Error: rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
File:                     9cC2O6peevekOGtjf9EgajaC0MM.mft (raw, json)
Hash identifier:          BjZGtxdPx6rK5KsQz39qxU8c98Gpdqq0s0Kv+eJAozw=
Subject key identifier:   DF:AC:A6:13:5B:AB:39:F2:67:E9:29:AE:71:5C:55:4B:53:5D:19:FE
Authority key identifier: F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
Certificate issuer:       /CN=F36F731FAF/serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Certificate serial:       04C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
Manifest number:          04B2
Signing time:             Sun 27 Sep 2026 03:39:45 +0000
Manifest this update:     Sun 27 Sep 2026 03:39:45 +0000
Manifest next update:     Tue 29 Sep 2026 03:39:45 +0000
Files and hashes:         1: 9cC2O6peevekOGtjf9EgajaC0MM.crl (hash: km5a1jPABaSCuAg313wYCY0BMzpuE/dldypd8W+jOb8=)
                          2: 267EAD8272DF11F0AD464C91DAE4EC9C.roa (hash: C7Gyg+4x8Hh2iqCcntRO+fHKd/DGeXvmNHuRFLOmz04=)
                          3: 6FBE03AE72E311F0BDEFCDABDAE4EC9C.roa (hash: GDOqL1OTznuXTMdN5hvVfNOqFauRmjCI7pSQfs/61Bg=)
                          4: 2470589872E311F0B4EE5DABDAE4EC9C.roa (hash: WDF/PbAAV4TFNjA9XU2xgOeBCnlYy/RDmqiM+sgfu1o=)
                          5: 91475E9A72E211F09C8B08A7DAE4EC9C.roa (hash: dmA6rvzXEJFKOZ61W1TI8NubIg9lNoADQlry0wfROZM=)
                          6: D2AC214272E011F08FD2499ADAE4EC9C.roa (hash: eAUkLW2UflJP71U92dqZlcLwcktEmsvuPM9OK2RRXnQ=)
                          7: 80842C1C72DF11F0BF649F91DAE4EC9C.roa (hash: aZOMO0+Z7igI3PaEyE+67UEBIfUxAUFnCbsi9OnPJZU=)
                          8: 4B479B12743111F0A63B64B4DAE4EC9C.roa (hash: F8PB0Xl+VxolCksfnH9PLc4qAD+h/G6brzLlc4/i1tQ=)
                          9: F8B6E34672DF11F0891FBB95DAE4EC9C.roa (hash: w2bbzRZUts884GdGNQ/ARumhi7i/n68wBygotYrEdRQ=)
                          10: DD3C16F672E211F09AF665A7DAE4EC9C.roa (hash: 67phmLpraZ+TtW1XJir/6xrM9G94j8vX+qHMp4plIeo=)
                          11: 25448AB472DE11F0AFF50189DAE4EC9C.roa (hash: OUwQI8Wpq7YkfutxF3r2SbuF+hjD7BMye8Cgl6fS3Tw=)
                          12: 01F8D29672E711F0B012AEC1DAE4EC9C.roa (hash: ZCo20DEZ3jjBn9iev2zsxyuNhGfd+XXOlj6pMmP9mwQ=)
                          13: 63498D5272E111F0B646849EDAE4EC9C.roa (hash: 21/eCvRVXcBmFJZT4KGihw0yio6Yd2hm4xWHCwHphyk=)
                          14: 2539CEB072E011F08CD40396DAE4EC9C.roa (hash: hShops0GwFAXo5gbF/S8a7PguYniu2oQp8CEizQK5tY=)
                          15: DD22D36872E111F0AC53A5A2DAE4EC9C.roa (hash: QuCk5ffNaczjJdVdreAb3kkct9VCmQhrEAkYSnzbe2o=)
                          16: AD23161472E111F08259CAA0DAE4EC9C.roa (hash: CXW28jJhcJI4pbvFp4dtjP/zrfIgrsyQ25MiQvCPSyE=)
                          17: 32652F9472E511F09A23C0B6DAE4EC9C.roa (hash: eZURWL+ZrtdxT2rF22IPu3O6ltuid4qJqQt7RblkS5I=)
                          18: B185F28C72DF11F0A2456A95DAE4EC9C.roa (hash: JthSN0OOhvboQ7GailBpQ0PlPXIDL2fkxmvjlY0OCAE=)
