Error: rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
File:                     og4gZ_DbeD3jcj4jFRfcfp_lutM.mft (raw, json)
Hash identifier:          NlUptIOlgviPHqK1Ew14WDZgcdMWe8JOV7Wx7dsYn7k=
Subject key identifier:   50:75:7E:BE:C9:64:82:32:E1:96:48:B5:D3:73:F1:A2:18:5A:D4:C2
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0646
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
Manifest number:          05EF
Signing time:             Sun 15 Nov 2026 03:15:34 +0000
Manifest this update:     Sun 15 Nov 2026 03:15:33 +0000
Manifest next update:     Tue 17 Nov 2026 03:15:33 +0000
Files and hashes:         1: og4gZ_DbeD3jcj4jFRfcfp_lutM.crl (hash: vG+nwEYDp6HAdAVUf6SjBaknsvn5hj+bvMvp4AlwnSQ=)
                          2: 9A0B5D56965411F199C7B7DFCE1D38B0.roa (hash: 9ydbrA3SKXkY1woYL88oh9nc8YGjXLXv6PoUJBg2810=)
                          3: 36C6B1A2965211F1AC723ED1CE1D38B0.roa (hash: mD7PSAHv8qv+Nm8H6OHQZ231IAWKVsKlIfYmZU5lrUc=)
                          4: B9682E08965011F19D99F8C8CE1D38B0.roa (hash: B4oYheHzHKAU3LOEjkRdJt9oLNCyqzoRIEPVuzXDe5U=)
                          5: B393449A965511F1994C44E6CE1D38B0.roa (hash: yPc+ltvkVldMd+mg8G94PzZBrHhZ2Z6pQQ+sSKeP/gg=)
                          6: 6B1CADC4964A11F183FD50A3CE1D38B0.roa (hash: Q3bv+/3qzjoTU/OKx/laZYEE7INTlvCdy+ChzWaJdYM=)
                          7: AABDD70C965711F1BE51AEF2CE1D38B0.roa (hash: Z0i6TcmIXn9kp704Tq1dtAyqgD1SdNCro1rAUYTSegM=)
                          8: 0D690D88965111F1ADA822C9CE1D38B0.roa (hash: 9hnmT+6YWfz8wjXRc165uqZHOTs37SFKJzvLVlmoeF4=)
                          9: 452BFAA2964F11F1B88796C0CE1D38B0.roa (hash: IiMJujnL/VBB6voYiIgew+oovEPcR9nYPKYUhXrFjDA=)
                          10: 960FDF48964911F19D526C1DCF1D38B0.roa (hash: AVhNkjwkO2e7IM680bLe+1azTxSoOu5cdxDnIen3tpQ=)
                          11: 7D941AD0965611F19A827AEACE1D38B0.roa (hash: 2gcd6W5bGv8XPY7TPxINGmpsn4kpkNoI84Aj+LDRq4E=)
                          12: 7952BE8A964D11F1825431B4CE1D38B0.roa (hash: HjvUFT6JThr4YWNVzTDVNW61g/yIvKBsGAr5vlAGCt0=)
                          13: 143330BE964A11F1985DE1A0CE1D38B0.roa (hash: EGcuzgU3K51qaDfz+xSAHphkzjp93d3M2YobU/ODCYI=)
                          14: 71E3E33A964E11F1A68361BCCE1D38B0.roa (hash: x5Otd8hdlNV/UUKeHjaRjXYUsLKulBEKDrmSphp2Rv4=)
                          15: E2B8980A965611F192B48AEECE1D38B0.roa (hash: H4Ay4vxbV8N8VLbE7TI8DM+fihDQzXEohxuW4qKdQOk=)
                          16: 2A47C3AC965311F18D5555D7CE1D38B0.roa (hash: qjEV8QH6QAXL5LpzhD+gWImbfu5cMq7Xzhp/85av8GA=)
                          17: E34E8CE4964B11F1BA3BC8ABCE1D38B0.roa (hash: FUldvyvWluOkUisORmlMzKGCqazC5G2frJ97FyzShnM=)
                          18: 4A5966C6964B11F1974C98A7CE1D38B0.roa (hash: 3lUysCJ7KKok/t8ftl1wKV8RNNYxC42RDDmAVCv2Tlc=)
