Error: rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
File:                     58aANgAk7bnzRR3JE-ozBZvJBKU.mft (raw, json)
Hash identifier:          yf8rxAXGOfWjOYavduFj5TM/rCLSUJX9elyrmu+mLzk=
Subject key identifier:   39:22:27:77:9E:30:E0:25:7E:B1:30:B1:31:F4:F3:FD:5D:75:5A:B6
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       08BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
Manifest number:          0862
Signing time:             Thu 24 Sep 2026 02:10:54 +0000
Manifest this update:     Thu 24 Sep 2026 02:10:53 +0000
Manifest next update:     Sat 26 Sep 2026 02:10:53 +0000
Files and hashes:         1: 58aANgAk7bnzRR3JE-ozBZvJBKU.crl (hash: Y9tEbdXrnzC4lAyHLckPg/LJkR4NJ4E0ZaA0/2f/akU=)
                          2: 0B69092C1B9811F19D0D1FA4DAE4EC9C.roa (hash: r4rq6L1loVCAAn4SzY57R0ZpXpDf4hOl2m+mNOOqHCk=)
                          3: E0A1C3FE1B9811F1A5AACFA9DAE4EC9C.roa (hash: OXl62mdJpY7UlMzTUCbwzeugc45owXh+B1Lo48CbUdg=)
                          4: 8D13FD4E688F11F19A6E38B5CE1D38B0.roa (hash: HV3okNQJeKDypQ6sH85bp1rw0dQt2ta8U2V9ECt1gwk=)
                          5: 524549DC1B9811F18A7ED8A5DAE4EC9C.roa (hash: mTNu6E6psA7ygjh3+Ru0nJy66aaqxT8n/I3XWOVKlbQ=)
                          6: D15F5E2A1B9711F195DBF2A3DAE4EC9C.roa (hash: mqDlUVSJrjORGiPKg+e1V8rvIY8eyCxvbxrFLIblui8=)
                          7: 3A984160EF7811EFBAE0E8A5762E951A.roa (hash: wHn4dF6I7Dyf+VZOr2mxt31ut8HGDMrGuegRJRtPs3Q=)
                          8: 3F1E401CABAC11F184FE54E6CE1D38B0.roa (hash: /GN4N+4OluPOeBU0epImMHALogsbpgLa9idwKElbM5Q=)
                          9: 702337061B9911F1A5FE14ACDAE4EC9C.roa (hash: CIyW3WzEGeSkisvt+LfOP3YcjK3RlVAneZQ10rkxTHQ=)
                          10: AF607CBC871611EFA4B4B85C762E951A.roa (hash: bzfiv5WUYP+OkMM7fSUuv+PsK419hvu6fLkkiMcm3F4=)
                          11: EECFB0401B9711F1B54302A4DAE4EC9C.roa (hash: MaNmV2394aEXEhAX7/i1Y7nq57S/NFMG5gwXJM2kGNU=)
                          12: 4FD7C9F427E711F0BCA00BF5DAE4EC9C.roa (hash: 7HwDCppU/f5fuwrPAf2xp7Ayrbe7TxptLlo+dblJyew=)
                          13: 9383FC9C250B11F087EC90CDDAE4EC9C.roa (hash: 0MebD9YV70bEDfj/A8gNyPDksVUE3sD/+fbZkvUcVDw=)
                          14: 24DB9B261B9911F1A2189EABDAE4EC9C.roa (hash: Sd2bbOyDBgHPbmMh4GfRUwYn+t0yNfM7pVM09Y8x0nw=)
                          15: 58F83FBC06AF11F1B8A448A0DAE4EC9C.roa (hash: q0/h4uGifHkr7lZTFUHYop3ANwau1wWMXnAeCu5UfjA=)
                          16: F4EFE80A8D1D11EF8C1A4C79762E951A.roa (hash: d4jMMXQH77HWq36R3oaT7HPszUjBz6mQV4jIDt9d5aE=)
