Error: rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
File:                     gyq31tewX3AP-RtzAzXuEJ-gLX8.mft (raw, json)
Hash identifier:          XKFxS7O3tTJYvuOgnCVR7s1TplE4vYiSCJbBacSHcRk=
Subject key identifier:   7D:EA:EE:F9:0D:EF:5E:EC:25:FF:D7:F5:7A:AD:D5:72:C9:C7:6D:36
Authority key identifier: 83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F
Certificate issuer:       /CN=F36DBD5BAF/serialNumber=832AB7D6D7B05F700FF91B730335EE109FA02D7F
Certificate serial:       0176
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
Manifest number:          0175
Signing time:             Sat 14 Nov 2026 05:12:34 +0000
Manifest this update:     Sat 14 Nov 2026 05:12:34 +0000
Manifest next update:     Mon 16 Nov 2026 05:12:34 +0000
Files and hashes:         1: gyq31tewX3AP-RtzAzXuEJ-gLX8.crl (hash: pK3eWbrhAaWr2vmBUhtzfBC2gzQLEWjz+2x1rnPU2K0=)
                          2: 4B9CA364BED211F09A698DD6DAE4EC9C.roa (hash: wpjf9P8gQce8p8xSJXmo+d96rtH8YAlQBHy9oW1+SUU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBD5BAF, serialNumber=832AB7D6D7B05F700FF91B730335EE109FA02D7F
        Validity
            Not Before: Nov 14 05:12:34 2026 GMT
            Not After : Nov 16 05:12:34 2026 GMT
        Subject: CN=6af7edc2-af75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a8:89:0b:0d:f7:b9:af:ce:24:ac:5e:e9:66:
                    18:a6:8e:cf:bf:31:3c:ab:06:ab:99:d0:f4:c7:bd:
                    46:0a:a9:57:10:72:e9:96:0b:26:ac:6e:33:fe:88:
                    73:1b:1a:c2:a2:ae:93:27:b3:eb:51:59:dc:55:ce:
                    d5:1b:f1:12:f5:7f:d6:ba:c9:df:ff:19:a7:50:17:
                    fe:e1:a1:68:94:9a:9a:8b:ac:75:e4:e8:98:b7:ad:
                    90:1b:22:1e:03:ff:0c:6f:9d:86:6a:b2:09:d2:66:
                    c7:2d:b8:c3:f1:71:eb:73:b3:1a:62:1e:fa:af:10:
                    c5:e5:f7:91:de:15:3d:94:e3:8b:e5:2f:5a:55:d1:
                    76:87:92:6f:7d:b0:1a:8f:20:11:1c:00:42:9d:34:
                    0e:39:0c:40:bb:c4:51:62:77:18:65:d9:b7:71:7e:
                    79:ec:45:fa:9d:79:01:dc:8b:31:66:8e:aa:d0:45:
                    50:4f:d3:8c:5c:01:27:9c:b5:40:38:2f:20:c8:29:
                    a1:03:d4:25:fe:41:7d:0c:22:05:44:61:7b:5d:ef:
                    51:8f:1b:9f:cb:33:d1:06:30:ed:67:ef:b0:8d:ee:
                    30:15:cd:cd:1e:7c:96:3d:08:c3:a0:fd:54:dc:f1:
                    b0:41:d9:0d:fc:28:48:3a:0c:b6:97:d8:fd:8a:09:
                    aa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EA:EE:F9:0D:EF:5E:EC:25:FF:D7:F5:7A:AD:D5:72:C9:C7:6D:36
            X509v3 Authority Key Identifier:
