Error: rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
File:                     E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft (raw, json)
Hash identifier:          X/SBZbcwXZPJHhbVzHNwY3QbZGjNiKN8VsF4xiqR8Oc=
Subject key identifier:   BE:EF:23:2A:D7:2E:4C:6E:CA:FE:DF:08:4B:E7:79:5D:39:96:27:5F
Authority key identifier: 13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4
Certificate issuer:       /CN=F3655DF0AF/serialNumber=13AA2F705F4E0FD368447CF287813B56812D56D4
Certificate serial:       35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
Manifest number:          33
Signing time:             Sun 27 Sep 2026 05:50:13 +0000
Manifest this update:     Sun 27 Sep 2026 05:50:12 +0000
Manifest next update:     Tue 29 Sep 2026 05:50:12 +0000
Files and hashes:         1: E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl (hash: Zo+lZJQCY2R7l0ArA8QL1hAoZ9wU5/k7tlfUm6XGFqg=)
                          2: 819517FE94D711F1A3C9E0D4CE1D38B0.roa (hash: KGYLp5bJccYbpYXZZ1ntigtAMQHrt+LgJKaGPbfZ2Nc=)
                          3: B2DD966094D711F1B577ECD4CE1D38B0.roa (hash: gMWCBqKn+1mGnPLNY0688GoAzfso8FSk//fc3bwqGJA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 05:50:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655DF0AF, serialNumber=13AA2F705F4E0FD368447CF287813B56812D56D4
        Validity
            Not Before: Sep 27 05:50:12 2026 GMT
            Not After : Sep 29 05:50:12 2026 GMT
        Subject: CN=6ab8ae95-98cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:89:fd:a5:7b:18:8a:e7:63:e5:d6:ac:60:27:
                    9d:8b:2c:94:b4:1d:9d:b0:2e:d6:04:1c:28:cc:6f:
                    d6:60:71:82:81:37:8b:55:f8:3c:02:8c:60:8f:4a:
                    59:e9:7a:61:b8:8a:d4:1b:99:83:df:13:b9:83:ab:
                    7d:98:48:ce:2f:af:fc:6b:83:fd:1c:d8:14:4e:04:
                    3f:c6:13:66:e9:0d:40:08:0a:9a:e5:78:ac:92:53:
                    3d:17:1c:b3:07:7b:02:5d:29:ad:9d:09:95:f9:78:
                    98:a0:f4:10:63:b4:21:7b:c5:e6:25:a0:18:34:6f:
                    c6:10:6e:2f:06:fe:2a:c5:93:6a:0c:20:fc:c8:55:
                    0b:97:87:1d:da:33:5f:92:3a:c5:3d:4b:6f:dd:7b:
                    a0:bd:4c:6a:22:e5:91:79:0b:b4:e6:93:8e:a9:96:
                    e4:e8:4a:5a:2e:40:9d:11:22:21:a8:de:12:4e:b7:
                    6c:28:18:6b:d6:7b:15:23:87:4d:78:1f:b0:75:16:
                    cd:62:11:1c:cd:0f:64:f1:66:a8:cc:ba:c8:b0:53:
                    ef:e5:5b:cc:c3:5c:b7:0b:a2:bf:b1:4e:ba:7f:93:
                    c4:cb:96:bd:38:dd:cf:ca:02:56:be:dc:62:ac:4b:
                    e3:b2:a8:d1:bb:55:1a:fc:89:aa:3e:d4:ba:89:70:
                    e1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:EF:23:2A:D7:2E:4C:6E:CA:FE:DF:08:4B:E7:79:5D:39:96:27:5F
            X509v3 Authority Key Identifier:
