Error: rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft
File:                     69luHbn6eKk21PMiZ2g9Z9rcToE.mft (raw, json)
Hash identifier:          1srRZda/D899jRN5O3Jt68P+MwoleJ79bcbwXBsp6gU=
Subject key identifier:   68:6B:54:5C:A8:B6:AF:EA:EF:18:A5:AD:47:36:FD:8C:90:B1:FD:1A
Authority key identifier: EB:D9:6E:1D:B9:FA:78:A9:36:D4:F3:22:67:68:3D:67:DA:DC:4E:81
Certificate issuer:       /CN=F3642DBCAR/serialNumber=EBD96E1DB9FA78A936D4F32267683D67DADC4E81
Certificate serial:       2B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/69luHbn6eKk21PMiZ2g9Z9rcToE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft
Manifest number:          2A
Signing time:             Sat 14 Nov 2026 05:58:31 +0000
Manifest this update:     Sat 14 Nov 2026 05:58:30 +0000
Manifest next update:     Mon 16 Nov 2026 05:58:30 +0000
Files and hashes:         1: 69luHbn6eKk21PMiZ2g9Z9rcToE.crl (hash: w0hTFkcCnqlfrfv1xVCjrxMwIfQp1XyEscTtgUKF54M=)
                          2: 296BF2E6C0CE11F19B8E92DECE1D38B0.roa (hash: XAseiyBWB5jDnRAZhCoIwHpcS+883V/iadUMuY7UQ4M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft
                          rsync://rpki.afrinic.net/repository/arin/69luHbn6eKk21PMiZ2g9Z9rcToE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642DBCAR, serialNumber=EBD96E1DB9FA78A936D4F32267683D67DADC4E81
        Validity
            Not Before: Nov 14 05:58:30 2026 GMT
            Not After : Nov 16 05:58:30 2026 GMT
        Subject: CN=6af7f886-9211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:fa:3c:7b:ab:0b:ab:92:c7:3b:96:7c:d1:9c:
                    a4:6e:56:be:15:51:6a:99:6b:27:47:0f:a6:4c:19:
                    22:a4:db:55:21:54:38:26:2e:8b:c3:52:69:de:d6:
                    c8:8a:de:63:7f:91:48:45:bc:b4:0c:b5:01:93:b9:
                    f8:ec:26:77:ab:75:f7:50:3b:c4:ad:64:74:37:e2:
                    91:df:1e:28:25:85:18:5e:34:01:77:e7:20:ea:c5:
                    d6:00:bf:ba:a3:15:2c:ca:bf:36:96:ba:ed:da:3b:
                    fa:20:2e:5a:c3:d5:53:0b:f8:35:cc:e8:ae:f0:40:
                    0f:e3:24:a5:4a:4b:56:d9:1f:17:e8:1f:7b:10:71:
                    a3:20:88:e6:04:20:ed:f0:97:88:c1:1e:d0:3f:e8:
                    a5:44:e0:a3:63:eb:d8:af:c4:1e:5f:74:5c:67:79:
                    fe:52:7f:47:b8:c2:a5:ef:f4:82:42:56:2e:eb:55:
                    89:b8:5d:b0:69:3a:73:5a:d2:89:a4:33:c1:11:ef:
                    9d:e7:92:4d:00:bc:45:3d:a1:53:90:6f:3c:87:1a:
                    6f:2b:5e:c1:33:d9:93:2d:d0:9a:f5:c4:21:c1:53:
                    54:13:4b:23:8e:9a:3f:29:d8:3a:ed:57:d8:5a:5f:
                    18:32:a0:51:53:08:d9:ec:21:53:d0:ff:a0:4f:13:
                    11:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:6B:54:5C:A8:B6:AF:EA:EF:18:A5:AD:47:36:FD:8C:90:B1:FD:1A
