Error: rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
File:                     2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft (raw, json)
Hash identifier:          nBiWv5brPmX/tV9HoMaV4EZV+c2yQ8WsoxCiPFuCctI=
Subject key identifier:   41:02:61:B0:40:7A:AC:48:3E:39:ED:12:A7:BA:F7:37:52:6D:F7:49
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Certificate issuer:       /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial:       05BA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
Manifest number:          0583
Signing time:             Fri 25 Sep 2026 03:17:17 +0000
Manifest this update:     Fri 25 Sep 2026 03:17:16 +0000
Manifest next update:     Sun 27 Sep 2026 03:17:16 +0000
Files and hashes:         1: 2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl (hash: tTk1a/MoWV4NEymcomnKiaMIFNn9dcl4FC+ZWK33ldk=)
                          2: 65C358568A9111F1ACF111E9CE1D38B0.roa (hash: JaU5nH8aptEvSi4nGdjy1c2XIZ9FUS2u9voNPYY/cdY=)
                          3: 01F4B7DC164911F1AA82037CDAE4EC9C.roa (hash: SJBq2f5PEAQ7jMq2RDwqV4pd3LXt7LixkprBqHneLz0=)
                          4: 86664F868A9211F19A6099EFCE1D38B0.roa (hash: rIungNY5EVspbMIGcy76MQ1oYEJ0edvK146736oLfvE=)
                          5: 6D3EBE72164711F19F64E7F1DAE4EC9C.roa (hash: yLI6smy3lVo+VEqO6BS2sNIl22GUPaCfOV/LStarXLY=)
                          6: 15D6A7D4164811F18DF4F4F5DAE4EC9C.roa (hash: 14smMykXcFq93duH/vGIC38LPO0s9E/b96sonJX6BGk=)
                          7: 6FF913CA16FF11F1A85261DFDAE4EC9C.roa (hash: iQniiQsV4FPnDcQIFs8/PL97KT4obDA4lMn2n96y9AE=)
                          8: AF498724164811F18B4BC67BDAE4EC9C.roa (hash: 4CjEu1vpm+wP9BTwYGqYW9uzMDMzsV6XNuV1HbMfl9g=)
                          9: 76FBD6B0164311F1BD56F3DADAE4EC9C.roa (hash: Gj9pS0NU6aD4F5/RLKRtgqvJR42xaOuVLePBdK86QyQ=)
                          10: 112931EA16FF11F189EF5EDDDAE4EC9C.roa (hash: ZgZBnTWvmwDnOvNrILpi9EmkaK0Jj9X9JXHSy8EVaWA=)
                          11: 61C5A06E164811F19DC45379DAE4EC9C.roa (hash: OTKMR3kuYYZvbI08rUILdh06l0vzSxxr/G4T2Y9Nw7o=)
                          12: 005F57B0164411F1BAFF55DDDAE4EC9C.roa (hash: FNAoTrUV+u0/qrkFEdnS32oasDVOtwHwST38Ns3Twkw=)
                          13: 4C318CCA164A11F19A859484DAE4EC9C.roa (hash: Fi5vn1JhkR8Vqf8Cp06SqG2EQ+vwVXe6FRuFoKYg4pc=)
                          14: F5CC513E16FE11F1952149DDDAE4EC9C.roa (hash: ewGQNs4bpNDJfZJL7/NDfboXQleDBS/jOqXleweJ0Ow=)
                          15: DFD2B32A164811F1831AF77BDAE4EC9C.roa (hash: x3mxEyaa11oMqg1KAkOGBWsSUvRy6oN81BPBKnojwr0=)
                          16: 02FCDA2A8A9211F1A51C89EBCE1D38B0.roa (hash: kaE23hHrEaGcX+JU9kKbhbl9cGhGBvp+953IjP3cM7s=)
                          17: 8B5CC092164811F191889C7BDAE4EC9C.roa (hash: lSB9/WEXqq3+A7EAEzssfuCjG/BvQRzkvd1f1Gn35v8=)
