Error: rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
File:                     rUAE2FGN65nO0__6tjWqF05wD9c.mft (raw, json)
Hash identifier:          8BL89uxQ7pTnFnpQmccMtN4Z2GUO4XUGl0tB1+atCsM=
Subject key identifier:   89:1B:F9:35:82:95:53:87:F3:F8:42:1E:1D:3C:38:C1:72:01:E0:00
Authority key identifier: AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7
Certificate issuer:       /CN=F362B38EAF/serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
Certificate serial:       0B7C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
Manifest number:          0AFB
Signing time:             Fri 25 Sep 2026 01:36:02 +0000
Manifest this update:     Fri 25 Sep 2026 01:36:02 +0000
Manifest next update:     Sun 27 Sep 2026 01:36:02 +0000
Files and hashes:         1: rUAE2FGN65nO0__6tjWqF05wD9c.crl (hash: gBVcJYaKKb/e2jWmFGQJOAxVJToSrToMK0zrRLaRUOc=)
                          2: 1CCAED5EF38311EA81388E7FF8AEA228.roa (hash: RIQQzlET0KCWk7FUQhhY35sZWThDKHoCKvgRx/3jw0E=)
                          3: BCD021DCF66911EA8D5EA546F8AEA228.roa (hash: h90wa2qzkDXU5DU0AKiDEtfGLn9iPl7eLotVnHW4Frw=)
                          4: 392E80E4F44811EAA4C8384CF8AEA228.roa (hash: mJAoIX/VjRbBT95qINKyB09lSKJQBFxjBcCP+uhlPS8=)
                          5: DBC3264EF66311EAA6BE8D40F8AEA228.roa (hash: w9E0H/Q11nONRxiQWBM4trPI+eFHNPC0o8oxvc5Pdyo=)
                          6: E960C5CAF38111EA992B4F7EF8AEA228.roa (hash: I4QKR1VDLGh3RhSuXkfZCtBWfJkrAcYm36I9E/IuOy0=)
                          7: 378CE78AF66411EA8E26EB40F8AEA228.roa (hash: xoY5dis4sb6P64FdTIPzWORP204UtHtRbf1EXJseOJw=)
                          8: A210B6F4F44D11EABB5FB351F8AEA228.roa (hash: DR3s9VKNKuQ7XukDt6XfIPckQm5j3vRCh+BAjbW4xrA=)
                          9: D5E4C4B84D8911EA8238BE19F8AEA228.roa (hash: FKv/QtglAnTw9jF+zCmeos4RX948CZGQPTcRuFcLe4M=)
                          10: 53F2350EF66111EAAC0BF03DF8AEA228.roa (hash: lebmP/iOAroATMc8X8mAHSe67Ph6j/Zu5ePBNKykQRo=)
                          11: 58BB9626F38611EABA3ED082F8AEA228.roa (hash: K17sJ8qmiGoufQ0OzuMUCjU78dqxvlAxdnJ070x+03o=)
                          12: 432A21D6F66211EA82BEF23EF8AEA228.roa (hash: mHNY5DR7N20xrjY+paspmzOeas6kO6ZhHagyNaTo1CU=)
                          13: 4AF9BDF4F44B11EAA8185B4FF8AEA228.roa (hash: RLfViJfq7BNzEwiwqeZkZe6lAdVM5mFrufSOgKFPKd4=)
                          14: E8E64362F66611EAB7F1BA43F8AEA228.roa (hash: pIhmkYRvwQ/HUdSBylt7MuU38izZKP6VRCNeXSAbRQU=)
                          15: 53ABD5D64D8911EAA1EA3C19F8AEA228.roa (hash: 6SFWy8rDsNodnxkZdJZYUTZQBnZs3Y2BYL7+jP9wI48=)
                          16: 836DD8CEF84111EA8E383C2CF8AEA228.roa (hash: OdrGVzYi/Cod9DWRbdCxYmRlyfj2izZQmUyeBuuT6d0=)
                          17: 1D46E7BCF44911EAB7ED284DF8AEA228.roa (hash: jhfJ8A/BufKfBIy0gti3JMYH1vZMpoHANuvtZWFdqcU=)
