Error: rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
File:                     Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft (raw, json)
Hash identifier:          Oblyv8o2HAmVOueGbfJjhdpuQ2RRzTwhQ1BxlQL3uNg=
Subject key identifier:   CE:BC:E3:76:9B:89:DA:E3:DA:EE:AD:EE:C4:86:52:95:AC:16:B3:83
Authority key identifier: 0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35
Certificate issuer:       /CN=F36965F1AF/serialNumber=0E5F615AB0AE740BE0B0EA4F0D9F85FD21A12335
Certificate serial:       3F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
Manifest number:          3C
Signing time:             Tue 03 Nov 2026 05:56:17 +0000
Manifest this update:     Tue 03 Nov 2026 05:56:16 +0000
Manifest next update:     Thu 05 Nov 2026 05:56:16 +0000
Files and hashes:         1: Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl (hash: yBdI5vhmmbbHgS1NI63xzUZwiAlQjOy8qmJ3k/ibnvo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36965F1AF, serialNumber=0E5F615AB0AE740BE0B0EA4F0D9F85FD21A12335
        Validity
            Not Before: Nov  3 05:56:16 2026 GMT
            Not After : Nov  5 05:56:16 2026 GMT
        Subject: CN=6ae97781-576a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:13:e1:19:5c:01:6f:dd:e5:be:95:1d:db:38:
                    d8:e6:4b:85:7f:dd:06:e4:13:8a:1f:52:aa:5a:c3:
                    2e:b4:66:90:03:9f:62:b3:43:2f:10:10:75:5b:cc:
                    e2:95:cb:16:67:5a:ac:1b:3f:24:b4:11:91:64:30:
                    c0:65:f2:17:3c:03:ac:f5:c7:ad:f2:50:de:c5:65:
                    8b:3c:a8:ca:76:58:73:ad:59:90:d8:ec:58:fc:c8:
                    b5:2c:2d:3d:6c:0c:fa:c7:f3:09:6e:04:bb:65:e7:
                    96:e9:cb:d5:77:ae:dc:cf:dd:ee:9a:af:05:1a:4e:
                    5b:6d:7f:73:21:0d:45:ad:98:38:93:be:63:e4:28:
                    e5:89:d7:b9:6a:0b:34:fe:04:9f:ec:17:15:79:b7:
                    78:9d:36:56:a8:7b:89:33:db:6a:b9:d0:b8:57:f2:
                    ca:ca:dd:4d:57:78:ba:9d:e1:a9:c4:a7:fb:6f:9b:
                    8d:ff:4b:50:7e:c8:8a:7e:34:8b:bc:f2:ff:90:67:
                    91:7f:0e:db:17:9d:4c:76:20:5e:37:32:97:28:f8:
                    cd:a5:17:6d:a1:f7:43:9b:d0:25:2c:be:1d:76:4a:
                    7c:7d:97:33:b8:9b:8a:68:f4:1c:b7:be:2c:53:4a:
                    b0:69:4b:b7:3e:7a:ea:4e:2d:20:1f:79:e3:ca:56:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BC:E3:76:9B:89:DA:E3:DA:EE:AD:EE:C4:86:52:95:AC:16:B3:83
            X509v3 Authority Key Identifier:
                keyid:0E:5F:61:5A:B0:AE:74:0B:E0:B0:EA:4F:0D:9F:85:FD:21:A1:23:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36965F1/37FF5DF2ADE611F1978A35EDCE1D38B0/Dl9hWrCudAvgsOpPDZ-F_SGhIzU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:46:6d:7e:93:c7:27:57:2f:c9:ee:ab:6e:19:05:3e:45:8f:
         c3:09:c3:ba:34:d5:c6:5d:8e:c8:76:2d:70:69:bb:4d:a0:62:
         69:b5:c5:76:f6:ca:96:99:02:80:5e:98:9b:74:bf:5f:67:b4:
         8a:ba:cf:01:c6:3a:dd:9a:ab:10:dc:5e:c2:80:f0:e9:d9:e8:
         cb:ec:23:85:d3:0f:12:6c:97:af:72:06:81:be:c6:2b:36:51:
         d7:c5:30:ce:a8:a4:00:0a:50:4c:fa:bb:d5:e2:38:55:83:ed:
         cb:66:92:0d:48:a3:1d:60:88:ab:c5:23:74:45:18:61:11:73:
         a4:4e:27:94:32:18:f5:b8:f2:df:84:e6:93:38:46:d7:81:a6:
         39:b4:f2:55:b7:5d:46:10:f4:b3:33:96:6c:30:bc:b5:8e:db:
         91:f1:0e:61:e1:12:8d:03:38:7a:81:aa:10:d4:86:d5:99:ef:
         74:f3:8b:6e:fe:73:2f:9a:9b:27:ec:47:6f:65:fa:37:bd:40:
         2b:f2:dd:1c:44:a3:58:98:9f:98:4e:29:8a:d6:a2:76:4e:cc:
         3b:a4:10:dc:d0:d5:bc:37:9c:a0:51:21:2c:c6:42:db:5d:0a:
         8f:a4:65:9e:a3:bc:f8:ae:a6:c9:e6:b7:19:83:5a:0f:46:57:
         83:44:f5:fc
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBPzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
NjVGMUFGMTEwLwYDVQQFEygwRTVGNjE1QUIwQUU3NDBCRTBCMEVBNEYwRDlGODVG
RDIxQTEyMzM1MB4XDTI2MTEwMzA1NTYxNloXDTI2MTEwNTA1NTYxNlowGDEWMBQG
A1UEAxMNNmFlOTc3ODEtNTc2YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALoT4RlcAW/d5b6VHds42OZLhX/dBuQTih9SqlrDLrRmkAOfYrNDLxAQdVvM
4pXLFmdarBs/JLQRkWQwwGXyFzwDrPXHrfJQ3sVlizyoynZYc61ZkNjsWPzItSwt
PWwM+sfzCW4Eu2XnlunL1Xeu3M/d7pqvBRpOW21/cyENRa2YOJO+Y+Qo5YnXuWoL
NP4En+wXFXm3eJ02Vqh7iTPbarnQuFfyysrdTVd4up3hqcSn+2+bjf9LUH7Iin40
i7zy/5BnkX8O2xedTHYgXjcylyj4zaUXbaH3Q5vQJSy+HXZKfH2XM7ibimj0HLe+
LFNKsGlLtz566k4tIB9548pW2zkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBTOvON2
m4na49rure7EhlKVrBazgzAfBgNVHSMEGDAWgBQOX2FasK50C+Cw6k8Nn4X9IaEj
NTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTY1RjEvMzdGRjVERjJBREU2MTFGMTk3OEEzNUVEQ0UxRDM4QjAvRGw5aFdy
Q3VkQXZnc09wUERaLUZfU0doSXpVLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvRGw5aFdyQ3VkQXZnc09wUERaLUZfU0doSXpVLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY5NjVGMS8zN0ZGNURGMkFERTYxMUYxOTc4QTM1RURDRTFE
MzhCMC9EbDloV3JDdWRBdmdzT3BQRFotRl9TR2hJelUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAHBGbX6TxydXL8nuq24ZBT5Fj8MJw7o0
1cZdjsh2LXBpu02gYmm1xXb2ypaZAoBemJt0v19ntIq6zwHGOt2aqxDcXsKA8OnZ
6MvsI4XTDxJsl69yBoG+xis2UdfFMM6opAAKUEz6u9XiOFWD7ctmkg1Iox1giKvF
I3RFGGERc6ROJ5QyGPW48t+E5pM4RteBpjm08lW3XUYQ9LMzlmwwvLWO25HxDmHh
Eo0DOHqBqhDUhtWZ73Tzi27+cy+amyfsR29l+je9QCvy3RxEo1iYn5hOKYrWonZO
zDukENzQ1bw3nKBRISzGQttdCo+kZZ6jvPiupsnmtxmDWg9GV4NE9fw=
-----END CERTIFICATE-----
Generated at Tue Nov 3 22:42:17 2026 by rpki-client