Error: rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
File:                     0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft (raw, json)
Hash identifier:          rexhI2XFLLWT9z3/sHLA0RRa4m3Te15lujFmrpwW+vk=
Subject key identifier:   6B:A9:62:2C:6E:E6:4D:51:5E:1F:46:E4:D4:7B:4F:F3:E6:D0:8D:F2
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       05A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
Manifest number:          0568
Signing time:             Fri 25 Sep 2026 03:18:31 +0000
Manifest this update:     Fri 25 Sep 2026 03:18:30 +0000
Manifest next update:     Sun 27 Sep 2026 03:18:30 +0000
Files and hashes:         1: 0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl (hash: jxpsQNE8znJ/4jmnk/EC/acqOkvB5Ei9UOh84mHtKEk=)
                          2: 39FFC9BE03B811EF983A1B33017001B1.roa (hash: tS+wVtHhPrpxDmWcesUHT7utAdSi06FtleX+U4Lw7TI=)
                          3: FAEBDC4803B411EFB029601B017001B1.roa (hash: xzzx0ugjkRS9PYdo0KLQ7+H2uxfJ0K+cSqgvb2XnuPk=)
                          4: 10CCE32CC6FF11F0B93FC5E3DAE4EC9C.roa (hash: 5B0QBngF6qWUVL5UNucquvsi+fgp6vlUH+ndV+NbyTc=)
                          5: C38CBD7203B811EF86521F38017001B1.roa (hash: 2WcQX+9AjIfrNmsdsiKQyVMoPWChqItR+h5OqUTMfRk=)
                          6: BDBE112003B311EF8DDE9910017001B1.roa (hash: 82bRJv+5HJA4Fi6+OCSpOjCyBZW+S6V58aFWPp7a3SM=)
                          7: B44578A803B411EF95522E17017001B1.roa (hash: 936Q411o1qc4pT0Zx9jhIXN0Wgiyr6no0KJUyaCEE/c=)
                          8: 980A722003B311EF86B63910017001B1.roa (hash: wKMuoXYYXIiS/ZLS7PWLzLXdIFcknzJKp/rpFSrvhH8=)
                          9: E432C49203B611EFBEEC1128017001B1.roa (hash: eCtOJ1D+HQduSTMxCfcTJUfC/lccpBhF5JE1AQ+kubk=)
                          10: 5261E514C6DA11F0B15A2D81DAE4EC9C.roa (hash: mAmUFgYkXbE6+ghPUIu/1Ppy4h9mOTBy34Ydx2HW+I0=)
                          11: CF23848E03B511EF80994521017001B1.roa (hash: aMLwz+ZKh6Oz4CoRMY0xHb1x7qr39vpl6gfnLqRS/qQ=)
                          12: C8492B50C97011F0B52599DBDAE4EC9C.roa (hash: 9b0StYZI4/RVSPKeiscu/wUKHK60EMRwc+Ha1U/o1J8=)
                          13: F8A856B603B211EFB3ADE30A017001B1.roa (hash: uJrPT/XteQRfZvDwpMyFdVnvV7NPg5BDECy1d8844bY=)
                          14: 519B660C03B611EF98D15426017001B1.roa (hash: av0draMIOKhBEZ3kOVBkA1YKrpj/hJoac9vz6NKCER0=)
                          15: 056431F403B811EFA4BA5832017001B1.roa (hash: ApGOgDLRrAt7wLYHdFuvRo2DntM8bf1Tz78NFhtcxL8=)
                          16: 7EB3E7FA03BA11EF9888BB48017001B1.roa (hash: 8kFtpikZunY+lfUkg34+p4H/6y7KoFeGsFbV13OrRZM=)
                          17: 48D1B612F7D011EEB7ACF12A017001B1.roa (hash: MO6EQKtkkq85RZaTVkomcZUCuBadwthtdCSH79/DaIw=)
                          18: 7FF87C5A03B711EF917C5C2D017001B1.roa (hash: a35pKcfaaHwWPzygov5Kk7IYMKCrlD7MHrGfGQq3aco=)
                          19: DF255D0003B311EF81582C11017001B1.roa (hash: 2gbspSAn1FaleBtgeLKwF76oQxo4DIcvXlm/ZaZeaDw=)
                          20: 8D45EA1C03B911EF8ECB013E017001B1.roa (hash: QPpku5aqb911f/bHCQAb3elnYINcM+RRUsK7N2sabe8=)
                          21: 32837C9003B711EF967A4F2C017001B1.roa (hash: +5CLxbGwXT60ubQqq8bM1C2hWckotvUlGwQf+a7WrQo=)