            X509v3 Authority Key Identifier:
                keyid:EB:D9:6E:1D:B9:FA:78:A9:36:D4:F3:22:67:68:3D:67:DA:DC:4E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/69luHbn6eKk21PMiZ2g9Z9rcToE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:cf:e2:a7:8c:2b:70:0f:7b:90:0e:14:d7:a4:4e:32:8b:21:
         ab:29:d4:fa:19:a6:d4:59:63:17:79:7c:13:01:3b:df:2b:1b:
         f7:41:e4:19:6e:75:3b:86:01:c5:4b:01:af:92:4f:23:52:a6:
         85:fc:04:17:41:3c:b7:04:16:99:aa:b3:2d:34:14:ab:9e:39:
         2b:31:8e:92:f1:70:de:de:e8:21:a0:4e:85:7f:31:32:92:0e:
         06:26:11:cb:1f:90:0c:0c:06:ff:1f:75:c8:da:b0:80:4b:96:
         33:d3:54:74:66:80:b5:00:25:f1:ba:03:f1:61:25:11:41:6c:
         90:71:ce:69:92:90:42:e7:d5:f1:fb:b5:9e:b1:38:d5:98:d3:
         56:85:7f:97:ca:10:d2:ff:31:4c:c9:61:97:d4:55:46:65:9c:
         8d:d6:a5:4d:26:18:12:ce:c6:9f:21:fa:09:61:af:05:c9:a1:
         e5:4f:08:e3:5d:4a:4d:9c:f2:f3:2b:2d:c0:c0:95:c0:f2:e9:
         ae:22:9d:ae:de:49:27:66:87:e9:00:8a:e8:f1:80:27:c3:b1:
         fd:60:21:22:16:71:90:99:f8:c3:a1:2f:30:e7:a6:70:f2:34:
         ed:66:bb:4a:40:65:33:d1:18:4a:a6:53:b3:93:be:ff:d5:bb:
         7b:fb:bd:2b
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBKzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MkRCQ0FSMTEwLwYDVQQFEyhFQkQ5NkUxREI5RkE3OEE5MzZENEYzMjI2NzY4M0Q2
N0RBREM0RTgxMB4XDTI2MTExNDA1NTgzMFoXDTI2MTExNjA1NTgzMFowGDEWMBQG
A1UEAxMNNmFmN2Y4ODYtOTIxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOX6PHurC6uSxzuWfNGcpG5WvhVRaplrJ0cPpkwZIqTbVSFUOCYui8NSad7W
yIreY3+RSEW8tAy1AZO5+Owmd6t191A7xK1kdDfikd8eKCWFGF40AXfnIOrF1gC/
uqMVLMq/Npa67do7+iAuWsPVUwv4NczorvBAD+MkpUpLVtkfF+gfexBxoyCI5gQg
7fCXiMEe0D/opUTgo2Pr2K/EHl90XGd5/lJ/R7jCpe/0gkJWLutVibhdsGk6c1rS
iaQzwRHvneeSTQC8RT2hU5BvPIcabytewTPZky3QmvXEIcFTVBNLI46aPynYOu1X
2FpfGDKgUVMI2ewhU9D/oE8TEdsCAwEAAaOCArUwggKxMB0GA1UdDgQWBBRoa1Rc
qLav6u8Ypa1HNv2MkLH9GjAfBgNVHSMEGDAWgBTr2W4dufp4qTbU8yJnaD1n2txO
gTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDJEQkMvNEQwQjA2NTJDMENEMTFGMUIwQTZDOEQ5Q0UxRDM4QjAvNjlsdUhi
bjZlS2syMVBNaVoyZzlaOXJjVG9FLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
NjlsdUhibjZlS2syMVBNaVoyZzlaOXJjVG9FLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY0MkRCQy80RDBCMDY1MkMwQ0QxMUYxQjBBNkM4RDlDRTFEMzhC
MC82OWx1SGJuNmVLazIxUE1pWjJnOVo5cmNUb0UubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFvP4qeMK3APe5AOFNekTjKLIasp1PoZptRZ
Yxd5fBMBO98rG/dB5BludTuGAcVLAa+STyNSpoX8BBdBPLcEFpmqsy00FKueOSsx
jpLxcN7e6CGgToV/MTKSDgYmEcsfkAwMBv8fdcjasIBLljPTVHRmgLUAJfG6A/Fh
JRFBbJBxzmmSkELn1fH7tZ6xONWY01aFf5fKENL/MUzJYZfUVUZlnI3WpU0mGBLO
xp8h+glhrwXJoeVPCONdSk2c8vMrLcDAlcDy6a4ina7eSSdmh+kAiujxgCfDsf1g
ISIWcZCZ+MOhLzDnpnDyNO1mu0pAZTPRGEqmU7OTvv/Vu3v7vSs=
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:52:22 2026 by rpki-client