Error: rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
File:                     U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft (raw, json)
Hash identifier:          LIBzCf+XeY9jdjHi+/kStAjx5tEA4JUL+1ZUF1tiNmo=
Subject key identifier:   F9:F7:DD:FB:B5:97:99:16:65:C6:91:BB:62:F1:A9:B4:4A:7A:9F:EA
Authority key identifier: 53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B
Certificate issuer:       /CN=F3696E5FAF/serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
Certificate serial:       06AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
Manifest number:          066C
Signing time:             Fri 25 Sep 2026 02:54:36 +0000
Manifest this update:     Fri 25 Sep 2026 02:54:35 +0000
Manifest next update:     Sun 27 Sep 2026 02:54:35 +0000
Files and hashes:         1: U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl (hash: jZLVYm1uR2kZkj3t0stT0DqILzEcJgKTh880+IFeeoY=)
                          2: F37CDD6663EF11F19D9D91A1CE1D38B0.roa (hash: B67fPbeNoppqk9hSAfJscFe0hcg9inACXlUcJcipURA=)
                          3: 95847CC263D211F1A7398CF0CE1D38B0.roa (hash: eLnrZ20OW+/+TAX2GNAFcO6yJjN9oP7jwLYjX7qMZNc=)
                          4: 8BB3CD2C63F211F183EC96B0CE1D38B0.roa (hash: QT2dN5QyAj5zmXwnOl8L432zMepTujG3dnHPbEOQoEo=)
                          5: 4B8D541663CA11F1BE831AC3CE1D38B0.roa (hash: bXc7znb5ZEPejbBo1hmaATzGi2o/yRX/qJJYrw6Fvu0=)
                          6: 0E73307A63FA11F1A1F0FCDCCE1D38B0.roa (hash: XLqG5GPs5YizqGFdXKEc8GI+WTrCww4tk1kdt4oZRSc=)
                          7: 1F6044E263CB11F18B094EC7CE1D38B0.roa (hash: jA+jqGSdT4Jt9X0XI+H2ye6u3WTekunF2PsW/Ou42EI=)
                          8: 6830E0DE63C911F1909C6ABBCE1D38B0.roa (hash: LTcaq+viAgTZopGZOI0Vgv6RTw1bKNW1o2RpYagdufs=)
                          9: 9426FCC863F111F1937711ACCE1D38B0.roa (hash: a+SC+018xKB4zKNBP7aJ/jbTYhMj1+H6sZj4ZlwjKr0=)
                          10: 0EE6164863CE11F1A3D0FAD7CE1D38B0.roa (hash: wxtSa4sGkEa4UTR5Un9o7F3thEEYT91zL28hkshdvTo=)
                          11: 1AD7895663C811F1BA1D28B3CE1D38B0.roa (hash: knxjQz5KfAMltUZ7yx242TRnAUjpoVPD9o4kqV1khRY=)
                          12: 304638A463F111F19F4862A8CE1D38B0.roa (hash: LCeA3Ev3hShY/XIVNyiR7suSxfGqUt/ds+6exkNeIIM=)
                          13: 7AE13C2C63F311F195507DB6CE1D38B0.roa (hash: 4D0rGp2zfFCRNZAlK+377CPDM7y7kdeaPeJQfc7g1FY=)
                          14: 7A6A227A63F011F1888512A4CE1D38B0.roa (hash: 4jptDF4PFQTQqUd71cWIEHE5V47m+xhgm7jMjSt/VwA=)
                          15: 93BDFB3463FA11F1ACB1CCE0CE1D38B0.roa (hash: fmmkTkTFSuPZFc46BIeku1vPRqMOQfjtlqzTwMfmhXQ=)
                          16: 99E6EDB063F811F1B30EB6D4CE1D38B0.roa (hash: pLi5fyFa9uNVpQymeq6XRu2Lvwi/kzdsGGt5sBtXMtY=)
                          17: D57D8BEC63CE11F1B28816DCCE1D38B0.roa (hash: uLcJX271d+ip3ZQUo1xfKYciJj55ADVEQBKeAxryfCQ=)
