Error: rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
File:                     UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft (raw, json)
Hash identifier:          JP0RKX2eIDJ5I9Fh4vjEX9oltDYvMDTVwZvaT7BRadE=
Subject key identifier:   9C:25:77:D2:E6:AA:4F:A2:25:ED:CA:F1:95:FC:EE:71:4A:AF:9D:A7
Authority key identifier: 52:30:7E:40:B6:BD:C4:C4:C9:AD:DE:8C:5A:39:3F:77:C6:CA:4A:71
Certificate issuer:       /CN=F3656325AF/serialNumber=52307E40B6BDC4C4C9ADDE8C5A393F77C6CA4A71
Certificate serial:       15
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
Manifest number:          14
Signing time:             Tue 22 Sep 2026 05:52:10 +0000
Manifest this update:     Tue 22 Sep 2026 05:52:10 +0000
Manifest next update:     Thu 24 Sep 2026 05:52:10 +0000
Files and hashes:         1: UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl (hash: MIzFHHItWyOxyucSm5QUT56pUNDc/8ajEj4EHXlIleE=)
                          2: 79C18868A86011F19F3763F9CE1D38B0.roa (hash: vaoELsOFVOg4HJw3Qs5sWp61mQ8soCkWjOfsBwURWO4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656325AF, serialNumber=52307E40B6BDC4C4C9ADDE8C5A393F77C6CA4A71
        Validity
            Not Before: Sep 22 05:52:10 2026 GMT
            Not After : Sep 24 05:52:10 2026 GMT
        Subject: CN=6ab2178a-8d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:70:b9:72:93:70:3b:3c:73:f9:93:ba:7d:42:
                    f9:17:2d:38:1c:11:23:61:34:20:ce:55:c7:38:a7:
                    8a:2e:67:a9:45:75:55:35:94:fc:34:3f:88:3d:a7:
                    b7:0c:0c:74:f8:69:38:5f:3d:8d:75:1a:ab:35:e8:
                    0c:4d:9c:cc:5b:4e:52:83:12:b8:7a:ca:24:58:0e:
                    d7:b7:37:cc:56:f1:39:40:c8:51:a2:be:ec:56:03:
                    1d:fa:3f:34:c2:10:77:54:73:dc:ea:91:64:60:65:
                    38:3e:cd:50:00:9d:cd:ec:09:8b:8d:af:e0:68:dc:
                    99:65:86:25:64:a9:2c:8c:e2:28:9f:92:33:cb:c9:
                    10:f8:11:d7:d5:11:15:eb:52:d7:db:42:a1:c4:63:
                    1e:df:d2:bc:8f:6c:22:c9:a4:d6:32:31:65:eb:41:
                    2b:68:d6:d0:b8:88:ed:23:eb:fd:1a:f7:0a:fd:e5:
                    9b:4e:5a:db:2e:cd:11:81:9b:e8:3b:11:74:2d:2d:
                    af:db:02:f3:75:a0:b2:61:f7:f7:19:c5:e9:23:3f:
                    d1:a2:0b:72:ea:b7:84:29:18:fc:72:28:01:0c:94:
                    34:e1:f3:ad:0a:79:4e:18:bf:57:94:68:89:21:d9:
                    f0:61:a8:bd:22:84:35:ca:3a:3f:2c:f4:50:0f:ef:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:25:77:D2:E6:AA:4F:A2:25:ED:CA:F1:95:FC:EE:71:4A:AF:9D:A7
            X509v3 Authority Key Identifier:
                keyid:52:30:7E:40:B6:BD:C4:C4:C9:AD:DE:8C:5A:39:3F:77:C6:CA:4A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8f:0d:1a:19:eb:6c:5b:9b:be:25:38:4b:e7:c8:7c:9c:9e:
         36:ee:fd:5e:c4:1d:7d:b2:83:16:c0:f2:d0:90:b8:ac:85:ea:
         9c:7d:27:0d:39:56:8c:13:27:ec:03:47:31:e4:8c:b4:54:8f:
         6b:cf:2c:d1:53:00:26:62:81:a6:90:4e:6c:34:ba:1f:40:e0:
         9f:8f:03:56:8b:33:13:eb:8c:03:ca:81:cc:90:17:9f:18:b1:
         5a:3a:ba:bd:ce:88:6f:bb:b9:57:2e:b6:6e:6f:8a:3d:02:40:
         37:59:da:c9:cb:27:46:1c:cd:e3:72:df:20:ac:0d:80:7f:8f:
         75:29:8a:44:d5:f6:7d:7c:1e:d1:bc:47:2f:83:80:26:54:91:
         cf:10:57:a2:6d:37:90:b8:96:17:3f:8e:8f:6e:7f:bd:c0:04:
         bf:1a:2a:6e:5d:14:d1:35:20:2d:eb:c3:54:d2:e2:da:1b:7a:
         72:81:09:23:d0:4f:f8:d6:50:50:9c:c8:36:78:e9:0f:83:ff:
         56:2c:39:a8:45:64:a6:50:a6:de:b3:e5:1b:ff:17:b4:43:af:
         27:fa:dc:8c:d9:38:8d:46:fe:46:6f:d3:af:2d:c9:c7:4f:db:
         c4:cd:9a:59:4e:38:c9:d5:5e:34:ce:35:20:98:16:3e:a7:5a:
         8f:b9:44:f9
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBFTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NjMyNUFGMTEwLwYDVQQFEyg1MjMwN0U0MEI2QkRDNEM0QzlBRERFOEM1QTM5M0Y3
N0M2Q0E0QTcxMB4XDTI2MDkyMjA1NTIxMFoXDTI2MDkyNDA1NTIxMFowGDEWMBQG
A1UEAxMNNmFiMjE3OGEtOGQyNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANJwuXKTcDs8c/mTun1C+RctOBwRI2E0IM5Vxzinii5nqUV1VTWU/DQ/iD2n
twwMdPhpOF89jXUaqzXoDE2czFtOUoMSuHrKJFgO17c3zFbxOUDIUaK+7FYDHfo/
NMIQd1Rz3OqRZGBlOD7NUACdzewJi42v4GjcmWWGJWSpLIziKJ+SM8vJEPgR19UR
FetS19tCocRjHt/SvI9sIsmk1jIxZetBK2jW0LiI7SPr/Rr3Cv3lm05a2y7NEYGb
6DsRdC0tr9sC83WgsmH39xnF6SM/0aILcuq3hCkY/HIoAQyUNOHzrQp5Thi/V5Ro
iSHZ8GGovSKENco6Pyz0UA/vo4UCAwEAAaOCArgwggK0MB0GA1UdDgQWBBScJXfS
5qpPoiXtyvGV/O5xSq+dpzAfBgNVHSMEGDAWgBRSMH5Atr3ExMmt3oxaOT93xspK
cTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTYzMjUvMkQ2OEQzQTRBODYwMTFGMUE3NTc0NkY5Q0UxRDM4QjAvVWpCLVFM
YTl4TVRKcmQ2TVdqa19kOGJLU25FLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVWpCLVFMYTl4TVRKcmQ2TVdqa19kOGJLU25FLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1NjMyNS8yRDY4RDNBNEE4NjAxMUYxQTc1NzQ2RjlDRTFE
MzhCMC9VakItUUxhOXhNVEpyZDZNV2prX2Q4YktTbkUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKGPDRoZ62xbm74lOEvnyHycnjbu/V7E
HX2ygxbA8tCQuKyF6px9Jw05VowTJ+wDRzHkjLRUj2vPLNFTACZigaaQTmw0uh9A
4J+PA1aLMxPrjAPKgcyQF58YsVo6ur3OiG+7uVcutm5vij0CQDdZ2snLJ0YczeNy
3yCsDYB/j3UpikTV9n18HtG8Ry+DgCZUkc8QV6JtN5C4lhc/jo9uf73ABL8aKm5d
FNE1IC3rw1TS4tobenKBCSPQT/jWUFCcyDZ46Q+D/1YsOahFZKZQpt6z5Rv/F7RD
ryf63IzZOI1G/kZv068tycdP28TNmllOOMnVXjTONSCYFj6nWo+5RPk=
-----END CERTIFICATE-----
Generated at Wed Sep 23 00:53:10 2026 by rpki-client