Error: rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
File:                     wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft (raw, json)
Hash identifier:          mYZEHWJD1aV2utVCi1M6rEtYLMn/1XeHlgp4cANzBFU=
Subject key identifier:   B4:D0:56:63:07:85:50:B5:72:D8:16:15:6C:96:B0:29:17:04:91:06
Authority key identifier: C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB
Certificate issuer:       /CN=F36C10D8AF/serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
Certificate serial:       0553
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
Manifest number:          054E
Signing time:             Sat 12 Sep 2026 03:14:34 +0000
Manifest this update:     Sat 12 Sep 2026 03:14:34 +0000
Manifest next update:     Mon 14 Sep 2026 03:14:34 +0000
Files and hashes:         1: wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl (hash: 8f/dg8GrjuAryIF7Vbn4CIFs2mBA/TRsdSEmDrV0/II=)
                          2: 0B262D308C3D11F1A9EAD41DCF1D38B0.roa (hash: f0VcjDEiye0w2QvjWQnb/8s/VFRQ18PphEj22j/lv34=)
                          3: 77AF8F281BCC11F1B29BDED1DAE4EC9C.roa (hash: tCnoOENkXH3e8Mdks03czB54TYmILM8hcs1Ov5Tph/M=)
                          4: 0391042A007911EFAE93753B017001B1.roa (hash: ROy7IXIOSH9P9duj13zOuIMfsAHkd1TqIfObC5Gq/2c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Sep 2026 00:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C10D8AF, serialNumber=C0D3AAFB63D33F0F6735DC99FF4D901A8E2250EB
        Validity
            Not Before: Sep 12 03:14:34 2026 GMT
            Not After : Sep 14 03:14:34 2026 GMT
        Subject: CN=6aa4c39a-dddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:01:78:47:d4:04:a5:b6:18:72:15:9d:e9:b2:
                    54:f0:17:62:f0:6e:9b:3a:37:98:8c:3c:55:fe:cf:
                    92:96:ec:13:29:fb:5a:d1:67:3b:98:d1:ba:a1:8a:
                    0e:6b:1c:eb:ee:30:1c:be:a2:dd:9e:6d:9f:3b:80:
                    2b:c1:97:2f:49:26:54:e9:b5:eb:e1:3e:da:51:e5:
                    02:4d:f6:f9:65:2d:5f:cc:1e:28:18:5e:ea:c0:99:
                    db:2a:87:f4:18:c5:1c:9c:b6:f3:4d:c1:30:29:ab:
                    ca:e9:08:18:16:51:3f:d8:2a:51:15:ed:df:62:2c:
                    c5:01:1c:10:22:b0:04:35:92:a2:a0:73:42:53:e5:
                    0e:e5:65:3d:8a:21:d6:ec:4a:17:6d:47:08:3a:73:
                    0d:ce:46:8d:d1:e5:a9:ec:2c:e3:4d:6b:84:37:e1:
                    1c:8c:72:89:93:ac:dd:1b:fd:ca:9b:b4:f9:1a:9f:
                    20:de:af:dc:46:ac:eb:0a:26:f1:6d:1f:1e:1a:84:
                    39:ae:16:05:da:98:ae:4f:0e:13:a5:bb:ac:f4:53:
                    c3:8d:2c:53:24:c2:67:08:77:0c:d7:06:ef:ea:77:
                    32:5b:19:a2:b1:29:9a:df:2e:0c:08:7c:e9:a2:d2:
                    3b:c3:97:3a:50:60:ca:50:d5:4d:86:15:3f:5e:22:
                    34:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:D0:56:63:07:85:50:B5:72:D8:16:15:6C:96:B0:29:17:04:91:06
            X509v3 Authority Key Identifier:
                keyid:C0:D3:AA:FB:63:D3:3F:0F:67:35:DC:99:FF:4D:90:1A:8E:22:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wNOq-2PTPw9nNdyZ_02QGo4iUOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C10D8/8720E3EAA61211ED8D3EBED2F1222468/wNOq-2PTPw9nNdyZ_02QGo4iUOs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:24:c3:b6:eb:64:1b:d3:1f:81:56:0a:27:56:3e:49:78:92:
         d5:d9:29:7c:51:e4:29:c8:05:81:1f:4a:bb:b7:08:d8:ff:3a:
         05:c0:72:92:1d:68:17:3a:66:13:ae:36:09:93:89:9b:fc:bd:
         1e:9d:2e:66:3d:38:d1:79:53:a8:7c:9f:34:1a:1e:c4:8b:80:
         5f:a4:96:18:9b:a3:5f:ce:7c:e7:83:c7:bd:9a:fe:85:75:40:
         1d:bb:99:d9:c0:80:b8:05:e1:15:fc:9c:4a:5d:7e:3c:00:2b:
         29:fb:56:27:f8:2a:90:97:bd:bd:88:95:17:2a:42:0b:c5:0a:
         1c:87:e3:ee:c7:27:bd:46:a9:1a:3e:9c:48:f8:0c:d2:1f:fe:
         9a:f7:c1:11:c1:99:34:c1:d5:be:d9:5f:ce:72:89:c3:11:5e:
         94:57:e2:4e:53:50:37:13:15:e4:70:57:e4:12:ff:27:27:65:
         e8:5c:0d:95:87:6b:1b:22:88:27:5b:ad:76:97:a2:69:e3:e8:
         d8:47:7d:9a:f9:f4:f4:79:f9:9d:2f:82:9d:7d:83:a1:24:52:
         62:f5:ef:19:c6:85:91:fa:7c:92:6a:ff:04:fb:6e:bc:91:bf:
         69:4a:5c:1e:f8:54:b1:da:77:e1:92:ba:37:25:01:5d:cd:a5:
         3e:1d:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 05:31:51 2026 by rpki-client