Error: rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
File:                     _fS_ABOx8arKOVUbpibKJGg9rmY.mft (raw, json)
Hash identifier:          PnJy1zml+yI3CCsOEQx1F2uV90sj6KRsVHRFM0Oh2Ug=
Subject key identifier:   64:64:C3:BA:F3:B4:B5:7F:74:25:8F:C5:F2:07:61:CB:77:2E:69:B0
Authority key identifier: FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66
Certificate issuer:       /CN=F3655D2CAF/serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
Certificate serial:       0450
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
Manifest number:          042D
Signing time:             Sun 15 Nov 2026 03:59:03 +0000
Manifest this update:     Sun 15 Nov 2026 03:59:02 +0000
Manifest next update:     Tue 17 Nov 2026 03:59:02 +0000
Files and hashes:         1: _fS_ABOx8arKOVUbpibKJGg9rmY.crl (hash: /z7/i1W6Cgxe2K0pOtgXnyKO12Rhox10sAZ0iJDECAA=)
                          2: F105F828C4CE11EE939D5160775412E6.roa (hash: OVT2chMQ0Nq/o8KrWCxuVSBa6IdJd925oWRD0nztHjI=)
                          3: 6F89EC1EC4CE11EEB915BB5F775412E6.roa (hash: 0xzDQTGktY5SNT/oNqNDkR69eV9keuHEiaiK1qaTKh4=)
                          4: B1F8097EC4D211EE86535866775412E6.roa (hash: 59lN/fUbuBzBsApqG3IvBcdXKT4GXqevkBfORr82FQA=)
                          5: 8BA49FD0C4D211EE9EC4EB65775412E6.roa (hash: L8cuHjbSNz6+bJ/gQju0YrhFVS2tYAIiSMeuYmThWuI=)
                          6: DD77B4AAC4D211EEBEB69266775412E6.roa (hash: OydxnI/hxoPiyhR17/Tng3O2ILM83hRZhWDiNRN/dU4=)
                          7: 95C2E55CC4CE11EEB298E25F775412E6.roa (hash: 34ivVx7kCxvEM20aUk37oRsDslYZlA+xl4ns6+aB5gY=)
                          8: 93B700F2C4F311EE8E31E298775412E6.roa (hash: jxWkgZfYWgXiUGFUDEKR/McM7BfyCoS5P8Hm5K309v0=)
                          9: E93581BEC4CD11EEBD97B25E775412E6.roa (hash: 55Va12oDO8S1u6Db0FeTKlFuk9K47Rv37Hrdea7bPcE=)
                          10: 3DF8B8D4C4D211EEB1EC7C65775412E6.roa (hash: 9LziG0V2OwJ9n1u0dLn4KBFXmSSOMd2hKZ8b5zKpu9c=)
                          11: 4101D022C4CF11EEB2F10961775412E6.roa (hash: dLi4goldq2t98cgYBuvk9Jpn/HGg3ZCmLTC1jEDXh+8=)
                          12: FAD1EE98C4D311EEB8EF5B68775412E6.roa (hash: xrzrQk6N9A7y+gGJ1sq9ZLmMErelK63jEZa0HOn6EEE=)
                          13: 06EC9B8EC4CE11EE9CCFD65E775412E6.roa (hash: yxTa4SshiNJ7DHcSq54/OxpqqW1oYG+0q8Vz/U0eUK4=)
                          14: 4C0E8C0EC4C911EE87647756775412E6.roa (hash: 3hEwrhsuSNEta/SbVkYuC8E8cEE9Br3Bj2hXmqXW6Og=)
                          15: C1BC264CC4CD11EE89C2885E775412E6.roa (hash: /4XiUCjd/sd1xIFdMVmhioY/RKg6IR+Ajo98X8uy0lo=)
                          16: 48E43AECC4D311EE8C1B3F67775412E6.roa (hash: u/n56Tta7OlwGuEqOpX71XLsZT2jKpBxkP39WXUlLLc=)
                          17: 1A50080EC4D411EE9683B268775412E6.roa (hash: caLtTbJU+Ufv7BiWj1H9Gw+w4cpOtHWxcr1WeZuKjJ8=)
                          18: 81B67878C4C711EEA9FDDB53775412E6.roa (hash: vTf8z95jt6AfKb+uGSv38KFOEqTok2j1GUU2yZdAI08=)
                          19: 52716D10C4C811EEA1131155775412E6.roa (hash: xQRXL5xCOGFaycHwp48gngmbdbohfcnsUJoty1rMzbc=)
                          20: 2A6C3F60C4CE11EEA3D4FA5E775412E6.roa (hash: C+KA4N0o/N/27ljFsz4ZdSUMg3iOEQO8xBx9RPaXKNI=)
