Error: rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
File:                     ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft (raw, json)
Hash identifier:          KDufUlqFxbuUnvvmdMMdSzryaJXDK9gHR7/DDsdfsOE=
Subject key identifier:   60:EC:3E:10:55:27:9E:86:1A:D5:5E:B2:D9:38:63:99:5B:28:2B:0A
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Certificate issuer:       /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial:       047F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
Manifest number:          0462
Signing time:             Mon 26 Oct 2026 03:52:05 +0000
Manifest this update:     Mon 26 Oct 2026 03:52:04 +0000
Manifest next update:     Wed 28 Oct 2026 03:52:04 +0000
Files and hashes:         1: ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl (hash: 2uvEMHNTZ2bhIserq6ufIQ9z/s9vCooLj1T7XxCSNWk=)
                          2: 7BD4733608DD11F1B4C68D8BDAE4EC9C.roa (hash: VaWtLFO8gF8tTVqYTrmDCxhKxdVDZKRkXcmlPSJiI4M=)
                          3: 4EA7D32E53E611EF9B5BE56C762E951A.roa (hash: NtlpVvP6+zWzB8RFTth6ghNvN5nR/THSHfhDD9x2bP8=)
                          4: A1BBDFB45BDA11EFA2803F75762E951A.roa (hash: B+/DOrNgATDNRMYx/JLMgJNXWHAPifjl6iw4sXJYoDA=)
                          5: D2F9CEC4BE4B11EE8D656598775412E6.roa (hash: Cxpb4VpHsS5nAkYLG5LF8Ro6WmVM8kJPPNxJ4wnGbyc=)
                          6: A4628766FCF811F094508AF6DAE4EC9C.roa (hash: /jc/xWZSJFLRCYN2+c6nB85Dxq9lg0faSAdWwu56nk4=)
                          7: DC282EF8882211F0A7704DDBDAE4EC9C.roa (hash: T0igekGrTYaRpNadHLliqhNPK9+LbtXEGTfnQQPv4/o=)
                          8: 8804A9420EF611EF90E9CB4F017001B1.roa (hash: Ah/gC+WFiWi7Jlp6m9g/RNWVwD4e/UvuFekwBmptqnY=)
                          9: A8121FD29CFC11EF91E12A85762E951A.roa (hash: 40tq9RUAvjkX3eq2QoBMj2ZOuP4wwcDT4oeJUrXPD54=)
                          10: A7638A7CFCF411F0BF391BDEDAE4EC9C.roa (hash: uRFcCGOfvIfr+Tf43abUlIiB/kt42kecBcMz+0o+sSI=)
                          11: 0EF37AD45BDA11EF9E5BF670762E951A.roa (hash: 51koAiGBT4Qlz96Il2OYaGj869PU6MSFeqlPyjHqg1Q=)
                          12: 518CAA929CFC11EF95640782762E951A.roa (hash: OyktAYCtLdWaRz8aqABUtVcVPRFArgA2QV1t66oDcS8=)
                          13: 23292B7612C311EFB9087350017001B1.roa (hash: ljEIXCzMDkNC6MsSv3Wx80qJCOfaflJx6GdHSwJRefU=)
                          14: 963B58C8FCFA11F0B12DEA82DAE4EC9C.roa (hash: v/Cu1W16efLVxqP+0ar6L17VA0jidL4qkzPUWebyruw=)
                          15: D265FEDE0BCA11EF917FA0F3007001B1.roa (hash: JnlsXUtJ6yRPF3xH5RBfKSof1yPWn25dJe2aCkd3Tug=)