                          19: 0D09D244964E11F1876D5FB8CE1D38B0.roa (hash: cBz5B9DvFm3IFYaaq62zlXtCoIspoWLOEYI14IDW7Uc=)
                          20: D1B35C4A964A11F1A9334AA5CE1D38B0.roa (hash: CywFwXwO57V+G+qKXanYKXzslXo+pvmgnB0sPfz4Qlg=)
                          21: 0003EB00965511F1A89214E2CE1D38B0.roa (hash: bJ/AwVbXvH5oI9Wq9Bx4pjeoWSjMX2y9ocj2t2wOSlQ=)
                          22: 38A9976A964C11F1A2ABB1ADCE1D38B0.roa (hash: IuA8djpn8pomAqnkttuVs83YEh3kh4BoZRzPHCzyxJs=)
                          23: D2EDFC9C964E11F199968ABCCE1D38B0.roa (hash: 80PKzJSUUvOfmGmgnLKimc/Cz5K72HQjxrAx+ivf+qY=)
                          24: BBB288DC964811F1A3562917CF1D38B0.roa (hash: GjZxB4dPZqHDPeSVsknSX3nyrmfDyng8H/MO1sMugm0=)
                          25: BEC2EABC964D11F1966B28B8CE1D38B0.roa (hash: dBXag7eweIDHY4x5vWF18oTMja/pLioNe8TURJJOtVk=)
                          26: 87484988965211F18E4923D3CE1D38B0.roa (hash: A7BQL9sVmwfNQ72W1lrec16zLPKtPRst/xTvfysNk+U=)
                          27: 506DD63C965511F1968EF6E3CE1D38B0.roa (hash: n+XL1c/UPDisymY/PcMZ8UKIJ0mv9YkHTerYJqqWEnM=)
                          28: 7245468C965011F1842EC3C6CE1D38B0.roa (hash: HrQYfa3tnHofYHdCTBNG+G+Rx2CjskAj29G6YJzxm5E=)
                          29: 74CB7A60965111F188B326CDCE1D38B0.roa (hash: KenKvsRCEIepoC4MYAMufus226uqT0wFb407ViaQ1Dc=)
                          30: AA2F562C964C11F1BFF1F6AFCE1D38B0.roa (hash: qo9TNoX+DuMTeTCBTnGp29BHxz9ddk8HS98FpNYcgyI=)
                          31: 1B0CB2C4965011F1B9BFD8C4CE1D38B0.roa (hash: BM4MwkU5kxGeZnZ9A0z5MKng3av6eYK6XmnEPpPwTGo=)
                          32: 47728E20965411F1BBD9CDDDCE1D38B0.roa (hash: Qeo3H1HGcevLZTN4Nuv51fd5pxKh2Gq/5XICKwoKtgw=)
                          33: 3DF49F7A965711F18DC5A2EECE1D38B0.roa (hash: GFdwEQLG07+8YTdc9CZnVdtHh60WdmHPaORquH0PD/Y=)
                          34: 4612A3AA964811F186903615CF1D38B0.roa (hash: ZLtzEtpqJTK3DXyZfk5lHAYHoD8VrbfAWoJlVWHWVZs=)
                          35: 3130C2F4964911F1A2536719CF1D38B0.roa (hash: CKqRQ8VCsWfAtTEx+RFsh/l0NkveqUa6IZQlvQAby7E=)
                          36: 175C9016964D11F1BA0805B4CE1D38B0.roa (hash: VUSs4tGN7yUEV7A4E7Vvnz6ZdEu9kBruV6NHxloQvRY=)
                          37: 0F939D76965611F18250F7E9CE1D38B0.roa (hash: nc3mYP9PwxD0FAbglODXqz1JWBoC/DwJfMZdRVYCz/4=)
                          38: C66F961E964F11F1BF4A62C4CE1D38B0.roa (hash: HJdeVzZ+KAFj48NbnrJ/Sd5n8n4QCNPNvEuR5VhY8mw=)
                          39: E4C5FF60965211F1906D69D5CE1D38B0.roa (hash: 6Q3VI0zTOvrmijMD5CMU7nIvjfUcjzl1TMQp2+JoLig=)
                          40: C4646E40965311F1BFDBA2D9CE1D38B0.roa (hash: C4lZeYETrv/x0WVhqFFuv6SNxCRMb2VywH8lQ3I94B4=)
                          41: 66E964AC964711F195C4B810CF1D38B0.roa (hash: ILS3iLDN82STJQc2xF3bz3uYstdUmIRt5SQtcGnOkDE=)
