Error: rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
File:                     YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft (raw, json)
Hash identifier:          QYP9eWviun+LcS4R7xic0MPsf2n6w1tNS1JvcU/neaQ=
Subject key identifier:   CB:F1:58:DB:B6:83:39:C4:7B:99:72:08:92:24:E7:77:BF:78:C1:BA
Authority key identifier: 61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96
Certificate issuer:       /CN=F36A42DFAR/serialNumber=6189BF938C94C534D7843A7A034C5B6A8237D596
Certificate serial:       0497
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
Manifest number:          0495
Signing time:             Tue 27 Oct 2026 03:41:45 +0000
Manifest this update:     Tue 27 Oct 2026 03:41:45 +0000
Manifest next update:     Thu 29 Oct 2026 03:41:45 +0000
Files and hashes:         1: YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl (hash: B3g60qPuFEt8x9kMpjB14dhLmo16G+FvtIziTqHNyn0=)
                          2: 3D7EECA2A8A711EFA1D51794762E951A.roa (hash: W7jAbtCXoRcwI8Z2NvEM0UC/9LNhTC0NKo9Io5pOlnA=)
                          3: 676C625A4D6411EEBB83C7834AD9E6FC.roa (hash: iiE25Dzd3pzLzhX8ubXQvlCirPYfptGG+RIQQE+HLD4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
                          rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A42DFAR, serialNumber=6189BF938C94C534D7843A7A034C5B6A8237D596
        Validity
            Not Before: Oct 27 03:41:45 2026 GMT
            Not After : Oct 29 03:41:45 2026 GMT
        Subject: CN=6ae01d79-ea17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:f9:6e:16:cd:17:d2:d7:18:88:4e:e2:5f:
                    9c:9e:3a:a1:f4:db:c0:22:8e:91:ab:64:f4:83:04:
                    27:e8:34:3a:cb:d9:bd:6d:47:c0:d1:ae:dc:17:4c:
                    1e:6b:a6:ce:4c:13:3c:49:39:cf:59:f0:79:8d:db:
                    10:1d:50:57:b6:ee:7d:a8:62:7b:d0:ad:ac:72:71:
                    af:1e:c0:66:b8:19:30:5d:b5:da:1f:13:e5:6f:2a:
                    ae:c6:89:8a:37:d8:46:49:53:33:d3:a2:7f:73:5f:
                    2d:d0:81:71:cc:39:c4:83:cd:f0:fa:6b:57:85:55:
                    ee:0f:b4:c8:3a:cd:37:00:13:2d:d8:1e:e5:e8:3e:
                    60:6d:f0:9c:21:52:15:35:59:cc:7f:76:2e:9e:22:
                    09:ab:bf:40:a3:79:b9:74:3f:32:f3:0c:ed:45:31:
                    90:41:66:06:7d:49:2e:69:55:9a:0d:bf:f6:ff:e9:
                    f4:4c:18:b1:a6:f3:54:58:89:91:58:c8:03:55:e6:
                    8f:73:fd:a5:e0:b3:08:69:3a:65:59:e8:cb:59:b8:
                    60:56:65:6f:d2:db:13:41:08:cc:ba:67:1f:9e:0d:
                    8f:c9:8c:5d:9f:8e:66:15:14:dc:1f:ca:4d:bb:74:
                    7f:44:3a:16:c2:99:25:ab:eb:c7:3b:b6:ef:df:40:
                    68:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F1:58:DB:B6:83:39:C4:7B:99:72:08:92:24:E7:77:BF:78:C1:BA
            X509v3 Authority Key Identifier:
                keyid:61:89:BF:93:8C:94:C5:34:D7:84:3A:7A:03:4C:5B:6A:82:37:D5:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YYm_k4yUxTTXhDp6A0xbaoI31ZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/B36A9AF64D6311EE9B779F814AD9E6FC/YYm_k4yUxTTXhDp6A0xbaoI31ZY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:d8:34:1a:78:4b:f0:34:81:11:3f:02:0a:ad:19:23:3d:
         b4:c2:d7:88:b7:f1:7c:ee:47:72:95:29:66:65:88:31:c4:91:
         1f:57:74:2f:d5:a2:80:c0:ff:0f:89:8b:46:03:da:1e:a0:7d:
         a3:66:34:70:a7:2e:94:3a:a3:be:f2:8d:9a:68:03:3d:06:11:
         9a:9a:91:49:b6:a7:dc:24:e3:8f:18:eb:22:c5:d5:39:ad:b2:
         8d:99:32:cd:b5:c6:42:99:e5:aa:44:05:b0:34:ec:36:11:88:
         50:3d:53:a1:18:11:51:9c:b9:1a:3c:de:8c:37:af:1e:8d:a2:
         70:0a:33:a7:2f:5b:ae:c5:73:09:28:6d:97:be:36:5f:ca:5b:
         e2:bd:6d:ed:dd:1f:22:9b:91:50:74:0d:73:76:2f:50:48:cf:
         90:cb:86:67:b9:8a:f1:3c:a7:db:aa:a4:2e:56:14:f8:61:ef:
         7f:ec:cc:62:79:07:84:ad:ba:b4:46:22:31:31:ef:08:33:df:
         6d:99:08:b8:8e:cd:5d:ac:c9:7a:82:bc:be:7e:68:e8:bf:54:
         61:89:93:85:0d:45:2e:e8:89:52:73:8d:df:cb:c1:d5:d0:09:
         57:41:29:60:31:50:c2:33:be:1d:1e:27:d5:06:2d:62:f0:0a:
         5d:75:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 11:45:43 2026 by rpki-client