                          17: ACF641FED6AD11F0812BC7D7DAE4EC9C.roa (hash: DefvG2gqn0YRx/oaaDEF9oWtrWF+Hp3FFyLDWRXzv1k=)
                          18: 14DDB8741B9611F1AEDEF299DAE4EC9C.roa (hash: TagLQ0892R3VVBadijR9sQxReuOMDykypp5Jn7djXRI=)
                          19: 3EFFC5021B9611F1ABDCF899DAE4EC9C.roa (hash: OEBSOLOtuEEr7LITI1TX1uWnikP4GZ8AEgjDIlq1cvE=)
                          20: 852AD7B827E711F0BFC09DF5DAE4EC9C.roa (hash: NefVteUHYyDwbTOkKR0OdJps3C0o9kNvy2BeEIzbcG4=)
                          21: EFEB23DA1B9511F1BA203498DAE4EC9C.roa (hash: v+qFwaaht2QuxKIwyNjf4TTsShwAcY+6iT/Scb7JCgI=)
                          22: 7423C0761B9611F1A790169CDAE4EC9C.roa (hash: wFNRseHPNhpqYn9AtgzATv+E9Kytd9SUDOwd9sd5QJA=)
                          23: 8FA8B8661B9511F197EF0596DAE4EC9C.roa (hash: UCEd1H1cKMGw7dWRsynqiMGNaXBFFg/1Xx9djVpxQ7Y=)
                          24: 4B5654F296DA11EF82B2B74D762E951A.roa (hash: ZcnfvBN38YEq7lAkTi2/k1kT/CQUDrGwaR+y7cjWcTw=)
                          25: 5F0BEF181BB611F189A8ADD1DAE4EC9C.roa (hash: NQquyVC4cnvdXsxHj7uaNV5CrT0LMfKcIAeKp0BFMLI=)
                          26: B5CDAB981B9811F1B49AFAA7DAE4EC9C.roa (hash: okz/XIpdGjV3fTBBVZmdvxqkxKK2rpB3+IcXfScdJ9k=)
                          27: 74A6DAE01B9811F19309A2A7DAE4EC9C.roa (hash: b8rwnTmBVc0IlB6IRsprx5se6KL66PEw8Ftr/oDL5g4=)
                          28: 5656DE221B9911F1BAA305ACDAE4EC9C.roa (hash: d1sCupRsCtmgYH5lcdqUegyx4RnKSvvMlQeEHE659Gg=)
                          29: 20E1A3021B9511F1AC4F3394DAE4EC9C.roa (hash: 9NW30Qu2gXnwd3q63LPoYGNqe8vJ4uiODjI440PZlho=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Sep 24 02:10:53 2026 GMT
            Not After : Sep 26 02:10:53 2026 GMT
        Subject: CN=6ab486ae-b9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:d1:ef:5f:07:60:18:69:0e:eb:c4:80:60:
                    dc:64:e0:c0:e6:e8:a2:a4:e1:56:9f:0a:81:c1:64:
                    72:d7:ef:7a:70:4a:91:dd:3e:20:c1:1a:88:0c:12:
                    8b:3d:a1:91:a4:74:9e:68:34:90:d3:f8:34:f6:e7:
                    c9:64:81:0f:f7:02:50:a1:f0:05:d0:9c:c3:cc:3d:
                    65:51:01:08:01:ca:b1:bd:c2:1b:4a:5b:6a:49:47:
                    b9:df:43:79:85:0c:a5:fc:69:df:3a:14:65:13:3f:
                    a3:4e:c6:22:71:2d:ac:a0:4c:a8:59:5c:16:f6:8a:
                    ab:6e:a6:f1:61:16:38:19:51:d2:38:99:1d:c4:8b:
                    44:f6:29:07:dc:76:4b:b8:3b:37:27:97:9a:48:2a:
                    25:8e:3b:d7:a4:89:33:a8:be:be:82:54:a8:d3:b0:
                    7b:8b:a5:ad:d6:ae:d7:55:e4:c3:68:5f:e3:10:17:
                    25:b6:a1:56:81:37:4b:7f:3f:10:bd:e6:fb:26:8c:
                    37:88:53:68:62:b0:92:68:87:f9:19:b9:4d:8a:fe:
                    f5:d9:9e:d7:11:24:4b:69:45:37:3c:a3:8c:55:56:
                    72:b0:53:11:a6:e9:f2:47:e1:c2:c8:f2:e2:3c:01:
                    c5:02:69:d4:66:d3:dd:ca:9e:ff:7f:92:dd:47:6e:
                    86:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:22:27:77:9E:30:E0:25:7E:B1:30:B1:31:F4:F3:FD:5D:75:5A:B6
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f7:a8:74:16:dd:12:d5:50:52:24:19:0b:ae:fb:d4:28:d1:
         fc:45:9c:16:a3:1c:fc:12:8b:8f:6f:f4:57:b0:fe:3c:ea:cb:
         fc:e3:6b:49:3a:4f:ed:2e:e8:35:93:3f:49:61:ec:a3:6d:61:
         22:53:43:60:6c:d7:9b:37:fd:79:03:d8:6d:d6:6e:a8:2e:17:
         73:1c:69:73:57:b0:b1:32:83:0f:16:25:c2:87:d8:8b:b6:75:
         df:70:8f:5b:66:75:d1:d6:6d:6f:94:16:97:3d:38:6e:38:47:
         30:e4:f4:69:e1:8f:05:a7:db:d5:57:a5:b2:3a:fb:01:bf:bb:
         63:4c:12:18:7a:a9:89:f6:33:3b:81:58:3e:82:04:13:ee:a8:
         46:bb:a2:5a:41:4c:5c:31:aa:07:33:b4:81:5d:a8:b3:59:95:
         2b:57:19:45:30:61:54:e3:37:f1:29:95:72:6e:43:b7:0a:49:
         e4:03:d4:85:b2:95:e5:ef:9b:dd:32:9f:d0:61:b0:86:49:b7:
         2c:d8:eb:ef:02:fd:05:fe:09:28:16:8a:25:af:f4:0c:df:62:
         63:15:4f:ce:59:cc:6d:c0:da:15:1c:3d:59:87:a2:62:ff:df:
         03:cb:c2:d2:93:d8:be:ef:5f:c2:98:fa:6e:07:f4:15:34:3e:
         4c:8d:f5:af
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNjA5MjQwMjEwNTNaFw0yNjA5MjYwMjEwNTNaMBgxFjAU
BgNVBAMTDTZhYjQ4NmFlLWI5YmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZm9HvXwdgGGkO68SAYNxk4MDm6KKk4VafCoHBZHLX73pwSpHdPiDBGogM
Eos9oZGkdJ5oNJDT+DT258lkgQ/3AlCh8AXQnMPMPWVRAQgByrG9whtKW2pJR7nf
Q3mFDKX8ad86FGUTP6NOxiJxLaygTKhZXBb2iqtupvFhFjgZUdI4mR3Ei0T2KQfc
dku4Ozcnl5pIKiWOO9ekiTOovr6CVKjTsHuLpa3WrtdV5MNoX+MQFyW2oVaBN0t/
PxC95vsmjDeIU2hisJJoh/kZuU2K/vXZntcRJEtpRTc8o4xVVnKwUxGm6fJH4cLI
8uI8AcUCadRm093Knv9/kt1HboZpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOSIn
d54w4CV+sTCxMfTz/V11WrYwHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUFGREQvM0RCNDJEREFDMUYyMTFFQkJBMkZGMDNFRjhB
RUEyMjgvNThhQU5nQWs3Ym56UlIzSkUtb3pCWnZKQktVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCE96h0Ft0S1VBSJBkLrvvUKNH8RZwW
oxz8EouPb/RXsP486sv842tJOk/tLug1kz9JYeyjbWEiU0NgbNebN/15A9ht1m6o
LhdzHGlzV7CxMoMPFiXCh9iLtnXfcI9bZnXR1m1vlBaXPThuOEcw5PRp4Y8Fp9vV
V6WyOvsBv7tjTBIYeqmJ9jM7gVg+ggQT7qhGu6JaQUxcMaoHM7SBXaizWZUrVxlF
MGFU4zfxKZVybkO3CknkA9SFspXl75vdMp/QYbCGSbcs2OvvAv0F/gkoFoolr/QM
32JjFU/OWcxtwNoVHD1Zh6Ji/98Dy8LSk9i+71/CmPpuB/QVND5MjfWv
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:15:03 2026 by rpki-client