                          22: 58F9B92203B511EFB9AAA61C017001B1.roa (hash: wfruQ932JSdbaIg9RVb9zVvENhjkQ6ADpWh/ZpApbXY=)
                          23: 06ED290003B711EFA808E12B017001B1.roa (hash: 3nwhGhuRYVpIImiqWFP3vuMZlijuvEzm21qn4zV6clc=)
                          24: A28BE3EE03B511EFB056D120017001B1.roa (hash: R+mCP7u5rWLhn9EEMSGJ2CTodRAWWEkqlzeIGmxGVo0=)
                          25: 59084A3803B411EF9CC30616017001B1.roa (hash: VQ0RSSTYVjk7yqISbUry20G3lzAncR47Ax8IgCDJ6FM=)
                          26: D95C7F0803B711EFA940CD31017001B1.roa (hash: YRvxTaW01N4ChieFj2ifQBeOMmeruhjQJDufE0+oCvU=)
                          27: 1AE3C7AA03B911EF86A98F3C017001B1.roa (hash: gyS/aMybFEma33PxUMgpBfLTjikHDhVK6duizXP6PRI=)
                          28: 6AE7FF2E03B311EF903F510C017001B1.roa (hash: 3kqijSi8P/0vf9KQNjB81BG7B4/nyk3Ow12xYdd94Dg=)
                          29: E8FB648603B911EF99896D42017001B1.roa (hash: 0LRPsqp/eBeRYaF8dUu/T+Twx9GeRodgR1TnQOXBJH0=)
                          30: 34279B9203B411EF914AA515017001B1.roa (hash: KyyGeSy1rjryhQ/mTFRctgw4FH6eqpgccoKh2XdbOnE=)
                          31: 7C1F7EE603B511EFB4C5FB1C017001B1.roa (hash: Lo3e7+E8r/NSCO53r7b8CA67fySg+7NtHZB+aX3Qbtg=)
                          32: B1B059DE03B711EF90376831017001B1.roa (hash: WeVV5gDtF6GpuPWvFOh56HIeyAo/+6h+QFCO/xL7k9Y=)
                          33: 2134D1CEC97111F0A57328DCDAE4EC9C.roa (hash: 4KsMZrVYDmHAF7oozcDrCXpi3ddCFjVIcMT9oAYZc7Y=)
                          34: 61AE267AC6FF11F0B91AC8E5DAE4EC9C.roa (hash: C98IqjdBv5LJt5iWVtMJ+QAbakTE3pasElVLp+1uNuo=)
                          35: BF97846C03B911EFB079EA41017001B1.roa (hash: wNII1uoSvScpdOlwHz4BDM1DBqJs/03DHX7oHGkZtJk=)
                          36: 67ECDE3803B911EFA186603D017001B1.roa (hash: DI5kIwElQ8R+Lw20LT5yGvsY0m7hji0peiEWAehYwT8=)
                          37: B159B4A6F7CF11EEB1F39025017001B1.roa (hash: 740iX4/YNKSrtY9V4n9PWMrAZ0OIIcK6uTWL5Tg39nE=)
                          38: B295FE0A03BA11EFA4CD3749017001B1.roa (hash: 0ThrAr6vm0bBEIQGeFKPBtwPlSPx+ZpJ9O+oSkRp4ng=)
                          39: DAF813C003B411EF9A180C1B017001B1.roa (hash: rxENEqWWigTNJviQ+rAe/KPkUQD8qHgTCh4hs/xATo8=)
                          40: 8A36DFD403B411EFBCF69916017001B1.roa (hash: xKMBf2rSSOixjAS2vNdhJv84bn3oPMKHm8mgP2NWS3A=)
                          41: 0471BC4803B411EF8330A611017001B1.roa (hash: 3INpP9HwU5rpsLwrARqpf7p6nExwTzjKuLs7Tp6YsOI=)
                          42: 9058590C03B811EFB2BC6037017001B1.roa (hash: KbTrV9/1QdeVyGjJXMf67sHpdC5TxLAEU7d3+fl+nbE=)
                          43: BF6DDF5603B211EFA0BA490A017001B1.roa (hash: 8/0GoFuHQN9he6IYSmKw6dZ6XCPb7gOtdsq14wm2Isc=)
                          44: 7C256E3603B611EFAF25C126017001B1.roa (hash: HvW2XolqN7iVLLfu4e4/42VqmnpjFO4MOEZUl8OZjX4=)
                          45: 5B989A2C03BA11EFAA71D543017001B1.roa (hash: KbZuJr3ip0P+gvWdRwind0bDdrmcL70WDYjmp2NTnhE=)
                          46: 4556E87403B311EF947EEE0B017001B1.roa (hash: 5he62FEDMtk8xgthwxXe7kpX5VqIynwz1zy7Z94nIm8=)
                          47: 59DC420403B711EF9611CE2C017001B1.roa (hash: EwVt1oXV0u0an9gRO+yk2dl6LPH6mygNRS8FSwAxo9Y=)
                          48: F30D683A03B811EFB841B038017001B1.roa (hash: /fG66SOeJwlKhY/vnT1XmeFZ84fISRpkxoqX3tuqW1g=)