                          21: 4F31EC96C4CE11EEA565525F775412E6.roa (hash: HcZFH7qDjDPGPIsCX8qhmZSQf24/4pPHFAyHS4PESuo=)
                          22: B3F2595EC4D311EE97A2CE67775412E6.roa (hash: ECdHU4AArULpOT1NztEszqbSD1WJnxMYYXF31fUvbrM=)
                          23: 68864AB4C4F311EE8BF25B98775412E6.roa (hash: 5ft3N//XILTGHx4xJyf0ZxLMMcxslek8pxu0nWzZdwE=)
                          24: 648C3F8CC4CF11EEB00B3061775412E6.roa (hash: FDVWcr2ZaAbCYXZ2KHJUxLsk/2sFqJr/Vx9+VGbIRJ4=)
                          25: 2283DBBEC4D311EEB2E6EA66775412E6.roa (hash: vDOXm9PXQ5Zd7c1zyElcj6kt2FJGk5QRFQWZ4OnkvEI=)
                          26: 870416B8C4C811EE906C4D55775412E6.roa (hash: Vbe2KHg+Or1EjP08Hg3ouXICYgnv4yFEfEZ5ZITCte4=)
                          27: D4A143FEC4D311EE8C6C1968775412E6.roa (hash: AgQ0WKMr6LdRsNIoXgyHASIpWGf5jCQAlVVsb6zmYZ8=)
                          28: 5DCB92C6C4D211EE8BD1A065775412E6.roa (hash: PsrWGlKMnmYkcFOTAbq8GoiP2U6q8o3llEg2ATal3EM=)
                          29: CCB4D870C59311EE927FFFA7775412E6.roa (hash: 9rD0WduujgyOlEWZ+vDkwaNAJhs7jTIfIlCfix8PC/0=)
                          30: 9073DE6CC4D311EEB0B9C867775412E6.roa (hash: elhNbqke+6Kl2ZATVb9O1DeKyGk/Aq6WgPyX415dPg0=)
                          31: 96B86BD6C4CD11EEA3C61A5E775412E6.roa (hash: 1/4BsRl0z2euLNjIiSiAv+wgrdGXz1NzXtlGPkiO18s=)
                          32: 684B797CC4D311EE816F8467775412E6.roa (hash: zrGP4qbV7TkM2QLEaYGOzJRGNrjbHqUR2QRTvJ966ic=)
                          33: BFE793D2C4CE11EE81D70760775412E6.roa (hash: YKo9lE8pH+B0lF4SQUvGTWgHthQjPN6oP/oPK/YNf8s=)
                          34: 1D9BA0C2C4CF11EE9D26CF60775412E6.roa (hash: 0X/6wOprzARBLwyRT7sbR4YEUnDHgpq1rvlRKwpi56E=)
                          35: FF49F7B4C4D211EEB6F1A266775412E6.roa (hash: qvVux5l6rnVThhETsGLH9EXoxv6/IKPh5G9ATtSGJFg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1104 (0x450)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655D2CAF, serialNumber=FDF4BF0013B1F1AACA39551BA626CA24683DAE66
        Validity
            Not Before: Nov 15 03:59:02 2026 GMT
            Not After : Nov 17 03:59:02 2026 GMT
        Subject: CN=6af92e07-8e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4c:4f:fe:62:34:df:37:b4:a5:b1:03:f2:83:
                    7e:13:02:7e:9b:d3:ff:83:c5:27:c8:fb:f6:07:43:
                    12:ef:67:cd:68:db:41:50:96:46:5c:6b:45:0a:11:
                    42:f0:21:c4:09:fc:56:02:e7:f1:e1:8a:51:6d:7b:
                    b2:9d:13:1e:5d:55:01:1c:12:d8:74:85:24:b0:2e:
                    e9:ff:79:08:9a:14:84:b2:40:9c:94:a2:99:bf:30:
                    fc:7a:1b:dd:d5:75:5c:70:29:23:e0:47:6a:91:18:
                    af:2b:85:27:39:0d:47:09:1b:91:77:27:34:84:f1:
                    df:a2:60:e7:0f:bc:65:1c:26:f7:92:6a:9a:79:ca:
                    a9:7e:26:69:9c:3b:d6:75:9c:67:79:d8:85:53:f6:
                    22:e7:15:3e:b2:dc:3b:75:36:90:13:d7:71:1f:d7:
                    fb:71:23:1f:32:f4:38:f3:83:2a:57:68:cd:6a:69:
                    07:9b:08:90:df:f7:80:08:56:ae:0b:ab:57:b4:4a:
                    d0:7d:a4:ca:8f:06:92:c0:80:79:0c:8c:e4:1c:02:
                    bc:ab:b1:a0:ad:1d:09:3f:14:cd:09:8b:4c:c6:9c:
                    2c:f7:67:0a:35:76:75:9a:f0:e7:5e:f6:d2:fb:f5:
                    5f:a4:da:c8:f4:38:f8:56:c6:03:dd:34:05:65:8c:
                    fc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:64:C3:BA:F3:B4:B5:7F:74:25:8F:C5:F2:07:61:CB:77:2E:69:B0
            X509v3 Authority Key Identifier:
                keyid:FD:F4:BF:00:13:B1:F1:AA:CA:39:55:1B:A6:26:CA:24:68:3D:AE:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_fS_ABOx8arKOVUbpibKJGg9rmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655D2C/1D64C2FCC4C311EE9C41994C775412E6/_fS_ABOx8arKOVUbpibKJGg9rmY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:2f:05:e9:92:e4:11:de:5b:80:db:ba:18:6a:dd:18:9c:64:
         44:a1:25:c6:97:96:39:f7:98:6c:12:28:18:6d:61:b5:a2:c5:
         ac:f7:46:25:18:ca:34:40:fc:72:64:1d:c2:a2:dd:a3:a1:c7:
         9b:86:85:1b:39:65:15:04:83:15:e8:2f:2f:bd:a0:8b:3a:e8:
         de:d1:4f:35:c9:90:10:d6:1b:24:51:13:e0:d3:5b:65:69:43:
         e6:fc:dc:af:c0:ee:19:da:4e:34:92:0a:78:71:0d:e5:c8:2a:
         90:34:8d:3f:e1:23:35:bb:fb:0a:71:c5:68:e1:30:e9:90:4f:
         0f:93:c9:d7:47:36:9b:2c:d5:90:35:29:e4:36:fc:c3:3f:24:
         8f:7d:df:23:96:a1:b4:c2:d9:5c:c5:ce:01:8f:29:7b:3c:a7:
         34:b1:e1:b6:d1:6c:a7:1f:e9:07:8c:25:f8:65:57:2d:12:80:
         74:30:70:f8:3a:3c:8d:7e:41:7d:ea:70:0e:f3:de:62:0f:05:
         3a:1f:18:b3:1b:4c:83:81:dc:f7:6f:ae:7c:97:89:30:5f:14:
         09:51:35:0d:04:36:eb:e5:c3:a9:9b:d0:44:80:e4:9a:2f:20:
         10:35:43:ce:0f:39:28:33:7c:48:f5:f5:6a:ca:d5:f8:8a:42:
         52:40:2e:7d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTVEMkNBRjExMC8GA1UEBRMoRkRGNEJGMDAxM0IxRjFBQUNBMzk1NTFCQTYyNkNB
MjQ2ODNEQUU2NjAeFw0yNjExMTUwMzU5MDJaFw0yNjExMTcwMzU5MDJaMBgxFjAU
BgNVBAMTDTZhZjkyZTA3LThlMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkTE/+YjTfN7SlsQPyg34TAn6b0/+DxSfI+/YHQxLvZ81o20FQlkZca0UK
EULwIcQJ/FYC5/HhilFte7KdEx5dVQEcEth0hSSwLun/eQiaFISyQJyUopm/MPx6
G93VdVxwKSPgR2qRGK8rhSc5DUcJG5F3JzSE8d+iYOcPvGUcJveSapp5yql+Jmmc
O9Z1nGd52IVT9iLnFT6y3Dt1NpAT13Ef1/txIx8y9DjzgypXaM1qaQebCJDf94AI
Vq4Lq1e0StB9pMqPBpLAgHkMjOQcAryrsaCtHQk/FM0Ji0zGnCz3Zwo1dnWa8Ode
9tL79V+k2sj0OPhWxgPdNAVljPwtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZGTD
uvO0tX90JY/F8gdhy3cuabAwHwYDVR0jBBgwFoAU/fS/ABOx8arKOVUbpibKJGg9
rmYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU1RDJDLzFENjRDMkZDQzRDMzExRUU5QzQxOTk0Qzc3NTQxMkU2L19mU19B
Qk94OGFyS09WVWJwaWJLSkdnOXJtWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19mU19BQk94OGFyS09WVWJwaWJLSkdnOXJtWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTVEMkMvMUQ2NEMyRkNDNEMzMTFFRTlDNDE5OTRDNzc1
NDEyRTYvX2ZTX0FCT3g4YXJLT1ZVYnBpYktKR2c5cm1ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDBLwXpkuQR3luA27oYat0YnGREoSXG
l5Y595hsEigYbWG1osWs90YlGMo0QPxyZB3Cot2jocebhoUbOWUVBIMV6C8vvaCL
Ouje0U81yZAQ1hskURPg01tlaUPm/NyvwO4Z2k40kgp4cQ3lyCqQNI0/4SM1u/sK
ccVo4TDpkE8Pk8nXRzabLNWQNSnkNvzDPySPfd8jlqG0wtlcxc4Bjyl7PKc0seG2
0WynH+kHjCX4ZVctEoB0MHD4OjyNfkF96nAO895iDwU6HxizG0yDgdz3b658l4kw
XxQJUTUNBDbr5cOpm9BEgOSaLyAQNUPODzkoM3xI9fVqytX4ikJSQC59
-----END CERTIFICATE-----
Generated at Sun Nov 15 14:39:34 2026 by rpki-client