Error: rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
File:                     n10GlKN56yP6tAip1LvVCOGqOSI.mft (raw, json)
Hash identifier:          Od3F+nkxeHmqBgsMcL0d/kgJ8iLSB5YJ39SxaUI+85M=
Subject key identifier:   E4:8E:FC:22:57:67:D7:B2:E0:38:E3:AB:69:CD:D8:69:9E:ED:A4:75
Authority key identifier: 9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22
Certificate issuer:       /CN=F36DA96DRI/serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
Certificate serial:       044F
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
Manifest number:          044B
Signing time:             Thu 10 Sep 2026 03:43:36 +0000
Manifest this update:     Thu 10 Sep 2026 03:43:35 +0000
Manifest next update:     Sat 12 Sep 2026 03:43:35 +0000
Files and hashes:         1: n10GlKN56yP6tAip1LvVCOGqOSI.crl (hash: 0H9wYlR0WOo1IGz8xnv+V/NOVubRwobQxwcFPcRfqHk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                          rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1103 (0x44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA96DRI, serialNumber=9F5D0694A379EB23FAB408A9D4BBD508E1AA3922
        Validity
            Not Before: Sep 10 03:43:35 2026 GMT
            Not After : Sep 12 03:43:35 2026 GMT
        Subject: CN=6aa22768-e7b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:40:3c:b9:59:29:6d:e6:68:08:e4:a2:4d:
                    49:79:68:bb:2a:fe:6b:49:cb:c9:ea:ed:0d:23:c1:
                    13:05:5d:7f:1f:39:a6:8e:61:c2:ae:91:a2:57:47:
                    e9:61:a3:b8:ba:3e:c7:d8:ec:c4:f9:7c:30:f5:4c:
                    98:8f:25:75:8a:3d:d4:90:f0:41:a4:c5:4e:62:e6:
                    7c:6a:40:5f:70:8f:03:5b:7a:87:31:cf:be:8c:63:
                    e4:0a:8d:3b:58:de:57:88:5a:df:71:90:08:d6:bf:
                    0f:6d:2b:9a:83:3f:12:ce:6a:78:b7:ea:c1:26:42:
                    1f:a7:5c:ba:11:07:97:5f:1d:22:11:51:dd:30:27:
                    ec:6c:b1:85:bf:c9:9c:42:20:c7:df:34:09:24:4b:
                    df:7b:77:77:cf:26:15:16:72:ea:7c:4a:65:69:1d:
                    7a:d1:2e:83:03:ce:69:dd:68:76:ed:0e:75:c1:8a:
                    28:4e:71:28:1a:86:04:92:cc:21:ef:1c:3e:83:cd:
                    21:3c:19:f3:bd:ce:33:a6:a3:93:b1:46:c5:2e:0d:
                    9e:69:a0:2d:8c:c7:f6:1d:b0:65:aa:62:3f:ef:db:
                    59:60:62:2f:3f:d5:cd:6d:f4:ef:e1:86:21:9f:16:
                    25:38:f4:f3:93:5a:3a:ed:05:5f:0e:4d:bc:ac:7c:
                    db:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8E:FC:22:57:67:D7:B2:E0:38:E3:AB:69:CD:D8:69:9E:ED:A4:75
            X509v3 Authority Key Identifier:
                keyid:9F:5D:06:94:A3:79:EB:23:FA:B4:08:A9:D4:BB:D5:08:E1:AA:39:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/n10GlKN56yP6tAip1LvVCOGqOSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA96D/6848737666CD11EEB788AD704AD9E6FC/n10GlKN56yP6tAip1LvVCOGqOSI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:6e:23:00:90:68:f9:bd:a0:d4:d8:69:0f:f4:fb:cd:ac:1d:
         65:05:7d:90:70:3f:bc:3f:a7:33:e3:96:60:66:d9:57:d0:28:
         e8:65:3c:1a:c5:68:8e:1f:d5:ae:45:93:a3:87:90:c9:a3:e4:
         d8:b9:2f:11:fa:db:35:ba:56:a0:67:e4:3f:25:9e:63:5a:93:
         d5:dd:1b:9b:dd:c6:25:be:eb:5c:3e:15:68:20:53:f6:b3:32:
         3e:26:67:64:fc:bd:3d:11:72:e4:f2:a5:54:9e:dc:61:f6:43:
         5d:a1:3b:9e:93:1d:e7:cc:23:56:80:52:0b:51:16:01:ad:76:
         68:e4:33:d2:6a:6d:19:98:dc:83:7e:e3:cf:2e:11:d1:e3:4c:
         4e:9f:26:c8:be:68:2d:5b:c6:11:c8:c4:08:64:57:94:5b:58:
         84:02:e4:8d:14:cf:24:ed:ab:9d:92:5e:06:86:d8:74:17:2e:
         41:89:2d:e8:ad:96:6f:38:43:09:63:48:ae:e1:24:22:f8:27:
         db:79:3b:79:71:57:b9:89:7d:90:8c:04:b3:d4:3d:ce:3a:6d:
         1c:ca:4e:4b:57:b0:c1:fb:8c:11:a2:5d:39:9c:32:fe:4c:3b:
         d0:21:1e:dc:7f:4f:b0:0d:e2:3c:db:cb:3b:82:8c:61:6f:ee:
         c9:31:84:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:28:16 2026 by rpki-client