                keyid:13:AA:2F:70:5F:4E:0F:D3:68:44:7C:F2:87:81:3B:56:81:2D:56:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655DF0/B70B4B5494CF11F199F198A8CE1D38B0/E6ovcF9OD9NoRHzyh4E7VoEtVtQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5d:d8:3e:34:76:07:aa:ac:57:dd:79:76:f7:5a:fe:01:52:
         e7:91:b1:49:4b:df:99:41:69:ed:c7:b8:d7:0c:81:99:ad:a3:
         e2:fc:46:ba:20:8e:dc:e2:68:a0:04:fa:85:56:fb:1e:dc:79:
         3a:98:7e:bb:85:c9:c2:e0:cb:6a:ed:82:d3:e3:d1:dd:7f:ad:
         eb:3c:50:6b:a9:4d:60:96:d6:d8:79:2c:96:4e:41:5e:71:09:
         0f:a1:43:ed:44:36:b0:67:34:ff:ca:8f:11:61:d5:7f:e0:fe:
         2f:25:d0:35:f8:b4:70:25:bb:4e:c0:07:f8:3f:4c:2d:f8:11:
         fb:48:fd:95:00:ce:ae:2a:49:5c:e9:b6:0a:ac:73:bd:84:89:
         d3:41:21:66:5a:32:20:27:08:02:97:70:ff:86:d3:e4:60:72:
         7d:ee:c5:48:18:1e:2b:56:59:59:28:41:79:20:54:ae:08:96:
         82:26:cc:a8:f7:3e:aa:3e:a3:dd:1f:39:04:ba:38:30:b4:12:
         40:b9:3c:4e:ca:8e:d1:57:dc:3d:b3:e5:bf:e0:2d:48:42:12:
         56:e5:f1:e6:9a:d5:19:40:48:07:77:9d:fb:a8:cd:24:04:b3:
         3e:ae:74:80:9c:09:e4:82:89:7e:dc:b0:1a:d4:73:82:90:f4:
         99:71:87:ec
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBNTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NURGMEFGMTEwLwYDVQQFEygxM0FBMkY3MDVGNEUwRkQzNjg0NDdDRjI4NzgxM0I1
NjgxMkQ1NkQ0MB4XDTI2MDkyNzA1NTAxMloXDTI2MDkyOTA1NTAxMlowGDEWMBQG
A1UEAxMNNmFiOGFlOTUtOThjYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO+J/aV7GIrnY+XWrGAnnYsslLQdnbAu1gQcKMxv1mBxgoE3i1X4PAKMYI9K
Wel6YbiK1BuZg98TuYOrfZhIzi+v/GuD/RzYFE4EP8YTZukNQAgKmuV4rJJTPRcc
swd7Al0prZ0Jlfl4mKD0EGO0IXvF5iWgGDRvxhBuLwb+KsWTagwg/MhVC5eHHdoz
X5I6xT1Lb917oL1MaiLlkXkLtOaTjqmW5OhKWi5AnREiIajeEk63bCgYa9Z7FSOH
TXgfsHUWzWIRHM0PZPFmqMy6yLBT7+VbzMNctwuiv7FOun+TxMuWvTjdz8oCVr7c
YqxL47Ko0btVGvyJqj7Uuolw4Y8CAwEAAaOCArgwggK0MB0GA1UdDgQWBBS+7yMq
1y5Mbsr+3whL53ldOZYnXzAfBgNVHSMEGDAWgBQTqi9wX04P02hEfPKHgTtWgS1W
1DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTVERjAvQjcwQjRCNTQ5NENGMTFGMTk5RjE5OEE4Q0UxRDM4QjAvRTZvdmNG
OU9EOU5vUkh6eWg0RTdWb0V0VnRRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRTZvdmNGOU9EOU5vUkh6eWg0RTdWb0V0VnRRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1NURGMC9CNzBCNEI1NDk0Q0YxMUYxOTlGMTk4QThDRTFE
MzhCMC9FNm92Y0Y5T0Q5Tm9SSHp5aDRFN1ZvRXRWdFEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIdd2D40dgeqrFfdeXb3Wv4BUueRsUlL
35lBae3HuNcMgZmto+L8RrogjtziaKAE+oVW+x7ceTqYfruFycLgy2rtgtPj0d1/
res8UGupTWCW1th5LJZOQV5xCQ+hQ+1ENrBnNP/KjxFh1X/g/i8l0DX4tHAlu07A
B/g/TC34EftI/ZUAzq4qSVzptgqsc72EidNBIWZaMiAnCAKXcP+G0+Rgcn3uxUgY
HitWWVkoQXkgVK4IloImzKj3Pqo+o90fOQS6ODC0EkC5PE7KjtFX3D2z5b/gLUhC
Elbl8eaa1RlASAd3nfuozSQEsz6udICcCeSCiX7csBrUc4KQ9Jlxh+w=
-----END CERTIFICATE-----
Generated at Mon Sep 28 05:16:39 2026 by rpki-client