Error: rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
File:                     ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft (raw, json)
Hash identifier:          1l7dijEjZsG28LsWY4O3VfAEB8QMk6SwsPWxpMbs26k=
Subject key identifier:   8B:8C:BD:A0:F0:1C:42:D4:D7:15:32:7A:85:93:43:D0:91:BD:08:F3
Authority key identifier: 8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44
Certificate issuer:       /CN=F3682104AF/serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
Certificate serial:       09CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
Manifest number:          0982
Signing time:             Fri 04 Sep 2026 01:55:11 +0000
Manifest this update:     Fri 04 Sep 2026 01:55:10 +0000
Manifest next update:     Sun 06 Sep 2026 01:55:10 +0000
Files and hashes:         1: ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl (hash: PCvVzmvvihrhP7cQS0hyjDCJvPXAaSGMqLk+ITvWaHg=)
                          2: 83E3D206DB3811F0B374F4DBDAE4EC9C.roa (hash: 34qjKxpSW0bIH6PWUpdvDjDm4+YGbEyAh1sydxcdIW4=)
                          3: 0332F694AA6211EA84373977F8AEA228.roa (hash: yMasz+8upXI4SIFaRoZw+RpsGMpU6WZH5rMWZCIkVjo=)
                          4: 758A5BAA8A4511F1A5ADBB1ECF1D38B0.roa (hash: 24EItAQeYoSQjN7R05LPu88iXCg7Xj6qZC9JE2CA5ZI=)
                          5: 26AD8020AA6311EA980D3F78F8AEA228.roa (hash: R2I0hzQ1e4OGon8XpJKR9+TlMctYJ1LPf4tv+dTnV58=)
                          6: CDDDC3068A4E11F1BDE2BED7CE1D38B0.roa (hash: /I1CiGW7sqLqxLCpz1psQMD55EuJb7Kf2dj2xcmkfIw=)
                          7: 794365BC8A4411F1AD15F715CF1D38B0.roa (hash: EaXFvV0nbSRI+dWTnMCUBVPvSZbxEdHX8aL+blDZ2ds=)
                          8: 348608D48A4511F1B7909D1ACF1D38B0.roa (hash: bTsyMSJ9AGxaLnr15//My4xyTfYU4xOgd8A/ZOKcpRw=)
                          9: CE535E928A4211F189EF6D0BCF1D38B0.roa (hash: pqTD5vuIPNYosoVcIXRuexj718OErf0Go9H98dOWALo=)
                          10: 7A8BCDA0AA6311EA87579978F8AEA228.roa (hash: DUrpypV88Thv9XkaKmM6uSQbHs7esXZAI31rKEisAJU=)
                          11: 8ACB3F388A4611F19B154EA5CE1D38B0.roa (hash: Or5JdewyBtD5G+RUQL6fWR9lIWKjItl4UD71JHXPcW4=)
                          12: 1EAA28D08A4311F1B80C860DCF1D38B0.roa (hash: y7oDSkY4VJRwd1DmzUhjmZxjs7eS7XYQV0LhmqyW5j0=)
                          13: CFF3DA5AAB0111EA8A90371EF8AEA228.roa (hash: Hrsy3AtcUPHIAPrhTXMj1kgvV7iogmndM1wleGxNNGQ=)
                          14: 235841308A4F11F18D3580DBCE1D38B0.roa (hash: 6xKGVfk7UGI0E4XQMdLh3B8fcITtYs2m7LJMHPvMuYs=)
                          15: CBFB5E548A4411F1BE53281ACF1D38B0.roa (hash: IpRkc/eCZ12PyWVeOxAIwFy3gBAvmVRQx/VDfgfh9+4=)
                          16: 622E917C8A4311F19934E50FCF1D38B0.roa (hash: 09wAq0k14UAMG0dZdGjRyMaD2s85j0ILxfKvfzbeqqk=)
                          17: BC328368A98F11EA845E9024F8AEA228.roa (hash: aEfS+TbQUG5zLx1MMdMyJUk14wIR04mV1qJ0EnnZ2A8=)
                          18: C4DECBDE8A4311F19F345010CF1D38B0.roa (hash: 9qzrv0z0up9hG0YxeA3JsDrQkz673sG89pHN/ZEXEqI=)
