Error: rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
File:                     Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft (raw, json)
Hash identifier:          PlaEgsP0etRqlupLvFXg90c34TMOy3bYcxfgTT+P6Rk=
Subject key identifier:   FF:26:7F:55:58:22:25:A6:AC:AB:C8:53:FE:78:38:FF:E8:48:E7:90
Authority key identifier: 0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35
Certificate issuer:       /CN=F36965F1AF/serialNumber=0E5F615AB0AE740BE0B0EA4F0D9F85FD21A12335
Certificate serial:       4A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
Manifest number:          47
Signing time:             Sat 14 Nov 2026 05:53:45 +0000
Manifest this update:     Sat 14 Nov 2026 05:53:44 +0000
Manifest next update:     Mon 16 Nov 2026 05:53:44 +0000
Files and hashes:         1: Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl (hash: KhEREXm9+8K/izVxIumz/hGSmE1eMN3mah6Zq/BSOfU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36965F1AF, serialNumber=0E5F615AB0AE740BE0B0EA4F0D9F85FD21A12335
        Validity
            Not Before: Nov 14 05:53:44 2026 GMT
            Not After : Nov 16 05:53:44 2026 GMT
        Subject: CN=6af7f769-e2dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:53:f7:0f:f7:ed:44:b3:b5:44:46:4e:ae:e1:
                    c3:45:a7:4d:e6:a7:3d:55:9c:fe:c1:8b:f0:6f:0d:
                    94:60:c9:4d:c9:78:de:47:18:0b:df:1b:15:75:c7:
                    21:50:3f:96:74:53:53:fd:29:96:1f:1b:db:e2:0e:
                    ce:86:8d:e1:f6:9e:21:36:bf:80:2f:6f:b5:0e:58:
                    85:9c:ef:78:33:39:e4:d0:9b:59:a9:b3:66:01:4d:
                    15:b9:68:01:52:99:97:69:c3:15:89:99:ce:cd:d1:
                    47:a4:71:ca:10:21:0b:d7:ca:00:45:37:52:f4:10:
                    aa:0b:d0:45:85:bb:3a:e5:b0:47:8c:9b:0e:9e:ab:
                    f2:fc:f9:10:d7:a9:77:b9:3a:32:1a:a2:19:10:d6:
                    a1:be:b7:af:9d:fd:fc:27:4e:c8:98:b0:56:d1:2f:
                    24:35:28:83:79:7b:8f:4c:2d:1f:50:44:18:de:b7:
                    60:f0:f2:e3:e9:7d:60:47:2c:63:9c:15:73:a2:a8:
                    45:34:26:1d:09:ce:0c:9c:96:24:f4:e8:ee:ff:7c:
                    8b:07:33:3e:99:3c:dd:ea:bf:24:9f:01:85:41:4a:
                    e8:0f:66:33:69:7a:a6:37:28:44:68:52:ed:3d:e4:
                    02:eb:0a:6f:1c:92:62:67:01:a9:5b:79:36:63:cb:
                    bb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:26:7F:55:58:22:25:A6:AC:AB:C8:53:FE:78:38:FF:E8:48:E7:90
            X509v3 Authority Key Identifier:
                keyid:0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cb:62:10:ce:8e:07:09:e7:80:7c:50:94:cd:5e:f3:b1:38:
         f1:b5:66:e0:2f:48:5c:1a:e7:a9:19:f5:d4:03:60:cf:98:c0:
         a0:9e:31:cf:85:0b:86:0f:71:9a:f3:a9:be:78:25:f7:56:35:
         6b:96:d2:3f:5f:13:44:3f:3f:ea:cf:22:4c:e3:2f:99:a7:92:
         37:ff:3c:10:06:2b:25:76:4f:6f:7a:68:d8:ad:ce:38:c3:c8:
         54:dc:65:03:5d:1e:d5:be:b4:8f:51:29:0f:a0:95:9c:3b:36:
         f9:39:8f:e8:3a:c8:dc:dd:a6:ec:b3:47:e9:8b:20:98:bb:06:
         ad:8f:a9:30:1d:3d:c1:70:3b:fb:a1:38:b0:54:94:3b:11:af:
         98:b5:2e:1c:96:18:ba:20:7a:92:07:34:28:8f:d2:6e:6e:2b:
         89:c2:5d:10:be:ba:62:ee:e8:56:87:f8:3e:77:c9:40:db:f0:
         41:6e:f2:3e:52:4a:eb:77:53:e0:c7:4a:57:08:5a:b3:9f:16:
         3c:a2:85:c4:54:c1:1e:90:1b:21:c9:2e:69:0f:d3:d7:09:83:
         0c:c1:38:68:ea:a1:14:06:ce:dc:fa:0f:c3:b5:98:e9:1d:ef:
         d9:a5:df:b7:e4:70:6e:11:54:84:fb:a7:87:cd:ff:4b:79:a1:
         c0:11:ae:69
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBSjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
NjVGMUFGMTEwLwYDVQQFEygwRTVGNjE1QUIwQUU3NDBCRTBCMEVBNEYwRDlGODVG
RDIxQTEyMzM1MB4XDTI2MTExNDA1NTM0NFoXDTI2MTExNjA1NTM0NFowGDEWMBQG
A1UEAxMNNmFmN2Y3NjktZTJkYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKpT9w/37USztURGTq7hw0WnTeanPVWc/sGL8G8NlGDJTcl43kcYC98bFXXH
IVA/lnRTU/0plh8b2+IOzoaN4faeITa/gC9vtQ5YhZzveDM55NCbWamzZgFNFblo
AVKZl2nDFYmZzs3RR6RxyhAhC9fKAEU3UvQQqgvQRYW7OuWwR4ybDp6r8vz5ENep
d7k6MhqiGRDWob63r539/CdOyJiwVtEvJDUog3l7j0wtH1BEGN63YPDy4+l9YEcs
Y5wVc6KoRTQmHQnODJyWJPTo7v98iwczPpk83eq/JJ8BhUFK6A9mM2l6pjcoRGhS
7T3kAusKbxySYmcBqVt5NmPLu3MCAwEAAaOCArgwggK0MB0GA1UdDgQWBBT/Jn9V
WCIlpqyryFP+eDj/6EjnkDAfBgNVHSMEGDAWgBQOX2FasK50C+Cw6k8Nn4X9IaEj
NTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTY1RjEvMzdGRjVERjJBREU2MTFGMTk3OEEzNUVEQ0UxRDM4QjAvRGw5aFdy
Q3VkQXZnc09wUERaLUZfU0doSXpVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRGw5aFdyQ3VkQXZnc09wUERaLUZfU0doSXpVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY5NjVGMS8zN0ZGNURGMkFERTYxMUYxOTc4QTM1RURDRTFE
MzhCMC9EbDloV3JDdWRBdmdzT3BQRFotRl9TR2hJelUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAFTLYhDOjgcJ54B8UJTNXvOxOPG1ZuAv
SFwa56kZ9dQDYM+YwKCeMc+FC4YPcZrzqb54JfdWNWuW0j9fE0Q/P+rPIkzjL5mn
kjf/PBAGKyV2T296aNitzjjDyFTcZQNdHtW+tI9RKQ+glZw7Nvk5j+g6yNzdpuyz
R+mLIJi7Bq2PqTAdPcFwO/uhOLBUlDsRr5i1LhyWGLogepIHNCiP0m5uK4nCXRC+
umLu6FaH+D53yUDb8EFu8j5SSut3U+DHSlcIWrOfFjyihcRUwR6QGyHJLmkP09cJ
gwzBOGjqoRQGztz6D8O1mOkd79ml37fkcG4RVIT7p4fN/0t5ocARrmk=
-----END CERTIFICATE-----
Generated at Sat Nov 14 21:38:10 2026 by rpki-client