                          18: BC1191BE63D111F1981D62ECCE1D38B0.roa (hash: 7C59kQ//mtaLdQHz1mSnz/+/gp8g+MjA6MlX0q2vpuw=)
                          19: 1B3E5BD6BFC411EEB815F6B6775412E6.roa (hash: /vMD2qyC5dIRjTseOPjuPT3UDFh3JnMal4OEIVBXwNA=)
                          20: 404E071063F411F1A98E55BCCE1D38B0.roa (hash: x/az9RVi7JNu/6hWg7qRpq/QSG0Fq0eC4gzic2/aptY=)
                          21: 1CBBD95C63CD11F1951166D3CE1D38B0.roa (hash: 4miT25AnxlNyNM74omEkAk+VyqFPtc/3toVSQUIWEiU=)
                          22: F63E656463C811F1A4A8EFBACE1D38B0.roa (hash: 3/Oc5NU6ufKouVIjuMd0zvc9pDchfhPB4U/fkpYzE/Q=)
                          23: 5EDAF1C2646011F1947BD2B8CE1D38B0.roa (hash: XWqDFeNCooEzTEjyd8623ieUiJ9e7GChr05ilpQPAE4=)
                          24: D4E7F5D263C911F18D2230BFCE1D38B0.roa (hash: FT9ac8Ykdp30FpgJ1AqJnRR4fTCVAlZln4Mcs64+mh4=)
                          25: 1A98D0D863F211F19D5A45AECE1D38B0.roa (hash: 5ns/OJLF4Ryu80Az4/iqFq/JpB9dRCmpDmrVUq8LPKo=)
                          26: 55D7D7C863EF11F1B717CB1DCF1D38B0.roa (hash: eCTPynYtU0RlLWyEGFXITeHwvIzfcOhgUNmXQSjFir0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1708 (0x6ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3696E5FAF, serialNumber=5375CF4CA1643B08C341BDA79D8BE105BDC3C48B
        Validity
            Not Before: Sep 25 02:54:35 2026 GMT
            Not After : Sep 27 02:54:35 2026 GMT
        Subject: CN=6ab5e26c-92be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:18:83:e9:53:bd:45:47:b4:c1:70:12:54:7b:
                    eb:66:91:bb:94:5b:ee:fe:75:d3:fa:18:bf:74:79:
                    38:a3:4b:66:4f:64:77:37:d7:86:c2:ca:0b:83:dc:
                    68:48:a9:08:36:04:45:6b:55:20:7d:ea:d7:30:bf:
                    d0:8f:87:58:71:f1:04:e4:2b:8b:33:eb:2a:2a:d8:
                    cc:ea:e7:e1:78:cf:0c:d3:e5:69:93:13:6b:0f:ef:
                    d9:38:da:0a:84:55:d4:42:da:85:8f:d7:3d:ec:16:
                    2d:bd:6d:25:ff:19:f2:e6:cf:eb:b0:c0:dc:4e:00:
                    87:69:63:84:72:32:da:12:3e:c3:ab:bc:b5:4c:81:
                    cb:86:ed:29:d8:2b:8e:38:67:62:3d:1d:24:f2:13:
                    4b:b8:fe:92:ad:56:1c:a6:46:8e:4b:a2:24:d3:c9:
                    32:11:84:ed:47:cd:07:62:05:97:e6:46:d1:1b:dc:
                    43:5e:99:84:61:27:10:76:4e:c1:58:59:44:7e:b3:
                    de:f9:83:7b:3c:56:a1:3d:f9:18:07:12:42:89:e3:
                    20:c7:22:67:71:53:4e:8e:54:0c:21:80:15:81:e1:
                    eb:b1:4b:7b:04:5f:6b:04:b4:1f:8c:eb:3d:ec:6c:
                    15:3b:c5:9b:88:13:c7:03:fa:04:0d:e1:46:1d:19:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F7:DD:FB:B5:97:99:16:65:C6:91:BB:62:F1:A9:B4:4A:7A:9F:EA
            X509v3 Authority Key Identifier:
                keyid:53:75:CF:4C:A1:64:3B:08:C3:41:BD:A7:9D:8B:E1:05:BD:C3:C4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U3XPTKFkOwjDQb2nnYvhBb3DxIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3696E5F/3DA3D320189711ED8C936BD2F1222468/U3XPTKFkOwjDQb2nnYvhBb3DxIs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:5f:b4:09:2f:1d:7f:bd:df:8f:8b:80:bf:34:87:c3:3d:c5:
         a1:f7:79:a7:ef:93:84:14:2d:9d:72:33:9b:a2:c6:11:4f:40:
         70:b4:91:f2:e5:39:76:57:33:99:bf:0d:7a:09:d1:30:f8:6f:
         48:cd:69:fa:92:5b:7d:89:d8:41:40:8e:e0:a0:4e:7e:53:5a:
         9a:af:64:d9:b9:f0:26:1a:e0:92:0a:c8:95:05:5c:eb:64:bf:
         32:01:ba:90:11:a0:9b:38:ca:24:51:d1:4b:79:77:ea:83:cc:
         e4:3c:e1:7b:c3:22:6d:b9:64:5b:e6:fa:51:0c:a0:5b:f4:ce:
         5d:ac:fd:82:05:fb:b2:fb:4a:5a:b8:34:ec:96:e3:32:25:87:
         48:6c:b0:c4:37:ac:f0:08:1c:f4:1b:b4:52:7f:81:0e:de:d3:
         aa:2d:4c:b5:cf:ef:fb:d1:f6:38:62:1d:86:05:15:1c:75:ba:
         70:63:8b:c4:06:3b:6e:1c:0e:bd:10:c6:c5:64:27:7f:52:ea:
         52:be:86:34:26:4e:bc:f9:9d:32:4d:b9:7f:7e:43:94:69:f8:
         81:14:7e:65:81:f8:a7:59:98:23:73:b5:97:51:da:94:ac:4a:
         df:4b:cb:41:36:89:3f:4b:5b:e3:ce:13:a7:f1:64:c0:20:d4:
         d2:bb:6d:2c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTZFNUZBRjExMC8GA1UEBRMoNTM3NUNGNENBMTY0M0IwOEMzNDFCREE3OUQ4QkUx
MDVCREMzQzQ4QjAeFw0yNjA5MjUwMjU0MzVaFw0yNjA5MjcwMjU0MzVaMBgxFjAU
BgNVBAMTDTZhYjVlMjZjLTkyYmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfGIPpU71FR7TBcBJUe+tmkbuUW+7+ddP6GL90eTijS2ZPZHc314bCyguD
3GhIqQg2BEVrVSB96tcwv9CPh1hx8QTkK4sz6yoq2Mzq5+F4zwzT5WmTE2sP79k4
2gqEVdRC2oWP1z3sFi29bSX/GfLmz+uwwNxOAIdpY4RyMtoSPsOrvLVMgcuG7SnY
K444Z2I9HSTyE0u4/pKtVhymRo5LoiTTyTIRhO1HzQdiBZfmRtEb3ENemYRhJxB2
TsFYWUR+s975g3s8VqE9+RgHEkKJ4yDHImdxU06OVAwhgBWB4euxS3sEX2sEtB+M
6z3sbBU7xZuIE8cD+gQN4UYdGWtnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+ffd
+7WXmRZlxpG7YvGptEp6n+owHwYDVR0jBBgwFoAUU3XPTKFkOwjDQb2nnYvhBb3D
xIswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk2RTVGLzNEQTNEMzIwMTg5NzExRUQ4QzkzNkJEMkYxMjIyNDY4L1UzWFBU
S0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1UzWFBUS0ZrT3dqRFFiMm5uWXZoQmIzRHhJcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTZFNUYvM0RBM0QzMjAxODk3MTFFRDhDOTM2QkQyRjEy
MjI0NjgvVTNYUFRLRmtPd2pEUWIybm5ZdmhCYjNEeElzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBvX7QJLx1/vd+Pi4C/NIfDPcWh93mn
75OEFC2dcjObosYRT0BwtJHy5Tl2VzOZvw16CdEw+G9IzWn6klt9idhBQI7goE5+
U1qar2TZufAmGuCSCsiVBVzrZL8yAbqQEaCbOMokUdFLeXfqg8zkPOF7wyJtuWRb
5vpRDKBb9M5drP2CBfuy+0pauDTsluMyJYdIbLDEN6zwCBz0G7RSf4EO3tOqLUy1
z+/70fY4Yh2GBRUcdbpwY4vEBjtuHA69EMbFZCd/UupSvoY0Jk68+Z0yTbl/fkOU
afiBFH5lgfinWZgjc7WXUdqUrErfS8tBNok/S1vjzhOn8WTAINTSu20s
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:42:59 2026 by rpki-client