                          19: CB98CEA6AB0211EAA6F7361FF8AEA228.roa (hash: ZSYd6jvBelLZFAaYVZgMWbWwLloGNnY8ZF/wD9hbGBg=)
                          20: 03AFDF00AB0311EAA3AD8C1FF8AEA228.roa (hash: sFzYJqYLs5ONLQlckUmbZswzqVXiB3p2Q/pIoyHdJqo=)
                          21: 17A32854AB0411EAAB629C20F8AEA228.roa (hash: zKsQRMdOIyFs+FKhpUrD4nBlHSqKt3S3BGmcS2sRh5Q=)
                          22: 70C0347C8A4111F18F253F02CF1D38B0.roa (hash: YquXEas7ZBrf+wE8oD5kf3nqV/72UTlW3zUn0oy/Ekg=)
                          23: 697BEAA28A4211F18A0A2E07CF1D38B0.roa (hash: TxeYvE2svOHXXKaIzw1V+oxLLKooPiZ+jn6gQo4VQHY=)
                          24: 6C4D89A6AA6111EAA182A376F8AEA228.roa (hash: LzwfcfPXYn9F1fPoqK07og6GatpFFd+at5aM7HIpiWg=)
                          25: A1C08CEAAB0211EAA396101FF8AEA228.roa (hash: mUdyM8jVbZOdUnYstWhFSJu3Gnm/9gnZidIzSu9DdSk=)
                          26: 7DE1A76EAB0211EAAA00EB1EF8AEA228.roa (hash: UgPlrfbrOUaa0Rure5sbCm3BbNQUJaDxeb/7KDVdWw8=)
                          27: 16C311B8DB3911F090B142DEDAE4EC9C.roa (hash: oTycKqiylbUdKMVCBD4pMuYdWpoylPqw/eqePPTrrvM=)
                          28: 27594B14AA6111EAAF3E7076F8AEA228.roa (hash: +UBoLDHhSRyhcHLCtlW120zF9c/uBcAoKI/HhyjUO+w=)
                          29: FB5B5E368A4611F18D08BEA9CE1D38B0.roa (hash: IdnrnbxLYMGAupUWenScYIJS1+LHtvTrZ8RfUxIlT+4=)
                          30: 18FADF668A4211F18551D206CF1D38B0.roa (hash: EFJNW77UkwO/Yngz5FbqiyR5Ry/RF/ED8FRHoJ+2vJ8=)
                          31: 8BE390348A4E11F1974E9BD7CE1D38B0.roa (hash: dYWR83J9ueuelQlYPVArf9FEBr0YptiSUEfg4k+4kTc=)
                          32: 60F2D4AE9CDF11F182826801CF1D38B0.roa (hash: 5jdWkPJIVEsx6JLNtRPmkv4TfL/Ck5yB9tdpZvkN57E=)
                          33: CD69990AAA6111EAAEF51077F8AEA228.roa (hash: 66nblc4vo3caJGaaXr6x5DjXPXoBEzrDDtb7jGf9pro=)
                          34: 9B3D63248A4011F19E1D6CFDCE1D38B0.roa (hash: bvYS8sDyf/jLqRVSjUjEvL4gxQODnKRCXkw2SMtP3BU=)
                          35: C30FE1AA8A4111F18F845804CF1D38B0.roa (hash: 0w2pBxJGHrWLLP5IlGjUNIzw0pKRBe3sWcp7KEVqGbU=)
                          36: FD1FC4E28A4511F1B3DF9AA2CE1D38B0.roa (hash: qb6gHGUgXuVKr5ZhHivPalyPRVNxfgUbZGkYrEhffk0=)
                          37: 136264948A4111F1AAD3B7FFCE1D38B0.roa (hash: l9tPXd5PIw8Caba0foe8eNLmSzVDNfZcXDHlsYOrIgs=)
                          38: 131322BE8A4411F1B3708715CF1D38B0.roa (hash: nFxPUQrhLpzyZT2u0OdSzLBcFLdzL3hx+ams0/B9I44=)
                          39: 79BCA104AA6011EABF54BD75F8AEA228.roa (hash: 2Qz+ljxijYcdl6kPi9I4CTsUSzVdMruUcWGLCSgT+a0=)
                          40: 8B17DADAA98F11EAB9AA6924F8AEA228.roa (hash: KYYTpk99AQONppdJtauPNE8kMIyequZ2O2Wm6wTUshU=)
                          41: E78772EAAA6011EABE292F76F8AEA228.roa (hash: RVdCn6tQheyeYPxX1TwMkUOiKylOKn/PBjrul9+GwyY=)