                          42: 069DAC72965411F194148ADDCE1D38B0.roa (hash: 3PbP4tjF3F+6KtSaiqtH3lqR4s/PfsHzCc/W8sRwDbo=)
                          43: D549DBCA964711F1B59E2C11CF1D38B0.roa (hash: 0fB1EX6gjMfqiJL3NlytdowABaOXAWKUSBhWC8d6n3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1606 (0x646)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Nov 15 03:15:33 2026 GMT
            Not After : Nov 17 03:15:33 2026 GMT
        Subject: CN=6af923d6-cd02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cb:43:54:0b:5a:44:c6:a4:bd:24:8b:3b:94:
                    02:c7:83:6d:f8:bd:66:ba:67:03:cf:28:fd:d9:28:
                    b6:59:14:5b:b5:2e:93:5e:d6:25:04:b2:9e:4d:d1:
                    d2:27:60:18:39:05:b5:70:98:67:fe:62:07:f5:1a:
                    a7:b2:85:7b:37:9f:0d:4b:54:41:f1:76:89:d8:c2:
                    ef:e3:96:aa:2c:ab:d1:30:71:4f:f4:86:15:2b:5c:
                    92:f4:48:cd:54:0d:6b:86:2d:1a:4c:74:8d:6f:7d:
                    7a:9e:90:0b:59:b9:8b:d5:89:fd:c0:15:78:41:e5:
                    db:1f:f6:ec:f9:45:86:fe:df:40:f2:79:98:53:b2:
                    53:19:e3:c9:86:aa:f0:21:6c:45:75:b6:f3:41:e7:
                    e2:c5:10:32:fe:48:fb:b0:74:82:80:69:5d:85:ce:
                    22:48:30:c4:3b:3d:71:ff:fd:88:9a:0d:9b:c6:8c:
                    04:a8:9f:41:e3:0a:36:8d:cc:60:2c:37:12:0c:44:
                    f6:55:a3:a8:da:af:01:10:6f:7f:f6:4a:4b:6f:1f:
                    28:76:5f:af:a2:99:65:ec:60:0f:28:2f:28:c2:5c:
                    05:3c:24:f7:28:c4:92:a3:2c:3b:a0:fa:af:a0:e2:
                    b4:f7:8a:1c:b8:9a:8f:05:26:1a:1e:0c:03:10:4e:
                    24:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:75:7E:BE:C9:64:82:32:E1:96:48:B5:D3:73:F1:A2:18:5A:D4:C2
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:d2:5a:ba:44:07:a9:2d:01:6a:49:0c:c3:7d:c0:83:5d:f0:
         53:9d:3b:c7:64:53:86:85:1d:60:db:b0:4b:35:8c:97:8c:32:
         2a:64:04:80:00:ec:60:93:13:33:15:73:7b:9e:0b:32:52:e5:
         dc:37:7f:ca:0a:71:ce:d8:52:db:1b:fa:c8:00:ed:e9:56:6c:
         66:dd:4a:f1:79:3e:f0:35:04:15:b7:89:5e:35:6e:66:b3:59:
         36:1d:97:51:80:b5:b0:be:b1:e3:93:a9:6e:d3:4c:21:cc:28:
         4e:61:6b:87:22:7e:4d:67:d1:ce:50:fb:90:fb:77:cb:d9:91:
         5e:c8:1c:56:3a:6e:64:29:a9:29:e6:ec:94:24:44:29:ff:fd:
         c1:77:b9:53:cf:dd:73:4b:dd:83:e6:35:97:29:60:9c:bb:f4:
         c9:f5:9c:ae:b5:80:c2:87:af:46:fd:2b:c8:d1:b7:34:0f:2f:
         3c:0c:4d:92:7a:8e:68:83:2b:c2:d1:3a:f8:ca:e1:75:00:44:
         64:84:39:65:13:27:92:83:eb:8d:d9:22:a2:a4:f2:71:a5:89:
         31:90:c3:eb:38:67:07:a8:aa:00:9e:db:99:73:5b:31:28:c6:
         1d:9e:d2:71:ec:a2:e6:36:be:b6:37:5d:10:04:28:35:37:4d:
         b4:b3:c2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:27:24 2026 by rpki-client