                          19: 6C09F61A72E211F09581F0A6DAE4EC9C.roa (hash: UcVgAglDQSEP0uPY3QLGRmH+dWW7hvJEw53QIFsBsFQ=)
                          20: 121D078272E211F0A497F1A2DAE4EC9C.roa (hash: QV56lqv72VjNV1FXxfBXzR+88I2equPTmmIREvSVQyw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224 (0x4c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAF, serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
        Validity
            Not Before: Sep 27 03:39:45 2026 GMT
            Not After : Sep 29 03:39:45 2026 GMT
        Subject: CN=6ab89001-951d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:d2:9a:87:18:e7:e8:ac:e5:b0:27:d5:13:
                    a5:e6:f6:dd:4f:3e:c6:c9:e3:c2:97:77:96:d9:d9:
                    fa:1a:65:0c:c5:4b:6f:47:39:62:75:0f:69:0e:e6:
                    af:ed:cd:08:df:0a:57:49:39:9e:84:dc:29:09:cd:
                    62:fa:ba:2d:62:fb:81:59:d2:48:64:ba:64:fe:76:
                    f1:00:46:6d:de:55:5f:99:cd:55:0f:fa:23:b8:a0:
                    39:44:61:2e:f6:19:49:07:20:0e:93:b3:e6:f2:f3:
                    4e:aa:06:ae:8c:01:9a:55:84:7a:69:3b:08:a1:88:
                    50:ff:b6:20:c4:ce:e8:16:84:ce:78:2b:d5:88:7d:
                    9f:fb:11:e7:d0:39:bc:2f:fd:f3:3d:54:04:7c:75:
                    32:88:ce:69:ac:3b:8f:20:06:f3:6c:63:2f:0a:ce:
                    2e:22:37:ed:3c:a7:d5:71:ae:eb:a9:b0:c6:35:d4:
                    b1:3c:11:75:5b:e7:76:d7:84:f5:fa:1b:c1:a7:5c:
                    d9:17:91:3c:7c:89:ea:d5:1f:b2:a1:41:a0:f4:84:
                    3b:2d:3c:2e:2b:30:b4:c3:6b:97:c1:23:50:e8:07:
                    94:95:51:f1:fc:ff:a9:6f:1f:af:94:6c:54:fe:9e:
                    52:0e:80:03:36:2f:4e:cb:6d:b4:c6:a6:04:88:f6:
                    49:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AC:A6:13:5B:AB:39:F2:67:E9:29:AE:71:5C:55:4B:53:5D:19:FE
            X509v3 Authority Key Identifier:
                keyid:F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:aa:20:bc:66:f2:79:4c:d8:d3:bc:73:c3:af:91:8c:4a:71:
         20:34:bb:a6:5b:30:71:c0:87:f4:e5:48:ff:27:63:7d:0c:12:
         fd:59:fb:17:2f:db:01:99:85:7c:94:0f:9d:41:b3:e2:bc:66:
         06:ad:a1:c9:93:7a:e1:66:34:e1:ad:8c:43:84:7c:28:a4:63:
         5a:56:b3:4d:33:af:68:af:1f:af:18:25:9a:ed:2f:18:de:3a:
         bb:57:10:fe:30:8c:0e:d0:f1:c5:98:a2:93:60:3a:86:21:d1:
         04:1e:25:b4:57:13:fc:1b:39:71:f2:0f:5c:10:57:65:df:0a:
         89:8d:bc:7d:f5:5b:20:f1:8f:e0:36:92:26:5a:bc:7a:63:c2:
         40:40:af:d7:49:ec:11:8d:99:27:a1:bd:7f:24:0d:dc:8e:43:
         81:ad:9c:fa:f2:a1:44:d5:1e:e9:3d:81:7e:10:e4:e6:6c:fe:
         0b:cb:f6:95:f2:d0:28:b3:8e:9e:61:53:df:a5:5a:d8:94:52:
         c5:ec:e0:c2:d2:e3:74:6a:c5:d9:f4:b0:21:83:b0:b9:84:97:
         b4:11:24:37:1c:03:cb:1b:e4:91:a2:8d:f7:90:e3:b5:76:c1:
         25:74:f4:cb:ae:16:13:62:49:8b:bd:f4:44:ba:35:8b:57:de:
         37:91:36:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:42:41 2026 by rpki-client