                          42: F08DC35AAB0311EAA2FC7020F8AEA228.roa (hash: ZkcsfNFonZHY0l0CGy37g2maUdxSkH07LKPBv7Ii97w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 01:55:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2506 (0x9ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682104AF, serialNumber=8B1026953ECF7C4CE139FE9A59BDD7228A153544
        Validity
            Not Before: Sep  4 01:55:10 2026 GMT
            Not After : Sep  6 01:55:10 2026 GMT
        Subject: CN=6a9a24fe-c263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:67:f7:a8:e1:92:73:2f:17:29:38:08:da:
                    5d:74:63:5b:d7:43:4d:6b:d9:fd:c4:c1:04:49:cf:
                    9b:c8:e1:4f:86:46:f2:30:97:70:5e:3d:00:c4:d4:
                    a0:86:a6:5c:85:dd:81:57:f3:9d:7c:34:2f:1b:09:
                    05:09:ee:f9:fc:36:84:12:22:25:11:36:2e:77:b1:
                    3a:db:d7:2d:16:10:55:be:01:89:7e:f6:fb:2b:26:
                    f2:ad:cc:31:7f:19:8f:9a:fb:2d:68:9b:14:9b:4c:
                    3a:c2:96:db:cb:a7:76:22:87:4e:0d:68:68:b9:b3:
                    3c:a0:dc:df:c0:bd:6d:e3:fa:58:ab:04:57:39:52:
                    f4:c8:56:45:1f:36:e8:36:89:72:9b:b6:6d:c1:e2:
                    a3:bf:66:65:31:76:d0:a1:6a:80:b0:ca:8c:78:2d:
                    50:b5:3f:ed:d1:be:eb:48:92:b8:68:80:e6:e3:64:
                    b0:79:91:3c:af:8a:ae:32:ec:f0:86:28:2d:6a:8c:
                    e3:00:26:4b:0c:73:c3:59:e4:1a:f8:ec:7f:bb:a7:
                    fe:2c:6a:eb:b5:29:e0:15:b2:04:cc:26:2c:36:26:
                    ff:ad:c4:e7:79:84:2c:f7:a2:6f:e9:6a:3d:0c:c4:
                    d4:9d:7e:9b:0a:0f:25:67:9d:25:a6:16:97:c6:f2:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8C:BD:A0:F0:1C:42:D4:D7:15:32:7A:85:93:43:D0:91:BD:08:F3
            X509v3 Authority Key Identifier:
                keyid:8B:10:26:95:3E:CF:7C:4C:E1:39:FE:9A:59:BD:D7:22:8A:15:35:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ixAmlT7PfEzhOf6aWb3XIooVNUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682104/09CCB94CA76311EABBC1911CF8AEA228/ixAmlT7PfEzhOf6aWb3XIooVNUQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:73:93:f4:5a:40:3f:a8:07:de:65:06:cb:ae:05:9b:6a:b2:
         c7:08:e6:3a:85:04:20:79:67:82:7f:25:49:c4:0a:a6:8e:af:
         3d:a3:8d:08:35:ec:2d:a7:38:26:a6:13:64:56:23:ad:32:e1:
         52:d1:59:70:de:94:8f:75:f9:1b:31:35:82:e2:0e:82:79:ae:
         21:46:0d:d3:99:3d:cc:4d:e4:d1:30:ab:82:8f:7e:6e:37:82:
         8a:a3:b7:d7:93:43:1c:8d:07:2b:6f:5e:7f:39:ae:6f:1e:bc:
         1a:5e:60:2d:5a:12:b0:cb:c2:03:81:b8:c7:92:6c:f9:5b:5c:
         4a:c9:ae:44:3c:7a:f8:65:66:53:ec:40:b5:20:4e:ad:42:aa:
         12:18:4e:1b:5f:4f:d4:83:9f:0e:95:c9:3f:ea:cc:6e:e0:44:
         42:72:1e:05:4e:aa:8b:35:6e:11:50:3a:d3:33:0d:b6:1e:f0:
         13:16:1f:54:df:a5:73:8c:b7:ea:3c:ec:26:1c:b5:5a:13:dc:
         04:60:41:2b:eb:b4:ab:fe:49:39:86:3d:c1:20:68:94:fb:ed:
         31:b7:af:03:b7:7f:97:01:4b:f4:d7:86:7e:44:15:7b:90:74:
         08:f2:bc:84:2f:c3:1f:c0:b4:66:e2:95:84:6e:af:c3:59:06:
         d7:c2:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:19:31 2026 by rpki-client