Error: rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
File:                     ki5AVQsnbd4essFQ31YlgeKM6LY.mft (raw, json)
Hash identifier:          Xw9geAJ+o8C+xVIuH2/4rdWpxr9ztzolSLiyEB1ePB8=
Subject key identifier:   C5:CC:C4:3C:4D:6D:7D:F9:DD:9B:5C:65:D3:61:94:D3:14:19:96:50
Authority key identifier: 92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6
Certificate issuer:       /CN=F36F0F1FAF/serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
Certificate serial:       04BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
Manifest number:          04BA
Signing time:             Sun 25 Oct 2026 03:37:28 +0000
Manifest this update:     Sun 25 Oct 2026 03:37:27 +0000
Manifest next update:     Tue 27 Oct 2026 03:37:27 +0000
Files and hashes:         1: ki5AVQsnbd4essFQ31YlgeKM6LY.crl (hash: 0tMdQVjFXgnn3g4gDvpaZnuxryxaqL7qP2DB8lZkTqQ=)
                          2: 100404ACF0EF11EF88C9AE71762E951A.roa (hash: 8k5gdkW/3dmY+rQ2FXNkTuiBZr2cv4drq04xkEmoRrA=)
                          3: 103C0BB8314711EE99292E464AD9E6FC.roa (hash: TmpoQ5dHcVfEPTGG3mk1fm6t56EElHhj1QpqJ0Vnq+E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 03:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1212 (0x4bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0F1FAF, serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
        Validity
            Not Before: Oct 25 03:37:27 2026 GMT
            Not After : Oct 27 03:37:27 2026 GMT
        Subject: CN=6add7978-8f71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:59:1d:71:69:e0:84:f6:37:3a:b0:f5:6a:b5:
                    7a:00:3b:ca:5c:ed:99:e3:a0:26:83:50:df:80:d3:
                    a3:e7:1f:f8:86:89:9c:d8:33:9a:9a:41:94:06:23:
                    be:60:1f:60:4b:85:f6:78:5c:70:44:69:91:15:04:
                    32:55:ce:92:aa:45:d4:31:24:f8:b7:26:ee:d9:f2:
                    d9:20:0b:c0:03:fb:d0:9a:51:7f:41:45:07:4e:67:
                    f1:c3:c7:05:00:a4:33:07:ad:51:42:d4:a6:ce:80:
                    82:38:9d:0b:28:1c:4a:ea:c6:18:f8:a8:f5:34:57:
                    11:0f:1e:6f:1b:c1:33:06:99:11:8f:bc:e2:ec:a2:
                    a7:70:71:50:40:9c:f1:5d:55:93:8b:80:39:0e:a3:
                    84:c5:a4:d0:c9:6e:fc:8c:cf:e8:21:a3:78:8a:e6:
                    af:f6:f4:84:2d:6e:c9:8d:78:91:98:43:10:c2:82:
                    01:d3:45:ff:dc:87:d3:14:09:78:52:b8:47:8b:19:
                    2d:49:e7:d4:b9:5d:7f:f8:eb:d0:ee:4b:89:97:36:
                    86:53:b5:39:42:19:1e:90:4b:66:61:18:5c:20:2e:
                    5c:36:3e:ec:d6:4e:8b:a4:d3:23:91:51:f6:ae:a2:
                    74:28:d2:c9:2c:cd:45:13:42:a2:83:ec:11:7b:e7:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CC:C4:3C:4D:6D:7D:F9:DD:9B:5C:65:D3:61:94:D3:14:19:96:50
            X509v3 Authority Key Identifier:
                keyid:92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:28:09:ef:be:f9:2f:b1:63:cd:c4:82:97:af:3f:ca:11:79:
         99:68:47:0f:e7:ec:86:17:ae:4c:04:61:10:44:1a:b8:8c:df:
         8a:4d:43:24:34:dc:d3:f8:06:f4:b7:6f:fc:55:11:f4:73:a2:
         a8:73:30:60:eb:6b:6f:e7:8d:73:56:74:f5:6c:62:56:25:e5:
         4c:62:25:90:f3:76:9c:83:1d:9b:43:62:37:1c:c7:bb:5c:f8:
         08:e3:19:76:02:78:de:aa:f3:e4:5f:e2:c6:84:f7:21:68:99:
         c2:cf:35:60:18:53:89:bb:28:ce:ee:f4:57:59:2f:71:33:11:
         a5:e1:ed:04:3b:5f:ff:07:8b:8c:05:8d:31:5a:bd:86:ab:cd:
         f5:02:f0:b7:3a:83:45:8c:01:bd:9b:24:9f:4e:c1:b6:b9:6b:
         2d:2e:5d:5a:6f:74:43:f2:e2:72:bd:90:20:c0:3e:75:0e:ed:
         0b:78:bf:1f:19:c2:e1:a6:d4:8d:2f:87:5a:b8:d1:bc:7f:b2:
         df:b3:cb:92:13:ae:60:9e:23:2c:cb:7a:50:5b:cd:5a:de:a7:
         d7:61:ff:2b:f2:e4:2f:a0:5b:f9:94:30:d8:6e:b7:79:da:ec:
         21:d5:6d:60:98:8f:ca:07:ff:90:aa:8e:ab:41:a5:d9:40:e7:
         a6:ec:bc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 01:43:53 2026 by rpki-client