Error: rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
File:                     SBnPn32B-6etRokY9hUM1Ly83Ac.mft (raw, json)
Hash identifier:          gFtwyNLLMH/KQlM6B8DQnzIrWdb2/zrR6ADVZ0QkFiw=
Subject key identifier:   24:F9:45:5C:24:D9:7A:13:B7:20:2A:B5:3D:5B:60:BA:2F:C2:5A:B4
Authority key identifier: 48:19:CF:9F:7D:81:FB:A7:AD:46:89:18:F6:15:0C:D4:BC:BC:DC:07
Certificate issuer:       /CN=F366C1FCAF/serialNumber=4819CF9F7D81FBA7AD468918F6150CD4BCBCDC07
Certificate serial:       22
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
Manifest number:          21
Signing time:             Sat 14 Nov 2026 06:01:53 +0000
Manifest this update:     Sat 14 Nov 2026 06:01:53 +0000
Manifest next update:     Mon 16 Nov 2026 06:01:53 +0000
Files and hashes:         1: SBnPn32B-6etRokY9hUM1Ly83Ac.crl (hash: uLuWYZ5wlRdqZlqX0AQuc3gnxn8Lnv/L9skcj9yKlWU=)
                          2: E12332E6C7AE11F1A98CF6DBCE1D38B0.roa (hash: LkxUb/2kG/qcaw2E5m9e+l2TxbZ1epEA25XMv5pYoEk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C1FCAF, serialNumber=4819CF9F7D81FBA7AD468918F6150CD4BCBCDC07
        Validity
            Not Before: Nov 14 06:01:53 2026 GMT
            Not After : Nov 16 06:01:53 2026 GMT
        Subject: CN=6af7f951-1100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:56:9d:1c:dd:5b:0d:a0:a4:30:f0:96:06:
                    ef:e3:a9:85:ca:63:c5:85:25:27:78:10:95:e2:ee:
                    62:07:8a:bb:ba:3a:36:ae:34:a3:d6:9e:55:c6:84:
                    12:7b:f8:74:db:5a:1a:05:5f:7d:9d:ac:26:57:27:
                    09:82:1b:7a:a3:14:82:37:64:3e:08:61:5b:9b:92:
                    f7:6f:fd:1a:19:ec:61:8e:ec:38:a3:24:55:fc:f3:
                    14:c2:d6:e7:60:59:b5:e9:6e:67:57:18:49:23:7d:
                    01:bd:2e:1b:9b:ae:83:54:59:0e:d7:b6:c8:68:07:
                    3e:25:8b:97:d5:ab:bf:25:71:12:5b:a2:b6:36:ec:
                    61:b2:e8:72:8c:be:be:8e:10:17:86:e8:c5:9e:34:
                    c2:ce:09:47:db:1b:90:51:c1:a0:33:51:bf:ae:ca:
                    4e:d8:af:8f:d2:6e:0b:3a:d1:e2:7a:2e:39:07:6d:
                    73:c6:ea:c9:1f:1c:34:81:49:fa:47:07:6c:87:eb:
                    f6:94:12:ad:f2:80:d8:69:d1:b4:16:e9:40:18:06:
                    2a:4a:5f:8e:d7:cd:89:0f:2c:d1:fe:dc:be:6b:66:
                    c4:44:f4:38:f1:6f:d1:a8:8b:51:b8:e0:ff:f1:18:
                    d6:1f:ba:db:c0:aa:89:f2:f6:ce:fe:ec:03:72:4f:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F9:45:5C:24:D9:7A:13:B7:20:2A:B5:3D:5B:60:BA:2F:C2:5A:B4
            X509v3 Authority Key Identifier:
