Error: rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
File:                     0mlPWs5d97eiscdbRLGLWndoOGg.mft (raw, json)
Hash identifier:          mRIGzV8hztsQZTcQ5TgqJhNsYOTYmMMqM22+wMzuBgc=
Subject key identifier:   06:95:C3:52:01:36:88:90:AB:75:CE:92:FE:7E:16:35:A5:CB:5D:39
Authority key identifier: D2:69:4F:5A:CE:5D:F7:B7:A2:B1:C7:5B:44:B1:8B:5A:77:68:38:68
Certificate issuer:       /CN=F36C5814AF/serialNumber=D2694F5ACE5DF7B7A2B1C75B44B18B5A77683868
Certificate serial:       0E90
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
Manifest number:          0E8B
Signing time:             Sat 24 Oct 2026 01:06:42 +0000
Manifest this update:     Sat 24 Oct 2026 01:06:41 +0000
Manifest next update:     Mon 26 Oct 2026 01:06:41 +0000
Files and hashes:         1: 0mlPWs5d97eiscdbRLGLWndoOGg.crl (hash: sVq0XaOhZV6r7IyTVfCMquVzPoYuIKxVunWmSFWvCt4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3728 (0xe90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5814AF, serialNumber=D2694F5ACE5DF7B7A2B1C75B44B18B5A77683868
        Validity
            Not Before: Oct 24 01:06:41 2026 GMT
            Not After : Oct 26 01:06:41 2026 GMT
        Subject: CN=6adc04a2-a24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:15:07:d2:25:1b:40:b1:df:9e:dd:ad:09:
                    5d:2b:ba:c0:56:82:eb:19:e0:ef:2d:1e:3e:d0:df:
                    a2:b5:a6:e7:ea:0a:7d:5e:27:a9:51:22:9c:5a:58:
                    25:ec:83:ee:09:1a:95:a5:e7:23:d1:76:62:14:ae:
                    af:0c:d2:68:cb:2a:e8:62:3c:6a:ab:fb:35:d8:f3:
                    09:32:bc:2d:6e:87:76:3d:99:69:9a:d7:b2:e6:a2:
                    8b:19:cf:87:c2:e4:83:fb:dc:52:6f:c5:41:cc:fb:
                    b1:01:1f:8e:b8:f7:18:8a:0f:ea:9d:2e:92:ba:44:
                    ca:78:8b:93:9b:5a:27:2d:79:a5:2e:8c:f6:0d:b8:
                    af:7f:54:64:3b:e1:4a:a8:b2:c8:ce:95:47:fc:50:
                    18:96:a6:51:f2:e6:a1:93:a8:1f:a7:ed:fe:d8:df:
                    5b:bb:25:46:e1:0c:c8:8a:95:74:4a:26:4e:9a:62:
                    9e:19:17:d4:93:95:1c:2b:ac:c5:22:ce:a0:74:29:
                    f5:0e:43:02:a7:08:64:a4:8f:0a:2a:fb:9b:18:3d:
                    65:44:1b:1d:02:cd:30:b1:ef:23:d0:ac:eb:c5:0a:
                    50:5f:b3:27:3f:fe:d4:eb:12:db:44:0c:72:05:28:
                    79:e0:49:23:f9:09:82:cf:ea:83:f4:30:39:a4:24:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:95:C3:52:01:36:88:90:AB:75:CE:92:FE:7E:16:35:A5:CB:5D:39
            X509v3 Authority Key Identifier:
                keyid:D2:69:4F:5A:CE:5D:F7:B7:A2:B1:C7:5B:44:B1:8B:5A:77:68:38:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0mlPWs5d97eiscdbRLGLWndoOGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5814/CFBB0A84A75111E6B023E037F8AEA228/0mlPWs5d97eiscdbRLGLWndoOGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:cf:fc:b5:3c:38:da:a3:6f:c0:ab:70:89:af:51:12:c1:60:
         be:ad:63:ba:df:77:66:f5:8e:13:7d:be:3d:0a:d7:44:67:92:
         1c:b9:91:64:dc:6b:e8:94:72:34:1e:4d:86:fe:b0:a0:fa:b3:
         77:eb:87:c5:a2:d7:90:55:d7:f2:59:01:aa:1d:f6:60:2a:eb:
         51:a4:f2:f5:cc:24:d4:b6:e9:0a:42:df:ab:7d:c5:12:39:bd:
         22:11:ea:18:e8:ee:56:4a:b8:36:5d:36:60:76:77:95:98:23:
         97:5b:84:4b:a9:a2:b4:f1:7e:94:aa:79:9e:9e:f9:18:ca:0c:
         78:70:81:7f:6a:db:de:99:22:60:d3:42:dc:f3:87:8a:bb:81:
         4a:bb:be:8c:1f:c6:e0:39:b1:b5:8d:de:9d:2a:bb:5c:ea:d8:
         3c:ca:d4:8e:e6:3b:1e:05:b5:b5:0c:e3:97:d6:1a:96:a6:b3:
         fb:7c:07:b7:5c:ec:df:a4:76:e0:7b:f2:2e:99:25:26:75:21:
         ab:bd:8b:d1:4a:b2:d7:e1:c4:e5:ac:46:8f:99:e9:5c:01:e8:
         ce:50:94:0a:b4:67:df:73:5f:f3:b0:5f:35:ec:ba:7f:68:ee:
         20:6c:52:3c:22:22:66:f4:ae:8e:d6:8b:c7:58:09:6d:45:6e:
         e8:bf:37:c8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDpAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzU4MTRBRjExMC8GA1UEBRMoRDI2OTRGNUFDRTVERjdCN0EyQjFDNzVCNDRCMThC
NUE3NzY4Mzg2ODAeFw0yNjEwMjQwMTA2NDFaFw0yNjEwMjYwMTA2NDFaMBgxFjAU
BgNVBAMTDTZhZGMwNGEyLWEyNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6nRUH0iUbQLHfnt2tCV0rusBWgusZ4O8tHj7Q36K1pufqCn1eJ6lRIpxa
WCXsg+4JGpWl5yPRdmIUrq8M0mjLKuhiPGqr+zXY8wkyvC1uh3Y9mWma17LmoosZ
z4fC5IP73FJvxUHM+7EBH4649xiKD+qdLpK6RMp4i5ObWicteaUujPYNuK9/VGQ7
4UqossjOlUf8UBiWplHy5qGTqB+n7f7Y31u7JUbhDMiKlXRKJk6aYp4ZF9STlRwr
rMUizqB0KfUOQwKnCGSkjwoq+5sYPWVEGx0CzTCx7yPQrOvFClBfsyc//tTrEttE
DHIFKHngSSP5CYLP6oP0MDmkJIgvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBpXD
UgE2iJCrdc6S/n4WNaXLXTkwHwYDVR0jBBgwFoAU0mlPWs5d97eiscdbRLGLWndo
OGgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM1ODE0L0NGQkIwQTg0QTc1MTExRTZCMDIzRTAzN0Y4QUVBMjI4LzBtbFBX
czVkOTdlaXNjZGJSTEdMV25kb09HZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBtbFBXczVkOTdlaXNjZGJSTEdMV25kb09HZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzU4MTQvQ0ZCQjBBODRBNzUxMTFFNkIwMjNFMDM3RjhB
RUEyMjgvMG1sUFdzNWQ5N2Vpc2NkYlJMR0xXbmRvT0dnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBCz/y1PDjao2/Aq3CJr1ESwWC+rWO6
33dm9Y4Tfb49CtdEZ5IcuZFk3GvolHI0Hk2G/rCg+rN364fFoteQVdfyWQGqHfZg
KutRpPL1zCTUtukKQt+rfcUSOb0iEeoY6O5WSrg2XTZgdneVmCOXW4RLqaK08X6U
qnmenvkYygx4cIF/atvemSJg00Lc84eKu4FKu76MH8bgObG1jd6dKrtc6tg8ytSO
5jseBbW1DOOX1hqWprP7fAe3XOzfpHbge/IumSUmdSGrvYvRSrLX4cTlrEaPmelc
AejOUJQKtGffc1/zsF817Lp/aO4gbFI8IiJm9K6O1ovHWAltRW7ovzfI
-----END CERTIFICATE-----
Generated at Sat Oct 24 03:11:41 2026 by rpki-client