Error: rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          wSPb8vMYvEOj4ul0SoXvALzVyDAsKu0oxIp8FcD63T4=
Subject key identifier:   C1:73:2B:92:88:CC:9B:F6:8A:7F:10:E3:2D:E9:4F:73:D0:7A:98:D4
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       03E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          03DE
Signing time:             Fri 25 Sep 2026 04:03:30 +0000
Manifest this update:     Fri 25 Sep 2026 04:03:29 +0000
Manifest next update:     Sun 27 Sep 2026 04:03:29 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: jA3mzuJFwZHOYb8CMxi1+/fLrxhJm8M0Ibq8AVROqcU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:03:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 995 (0x3e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Sep 25 04:03:29 2026 GMT
            Not After : Sep 27 04:03:29 2026 GMT
        Subject: CN=6ab5f292-731c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:99:94:dd:d5:83:90:af:f1:0d:49:b5:00:
                    91:d8:ff:93:64:13:4a:06:fd:c4:6d:8c:59:b5:31:
                    27:6b:8d:20:10:41:b7:0e:d5:49:57:cc:76:c1:b0:
                    45:85:ad:98:81:7c:45:29:18:ff:49:f6:b0:86:30:
                    b5:3f:36:61:83:d2:3a:e7:13:58:14:cb:44:8f:b3:
                    96:9b:c5:f6:b1:e2:6e:72:0a:4e:3f:d0:20:ad:ef:
                    49:b8:5c:da:fe:f0:0d:cb:af:c5:be:7c:24:6d:99:
                    77:3c:b7:4b:d1:5c:40:6b:2b:49:bc:8b:a8:d3:62:
                    07:91:44:5c:00:22:13:0c:65:5a:ee:97:29:6c:8b:
                    b1:d4:3a:72:f8:62:28:93:7c:a6:b1:f9:60:a4:e8:
                    c7:2b:4d:76:30:dc:42:d6:2f:19:95:b4:35:f0:e5:
                    ae:8e:2f:ee:18:b6:71:59:15:9b:51:ba:d0:b3:52:
                    de:4d:51:df:c1:fc:05:6c:54:09:5e:30:6b:82:e2:
                    e0:03:e2:22:27:56:1e:0f:32:09:a6:57:b8:a7:60:
                    5d:79:52:c6:0e:ad:64:c2:43:c5:32:b4:b2:b6:6a:
                    ed:06:c6:3c:e9:81:d7:73:84:60:dd:e3:54:7d:92:
                    fc:4b:b6:09:37:56:fb:c4:5b:36:db:d2:94:8d:d5:
                    bd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:73:2B:92:88:CC:9B:F6:8A:7F:10:E3:2D:E9:4F:73:D0:7A:98:D4
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:71:22:7c:31:fb:61:2f:97:ee:0f:3f:62:3c:34:fa:0f:a1:
         53:bd:57:55:46:24:f1:0e:9d:e9:c1:ad:a5:64:2f:38:39:66:
         5a:51:c6:93:75:4d:d5:0b:da:b6:65:bd:ed:ee:13:f9:cb:01:
         86:d0:e3:43:49:9b:f3:cb:68:b8:38:25:8a:ef:1e:8d:a6:e5:
         e7:c6:b1:1a:00:ec:50:8d:d3:d4:47:da:ca:82:fc:c4:46:99:
         b2:73:e9:7f:91:34:50:75:e6:97:f4:20:c2:dd:cd:d1:cb:ec:
         9a:77:7f:b6:6e:cd:af:3c:b3:35:86:4c:1b:de:7d:4a:75:a6:
         7a:0a:42:fa:39:a2:89:94:66:e1:73:91:14:6b:32:0a:cc:49:
         b7:72:63:eb:45:a0:e3:3b:be:19:34:b9:41:7e:96:4c:6c:02:
         32:0d:e1:a1:6f:e2:9b:f0:85:90:c1:f6:be:2c:27:9f:83:25:
         ee:1f:29:99:9b:72:2c:27:c7:84:72:26:de:f4:e8:1c:6d:37:
         97:3c:27:7c:30:df:fb:f4:50:f7:10:24:17:12:0a:6f:9a:2b:
         34:c6:27:76:60:98:ef:9a:f3:39:16:93:c3:ae:61:3e:c5:2e:
         0f:0d:6c:1b:78:75:f1:ba:a6:2f:28:1f:87:e9:35:5b:b6:3c:
         50:d1:1a:66
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Njc1RTNBRjExMC8GA1UEBRMoODlCRDE0NkJBRDcyMUU5Qzk0MTlDNTA5QzZFQjJE
NURFQ0I5NjcyMTAeFw0yNjA5MjUwNDAzMjlaFw0yNjA5MjcwNDAzMjlaMBgxFjAU
BgNVBAMTDTZhYjVmMjkyLTczMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDIRJmU3dWDkK/xDUm1AJHY/5NkE0oG/cRtjFm1MSdrjSAQQbcO1UlXzHbB
sEWFrZiBfEUpGP9J9rCGMLU/NmGD0jrnE1gUy0SPs5abxfax4m5yCk4/0CCt70m4
XNr+8A3Lr8W+fCRtmXc8t0vRXEBrK0m8i6jTYgeRRFwAIhMMZVrulylsi7HUOnL4
YiiTfKax+WCk6McrTXYw3ELWLxmVtDXw5a6OL+4YtnFZFZtRutCzUt5NUd/B/AVs
VAleMGuC4uAD4iInVh4PMgmmV7inYF15UsYOrWTCQ8UytLK2au0GxjzpgddzhGDd
41R9kvxLtgk3VvvEWzbb0pSN1b2lAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwXMr
kojMm/aKfxDjLelPc9B6mNQwHwYDVR0jBBgwFoAUib0Ua61yHpyUGcUJxustXey5
ZyEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY3NUUzL0RBNkExMzYyRDNFRjExRUVCMEJGN0Y0Rjc3NTQxMkU2L2liMFVh
NjF5SHB5VUdjVUp4dXN0WGV5NVp5RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2liMFVhNjF5SHB5VUdjVUp4dXN0WGV5NVp5RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Njc1RTMvREE2QTEzNjJEM0VGMTFFRUIwQkY3RjRGNzc1
NDEyRTYvaWIwVWE2MXlIcHlVR2NVSnh1c3RYZXk1WnlFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBscSJ8MfthL5fuDz9iPDT6D6FTvVdV
RiTxDp3pwa2lZC84OWZaUcaTdU3VC9q2Zb3t7hP5ywGG0ONDSZvzy2i4OCWK7x6N
puXnxrEaAOxQjdPUR9rKgvzERpmyc+l/kTRQdeaX9CDC3c3Ry+yad3+2bs2vPLM1
hkwb3n1KdaZ6CkL6OaKJlGbhc5EUazIKzEm3cmPrRaDjO74ZNLlBfpZMbAIyDeGh
b+Kb8IWQwfa+LCefgyXuHymZm3IsJ8eEcibe9OgcbTeXPCd8MN/79FD3ECQXEgpv
mis0xid2YJjvmvM5FpPDrmE+xS4PDWwbeHXxuqYvKB+H6TVbtjxQ0Rpm
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:07:24 2026 by rpki-client