                keyid:83:2A:B7:D6:D7:B0:5F:70:0F:F9:1B:73:03:35:EE:10:9F:A0:2D:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gyq31tewX3AP-RtzAzXuEJ-gLX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBD5B/3C795EAABED111F0B0AD8FD1DAE4EC9C/gyq31tewX3AP-RtzAzXuEJ-gLX8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:fb:d1:d3:58:28:83:b7:4a:c0:4d:60:22:26:32:e9:4c:d2:
         33:ab:cb:e0:c1:83:25:80:fc:ec:74:40:7e:5f:c5:a6:30:fa:
         40:c6:2f:01:b6:95:9f:ea:6c:30:d3:bc:0d:9b:fd:5e:a2:c5:
         84:a7:5a:e3:b9:4d:de:23:e3:64:e9:07:18:bf:ed:2d:cc:61:
         0c:ac:bb:d0:57:30:d2:32:7d:58:a9:12:dc:1e:14:fc:99:83:
         28:ad:c1:03:58:59:40:69:80:02:6d:07:48:c1:5a:0a:2b:13:
         ef:b6:e2:bf:3f:ec:2a:6f:6a:8b:e4:7d:b5:f7:55:30:2b:1e:
         5c:bc:99:c0:b2:1d:e7:12:76:3e:6e:6c:e8:d5:d3:9d:ac:8b:
         be:38:9e:1b:22:af:7f:94:28:80:1a:c9:e2:87:c7:7e:d4:43:
         50:50:53:cf:ff:a6:40:70:ad:9f:dd:f4:b7:60:00:51:50:c2:
         1b:b9:01:31:f9:64:3a:b1:81:f9:02:b7:fd:58:26:60:6b:d0:
         7e:0e:ca:25:ae:ac:54:c0:f2:cc:08:b8:18:c2:fd:3c:7d:e8:
         46:75:95:17:ee:d7:72:97:31:94:49:f2:70:91:a7:ac:6c:12:
         c1:1b:90:a7:e7:ae:3c:28:57:9b:1f:66:0c:80:e9:ef:82:91:
         de:e1:b4:cd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAXYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJENUJBRjExMC8GA1UEBRMoODMyQUI3RDZEN0IwNUY3MDBGRjkxQjczMDMzNUVF
MTA5RkEwMkQ3RjAeFw0yNjExMTQwNTEyMzRaFw0yNjExMTYwNTEyMzRaMBgxFjAU
BgNVBAMTDTZhZjdlZGMyLWFmNzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0qIkLDfe5r84krF7pZhimjs+/MTyrBquZ0PTHvUYKqVcQcumWCyasbjP+
iHMbGsKirpMns+tRWdxVztUb8RL1f9a6yd//GadQF/7hoWiUmpqLrHXk6Ji3rZAb
Ih4D/wxvnYZqsgnSZsctuMPxcetzsxpiHvqvEMXl95HeFT2U44vlL1pV0XaHkm99
sBqPIBEcAEKdNA45DEC7xFFidxhl2bdxfnnsRfqdeQHcizFmjqrQRVBP04xcASec
tUA4LyDIKaED1CX+QX0MIgVEYXtd71GPG5/LM9EGMO1n77CN7jAVzc0efJY9CMOg
/VTc8bBB2Q38KEg6DLaX2P2KCarFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUferu
+Q3vXuwl/9f1eq3VcsnHbTYwHwYDVR0jBBgwFoAUgyq31tewX3AP+RtzAzXuEJ+g
LX8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCRDVCLzNDNzk1RUFBQkVEMTExRjBCMEFEOEZEMURBRTRFQzlDL2d5cTMx
dGV3WDNBUC1SdHpBelh1RUotZ0xYOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d5cTMxdGV3WDNBUC1SdHpBelh1RUotZ0xYOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REJENUIvM0M3OTVFQUFCRUQxMTFGMEIwQUQ4RkQxREFF
NEVDOUMvZ3lxMzF0ZXdYM0FQLVJ0ekF6WHVFSi1nTFg4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe+9HTWCiDt0rATWAiJjLpTNIzq8vg
wYMlgPzsdEB+X8WmMPpAxi8BtpWf6mww07wNm/1eosWEp1rjuU3eI+Nk6QcYv+0t
zGEMrLvQVzDSMn1YqRLcHhT8mYMorcEDWFlAaYACbQdIwVoKKxPvtuK/P+wqb2qL
5H2191UwKx5cvJnAsh3nEnY+bmzo1dOdrIu+OJ4bIq9/lCiAGsnih8d+1ENQUFPP
/6ZAcK2f3fS3YABRUMIbuQEx+WQ6sYH5Arf9WCZga9B+DsolrqxUwPLMCLgYwv08
fehGdZUX7tdylzGUSfJwkaesbBLBG5Cn5648KFebH2YMgOnvgpHe4bTN
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:12:16 2026 by rpki-client