Error: rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
File:                     60qJySS6F_Dpu5lYNPUjWoYZtHE.mft (raw, json)
Hash identifier:          1jrsK3nTvy7ijNmzC3wJ5UlnzoVspIDHeVwJtez1b4w=
Subject key identifier:   4E:6F:71:9A:64:4B:75:A8:AF:3F:F0:04:FB:FD:DE:D4:8D:FA:E1:94
Authority key identifier: EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71
Certificate issuer:       /CN=F36B5EE7AF/serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
Certificate serial:       01BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
Manifest number:          01AE
Signing time:             Thu 10 Sep 2026 05:01:33 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:32 +0000
Manifest next update:     Sat 12 Sep 2026 05:01:32 +0000
Files and hashes:         1: 60qJySS6F_Dpu5lYNPUjWoYZtHE.crl (hash: NXi+bdPy5RrK2G9PyA6jJpmVWz+MjWpLJHeHmdeaYKE=)
                          2: CDDD6EBC9FA511F18196C91DCF1D38B0.roa (hash: xge/n2kJncJZmLgblZqf4l8lnDWBnn0jczEVI2pEAJI=)
                          3: 20630D049FA611F1995C501ECF1D38B0.roa (hash: JhYhKmI5GODnNurventhICsk25X3A9B8WorGrCRrC2c=)
                          4: FBC8BDB89FA511F1AD60E81DCF1D38B0.roa (hash: g+Cyxl3GP7s9I0cq0IHFVLdb518alvat429lkTlvqQs=)
                          5: B4B36A2E9FA811F1BE286CB0CE1D38B0.roa (hash: oVG5G1kBtbTPNRukpM1qGRpYEENTAwqDx3U3BjtEKHo=)
                          6: 129948809FA811F1A7EF49ACCE1D38B0.roa (hash: N4nEZtBTkM1SOciV0TfCwkWUPzDRHw09DLkdtyiUNio=)
                          7: 689BCBC49FA611F18785A4A3CE1D38B0.roa (hash: GrTFvD5ck1p6X3BR7eFe20Kng1p0TJg/D37vlWK0ZH8=)
                          8: BAF999E69FA611F1A500E1A3CE1D38B0.roa (hash: aV9FiklXCd8gQFnELSpe+SYak8Dl2un61ShGI8iNFrs=)
                          9: 443868DC9FA611F19908A5A1CE1D38B0.roa (hash: C1U6Wl6ewW/3tiJCP8CLW9EkGOWkCp+qYa6Suj5NV9s=)
                          10: B2FE915A9FA711F1806425ACCE1D38B0.roa (hash: sSgssLn1kZB+wHJmWWTYjTwP+BvQpVgLL7TDV51d7qo=)
                          11: 950608329FA611F184EBCDA3CE1D38B0.roa (hash: NkFXi8XY+M6T1pOp4ZAFkXHDZUC7x0u7xtiWPDbN7wI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AF, serialNumber=EB4A89C924BA17F0E9BB995834F5235A8619B471
        Validity
            Not Before: Sep 10 05:01:32 2026 GMT
            Not After : Sep 12 05:01:32 2026 GMT
        Subject: CN=6aa239ad-9354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8b:fe:ed:2c:61:5f:eb:a4:0e:b9:dd:ed:be:
                    86:b0:be:28:c3:87:f1:ca:46:15:a9:8c:e9:25:ab:
                    ec:30:89:8e:fe:37:63:80:c6:9c:b1:0c:d5:b2:82:
                    78:95:75:63:2c:e5:af:2e:0b:69:7a:e1:1e:78:dd:
                    1a:ae:c0:d0:77:58:d6:24:22:84:ff:b5:aa:19:c9:
                    ed:f4:60:18:1e:c2:5b:83:c7:da:c6:a8:e9:6c:b0:
                    5c:26:a2:7e:3e:46:9e:26:1e:cb:d9:6f:7e:fb:0b:
                    47:2a:8a:fc:13:10:92:cf:aa:5d:81:dd:5c:be:1a:
                    08:3c:d4:a2:69:8c:e9:a2:39:f8:89:d6:a9:25:b7:
                    bd:26:e7:7a:31:52:d0:12:a4:c3:46:32:98:98:22:
                    1b:f7:e1:66:10:31:1c:6e:f7:bf:66:f1:71:58:4b:
                    7a:b8:5e:43:bb:0c:7a:d1:01:5a:e5:0c:b9:7b:55:
                    97:cb:9d:5d:5e:ae:57:5a:5d:62:3e:04:5a:13:0f:
                    9f:2e:eb:26:b7:5f:0f:af:a0:ae:2d:70:b3:c4:20:
                    92:d6:a9:6a:29:45:59:7c:b5:91:60:97:47:30:43:
                    34:04:77:54:14:7a:58:96:08:56:cf:c9:b7:03:a0:
                    b6:e3:d8:fb:a0:a4:16:c1:84:ae:a3:0f:f7:ec:84:
                    fa:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6F:71:9A:64:4B:75:A8:AF:3F:F0:04:FB:FD:DE:D4:8D:FA:E1:94
            X509v3 Authority Key Identifier:
                keyid:EB:4A:89:C9:24:BA:17:F0:E9:BB:99:58:34:F5:23:5A:86:19:B4:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/60qJySS6F_Dpu5lYNPUjWoYZtHE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/15CB94DC6B9111F086EA8D85DAE4EC9C/60qJySS6F_Dpu5lYNPUjWoYZtHE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:bb:62:e7:66:35:e4:b1:7a:cc:21:94:ce:29:51:e6:69:59:
         c6:d8:e6:8d:06:87:d0:e6:2f:7f:a9:89:60:76:6a:e6:be:52:
         94:71:2c:ba:98:60:aa:68:47:f4:69:db:a8:c2:e1:f1:f9:d3:
         d3:5a:16:08:65:d2:ca:f5:69:aa:55:ce:81:43:6d:24:b6:56:
         a3:4d:b9:0d:d7:c2:c7:8f:7e:b8:58:23:6d:51:b3:85:e8:7e:
         b1:8a:9a:0d:68:3d:ae:0a:4b:51:73:6c:27:fb:bd:35:a1:0a:
         29:9c:3f:3d:9e:4b:1b:e2:fe:c9:51:17:e6:4d:55:39:7a:5b:
         d4:3a:c6:b0:4b:0d:f3:d3:20:c5:dd:2b:d8:af:15:d8:ea:61:
         f2:17:bf:12:76:b0:cb:74:43:58:65:f1:22:15:95:dd:8a:ba:
         a4:ad:04:a2:14:ca:d3:2a:98:76:98:6f:4c:98:a7:23:f0:f7:
         cc:f6:1b:cb:d1:8f:38:ba:8d:18:6b:88:e6:61:c1:e8:3a:02:
         7f:09:c1:7a:a7:3d:31:08:85:57:16:6b:b4:cf:47:47:c8:28:
         04:c4:d5:08:cc:6c:1c:db:93:56:94:22:ef:bd:46:8c:42:de:
         71:1c:ed:28:35:45:e9:ba:8f:d9:df:23:6a:22:8a:ed:4f:b1:
         9d:45:39:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:55 2026 by rpki-client