                          49: 9C9F4FB003B611EFB8A12227017001B1.roa (hash: RVO87omLbTuzPNyt+gyuo6dbEU3UiqJ5W8lmS1Jz7c8=)
                          50: 5B91C6B803B811EFA4C9CE36017001B1.roa (hash: JcVXEBKBXCdAnpNP9gkBki5xx1uU/257cotnySg0MZA=)
                          51: 70246ED6F7CF11EEBDBEE324017001B1.roa (hash: e1vFix2SZU+voeEXeL4846G5Zk4nH6jhf40xzuuk0vk=)
                          52: 18F314CC03BA11EFA363E442017001B1.roa (hash: zpVG8PnZugODg3d53wKyidNhCpmCyN5gzsP/0/AMopc=)
                          53: 42F3617E03B911EFBF21F33C017001B1.roa (hash: rGghr4IPbYUvGjnweFdDE8GuVv5Ia4WJ4E4L8gdF8rc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1440 (0x5a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF, serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Sep 25 03:18:30 2026 GMT
            Not After : Sep 27 03:18:30 2026 GMT
        Subject: CN=6ab5e807-dd00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7f:18:87:44:a8:3c:42:07:84:0d:e3:80:98:
                    52:d7:54:4b:a1:28:3a:2c:be:8f:c5:17:f8:e5:3d:
                    00:15:1b:89:13:80:14:8d:63:dd:8b:fb:55:90:ab:
                    3c:27:99:f3:74:e6:61:aa:99:10:3d:d4:91:38:3f:
                    fa:36:90:5d:49:30:0e:8b:1d:0c:4e:ad:4f:cf:b3:
                    55:db:2d:ae:d9:6e:20:11:47:80:d9:44:34:92:2e:
                    fb:39:50:b2:a1:12:68:c0:6e:3e:c5:42:3e:e2:75:
                    94:26:67:b7:88:ad:65:20:80:17:17:83:85:1f:1e:
                    49:55:89:d2:ef:55:09:ce:d4:8f:0e:94:28:72:79:
                    b1:c5:ff:e3:39:5f:56:6a:0a:ff:7e:b3:b0:a7:6f:
                    fa:70:fe:50:bf:87:b5:a6:af:26:8a:6f:93:8d:fd:
                    b2:1b:32:60:49:18:63:3a:91:b8:c6:c4:4a:22:fa:
                    f4:33:c5:4d:c8:0c:a9:73:61:22:c9:2f:79:e9:55:
                    39:0f:74:6a:39:d9:e2:0d:59:0d:99:f7:a7:a1:60:
                    ea:a3:5b:b1:56:c1:24:80:40:c7:e7:1e:d3:72:d2:
                    4b:63:c2:32:3b:36:50:78:e5:6e:59:f0:e0:a2:cd:
                    49:73:49:15:a6:8d:86:7a:c5:d7:ea:6b:f4:f4:cc:
                    ca:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A9:62:2C:6E:E6:4D:51:5E:1F:46:E4:D4:7B:4F:F3:E6:D0:8D:F2
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:67:74:98:53:02:43:5e:82:00:96:03:48:91:fe:8c:77:61:
         29:96:2d:5e:9d:e5:af:83:ff:b4:20:c2:b7:1b:52:85:fa:69:
         2b:a4:97:9d:ae:d6:55:df:18:81:e4:9a:3a:87:27:77:e0:ce:
         b9:5a:04:a2:de:d5:04:af:a4:b3:a1:67:47:fc:95:bd:fd:6a:
         ef:ff:d9:bb:49:79:78:32:51:22:ca:d8:d6:f8:1b:54:c0:ac:
         1c:06:33:7a:53:89:e1:20:8d:3f:d2:56:ce:9b:65:a3:0c:08:
         7f:74:02:4d:13:08:96:c7:6f:2b:e2:f4:86:5b:90:43:64:fa:
         2b:ea:db:c7:ea:ef:8f:aa:72:91:38:be:50:63:b6:ab:57:06:
         a6:b4:84:c2:00:9a:a7:a9:d7:0e:10:06:ae:2c:14:70:2b:fa:
         b7:82:0a:34:4d:58:2d:67:d8:bf:c2:20:70:3c:1c:4b:c8:7b:
         be:f7:34:f9:f9:bd:19:cb:1a:78:0f:dd:80:f8:13:c7:aa:7d:
         ac:36:8e:31:fc:13:71:06:8e:74:10:6b:21:52:9d:45:4f:45:
         f6:cb:41:62:a2:c1:94:5f:9f:23:b7:78:fb:48:37:1e:9a:87:
         91:96:b9:bd:d7:4e:ff:03:39:61:9d:11:5f:05:75:24:7c:3f:
         ab:f4:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:00:15 2026 by rpki-client