                          16: F3558888612511F098D6E98EDAE4EC9C.roa (hash: JDtyMwOOrKTy2qsgEw1FCl42QKzix0RW6dRZVcnlssk=)
                          17: 68E2FFBA615611F0A2488AD5DAE4EC9C.roa (hash: w3HgJ6iasE0Baeop5RBkwj/+ubVBgHbMYQzGZBLJCBU=)
                          18: 61DC7730DCFF11F084B31E79DAE4EC9C.roa (hash: RFmc2pe6J4tZTf5Zu+6VgaZEp8ibw3jxL16vDYLsA6E=)
                          19: EB9D4AF4FCF211F0BB098AD2DAE4EC9C.roa (hash: emghLEG84DuosUhnolF3yQQxO1sKUhr3+10JwSDZbjU=)
                          20: 7F5635A2887511EEBFD443484AD9E6FC.roa (hash: ocQwdIyiszloWpRuczWxhp841V/qq4mP8+w57e47R8w=)
                          21: 3B419B887CAB11EFB49DDE4D762E951A.roa (hash: IQzn2Mmxf3299kc5c2KxlM3LEdiHGEsho1HI4seozUE=)
                          22: 566CE01C0BD011EF922BB41F017001B1.roa (hash: NJoaiPoqCsvM8uTcCsGcl3CIrYSjToxekiedssQBL9U=)
                          23: C184DE48FCF311F098D8C0D8DAE4EC9C.roa (hash: hsBrfsye6tAWzBtuUHNAmPGil1onGCjZ9YyyLCUq1Xw=)
                          24: 59419D7EED4111F084A6D7F1DAE4EC9C.roa (hash: /ipmAqtO7rPFo9K3hMcn3Hq84xr+ZiKjMo9l9Mibio4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151 (0x47f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
        Validity
            Not Before: Oct 26 03:52:04 2026 GMT
            Not After : Oct 28 03:52:04 2026 GMT
        Subject: CN=6adece65-b99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d3:61:ce:6a:7d:cd:20:ca:b5:fc:8d:d3:c7:
                    cd:e0:a9:b3:3b:83:52:c1:07:a9:12:40:71:f6:22:
                    02:dc:89:8b:88:13:52:b7:86:0a:01:56:7a:8f:a5:
                    60:54:7c:18:fa:0d:c6:be:44:9d:35:94:13:77:7c:
                    b3:af:c5:27:75:8f:76:f6:fc:90:79:1f:30:c9:4d:
                    6b:85:12:b2:6c:e6:fe:b7:97:6c:a6:dc:66:48:47:
                    bc:1c:80:8f:90:8b:7e:e6:9f:18:28:88:3e:e1:59:
                    15:4e:d3:94:ae:2e:78:88:85:7d:b3:6e:51:0f:35:
                    28:00:c1:16:bc:12:aa:6a:19:4f:43:79:cb:6d:9a:
                    e5:5b:d4:c2:72:4c:84:2b:ff:f9:8b:f8:00:a6:75:
                    ee:86:54:39:a9:7c:b0:f0:55:70:30:20:98:c4:9f:
                    d5:36:70:84:0c:cb:65:a2:84:4a:d5:57:c0:37:92:
                    d7:95:68:cc:ad:a4:c5:f9:e7:b8:73:54:d2:5c:74:
                    2b:39:9e:78:3a:84:ce:64:fa:15:f7:65:d5:8d:8a:
                    29:a1:00:67:4a:7f:b6:16:4b:2b:b2:6d:7b:9c:7f:
                    78:4b:29:2e:b4:03:f8:3b:c9:5b:23:c9:eb:df:ac:
                    7c:c7:5b:41:8b:ad:46:5e:4e:41:c5:5a:91:d0:7d:
                    97:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:EC:3E:10:55:27:9E:86:1A:D5:5E:B2:D9:38:63:99:5B:28:2B:0A