                          18: AAC6E05E8A9011F18378F7E4CE1D38B0.roa (hash: JIjslw1y4PxMG8w0bVuRsS73DTXnWqqEjqzGJCLK+DY=)
                          19: 2E2D703A16FF11F1AE9583DDDAE4EC9C.roa (hash: +XqUdRwBEEbCB2RNCdbzmLthsuLaA1iKWwIhtLwPD8M=)
                          20: 475E0D62164611F1865584EBDAE4EC9C.roa (hash: gVZ9dFpQtlyacvHFfLqr5zzatWzgyOJrPVlqDGNVe6g=)
                          21: D3BA0E0C164411F190617BE1DAE4EC9C.roa (hash: I6gL9OWppOVojAbbO/0MhbpSXxWSJ/sKvKIETher/Vk=)
                          22: 0B19DF248A9111F1A2F431E7CE1D38B0.roa (hash: vhoxmYwsSQulDdm74mm4Hcep+k5eg56/9gWsR/B37S4=)
                          23: D40A53188A9211F1888E83F1CE1D38B0.roa (hash: 7JtghGAE7gng9Fkb6j1avA8wH4Ce7zgj/HHbwH7T4RI=)
                          24: BAD1C0B2164211F1A5140FD5DAE4EC9C.roa (hash: LrKfPDaa2A9ec4OA/JYHGSq5CzhJGUqJ1ollvsbr8wI=)
                          25: 4F2349C6164711F19BD3C8F1DAE4EC9C.roa (hash: t/sQT9zOtUxK/aumZF4eGuu6FrtnQZBtft6dvkz36IM=)
                          26: FE1B57A8164611F1BE809CEFDAE4EC9C.roa (hash: Ve3RCW/q/y2pFA0BJHu2+tRYVuEEJVi+vVpApROhl0c=)
                          27: 20E578B6164911F184B5D47DDAE4EC9C.roa (hash: GjT6tvvAwcdiXjyTcs5xoFxiRyrpZUNEZqRr7lISbHE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
                          rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:17:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
        Validity
            Not Before: Sep 25 03:17:16 2026 GMT
            Not After : Sep 27 03:17:16 2026 GMT
        Subject: CN=6ab5e7bd-ce62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:da:a1:32:ca:84:41:33:17:c6:96:15:e3:
                    11:74:34:43:90:e4:ab:7e:d8:56:71:18:cc:0c:21:
                    f2:9b:b0:47:99:59:c3:ec:66:74:1f:2a:b1:a8:3b:
                    47:01:4f:8a:c9:ca:4b:2e:42:4d:c1:f1:67:7c:9b:
                    85:ca:6c:d5:a7:77:a2:1f:44:24:be:53:97:3e:eb:
                    c2:bb:b2:54:2f:7d:82:7a:0a:a0:1a:dd:ac:1e:0b:
                    3f:b8:86:e1:28:d4:15:8b:df:e4:8c:47:1d:e7:32:
                    70:ab:45:8d:a7:87:18:35:3e:9b:f7:d8:7e:1b:18:
                    87:d2:67:10:6b:d7:dd:be:e0:30:89:98:e2:4b:94:
                    bb:0c:51:68:24:2c:1c:d9:8f:95:17:27:d0:21:d2:
                    20:09:cb:ca:26:c9:89:63:a7:0e:fb:71:95:cb:ee:
                    25:eb:1d:b7:a7:02:b7:62:c5:c9:9c:a5:58:b5:cc:
                    4f:16:f3:a0:4f:f4:d4:bc:f0:ce:31:8a:e3:6e:e8:
                    3e:a1:be:3c:61:a9:e3:ff:fb:f2:12:93:0e:51:7f:
                    72:4c:80:c9:2f:b8:cb:7d:eb:c8:33:e3:78:5e:5f:
                    08:80:7b:ab:2d:59:73:8c:15:87:ca:f2:bb:a0:08:
                    5c:b0:5c:f7:34:37:23:b4:b5:c1:b0:1b:1e:3a:26:
                    b6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:02:61:B0:40:7A:AC:48:3E:39:ED:12:A7:BA:F7:37:52:6D:F7:49
            X509v3 Authority Key Identifier:
                keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:7f:cc:a9:b4:e1:04:eb:2b:6b:e3:52:ff:b0:1e:9a:0c:9b:
         85:d0:7b:ff:e2:a1:37:ff:bd:f5:e0:91:a9:48:f4:75:6b:c4:
         d7:52:61:8b:75:0c:9a:b7:6a:a1:39:e8:8a:8d:b0:0c:8f:5c:
         09:97:e8:11:46:23:6f:be:89:4a:d4:d4:d8:63:c9:22:8e:62:
         66:23:aa:93:16:75:77:c5:89:75:5e:68:1a:61:1f:69:60:4b:
         f6:38:a5:ba:49:8b:b7:bc:0b:d7:f3:e5:e2:f7:f6:e1:6f:74:
         e1:55:ee:f0:07:5f:dd:c8:f9:c6:3c:a4:15:22:12:89:a0:15:
         12:65:bf:2f:ce:54:27:14:04:6e:4c:d1:af:da:6a:ad:22:e8:
         3f:9f:c5:20:7e:63:74:68:e0:97:fe:d9:ce:51:bb:6e:78:4b:
         94:3e:30:c9:34:97:ee:58:f3:54:22:9e:d3:45:61:a8:0e:91:
         8b:d5:18:ca:e6:42:f4:09:32:41:b5:1d:eb:18:5b:23:00:a5:
         b7:ac:26:17:42:b1:95:f9:1c:4c:d4:00:e6:cf:77:f7:79:62:
         3a:73:64:70:d7:bc:5d:1b:00:6e:fe:7c:ba:24:7f:b8:e6:b5:
         5d:2b:46:b2:b3:64:2c:bc:b4:7f:9e:58:23:d4:6d:1c:c9:e7:
         6d:ed:c5:63
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBbowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODg2QjNBUjExMC8GA1UEBRMoRDlDMEIyMzNBQ0IwNjM1NDM1NzREM0Y1RjMyN0JF
QjhCMkI5OTExODAeFw0yNjA5MjUwMzE3MTZaFw0yNjA5MjcwMzE3MTZaMBgxFjAU
BgNVBAMTDTZhYjVlN2JkLWNlNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+adqhMsqEQTMXxpYV4xF0NEOQ5Kt+2FZxGMwMIfKbsEeZWcPsZnQfKrGo
O0cBT4rJyksuQk3B8Wd8m4XKbNWnd6IfRCS+U5c+68K7slQvfYJ6CqAa3aweCz+4
huEo1BWL3+SMRx3nMnCrRY2nhxg1Ppv32H4bGIfSZxBr192+4DCJmOJLlLsMUWgk
LBzZj5UXJ9Ah0iAJy8omyYljpw77cZXL7iXrHbenArdixcmcpVi1zE8W86BP9NS8
8M4xiuNu6D6hvjxhqeP/+/ISkw5Rf3JMgMkvuMt968gz43heXwiAe6stWXOMFYfK
8rugCFywXPc0NyO0tcGwGx46JrbbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUQQJh
sEB6rEg+Oe0Sp7r3N1Jt90kwHwYDVR0jBBgwFoAU2cCyM6ywY1Q1dNP18ye+uLK5
kRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4NkIzLzVBNDExRjlFQjhFRjExRURBNUIwOUREQUYxMjIyNDY4LzJjQ3lN
Nnl3WTFRMWROUDE4eWUtdUxLNWtSZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzJjQ3lNNnl3WTFRMWROUDE4eWUtdUxLNWtSZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODg2QjMvNUE0MTFGOUVCOEVGMTFFREE1QjA5RERBRjEyMjI0
NjgvMmNDeU02eXdZMVExZE5QMTh5ZS11TEs1a1JnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC1f8yptOEE6ytr41L/sB6aDJuF0Hv/4qE3
/7314JGpSPR1a8TXUmGLdQyat2qhOeiKjbAMj1wJl+gRRiNvvolK1NTYY8kijmJm
I6qTFnV3xYl1XmgaYR9pYEv2OKW6SYu3vAvX8+Xi9/bhb3ThVe7wB1/dyPnGPKQV
IhKJoBUSZb8vzlQnFARuTNGv2mqtIug/n8UgfmN0aOCX/tnOUbtueEuUPjDJNJfu
WPNUIp7TRWGoDpGL1RjK5kL0CTJBtR3rGFsjAKW3rCYXQrGV+RxM1ADmz3f3eWI6
c2Rw17xdGwBu/ny6JH+45rVdK0ays2QsvLR/nlgj1G0cyedt7cVj
-----END CERTIFICATE-----
Generated at Sat Sep 26 01:52:40 2026 by rpki-client