Error: rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
File:                     0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft (raw, json)
Hash identifier:          GcmFc1EJDXW1pTmETVS1lO9xpkVlPACYJX93kEBE9cc=
Subject key identifier:   DE:B8:EF:75:BA:62:EE:56:F5:11:A5:5C:6D:4B:5B:6B:4E:97:8E:CC
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       05D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
Manifest number:          059A
Signing time:             Sat 14 Nov 2026 03:16:33 +0000
Manifest this update:     Sat 14 Nov 2026 03:16:33 +0000
Manifest next update:     Mon 16 Nov 2026 03:16:32 +0000
Files and hashes:         1: 0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl (hash: JfTbkdEMtOdFFnGAKdCBfWo/bokr+KlszicQ/UEq35w=)
                          2: 39FFC9BE03B811EF983A1B33017001B1.roa (hash: tS+wVtHhPrpxDmWcesUHT7utAdSi06FtleX+U4Lw7TI=)
                          3: FAEBDC4803B411EFB029601B017001B1.roa (hash: xzzx0ugjkRS9PYdo0KLQ7+H2uxfJ0K+cSqgvb2XnuPk=)
                          4: 10CCE32CC6FF11F0B93FC5E3DAE4EC9C.roa (hash: 5B0QBngF6qWUVL5UNucquvsi+fgp6vlUH+ndV+NbyTc=)
                          5: C38CBD7203B811EF86521F38017001B1.roa (hash: 2WcQX+9AjIfrNmsdsiKQyVMoPWChqItR+h5OqUTMfRk=)
                          6: BDBE112003B311EF8DDE9910017001B1.roa (hash: 82bRJv+5HJA4Fi6+OCSpOjCyBZW+S6V58aFWPp7a3SM=)
                          7: B44578A803B411EF95522E17017001B1.roa (hash: 936Q411o1qc4pT0Zx9jhIXN0Wgiyr6no0KJUyaCEE/c=)
                          8: 980A722003B311EF86B63910017001B1.roa (hash: wKMuoXYYXIiS/ZLS7PWLzLXdIFcknzJKp/rpFSrvhH8=)
                          9: E432C49203B611EFBEEC1128017001B1.roa (hash: eCtOJ1D+HQduSTMxCfcTJUfC/lccpBhF5JE1AQ+kubk=)
                          10: 5261E514C6DA11F0B15A2D81DAE4EC9C.roa (hash: mAmUFgYkXbE6+ghPUIu/1Ppy4h9mOTBy34Ydx2HW+I0=)
                          11: CF23848E03B511EF80994521017001B1.roa (hash: aMLwz+ZKh6Oz4CoRMY0xHb1x7qr39vpl6gfnLqRS/qQ=)
                          12: C8492B50C97011F0B52599DBDAE4EC9C.roa (hash: 9b0StYZI4/RVSPKeiscu/wUKHK60EMRwc+Ha1U/o1J8=)
                          13: F8A856B603B211EFB3ADE30A017001B1.roa (hash: uJrPT/XteQRfZvDwpMyFdVnvV7NPg5BDECy1d8844bY=)
                          14: 519B660C03B611EF98D15426017001B1.roa (hash: av0draMIOKhBEZ3kOVBkA1YKrpj/hJoac9vz6NKCER0=)
                          15: 056431F403B811EFA4BA5832017001B1.roa (hash: ApGOgDLRrAt7wLYHdFuvRo2DntM8bf1Tz78NFhtcxL8=)
                          16: 7EB3E7FA03BA11EF9888BB48017001B1.roa (hash: 8kFtpikZunY+lfUkg34+p4H/6y7KoFeGsFbV13OrRZM=)
                          17: 48D1B612F7D011EEB7ACF12A017001B1.roa (hash: MO6EQKtkkq85RZaTVkomcZUCuBadwthtdCSH79/DaIw=)
                          18: 7FF87C5A03B711EF917C5C2D017001B1.roa (hash: a35pKcfaaHwWPzygov5Kk7IYMKCrlD7MHrGfGQq3aco=)
                          19: DF255D0003B311EF81582C11017001B1.roa (hash: 2gbspSAn1FaleBtgeLKwF76oQxo4DIcvXlm/ZaZeaDw=)
                          20: 8D45EA1C03B911EF8ECB013E017001B1.roa (hash: QPpku5aqb911f/bHCQAb3elnYINcM+RRUsK7N2sabe8=)
                          21: 32837C9003B711EF967A4F2C017001B1.roa (hash: +5CLxbGwXT60ubQqq8bM1C2hWckotvUlGwQf+a7WrQo=)
