Error: rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
File:                     RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft (raw, json)
Hash identifier:          J5OOboj15UCTXfNkNhl+Fym6R5l5ltSLpc6WLatvUsw=
Subject key identifier:   10:27:33:93:CF:F5:DD:69:62:1E:E8:49:08:CA:87:CA:60:6C:52:E4
Authority key identifier: 45:6D:1C:9C:1A:7E:01:B6:3B:FC:B6:F8:BC:8B:C1:99:76:12:60:B2
Certificate issuer:       /CN=F3612066AF/serialNumber=456D1C9C1A7E01B63BFCB6F8BC8BC199761260B2
Certificate serial:       40
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
Manifest number:          3F
Signing time:             Sun 15 Nov 2026 05:54:44 +0000
Manifest this update:     Sun 15 Nov 2026 05:54:43 +0000
Manifest next update:     Tue 17 Nov 2026 05:54:43 +0000
Files and hashes:         1: RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl (hash: MN1TYdIz2tV+uQgcqQ3cGO8ZBPXdhVlsuNEpb8Ylzwg=)
                          2: 3226718CB1D711F189148CCACE1D38B0.roa (hash: nJ64FS+WCksILj46Guscx9vgjK0V1m37yzo+54WTWTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3612066AF, serialNumber=456D1C9C1A7E01B63BFCB6F8BC8BC199761260B2
        Validity
            Not Before: Nov 15 05:54:43 2026 GMT
            Not After : Nov 17 05:54:43 2026 GMT
        Subject: CN=6af94924-21e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:38:c5:79:d4:f6:78:e3:aa:8b:85:4d:01:58:
                    38:b5:43:ab:34:86:e3:44:8b:79:7a:70:2a:a9:5d:
                    e5:88:0e:ef:f8:1b:f5:bc:f5:34:5d:fa:7d:9b:17:
                    9a:ee:8b:f5:9d:f7:f9:81:ec:bd:2f:ae:ad:11:d2:
                    62:bf:16:c1:53:67:cd:62:72:57:be:c5:8b:d7:0f:
                    e1:9b:2c:1e:d9:d9:03:03:41:e7:17:f8:75:dc:7c:
                    07:04:c5:4b:fc:96:bb:4b:f5:15:cc:8f:74:f7:79:
                    50:77:2b:bd:75:3b:f4:6b:a4:f0:b4:14:7c:8c:73:
                    64:dd:73:60:25:f6:f4:3d:74:f6:18:aa:30:76:de:
                    da:ca:73:43:25:c7:3c:c1:b6:11:95:e1:d6:1a:32:
                    e6:c5:d7:7a:88:d3:f5:74:fc:60:f1:34:8e:f5:c0:
                    fe:73:6a:e3:f0:ee:12:4c:5f:2c:91:f5:d0:e1:c2:
                    67:3b:39:f8:a0:d8:6d:ca:81:16:49:68:e0:57:af:
                    d1:cf:fe:05:2a:bd:20:ac:37:fd:d8:9b:20:9a:67:
                    4a:1f:f3:e9:cb:f4:27:3d:01:46:d6:21:26:f0:24:
                    b4:03:cb:bb:cf:71:df:cb:fe:d5:52:51:34:b6:d2:
                    f7:ec:5f:dc:ca:40:79:20:7c:34:5a:4e:a0:b0:43:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:27:33:93:CF:F5:DD:69:62:1E:E8:49:08:CA:87:CA:60:6C:52:E4
            X509v3 Authority Key Identifier:
                keyid:45:6D:1C:9C:1A:7E:01:B6:3B:FC:B6:F8:BC:8B:C1:99:76:12:60:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3612066/B4E9F56EB1D511F1A3129AC0CE1D38B0/RW0cnBp-AbY7_Lb4vIvBmXYSYLI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2d:5d:cc:2a:ef:88:80:04:74:bb:9e:83:99:0f:b6:b1:1c:
         bc:8e:32:74:96:f8:6c:4c:74:8e:49:62:6b:f6:df:c5:cc:06:
         e1:69:ff:a9:bd:0a:8e:fc:83:8e:e3:59:06:69:81:dd:66:d1:
         55:ee:df:3d:1b:02:de:d3:fc:0f:fc:0a:bc:eb:a3:89:6b:d4:
         09:3f:df:cf:33:46:8e:de:c0:9e:71:1d:c0:98:f8:46:61:41:
         80:59:3d:41:25:60:08:c4:06:b4:5a:89:74:5f:43:89:7b:be:
         fb:d2:af:db:44:e1:ad:4d:85:71:c2:89:e9:14:ea:f9:ef:62:
         94:f2:af:cf:59:5a:fb:fc:ee:87:8e:82:2e:46:92:b5:c0:ea:
         49:08:bf:95:d3:e2:33:8c:f4:6d:27:d3:c9:af:05:4e:39:66:
         cf:e5:44:d9:fb:f8:ce:c6:89:cd:d0:98:bf:f6:bc:58:09:1b:
         84:08:c2:5e:68:5b:56:dd:a2:d6:09:77:d9:e5:19:50:65:47:
         b9:d7:37:98:1c:cf:03:f1:a3:81:9f:39:e4:0e:2b:ac:3e:de:
         1f:97:41:17:7c:46:7e:bf:19:66:91:62:59:65:b5:5b:20:3e:
         a2:c1:b5:61:4d:aa:ea:d3:47:f4:e6:0f:de:02:8a:a6:fe:b4:
         52:56:37:10
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBQDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MjA2NkFGMTEwLwYDVQQFEyg0NTZEMUM5QzFBN0UwMUI2M0JGQ0I2RjhCQzhCQzE5
OTc2MTI2MEIyMB4XDTI2MTExNTA1NTQ0M1oXDTI2MTExNzA1NTQ0M1owGDEWMBQG
A1UEAxMNNmFmOTQ5MjQtMjFlNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALw4xXnU9njjqouFTQFYOLVDqzSG40SLeXpwKqld5YgO7/gb9bz1NF36fZsX
mu6L9Z33+YHsvS+urRHSYr8WwVNnzWJyV77Fi9cP4ZssHtnZAwNB5xf4ddx8BwTF
S/yWu0v1FcyPdPd5UHcrvXU79Guk8LQUfIxzZN1zYCX29D109hiqMHbe2spzQyXH
PMG2EZXh1hoy5sXXeojT9XT8YPE0jvXA/nNq4/DuEkxfLJH10OHCZzs5+KDYbcqB
Fklo4Fev0c/+BSq9IKw3/dibIJpnSh/z6cv0Jz0BRtYhJvAktAPLu89x38v+1VJR
NLbS9+xf3MpAeSB8NFpOoLBDrGECAwEAAaOCArgwggK0MB0GA1UdDgQWBBQQJzOT
z/XdaWIe6EkIyofKYGxS5DAfBgNVHSMEGDAWgBRFbRycGn4Btjv8tvi8i8GZdhJg
sjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTIwNjYvQjRFOUY1NkVCMUQ1MTFGMUEzMTI5QUMwQ0UxRDM4QjAvUlcwY25C
cC1BYlk3X0xiNHZJdkJtWFlTWUxJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUlcwY25CcC1BYlk3X0xiNHZJdkJtWFlTWUxJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxMjA2Ni9CNEU5RjU2RUIxRDUxMUYxQTMxMjlBQzBDRTFE
MzhCMC9SVzBjbkJwLUFiWTdfTGI0dkl2Qm1YWVNZTEkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAAYtXcwq74iABHS7noOZD7axHLyOMnSW
+GxMdI5JYmv238XMBuFp/6m9Co78g47jWQZpgd1m0VXu3z0bAt7T/A/8Crzro4lr
1Ak/388zRo7ewJ5xHcCY+EZhQYBZPUElYAjEBrRaiXRfQ4l7vvvSr9tE4a1NhXHC
iekU6vnvYpTyr89ZWvv87oeOgi5GkrXA6kkIv5XT4jOM9G0n08mvBU45Zs/lRNn7
+M7Gic3QmL/2vFgJG4QIwl5oW1bdotYJd9nlGVBlR7nXN5gczwPxo4GfOeQOK6w+
3h+XQRd8Rn6/GWaRYllltVsgPqLBtWFNqurTR/TmD94Ciqb+tFJWNxA=
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:55:30 2026 by rpki-client