            X509v3 Authority Key Identifier:
                keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:bb:e4:7f:87:ce:99:92:ed:10:c5:1b:a8:38:eb:a3:5a:33:
         f6:4d:f5:70:ae:8a:7b:d4:f7:7d:8d:2d:c2:d0:9d:33:80:05:
         cc:78:84:61:10:d8:75:46:3b:e8:0f:a4:32:06:18:79:84:05:
         87:4b:86:2b:54:c6:f1:a7:03:a2:d9:75:ae:99:5d:12:3c:9c:
         df:51:50:e5:c0:60:c5:ee:30:37:ad:44:e5:7c:42:10:71:43:
         78:bc:35:81:4c:43:2c:e8:86:e4:bd:23:bb:b4:13:b5:5c:16:
         b0:f7:ff:a9:25:b6:4f:99:35:ab:cc:09:0a:f6:e3:c9:9b:24:
         49:7a:ae:9a:c5:5d:8a:52:32:78:86:da:73:ff:2b:5a:09:da:
         f0:bf:e8:16:32:22:3b:1b:1b:ce:9d:dd:4f:02:93:fe:9b:24:
         1e:b0:cc:ae:15:35:34:be:a1:9c:38:cf:f8:9c:24:3d:d7:0d:
         5d:c1:9c:0b:e5:f4:27:d5:ef:a2:81:de:8f:50:23:ca:21:0a:
         b7:e0:00:20:4b:86:d5:16:2c:4a:85:bb:7f:9c:99:a5:39:33:
         5c:89:0e:d2:92:24:20:74:7b:cd:f6:fb:da:cc:22:4f:5b:6a:
         ed:d9:2e:a0:5c:30:42:31:04:4c:86:53:2b:c0:e7:9c:1f:15:
         48:ce:22:89
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBH8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTRCNjlBRjExMC8GA1UEBRMoQ0E2NjQyRUE5QUZDQzczQUEyNEFBNDA0NzU0NEIx
N0MyNjAzQ0JEMjAeFw0yNjEwMjYwMzUyMDRaFw0yNjEwMjgwMzUyMDRaMBgxFjAU
BgNVBAMTDTZhZGVjZTY1LWI5OWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/02HOan3NIMq1/I3Tx83gqbM7g1LBB6kSQHH2IgLciYuIE1K3hgoBVnqP
pWBUfBj6Dca+RJ01lBN3fLOvxSd1j3b2/JB5HzDJTWuFErJs5v63l2ym3GZIR7wc
gI+Qi37mnxgoiD7hWRVO05SuLniIhX2zblEPNSgAwRa8EqpqGU9DecttmuVb1MJy
TIQr//mL+ACmde6GVDmpfLDwVXAwIJjEn9U2cIQMy2WihErVV8A3kteVaMytpMX5
57hzVNJcdCs5nng6hM5k+hX3ZdWNiimhAGdKf7YWSyuybXucf3hLKS60A/g7yVsj
yevfrHzHW0GLrUZeTkHFWpHQfZeFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYOw+
EFUnnoYa1V6y2ThjmVsoKwowHwYDVR0jBBgwFoAUymZC6pr8xzqiSqQEdUSxfCYD
y9IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU0QjY5L0RFMTQ3NzBFODg3MzExRUU4OUI4MTE0MzRBRDlFNkZDL3ltWkM2
cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ltWkM2cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTRCNjkvREUxNDc3MEU4ODczMTFFRTg5QjgxMTQzNEFE
OUU2RkMveW1aQzZwcjh4enFpU3FRRWRVU3hmQ1lEeTlJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCru+R/h86Zku0QxRuoOOujWjP2TfVw
rop71Pd9jS3C0J0zgAXMeIRhENh1RjvoD6QyBhh5hAWHS4YrVMbxpwOi2XWumV0S
PJzfUVDlwGDF7jA3rUTlfEIQcUN4vDWBTEMs6IbkvSO7tBO1XBaw9/+pJbZPmTWr
zAkK9uPJmyRJeq6axV2KUjJ4htpz/ytaCdrwv+gWMiI7GxvOnd1PApP+myQesMyu
FTU0vqGcOM/4nCQ91w1dwZwL5fQn1e+igd6PUCPKIQq34AAgS4bVFixKhbt/nJml
OTNciQ7SkiQgdHvN9vvazCJPW2rt2S6gXDBCMQRMhlMrwOecHxVIziKJ
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:40:48 2026 by rpki-client