                          22: 58F9B92203B511EFB9AAA61C017001B1.roa (hash: wfruQ932JSdbaIg9RVb9zVvENhjkQ6ADpWh/ZpApbXY=)
                          23: 06ED290003B711EFA808E12B017001B1.roa (hash: 3nwhGhuRYVpIImiqWFP3vuMZlijuvEzm21qn4zV6clc=)
                          24: A28BE3EE03B511EFB056D120017001B1.roa (hash: R+mCP7u5rWLhn9EEMSGJ2CTodRAWWEkqlzeIGmxGVo0=)
                          25: 59084A3803B411EF9CC30616017001B1.roa (hash: VQ0RSSTYVjk7yqISbUry20G3lzAncR47Ax8IgCDJ6FM=)
                          26: D95C7F0803B711EFA940CD31017001B1.roa (hash: YRvxTaW01N4ChieFj2ifQBeOMmeruhjQJDufE0+oCvU=)
                          27: 1AE3C7AA03B911EF86A98F3C017001B1.roa (hash: gyS/aMybFEma33PxUMgpBfLTjikHDhVK6duizXP6PRI=)
                          28: 6AE7FF2E03B311EF903F510C017001B1.roa (hash: 3kqijSi8P/0vf9KQNjB81BG7B4/nyk3Ow12xYdd94Dg=)
                          29: E8FB648603B911EF99896D42017001B1.roa (hash: 0LRPsqp/eBeRYaF8dUu/T+Twx9GeRodgR1TnQOXBJH0=)
                          30: 34279B9203B411EF914AA515017001B1.roa (hash: KyyGeSy1rjryhQ/mTFRctgw4FH6eqpgccoKh2XdbOnE=)
                          31: 7C1F7EE603B511EFB4C5FB1C017001B1.roa (hash: Lo3e7+E8r/NSCO53r7b8CA67fySg+7NtHZB+aX3Qbtg=)
                          32: B1B059DE03B711EF90376831017001B1.roa (hash: WeVV5gDtF6GpuPWvFOh56HIeyAo/+6h+QFCO/xL7k9Y=)
                          33: 2134D1CEC97111F0A57328DCDAE4EC9C.roa (hash: 4KsMZrVYDmHAF7oozcDrCXpi3ddCFjVIcMT9oAYZc7Y=)
                          34: 61AE267AC6FF11F0B91AC8E5DAE4EC9C.roa (hash: C98IqjdBv5LJt5iWVtMJ+QAbakTE3pasElVLp+1uNuo=)
                          35: BF97846C03B911EFB079EA41017001B1.roa (hash: wNII1uoSvScpdOlwHz4BDM1DBqJs/03DHX7oHGkZtJk=)
                          36: 67ECDE3803B911EFA186603D017001B1.roa (hash: DI5kIwElQ8R+Lw20LT5yGvsY0m7hji0peiEWAehYwT8=)
                          37: B159B4A6F7CF11EEB1F39025017001B1.roa (hash: 740iX4/YNKSrtY9V4n9PWMrAZ0OIIcK6uTWL5Tg39nE=)
                          38: B295FE0A03BA11EFA4CD3749017001B1.roa (hash: 0ThrAr6vm0bBEIQGeFKPBtwPlSPx+ZpJ9O+oSkRp4ng=)
                          39: DAF813C003B411EF9A180C1B017001B1.roa (hash: rxENEqWWigTNJviQ+rAe/KPkUQD8qHgTCh4hs/xATo8=)
                          40: 8A36DFD403B411EFBCF69916017001B1.roa (hash: xKMBf2rSSOixjAS2vNdhJv84bn3oPMKHm8mgP2NWS3A=)
                          41: 0471BC4803B411EF8330A611017001B1.roa (hash: 3INpP9HwU5rpsLwrARqpf7p6nExwTzjKuLs7Tp6YsOI=)
                          42: 9058590C03B811EFB2BC6037017001B1.roa (hash: KbTrV9/1QdeVyGjJXMf67sHpdC5TxLAEU7d3+fl+nbE=)
                          43: BF6DDF5603B211EFA0BA490A017001B1.roa (hash: 8/0GoFuHQN9he6IYSmKw6dZ6XCPb7gOtdsq14wm2Isc=)
                          44: 7C256E3603B611EFAF25C126017001B1.roa (hash: HvW2XolqN7iVLLfu4e4/42VqmnpjFO4MOEZUl8OZjX4=)
                          45: 5B989A2C03BA11EFAA71D543017001B1.roa (hash: KbZuJr3ip0P+gvWdRwind0bDdrmcL70WDYjmp2NTnhE=)
                          46: 4556E87403B311EF947EEE0B017001B1.roa (hash: 5he62FEDMtk8xgthwxXe7kpX5VqIynwz1zy7Z94nIm8=)
                          47: 59DC420403B711EF9611CE2C017001B1.roa (hash: EwVt1oXV0u0an9gRO+yk2dl6LPH6mygNRS8FSwAxo9Y=)
                          48: F30D683A03B811EFB841B038017001B1.roa (hash: /fG66SOeJwlKhY/vnT1XmeFZ84fISRpkxoqX3tuqW1g=)
