Error: rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft
File:                     6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft (raw, json)
Hash identifier:          1QxTkjIHjOi267xP4EG389Mv/ih9xkbqn1BjSTlTO28=
Subject key identifier:   7A:74:D1:0F:17:22:4E:90:5A:19:F6:96:7F:03:63:2D:B2:A5:4B:16
Authority key identifier: EA:33:4C:16:45:C0:CD:49:A1:D8:39:5A:E3:CA:52:FF:2D:51:B6:6C
Certificate issuer:       /CN=F3674008AF/serialNumber=EA334C1645C0CD49A1D8395AE3CA52FF2D51B66C
Certificate serial:       047C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6jNMFkXAzUmh2Dla48pS_y1Rtmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft
Manifest number:          047B
Signing time:             Thu 24 Sep 2026 03:42:37 +0000
Manifest this update:     Thu 24 Sep 2026 03:42:36 +0000
Manifest next update:     Sat 26 Sep 2026 03:42:36 +0000
Files and hashes:         1: 6jNMFkXAzUmh2Dla48pS_y1Rtmw.crl (hash: RZvWh9IKrE3qQM3DrX4cAiw0wSa673vdqJ1Pz11NIq8=)
                          2: 65664DC075A111EF89CAA679762E951A.roa (hash: XxRKb4SfyFdMFhBN2PfDNEUZavtGLlcUwDxbpsbnBrs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6jNMFkXAzUmh2Dla48pS_y1Rtmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:42:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1148 (0x47c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674008AF, serialNumber=EA334C1645C0CD49A1D8395AE3CA52FF2D51B66C
        Validity
            Not Before: Sep 24 03:42:36 2026 GMT
            Not After : Sep 26 03:42:36 2026 GMT
        Subject: CN=6ab49c2d-c493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:e3:d1:16:27:4e:e0:b4:fb:47:6a:85:9d:
                    18:f9:9e:a7:3f:56:72:cb:43:74:dd:86:d9:4c:97:
                    c2:4d:da:8c:68:e4:6b:19:e9:60:26:61:69:8d:ed:
                    f5:0a:f7:50:fc:65:26:a8:8e:15:c1:2f:0d:6d:26:
                    03:69:27:04:76:60:5b:1b:12:d5:1e:3d:84:48:8d:
                    bf:8d:80:05:33:94:1e:5e:a0:33:48:68:ff:e6:a5:
                    ac:93:72:6c:72:3f:cc:ea:e7:2c:c8:bc:0b:52:e6:
                    9b:d8:f0:05:65:e5:c7:6b:a5:6e:63:6b:33:4f:5e:
                    7d:77:df:61:40:13:0f:48:ea:ac:3e:46:f2:86:d0:
                    3b:03:e8:0b:12:e7:f5:e3:c6:8a:5e:b6:48:12:fc:
                    75:a0:01:2a:93:13:94:17:4e:6b:1f:77:7f:49:37:
                    45:18:ea:10:fb:9d:3c:1b:13:c2:ad:66:ec:eb:e9:
                    c9:60:a8:10:d9:9d:5c:6b:12:24:36:a1:18:68:d0:
                    b6:c8:72:fe:44:80:14:16:85:58:c4:df:db:23:89:
                    db:d2:49:f3:bf:c7:84:7d:c8:38:2a:01:5c:84:a6:
                    f6:11:fa:6d:ff:93:14:34:72:fe:7f:46:85:e3:3f:
                    87:ea:57:26:b5:d5:0c:24:3d:ac:ae:2c:cf:da:2c:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:74:D1:0F:17:22:4E:90:5A:19:F6:96:7F:03:63:2D:B2:A5:4B:16
            X509v3 Authority Key Identifier:
                keyid:EA:33:4C:16:45:C0:CD:49:A1:D8:39:5A:E3:CA:52:FF:2D:51:B6:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6jNMFkXAzUmh2Dla48pS_y1Rtmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/6D8B28CE473D11EE9CE7E3664AD9E6FC/6jNMFkXAzUmh2Dla48pS_y1Rtmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:d7:08:cc:a8:be:21:0c:a8:0b:8a:08:da:96:29:cc:8a:d1:
         fc:2b:ac:dc:58:73:0d:08:91:67:0b:b7:45:92:27:dd:de:f6:
         24:76:83:ab:04:1e:0c:a7:f4:27:79:8e:4d:0e:ce:c6:df:2e:
         ac:51:6b:2e:a3:ec:7c:d3:c9:26:61:6a:64:61:9c:ba:a9:53:
         d8:18:55:55:ac:fb:6b:a1:b3:9f:94:81:bd:72:4d:6c:04:2b:
         90:ae:0b:54:3d:a1:91:5c:04:9a:4c:eb:7b:ae:7e:0d:1e:e8:
         a8:88:9d:68:e4:29:aa:25:7a:e8:73:52:e9:48:7a:b7:68:a3:
         65:05:15:08:30:0d:04:a8:6d:bd:85:2f:87:ee:7a:14:b1:b2:
         62:a8:9b:ad:8a:2f:5b:a5:51:e6:54:90:fa:64:cb:93:4a:d9:
         2e:bd:f4:18:87:40:b7:0c:18:96:fb:c7:5a:f2:07:a7:1f:5d:
         86:ab:bb:1a:9e:44:22:6a:2d:38:d1:c7:e4:02:0c:05:38:5b:
         6b:ad:21:8b:d8:7e:16:f5:49:54:02:5b:bd:a2:1e:6a:2e:37:
         92:de:a3:2f:74:57:49:17:63:50:4d:74:a6:81:7c:65:85:65:
         79:73:26:6c:32:d1:4a:d1:7c:5f:ce:c6:52:ac:ca:d0:ff:08:
         37:ee:bc:d9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBHwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQwMDhBRjExMC8GA1UEBRMoRUEzMzRDMTY0NUMwQ0Q0OUExRDgzOTVBRTNDQTUy
RkYyRDUxQjY2QzAeFw0yNjA5MjQwMzQyMzZaFw0yNjA5MjYwMzQyMzZaMBgxFjAU
BgNVBAMTDTZhYjQ5YzJkLWM0OTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRA+PRFidO4LT7R2qFnRj5nqc/VnLLQ3TdhtlMl8JN2oxo5GsZ6WAmYWmN
7fUK91D8ZSaojhXBLw1tJgNpJwR2YFsbEtUePYRIjb+NgAUzlB5eoDNIaP/mpayT
cmxyP8zq5yzIvAtS5pvY8AVl5cdrpW5jazNPXn1332FAEw9I6qw+RvKG0DsD6AsS
5/XjxopetkgS/HWgASqTE5QXTmsfd39JN0UY6hD7nTwbE8KtZuzr6clgqBDZnVxr
EiQ2oRho0LbIcv5EgBQWhVjE39sjidvSSfO/x4R9yDgqAVyEpvYR+m3/kxQ0cv5/
RoXjP4fqVya11QwkPayuLM/aLNzRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUenTR
DxciTpBaGfaWfwNjLbKlSxYwHwYDVR0jBBgwFoAU6jNMFkXAzUmh2Dla48pS/y1R
tmwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0MDA4LzZEOEIyOENFNDczRDExRUU5Q0U3RTM2NjRBRDlFNkZDLzZqTk1G
a1hBelVtaDJEbGE0OHBTX3kxUnRtdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzZqTk1Ga1hBelVtaDJEbGE0OHBTX3kxUnRtdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzQwMDgvNkQ4QjI4Q0U0NzNEMTFFRTlDRTdFMzY2NEFE
OUU2RkMvNmpOTUZrWEF6VW1oMkRsYTQ4cFNfeTFSdG13Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB71wjMqL4hDKgLigjalinMitH8K6zc
WHMNCJFnC7dFkifd3vYkdoOrBB4Mp/QneY5NDs7G3y6sUWsuo+x808kmYWpkYZy6
qVPYGFVVrPtrobOflIG9ck1sBCuQrgtUPaGRXASaTOt7rn4NHuioiJ1o5CmqJXro
c1LpSHq3aKNlBRUIMA0EqG29hS+H7noUsbJiqJutii9bpVHmVJD6ZMuTStkuvfQY
h0C3DBiW+8da8genH12Gq7sankQiai040cfkAgwFOFtrrSGL2H4W9UlUAlu9oh5q
LjeS3qMvdFdJF2NQTXSmgXxlhWV5cyZsMtFK0XxfzsZSrMrQ/wg37rzZ
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:45:47 2026 by rpki-client