                          18: 8CAB7D34F66011EA9505273DF8AEA228.roa (hash: wRT6hE8dz5aDgbl8Fhq0OiI6SYYGle9ZSDVsUg3khF8=)
                          19: F5F09308F65E11EAB818803BF8AEA228.roa (hash: tfY0OI+YAWKV2uL/y0m6/Fa58nZDpggdKjsjjic2N9E=)
                          20: 212A1D50F66911EAAC3C0846F8AEA228.roa (hash: Aks5ASspVvHxXGhc/IaJGiLRNLsSPsSluLM9EVHZHas=)
                          21: 3F60916AF44C11EA8F995450F8AEA228.roa (hash: rifsQTCU0yck6UiJxndy4OXmIpvOMunkAH/NttR9wJw=)
                          22: 3955DFA0F38411EA82FCB280F8AEA228.roa (hash: QP9cVq0kzJIIdmxi1rDik2rIdHN1EL3sLpsxJnHyeOs=)
                          23: C047E3F2F38211EA90CC297FF8AEA228.roa (hash: bt6fAZ97b/WXUjMlBODVtcG1pKUJcZbqlZQfpEEdhyg=)
                          24: 9796326EF66211EABBF1343FF8AEA228.roa (hash: XfHVOULSMA0+tNeiFYqs27QaGmWtM4EQYp7rJcAY0D0=)
                          25: 33F479C0F66A11EAAF171B47F8AEA228.roa (hash: 65Z8Jd3RvX55PomfgU6ZVosCUGsvJvfFSn12KFqEjgk=)
                          26: 9B03ED744D8911EA891A8E19F8AEA228.roa (hash: uTWwiWn04RyJiv5gTpWxSE7SlxQ+y8L3lHkksdILDSA=)
                          27: CF827E50FA4D11EAA4F00351F8AEA228.roa (hash: Nfo5Ody+nts+RdGS2+Xny0p/G7IakwPpDzhjA7YFL9g=)
                          28: 025D78D4F66611EA914DBA42F8AEA228.roa (hash: akSHB/5SMuLQ6lBJAS2DTSq7GYWXcrmqS3/zmpZesBY=)
                          29: 67EBA1E4F66611EA8C8A2B43F8AEA228.roa (hash: np1YfWJ6oBEqUciq3NiDSVUDJwvuyKuegf/eVxTyasA=)
                          30: 4858F51CFA4D11EABBA27850F8AEA228.roa (hash: Olh+jgWHlwq+DKjvm0GuVrQlvzus73+4FrLb2T2hZPI=)
                          31: 880B8A42F38311EA8916FB7FF8AEA228.roa (hash: lmRb0RsJPjiLTVQ/pQ6Vn2QuBVNUm1W2KaA/grF9eyg=)
                          32: 930F30F8F44911EA9099AB4DF8AEA228.roa (hash: 65qe8De3g2SG616o/hl5J9ZBaC7cQWdyg/KgH1Ylsc8=)
                          33: 74B92890F44711EA91D5794BF8AEA228.roa (hash: DqF38JWCoadkuh+xWDZRTWhU1iO+AKrtd8m3qGvdfNg=)
                          34: F8A0A12EF51911EA917F8C25F8AEA228.roa (hash: pi9ulS1bgVE121OQN1H5uRCx/TYQRVt21Oc9CNMXMNk=)
                          35: 3361BB5CF38211EA986AA27EF8AEA228.roa (hash: mdhf7FS5qRV/EAPwQCVct515ySVB0YAeSvQ7uFcHhg4=)
                          36: 2249F87EF84211EAB396E72CF8AEA228.roa (hash: AyhAhiQmtR1TRS4jNGsG2xxhvnTuBOgMBWlRurs+to8=)
                          37: 489D3BCAF66811EA842C2345F8AEA228.roa (hash: 7CrO2ufVjCd3l1JdG8Y8YO/DbkpbR2wu5wwK0MpYcYo=)
                          38: E421C12EF66811EA9A9DB945F8AEA228.roa (hash: TcnJd+sKl5vx9M70+BC5M8izEKZ8CavI541JCiFyaFk=)
                          39: 01F8DC1669EA11EAA9BABC16F8AEA228.roa (hash: X0uso37mfi7TJGv/HuJW5Va2qdwCEhuoPLM3psP6XXI=)
                          40: D30F0BB4F51711EA89454923F8AEA228.roa (hash: Db+USeV9Dx1SL/TQQUZHaaVixWlleC4xw3ASUtb1MMA=)
                          41: 3C890EA4F66311EAA9E1E93FF8AEA228.roa (hash: UwYdmWLzpQ+qeVameZ5fTh6eeQ2hVpgnkWT1F20dHvE=)