                keyid:48:19:CF:9F:7D:81:FB:A7:AD:46:89:18:F6:15:0C:D4:BC:BC:DC:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SBnPn32B-6etRokY9hUM1Ly83Ac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C1FC/F5CEB8CEC7AD11F1908E3CD7CE1D38B0/SBnPn32B-6etRokY9hUM1Ly83Ac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f4:07:b7:ad:b7:f0:44:de:be:fc:c7:e4:69:f1:c8:f6:bc:
         cc:5d:63:e2:39:e4:47:bd:f8:d7:a8:55:e1:4d:a6:cd:2e:5f:
         77:1d:c6:db:54:f6:46:4b:28:dc:ce:9b:a2:32:91:a2:34:3d:
         d0:7e:7c:0a:60:4e:e8:35:f5:4c:0f:bc:b8:39:7c:b5:35:a6:
         1e:9b:37:71:c8:4d:20:e6:78:33:37:f6:1c:04:15:84:63:05:
         95:2c:31:1f:eb:36:64:37:50:4c:e8:84:28:81:42:3a:37:7b:
         f3:48:e8:08:1d:ad:eb:8f:b8:8a:3b:3f:94:2c:12:9b:35:e9:
         7b:b0:6e:4c:b0:8c:04:bc:71:06:da:b0:fa:99:52:e6:3c:fd:
         dc:c7:25:fe:33:b6:15:bf:14:eb:d9:63:22:7d:bd:85:05:97:
         8d:b6:bb:ae:28:41:c3:bc:fb:55:23:3f:e0:c4:7a:2d:bc:2a:
         af:97:26:38:ee:f1:ea:5b:0b:10:ca:e0:9f:a5:f8:7d:4e:67:
         e3:ae:b6:8f:d9:d8:75:2c:8a:71:fa:b6:af:a2:a7:5f:77:2b:
         a7:52:57:87:60:27:b2:b3:d9:84:38:d4:fe:50:e1:1b:bb:2d:
         a5:28:96:a0:63:97:05:b4:30:1a:d4:a1:9e:2c:a9:8f:16:24:
         ee:6b:30:7d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBIjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
QzFGQ0FGMTEwLwYDVQQFEyg0ODE5Q0Y5RjdEODFGQkE3QUQ0Njg5MThGNjE1MENE
NEJDQkNEQzA3MB4XDTI2MTExNDA2MDE1M1oXDTI2MTExNjA2MDE1M1owGDEWMBQG
A1UEAxMNNmFmN2Y5NTEtMTEwMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMkEVp0c3VsNoKQw8JYG7+OphcpjxYUlJ3gQleLuYgeKu7o6Nq40o9aeVcaE
Env4dNtaGgVffZ2sJlcnCYIbeqMUgjdkPghhW5uS92/9GhnsYY7sOKMkVfzzFMLW
52BZteluZ1cYSSN9Ab0uG5uug1RZDte2yGgHPiWLl9WrvyVxEluitjbsYbLocoy+
vo4QF4boxZ40ws4JR9sbkFHBoDNRv67KTtivj9JuCzrR4nouOQdtc8bqyR8cNIFJ
+kcHbIfr9pQSrfKA2GnRtBbpQBgGKkpfjtfNiQ8s0f7cvmtmxET0OPFv0aiLUbjg
//EY1h+628CqifL2zv7sA3JPyasCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQk+UVc
JNl6E7cgKrU9W2C6L8JatDAfBgNVHSMEGDAWgBRIGc+ffYH7p61GiRj2FQzUvLzc
BzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkMxRkMvRjVDRUI4Q0VDN0FEMTFGMTkwOEUzQ0Q3Q0UxRDM4QjAvU0JuUG4z
MkItNmV0Um9rWTloVU0xTHk4M0FjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvU0JuUG4zMkItNmV0Um9rWTloVU0xTHk4M0FjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY2QzFGQy9GNUNFQjhDRUM3QUQxMUYxOTA4RTNDRDdDRTFE
MzhCMC9TQm5QbjMyQi02ZXRSb2tZOWhVTTFMeTgzQWMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBACT0B7ett/BE3r78x+Rp8cj2vMxdY+I5
5Ee9+NeoVeFNps0uX3cdxttU9kZLKNzOm6IykaI0PdB+fApgTug19UwPvLg5fLU1
ph6bN3HITSDmeDM39hwEFYRjBZUsMR/rNmQ3UEzohCiBQjo3e/NI6AgdreuPuIo7
P5QsEps16XuwbkywjAS8cQbasPqZUuY8/dzHJf4zthW/FOvZYyJ9vYUFl422u64o
QcO8+1UjP+DEei28Kq+XJjju8epbCxDK4J+l+H1OZ+Outo/Z2HUsinH6tq+ip193
K6dSV4dgJ7Kz2YQ41P5Q4Ru7LaUolqBjlwW0MBrUoZ4sqY8WJO5rMH0=
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:24:13 2026 by rpki-client