keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:9a:7d:16:ac:96:2f:bb:95:a9:a9:f6:3f:ba:38:47:05:5f:
         2a:72:e1:2c:f0:24:b3:55:c9:66:1c:89:32:53:e4:01:53:31:
         ac:11:ed:76:49:f1:5f:60:55:f5:fd:5f:df:9f:1a:1f:a8:d7:
         2e:4d:d0:26:02:10:83:33:d2:86:d9:3b:40:26:54:9b:d1:57:
         22:e2:47:a3:93:d3:94:bb:e4:0e:94:43:a3:53:71:53:05:1b:
         61:f2:6a:1d:08:02:ad:7e:8d:df:e6:57:27:b4:c3:2f:cb:00:
         1e:0d:18:8a:d6:46:bf:75:d9:6c:2c:d9:53:ef:92:10:ad:fb:
         f4:6a:b9:06:b0:de:8c:77:83:6f:8c:60:e7:a3:73:9c:c3:70:
         bf:4b:27:4a:64:95:ab:f0:8f:89:60:7b:7e:fe:03:bc:d4:db:
         43:db:25:92:c5:29:c2:a2:f8:db:ab:bd:3c:93:62:b8:56:b2:
         61:6f:76:60:1b:8c:6e:fe:d3:ef:38:80:d6:81:64:c2:a8:ec:
         57:ed:37:bf:ae:f6:e1:fa:95:e2:96:d8:d2:c8:e5:14:78:58:
         0d:04:c9:27:ec:fb:94:f7:73:a7:f6:28:34:f9:cf:b7:12:92:
         15:09:f8:98:ae:66:09:99:d0:02:77:99:a0:62:c1:26:0f:78:
         ec:67:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:52:22 2026 by rpki-client