                          42: A4BA7AF4F84211EA8632712DF8AEA228.roa (hash: 1tJc0fksKvQylzRaGC5vfa/K9dViyMYGjMIDccjFIoM=)
                          43: ADE0602AF66811EA92728E45F8AEA228.roa (hash: NOUa5nHAr2qHFEYA3rqilmKBUOwOdTDVZuFP+WR5gtM=)
                          44: F7C7754CF66411EA8D66A741F8AEA228.roa (hash: o/HvWB7zOrq0izKzH2nyThMH2+Jy1mb9rMMaXsRylVk=)
                          45: B361B1B4F66511EABD366842F8AEA228.roa (hash: 9XCKt54kMSsfjA2pMKx1yeYnv9HRm1PAKASnbuS69G0=)
                          46: 66F4D690F51F11EA9D1DE32AF8AEA228.roa (hash: SrVyftEZaFZINRQHt3OsJ5SCiY9D8GryK+fA+07FTFA=)
                          47: 4D87EB6CF37F11EA911BB57BF8AEA228.roa (hash: 3A+RWiK1oYl2YPF153nwIh6nA6X/TJV0/+eJQ3a73OQ=)
                          48: 27F2F438F51D11EA989AB428F8AEA228.roa (hash: DFEjQrAIWYa7SDPMGJD4C1vX69qYG4UGCNR2kmAxtoM=)
                          49: 59105920F84711EA84572232F8AEA228.roa (hash: iILT2Dq+1nHMMI+bSq+8wLISd4PvfNetcoNqcmA4UDM=)
                          50: B44D08AAF38911EA9D714486F8AEA228.roa (hash: hZIrtY9P7tb4hMc48tiazjGKLFd+lkm7dTg4VIPJgIQ=)
                          51: 01644032F38911EAA2809185F8AEA228.roa (hash: nz6AQYm66RbbvxMHsgZamICByYZtg/zdNHLqjQTDhwo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2940 (0xb7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAF, serialNumber=AD4004D8518DEB99CED3FFFAB635AA174E700FD7
        Validity
            Not Before: Sep 25 01:36:02 2026 GMT
            Not After : Sep 27 01:36:02 2026 GMT
        Subject: CN=6ab5d002-e609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:2a:34:42:d5:02:c6:d1:2a:25:10:07:01:93:
                    1b:fd:a7:1e:e5:9a:b5:e9:55:5c:c8:3b:99:74:12:
                    e8:91:18:19:b7:57:d0:17:04:40:3c:9c:fb:f7:82:
                    fe:58:8a:76:a1:33:4c:a5:3f:76:aa:17:00:4d:8a:
                    00:e6:c3:63:54:15:8f:d4:22:c5:65:30:5c:a3:79:
                    0d:03:93:5a:e5:53:dd:53:20:ec:e9:12:ab:04:9e:
                    6c:dd:f3:72:ec:21:5b:d1:63:30:26:49:6f:98:43:
                    a1:70:21:d8:8b:a8:22:71:5e:71:b5:6d:c3:99:ee:
                    65:0f:06:8f:99:a9:c0:4c:08:a6:48:d0:21:ba:e8:
                    14:8d:87:fd:75:91:e4:2b:f5:bc:51:b3:66:51:4a:
                    c2:38:e5:55:27:fe:73:55:d9:b3:39:58:ea:20:13:
                    f0:62:de:42:92:98:0b:be:bd:38:5c:37:c5:24:9b:
                    c8:db:d2:a9:38:29:f0:b9:5c:01:18:e9:c9:6c:d5:
                    a6:92:ea:97:41:d9:0c:f0:c8:9e:8c:9f:d4:2b:8c:
                    51:d8:79:5d:20:92:23:4e:d8:14:e2:56:d7:f4:34:
                    c4:b6:12:94:56:3b:5d:87:c8:cd:10:8b:da:bd:c8:
                    ea:aa:6d:35:02:f8:da:bc:b0:db:65:37:9b:3c:4c:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1B:F9:35:82:95:53:87:F3:F8:42:1E:1D:3C:38:C1:72:01:E0:00
            X509v3 Authority Key Identifier:
                keyid:AD:40:04:D8:51:8D:EB:99:CE:D3:FF:FA:B6:35:AA:17:4E:70:0F:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rUAE2FGN65nO0__6tjWqF05wD9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/73C193E2DF6111E9BE5A2C30F8AEA228/rUAE2FGN65nO0__6tjWqF05wD9c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c2:29:f6:29:32:cd:50:33:7e:2c:18:df:69:ac:1a:42:ab:
         42:af:51:38:6e:f7:6d:8a:88:73:47:bb:dd:73:03:c5:22:61:
         0f:d8:fc:17:cd:e3:85:59:a6:ff:32:56:b6:10:ed:ea:03:28:
         d5:7c:43:95:14:66:a4:8e:ba:63:cb:75:a9:f6:a2:6f:9b:86:
         51:b5:6d:41:0e:27:f7:96:e7:a9:0e:7f:9a:33:98:2b:b3:1b:
         cd:b0:b6:b9:a9:11:6a:25:4b:a7:da:67:75:9f:08:03:32:24:
         12:4e:2b:91:c3:19:f6:51:f9:60:e1:02:e2:25:92:fc:a2:0d:
         b4:8d:c4:65:30:b7:6b:5b:6c:61:66:6d:7f:a2:f2:5c:79:ce:
         57:b0:fd:9f:0f:24:c9:49:31:21:eb:b9:a1:4c:0c:6d:a5:bb:
         bc:61:a6:66:f0:8d:6c:b8:c5:81:58:a3:03:0f:fc:93:db:22:
         62:ee:ec:dc:0a:b6:44:89:a2:64:bc:8b:70:2a:57:0c:33:c0:
         7c:c2:4c:b9:aa:7b:95:ab:44:86:3a:5e:12:0a:b0:38:3e:03:
         85:59:a6:c1:bc:ee:38:9b:ab:19:e1:bd:ef:c3:8c:8d:25:39:
         ad:e9:5c:68:39:84:42:dd:74:d9:82:6b:80:cf:36:51:62:fb:
         e4:84:e4:c5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICC3wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBRjExMC8GA1UEBRMoQUQ0MDA0RDg1MThERUI5OUNFRDNGRkZBQjYzNUFB
MTc0RTcwMEZENzAeFw0yNjA5MjUwMTM2MDJaFw0yNjA5MjcwMTM2MDJaMBgxFjAU
BgNVBAMTDTZhYjVkMDAyLWU2MDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcKjRC1QLG0SolEAcBkxv9px7lmrXpVVzIO5l0EuiRGBm3V9AXBEA8nPv3
gv5YinahM0ylP3aqFwBNigDmw2NUFY/UIsVlMFyjeQ0Dk1rlU91TIOzpEqsEnmzd
83LsIVvRYzAmSW+YQ6FwIdiLqCJxXnG1bcOZ7mUPBo+ZqcBMCKZI0CG66BSNh/11
keQr9bxRs2ZRSsI45VUn/nNV2bM5WOogE/Bi3kKSmAu+vThcN8Ukm8jb0qk4KfC5
XAEY6cls1aaS6pdB2QzwyJ6Mn9QrjFHYeV0gkiNO2BTiVtf0NMS2EpRWO12HyM0Q
i9q9yOqqbTUC+Nq8sNtlN5s8TJbbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiRv5
NYKVU4fz+EIeHTw4wXIB4AAwHwYDVR0jBBgwFoAUrUAE2FGN65nO0//6tjWqF05w
D9cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzczQzE5M0UyREY2MTExRTlCRTVBMkMzMEY4QUVBMjI4L3JVQUUy
RkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JVQUUyRkdONjVuTzBfXzZ0aldxRjA1d0Q5Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkIzOEUvNzNDMTkzRTJERjYxMTFFOUJFNUEyQzMwRjhB
RUEyMjgvclVBRTJGR042NW5PMF9fNnRqV3FGMDV3RDljLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBwin2KTLNUDN+LBjfaawaQqtCr1E4
bvdtiohzR7vdcwPFImEP2PwXzeOFWab/Mla2EO3qAyjVfEOVFGakjrpjy3Wp9qJv
m4ZRtW1BDif3luepDn+aM5grsxvNsLa5qRFqJUun2md1nwgDMiQSTiuRwxn2Uflg
4QLiJZL8og20jcRlMLdrW2xhZm1/ovJcec5XsP2fDyTJSTEh67mhTAxtpbu8YaZm
8I1suMWBWKMDD/yT2yJi7uzcCrZEiaJkvItwKlcMM8B8wky5qnuVq0SGOl4SCrA4
PgOFWabBvO44m6sZ4b3vw4yNJTmt6VxoOYRC3XTZgmuAzzZRYvvkhOTF
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:02:42 2026 by rpki-client