Error: rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft
File:                     ajCgGUCvnBTJmV6s4bdpIhigwqY.mft (raw, json)
Hash identifier:          TpoBAQxx7mW2+vI4Yc+l0XIps3wx7b8Q7iAc5zVSjhQ=
Subject key identifier:   54:67:B6:74:C6:11:9B:C8:C0:C4:DE:92:39:7A:A3:06:A6:26:F2:06
Authority key identifier: 6A:30:A0:19:40:AF:9C:14:C9:99:5E:AC:E1:B7:69:22:18:A0:C2:A6
Certificate issuer:       /CN=F3652B4FAF/serialNumber=6A30A01940AF9C14C9995EACE1B7692218A0C2A6
Certificate serial:       64
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ajCgGUCvnBTJmV6s4bdpIhigwqY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft
Manifest number:          63
Signing time:             Sun 04 Oct 2026 05:41:27 +0000
Manifest this update:     Sun 04 Oct 2026 05:41:27 +0000
Manifest next update:     Tue 06 Oct 2026 05:41:27 +0000
Files and hashes:         1: ajCgGUCvnBTJmV6s4bdpIhigwqY.crl (hash: mHuRfaYFSjLYNl1C1SLgnoXmP8gJ58h/eJ/CwYhY9N4=)
                          2: 029DE484739A11F19EC65B1ACF1D38B0.roa (hash: jctyW7FimWluAOazH1wxQiSlUMxQbqqu1aZTbh2lZYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ajCgGUCvnBTJmV6s4bdpIhigwqY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 05:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652B4FAF, serialNumber=6A30A01940AF9C14C9995EACE1B7692218A0C2A6
        Validity
            Not Before: Oct  4 05:41:27 2026 GMT
            Not After : Oct  6 05:41:27 2026 GMT
        Subject: CN=6ac1e707-29db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:70:10:0f:07:0b:2a:d3:57:e8:f1:5b:f4:ed:
                    52:45:e2:7a:ad:71:f4:9f:17:1b:f6:46:19:39:d6:
                    6f:41:1d:54:ac:94:31:13:05:48:8d:4a:9f:74:b3:
                    22:38:fb:2e:4a:80:7d:72:17:bc:ac:8d:20:a5:55:
                    0b:23:2e:29:3c:11:55:2c:f6:c5:e0:62:da:da:81:
                    07:e9:d0:da:61:6b:a0:79:63:0b:50:5b:52:e0:d9:
                    0f:ca:44:59:8c:a8:e1:81:8d:61:19:bd:68:7a:38:
                    13:46:a6:fa:04:d0:61:16:33:c2:11:64:9a:44:26:
                    08:bd:3d:c0:df:b1:d6:3d:04:0b:cc:a0:60:ab:cd:
                    07:3a:8d:6b:02:39:b4:0b:f2:8a:aa:95:91:98:74:
                    07:41:c7:f7:d6:45:39:e7:2b:e5:5c:9b:96:20:5b:
                    d9:f5:09:68:18:ae:07:c0:cf:ca:3a:d8:34:48:07:
                    29:22:61:ae:f3:5c:5a:9c:c9:1b:4f:73:cc:22:e1:
                    1b:34:5d:ec:64:d8:20:34:65:19:e0:68:2e:8a:ef:
                    02:2f:e5:cf:20:60:30:c4:3b:e8:65:c0:92:38:2f:
                    c1:10:1c:65:23:4f:9e:94:0a:87:85:62:fe:bb:ab:
                    85:f2:93:67:42:8a:95:00:d8:0d:3b:3e:39:b5:0e:
                    17:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:67:B6:74:C6:11:9B:C8:C0:C4:DE:92:39:7A:A3:06:A6:26:F2:06
            X509v3 Authority Key Identifier:
                keyid:6A:30:A0:19:40:AF:9C:14:C9:99:5E:AC:E1:B7:69:22:18:A0:C2:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ajCgGUCvnBTJmV6s4bdpIhigwqY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652B4F/F8B6F5A6739811F1964A9F12CF1D38B0/ajCgGUCvnBTJmV6s4bdpIhigwqY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:3a:98:95:8f:1f:61:85:1f:17:af:66:f2:73:79:fb:bc:1a:
         33:67:a0:21:82:6d:12:c3:bd:67:ec:6e:15:3c:d2:9e:ee:d2:
         bc:89:6f:c7:2a:8b:f0:41:09:2e:dc:4d:f8:fe:22:b1:f1:08:
         3e:c4:b8:b7:f3:b5:77:66:44:8c:44:5a:4d:88:39:ab:ab:8a:
         ce:19:da:0e:bd:55:e0:06:e6:90:05:fc:77:0c:4d:ff:ba:21:
         08:76:b1:45:7c:0e:dd:22:4a:22:71:6e:bf:7b:4a:33:0a:4b:
         3e:31:de:64:00:47:f1:c9:95:96:3d:72:b5:ea:0f:50:f0:33:
         74:43:2d:98:b5:ec:ea:66:86:f8:6c:00:ff:70:ff:8b:8e:e3:
         03:a5:4f:1e:99:24:fa:48:e7:60:cf:52:db:f4:ce:04:6b:e5:
         5a:4f:f3:2d:d2:62:5f:ba:f6:70:cd:f9:58:44:a3:75:d3:68:
         54:eb:6e:bb:74:80:fd:e3:2f:b8:1e:cc:76:71:66:bc:23:d7:
         6e:8e:5c:42:c9:17:b4:00:13:ed:69:69:a4:b9:83:43:16:0f:
         ca:0c:85:37:32:1e:3a:43:d2:9e:e6:85:09:98:8b:39:22:aa:
         2f:38:4f:d8:dc:a3:1c:d7:b4:19:d1:74:83:55:03:b8:ec:7b:
         1e:b3:55:6e
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBZDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
MkI0RkFGMTEwLwYDVQQFEyg2QTMwQTAxOTQwQUY5QzE0Qzk5OTVFQUNFMUI3Njky
MjE4QTBDMkE2MB4XDTI2MTAwNDA1NDEyN1oXDTI2MTAwNjA1NDEyN1owGDEWMBQG
A1UEAxMNNmFjMWU3MDctMjlkYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANdwEA8HCyrTV+jxW/TtUkXieq1x9J8XG/ZGGTnWb0EdVKyUMRMFSI1Kn3Sz
Ijj7LkqAfXIXvKyNIKVVCyMuKTwRVSz2xeBi2tqBB+nQ2mFroHljC1BbUuDZD8pE
WYyo4YGNYRm9aHo4E0am+gTQYRYzwhFkmkQmCL09wN+x1j0EC8ygYKvNBzqNawI5
tAvyiqqVkZh0B0HH99ZFOecr5VybliBb2fUJaBiuB8DPyjrYNEgHKSJhrvNcWpzJ
G09zzCLhGzRd7GTYIDRlGeBoLorvAi/lzyBgMMQ76GXAkjgvwRAcZSNPnpQKh4Vi
/rurhfKTZ0KKlQDYDTs+ObUOF0sCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRUZ7Z0
xhGbyMDE3pI5eqMGpibyBjAfBgNVHSMEGDAWgBRqMKAZQK+cFMmZXqzht2kiGKDC
pjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTJCNEYvRjhCNkY1QTY3Mzk4MTFGMTk2NEE5RjEyQ0YxRDM4QjAvYWpDZ0dV
Q3ZuQlRKbVY2czRiZHBJaGlnd3FZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYWpDZ0dVQ3ZuQlRKbVY2czRiZHBJaGlnd3FZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1MkI0Ri9GOEI2RjVBNjczOTgxMUYxOTY0QTlGMTJDRjFE
MzhCMC9hakNnR1VDdm5CVEptVjZzNGJkcEloaWd3cVkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAAI6mJWPH2GFHxevZvJzefu8GjNnoCGC
bRLDvWfsbhU80p7u0ryJb8cqi/BBCS7cTfj+IrHxCD7EuLfztXdmRIxEWk2IOaur
is4Z2g69VeAG5pAF/HcMTf+6IQh2sUV8Dt0iSiJxbr97SjMKSz4x3mQAR/HJlZY9
crXqD1DwM3RDLZi17OpmhvhsAP9w/4uO4wOlTx6ZJPpI52DPUtv0zgRr5VpP8y3S
Yl+69nDN+VhEo3XTaFTrbrt0gP3jL7gezHZxZrwj126OXELJF7QAE+1paaS5g0MW
D8oMhTcyHjpD0p7mhQmYizkiqi84T9jcoxzXtBnRdINVA7jsex6zVW4=
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:40:02 2026 by rpki-client