Error: rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
File:                     P2d_OhisqubJf4H5muh5RlTgQQs.mft (raw, json)
Hash identifier:          KO5Y2Hrzal8Z53dxQjJ7sMb67puE17EQS/lneGKz0Dw=
Subject key identifier:   18:51:C6:17:B7:D6:CF:84:39:2D:05:8E:AB:51:8F:64:3B:C4:F6:BF
Authority key identifier: 3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B
Certificate issuer:       /CN=F36BBF41AF/serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
Certificate serial:       0543
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
Manifest number:          050F
Signing time:             Thu 24 Sep 2026 03:32:45 +0000
Manifest this update:     Thu 24 Sep 2026 03:32:45 +0000
Manifest next update:     Sat 26 Sep 2026 03:32:45 +0000
Files and hashes:         1: P2d_OhisqubJf4H5muh5RlTgQQs.crl (hash: zWaQOsRhIx2k7vd4cZC/wNwFa4B5RJJUCTggln5jII8=)
                          2: 93BEB9727B6F11EF81325783762E951A.roa (hash: XGjuCE7tXlwix5GuCmklZ88dhoOPc6iO4b/dd0dOcD8=)
                          3: B598428C7BD011EF9348E170762E951A.roa (hash: u8koei9o52T1/oDA6+Vc7alnKCHHr6e9qCPf+FyEca0=)
                          4: 93134C74962011EFAAA0A9B4762E951A.roa (hash: HWJdyAQD0gPKecvYAkvhvhhvqGUM+2Gwedr+o6pd7fI=)
                          5: 1A4F9134922511EF83368F9D762E951A.roa (hash: anCBfgZHtzniM7dP4vfF3lMI+1CdF2Ions9Nt8kdpN4=)
                          6: 0EED0EBABAA811EFB3FB887B762E951A.roa (hash: cWJpYejV3y01oVA8qnDQSW9CTviS9mBH5RQPU8qnsl4=)
                          7: 7B0EB180561611EF957AD24F762E951A.roa (hash: YLCMHlWP1EnEGexbMo2ag/60lLWvA9wmZJiet6AJRXI=)
                          8: 837E97941C2511EEAA26D4594AD9E6FC.roa (hash: DmTBedmJtAZllDRXX8QYacyLifphZi9/9tYqy0qa/Z8=)
                          9: E1F54F2E5FF511EFAE767E52762E951A.roa (hash: ZHyP78AP+q/JJtHtUW/HC4m2P265a+lBVZzkus9pUMQ=)
                          10: 9B6E721AE3E411EFB934FF78762E951A.roa (hash: gBgcjfT/qrh95VoyMQ5KZbvh0uc6ei9HAXRDsRUsII4=)
                          11: 77525E5A1C2611EE8D4AC85C4AD9E6FC.roa (hash: DpMrNiTjRZWKu4SpXJlLIPkKtzQPA3MM+9+EToM9kyg=)
                          12: 9EECB24E1C2611EEA7AD515D4AD9E6FC.roa (hash: 9W8fC1Pv3M9CQpx7wz4y4cmIGIFTbWUALksyFRhYDgE=)
                          13: D305BF9E1C2611EE962CF15D4AD9E6FC.roa (hash: QvV0F8KyJ9WvuBSABzYloVhD1CSoUH2t+UNQgJHZffQ=)
                          14: 8CBFAAFA561711EFA32AB1BE762E951A.roa (hash: x13tTUmCqaneTmuylrncyIbgJsZvmJqEqrEdlvKnZD8=)
                          15: 003205069B9511EFB5BBFBA3762E951A.roa (hash: UjNuym/YVxBGxCeImR5szQOeTVJpSD09YHDR0+HigJY=)
                          16: 48DB40CE1C2511EE961F2B594AD9E6FC.roa (hash: 0WYNowNq6/ghxa/+ViWE2YlwzJQFXVRIIBMOUYA+fQ8=)
                          17: CC06753C9B9411EFB98A1EA2762E951A.roa (hash: PrWrPFpz78YhUoGxQ7jEkZFHzPPsv0jeCPOMzZB31PQ=)