                          49: 9C9F4FB003B611EFB8A12227017001B1.roa (hash: RVO87omLbTuzPNyt+gyuo6dbEU3UiqJ5W8lmS1Jz7c8=)
                          50: 5B91C6B803B811EFA4C9CE36017001B1.roa (hash: JcVXEBKBXCdAnpNP9gkBki5xx1uU/257cotnySg0MZA=)
                          51: 70246ED6F7CF11EEBDBEE324017001B1.roa (hash: e1vFix2SZU+voeEXeL4846G5Zk4nH6jhf40xzuuk0vk=)
                          52: 18F314CC03BA11EFA363E442017001B1.roa (hash: zpVG8PnZugODg3d53wKyidNhCpmCyN5gzsP/0/AMopc=)
                          53: 42F3617E03B911EFBF21F33C017001B1.roa (hash: rGghr4IPbYUvGjnweFdDE8GuVv5Ia4WJ4E4L8gdF8rc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 03:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF, serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Nov 14 03:16:33 2026 GMT
            Not After : Nov 16 03:16:32 2026 GMT
        Subject: CN=6af7d291-4f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:c1:32:4f:37:80:fe:4a:ba:e4:d4:97:7c:
                    cd:59:de:a0:45:de:46:eb:ba:bb:bd:e1:7c:04:56:
                    a2:a1:73:9a:8c:84:5b:ef:45:26:5c:18:26:81:70:
                    b3:02:6c:ee:35:17:54:e5:35:7c:58:fa:c0:97:dc:
                    cf:0f:e3:d9:6e:f2:59:fb:84:d7:7f:9c:f7:02:8c:
                    da:1a:aa:81:85:46:26:f8:e4:25:f7:03:5e:ca:71:
                    de:8b:ab:b9:a3:e5:33:2b:0d:d4:01:fd:79:38:07:
                    23:bf:69:d5:af:ad:da:b7:54:63:9b:83:38:1e:9d:
                    ee:09:92:bf:be:0f:3f:63:da:5d:fe:fb:d2:3d:0c:
                    35:c7:0e:e0:e5:71:2a:4d:b9:90:cc:fd:de:68:d0:
                    a9:1d:bf:27:07:d2:dc:61:11:d2:47:fe:74:ea:c8:
                    7b:79:84:a8:53:d1:d1:15:5e:49:17:9b:1b:27:06:
                    e8:d4:f1:0f:08:3e:4c:0c:57:62:6a:0a:0e:2f:7e:
                    71:25:50:88:3c:37:99:12:4a:71:30:cf:67:7a:f1:
                    57:ce:e0:3d:21:bc:b0:54:f0:e0:77:d3:0a:1e:c2:
                    cc:e7:c9:f0:29:fc:6a:21:82:63:63:dc:3e:7e:99:
                    0a:f2:8a:63:8a:55:db:4c:c8:67:ba:25:4c:70:01:
                    25:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B8:EF:75:BA:62:EE:56:F5:11:A5:5C:6D:4B:5B:6B:4E:97:8E:CC
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:66:95:2a:81:c2:e3:a2:57:90:41:dc:3a:98:75:33:a6:b3:
         a5:c2:6e:18:a4:73:e9:40:de:c6:bd:7b:ac:71:52:3e:7b:d5:
         37:19:0f:ee:29:a0:4f:67:ef:62:b2:2f:90:87:e5:f1:11:ab:
         38:b4:c3:0c:ee:3b:3a:ae:06:04:b9:df:54:f6:71:59:4f:56:
         5d:84:1d:f9:36:d6:e6:a3:75:23:f7:a5:74:8f:58:30:3e:95:
         ad:25:19:f7:79:a4:10:53:0d:2b:95:de:1e:2d:41:ec:50:ca:
         0f:22:5b:bd:cd:e4:32:2c:80:f2:0a:7a:0f:1a:be:8c:73:8c:
         9e:56:89:18:aa:60:6a:4b:8f:b3:4e:2c:18:c3:ba:2c:d6:ea:
         ab:81:f5:cd:69:db:54:aa:54:22:80:58:cf:ec:58:52:5e:67:
         e8:8e:eb:44:13:97:f3:4d:e3:dc:42:3a:69:f9:dc:85:f7:97:
         d6:f3:a4:16:4a:b2:bb:76:60:bf:4c:57:8e:11:b5:29:c9:de:
         5a:3d:3b:40:eb:8a:fe:24:a9:26:47:9d:85:16:a7:b3:7d:04:
         41:07:d2:e7:2a:23:96:3b:1c:a6:1c:25:74:c7:b0:04:30:5d:
         6e:82:08:8b:00:6a:3c:6a:76:51:00:c2:f8:75:1b:52:1f:7c:
         36:9d:2c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:28:19 2026 by rpki-client