Error: rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft
File:                     SrMCua__mu6hm1ArhuhUdBElsCs.mft (raw, json)
Hash identifier:          pEPyPAoDnATsuda5ERZlD1KHvU0bIuU6g1Y5b9kKyDw=
Subject key identifier:   40:DF:42:14:DB:C9:F7:45:3E:DF:03:97:9A:4E:54:3C:D1:26:59:B8
Authority key identifier: 4A:B3:02:B9:AF:FF:9A:EE:A1:9B:50:2B:86:E8:54:74:11:25:B0:2B
Certificate issuer:       /CN=F36B1EAFAF/serialNumber=4AB302B9AFFF9AEEA19B502B86E854741125B02B
Certificate serial:       24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SrMCua__mu6hm1ArhuhUdBElsCs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft
Manifest number:          24
Signing time:             Fri 18 Sep 2026 05:50:18 +0000
Manifest this update:     Fri 18 Sep 2026 05:50:18 +0000
Manifest next update:     Sun 20 Sep 2026 05:50:17 +0000
Files and hashes:         1: SrMCua__mu6hm1ArhuhUdBElsCs.crl (hash: i84N/oy+aUIySUUu0s8K283uXmSbrMm7KF44R3Mb7yc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SrMCua__mu6hm1ArhuhUdBElsCs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EAFAF, serialNumber=4AB302B9AFFF9AEEA19B502B86E854741125B02B
        Validity
            Not Before: Sep 18 05:50:18 2026 GMT
            Not After : Sep 20 05:50:17 2026 GMT
        Subject: CN=6aacd11a-6f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:6b:ce:a1:2e:7f:c4:62:be:b4:c1:77:3e:
                    3f:96:4e:b6:fc:9d:72:40:fd:e8:7c:8f:11:53:97:
                    2f:3d:3e:23:ac:83:84:f0:6a:3f:80:20:bc:97:7f:
                    b1:81:55:4d:4e:92:fc:14:91:25:17:26:85:e1:4a:
                    0f:fb:06:f6:fe:69:66:f1:3e:0c:42:e6:69:ed:70:
                    2e:b0:fb:a9:3a:a3:c8:9a:fe:bf:5d:b4:1e:4c:4f:
                    3d:6c:16:90:85:a6:9d:9f:e7:31:3d:40:50:7d:f5:
                    33:d7:7c:b0:c7:9d:c6:f1:3a:94:3a:6a:6a:75:12:
                    81:05:84:07:c7:0b:a6:90:33:c9:50:b9:f4:72:0d:
                    ec:b5:85:65:2f:78:07:7d:6e:7d:d8:26:c2:72:0b:
                    fe:c4:39:01:02:5f:a5:67:b0:ce:17:74:aa:c6:77:
                    7e:31:c4:9c:f9:02:9e:e0:af:d3:5a:de:71:1f:03:
                    e5:b8:d6:f7:76:65:b8:94:b3:4f:cd:6a:1f:12:2a:
                    79:36:a0:63:4d:0c:23:3e:03:83:fe:5b:30:2d:ad:
                    41:ca:9e:97:ad:93:28:77:eb:a9:e9:88:50:1d:33:
                    4b:a2:cb:cf:c9:21:96:43:c5:e9:2f:3b:67:8b:b4:
                    c0:be:7b:e5:0d:e1:7c:cf:55:70:b8:ab:b6:13:8d:
                    e0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DF:42:14:DB:C9:F7:45:3E:DF:03:97:9A:4E:54:3C:D1:26:59:B8
            X509v3 Authority Key Identifier:
                keyid:4A:B3:02:B9:AF:FF:9A:EE:A1:9B:50:2B:86:E8:54:74:11:25:B0:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SrMCua__mu6hm1ArhuhUdBElsCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EAF/916FDDA897CA11F1BFFCFCC3CE1D38B0/SrMCua__mu6hm1ArhuhUdBElsCs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c7:a7:ee:1e:b4:c4:1b:6a:e4:8b:ef:0a:9a:75:f7:09:f9:
         85:70:7d:4a:4d:1b:cd:09:c9:70:2d:a0:40:5d:be:03:08:76:
         0b:37:24:64:ec:50:85:b2:b4:17:5a:9d:ac:ca:ee:a8:9a:6f:
         ef:20:9e:21:3b:0c:33:08:3b:54:5f:52:88:b9:4b:2d:f9:3f:
         11:2a:a8:ce:02:f7:02:4b:f8:50:16:db:33:9e:74:a9:a1:49:
         58:2a:86:00:ea:37:80:8e:19:ba:2a:35:ae:90:95:1a:9f:2e:
         03:58:fd:ef:c4:66:ca:a6:6f:eb:0d:55:c7:3b:94:78:83:6e:
         57:82:8a:74:6e:80:77:ea:a8:11:15:58:5d:53:d2:7e:c9:1e:
         a8:24:b1:b6:4a:95:49:f4:84:20:99:6c:f7:08:05:52:14:fe:
         2c:a5:45:b1:89:b8:26:2a:6c:0e:f9:60:92:bf:18:14:35:39:
         7a:95:e9:cf:01:46:50:1e:4c:a3:dd:18:55:d4:7e:49:fb:cf:
         e4:3a:d5:0a:0d:c1:be:73:35:a9:3e:19:a6:ad:40:d8:33:23:
         a3:1e:01:7e:a7:62:45:ee:81:01:48:d9:ae:91:c5:43:58:20:
         34:58:c0:10:d5:c1:33:bf:2b:88:40:d9:ac:a2:d5:be:61:6c:
         38:ae:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 13:06:04 2026 by rpki-client