                          18: D6A352521C2511EE9164F55A4AD9E6FC.roa (hash: He2Venw8taiOIZNG5L2+aSFbOwse3tT4XMAeuZ2rfyQ=)
                          19: 4134710A1C2611EE8654415C4AD9E6FC.roa (hash: FOrfNT73uBh2aYXKjOIxZWv6Nr2ME7Pa+Um5EKzqmIQ=)
                          20: 2D888128971311EFB14662AA762E951A.roa (hash: m6Vgw13O/Z9CVMDFoYn3/x7Scp+tZSUuvP1qWkzu25Q=)
                          21: 0EBF7BE21C2711EEA4DDB95E4AD9E6FC.roa (hash: Ev2ul4e+ltqtbvYSPW/0zConR3j9rixqOLLNpHJBAUU=)
                          22: 494629A869C611EFAB29428D762E951A.roa (hash: eeCnZNp5+DXjWbE73Xzf+vc1c6ITE8Mpg+2iFFIZRf0=)
                          23: AC6C1AF87C2011EF8072375D762E951A.roa (hash: 3Rl3eJ9URzbNEAjNItG8eZqFtndJzNxZbtBiE9bB/NU=)
                          24: 93F6BF08D1D611EFA285465B762E951A.roa (hash: tVKwje6T2o4eP3SDnHXNKWk8+gEDaKos+OkXYB9+jE0=)
                          25: C41EE034846D11F1B0082AE7CE1D38B0.roa (hash: vPIx+3su5XEgYcI5vDBbL8/o4dvvzyDdnNa2ovBoobU=)
                          26: C3DC7C78744B11EFB00C628E762E951A.roa (hash: DslpOa5/mWSwqGcWwNCCAP4kUIk852TGOki17LeoHAI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1347 (0x543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BBF41AF, serialNumber=3F677F3A18ACAAE6C97F81F99AE8794654E0410B
        Validity
            Not Before: Sep 24 03:32:45 2026 GMT
            Not After : Sep 26 03:32:45 2026 GMT
        Subject: CN=6ab499dd-7838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:99:41:e5:ea:1b:17:6b:69:20:cd:c7:39:
                    6f:47:d8:9d:27:05:0b:bf:0e:68:8a:cf:60:36:a2:
                    4f:23:56:88:78:54:32:e0:2d:cb:92:ec:73:22:55:
                    78:6f:31:f8:1b:4b:2e:e8:2b:f0:0b:83:1b:70:31:
                    2a:51:18:ea:b8:45:75:5c:cd:e6:40:f2:0e:b4:47:
                    ed:9e:eb:eb:4e:27:1d:35:04:ac:10:ff:39:7a:ae:
                    07:72:32:40:cf:87:b6:d1:a0:7e:6a:0f:d1:82:c4:
                    57:d7:5e:b7:c8:d2:02:10:38:a8:44:7d:6c:fb:32:
                    5f:c7:dc:9f:6e:c1:0e:d8:14:80:7a:cd:26:37:19:
                    6b:2d:db:52:99:d8:3f:35:4d:a7:1f:20:77:e9:85:
                    a7:04:1d:90:d4:d5:29:5f:2f:10:ed:28:03:71:37:
                    73:e2:86:1d:9c:d5:f1:6a:dc:10:d5:23:f5:8a:65:
                    10:e3:27:8c:3c:95:8f:b4:7f:3a:58:8a:58:7e:b9:
                    76:23:17:b5:2c:5b:4e:b7:83:bb:53:31:57:c3:0a:
                    6a:06:da:b2:a5:2b:88:80:9b:f5:f3:14:4a:51:b7:
                    2e:55:62:4a:d8:cd:df:b2:98:40:24:9e:53:bb:a8:
                    a6:57:fb:b4:40:3d:2b:a0:bb:6c:e4:f2:30:bd:15:
                    70:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:51:C6:17:B7:D6:CF:84:39:2D:05:8E:AB:51:8F:64:3B:C4:F6:BF
            X509v3 Authority Key Identifier:
                keyid:3F:67:7F:3A:18:AC:AA:E6:C9:7F:81:F9:9A:E8:79:46:54:E0:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/P2d_OhisqubJf4H5muh5RlTgQQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BBF41/14CDF8B210D611EE958C0F154AD9E6FC/P2d_OhisqubJf4H5muh5RlTgQQs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:70:70:55:d5:94:60:5b:a5:6a:d4:07:a6:e4:4e:71:4f:1c:
         6e:a2:19:7c:34:f8:9d:92:8d:f7:f6:23:1f:9d:c7:9d:49:e3:
         74:74:14:c7:0d:36:46:32:c7:fc:8d:50:25:27:c2:17:72:d5:
         37:98:6c:10:a1:e1:19:24:6e:48:52:f5:58:68:1c:57:49:c4:
         b7:1a:c6:23:19:0d:19:f6:bf:97:1e:5d:fa:d3:d5:6b:57:52:
         8e:26:07:e6:d8:58:ce:34:ab:41:18:02:e5:ec:6e:c0:e7:52:
         8d:78:1b:d1:fa:9d:66:df:05:bd:11:1c:ae:8e:d8:ce:18:37:
         f1:a5:bf:57:64:4d:df:98:2e:10:5e:02:7e:da:7d:e6:aa:e5:
         68:d4:63:08:d0:52:37:cb:da:39:8d:0e:82:fb:ac:c5:45:59:
         e2:6d:9e:a1:18:9f:01:29:74:03:4c:78:20:d9:f3:06:ab:75:
         6e:2a:bb:d5:f5:61:4b:5e:58:a6:19:2b:53:04:0a:2d:6b:25:
         8d:4e:79:75:be:4e:00:d1:38:be:8b:99:c5:39:cd:fc:23:a3:
         c2:b4:5b:0b:22:d6:22:94:e4:69:37:40:37:49:c6:00:6f:aa:
         bc:27:7b:b8:d0:9c:a9:f5:1d:14:2e:5b:00:69:27:de:4c:e2:
         8a:2c:78:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBUMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkJGNDFBRjExMC8GA1UEBRMoM0Y2NzdGM0ExOEFDQUFFNkM5N0Y4MUY5OUFFODc5
NDY1NEUwNDEwQjAeFw0yNjA5MjQwMzMyNDVaFw0yNjA5MjYwMzMyNDVaMBgxFjAU
BgNVBAMTDTZhYjQ5OWRkLTc4MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqBZlB5eobF2tpIM3HOW9H2J0nBQu/DmiKz2A2ok8jVoh4VDLgLcuS7HMi
VXhvMfgbSy7oK/ALgxtwMSpRGOq4RXVczeZA8g60R+2e6+tOJx01BKwQ/zl6rgdy
MkDPh7bRoH5qD9GCxFfXXrfI0gIQOKhEfWz7Ml/H3J9uwQ7YFIB6zSY3GWst21KZ
2D81TacfIHfphacEHZDU1SlfLxDtKANxN3Pihh2c1fFq3BDVI/WKZRDjJ4w8lY+0
fzpYilh+uXYjF7UsW063g7tTMVfDCmoG2rKlK4iAm/XzFEpRty5VYkrYzd+ymEAk
nlO7qKZX+7RAPSugu2zk8jC9FXCPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGFHG
F7fWz4Q5LQWOq1GPZDvE9r8wHwYDVR0jBBgwFoAUP2d/OhisqubJf4H5muh5RlTg
QQswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJCRjQxLzE0Q0RGOEIyMTBENjExRUU5NThDMEYxNTRBRDlFNkZDL1AyZF9P
aGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1AyZF9PaGlzcXViSmY0SDVtdWg1UmxUZ1FRcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkJGNDEvMTRDREY4QjIxMEQ2MTFFRTk1OEMwRjE1NEFE
OUU2RkMvUDJkX09oaXNxdWJKZjRINW11aDVSbFRnUVFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtcHBV1ZRgW6Vq1Aem5E5xTxxuohl8
NPidko339iMfncedSeN0dBTHDTZGMsf8jVAlJ8IXctU3mGwQoeEZJG5IUvVYaBxX
ScS3GsYjGQ0Z9r+XHl3609VrV1KOJgfm2FjONKtBGALl7G7A51KNeBvR+p1m3wW9
ERyujtjOGDfxpb9XZE3fmC4QXgJ+2n3mquVo1GMI0FI3y9o5jQ6C+6zFRVnibZ6h
GJ8BKXQDTHgg2fMGq3VuKrvV9WFLXlimGStTBAotayWNTnl1vk4A0Ti+i5nFOc38
I6PCtFsLItYilORpN0A3ScYAb6q8J3u40Jyp9R0ULlsAaSfeTOKKLHhL
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:44:46 2026 by rpki-client