Error: rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File:                     HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier:          Jgew4ETqSKix5hcFSV6Cvyae7/GeGZN4UOl9djepDZY=
Subject key identifier:   E8:36:2A:3F:90:50:FA:9E:F3:0F:B4:53:88:14:27:17:B5:9D:52:C1
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       0807
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number:          07B8
Signing time:             Thu 08 Oct 2026 02:24:43 +0000
Manifest this update:     Thu 08 Oct 2026 02:24:43 +0000
Manifest next update:     Sat 10 Oct 2026 02:24:43 +0000
Files and hashes:         1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: 6wtdIwlgGf6dk6JuVo3mIaxajB+EiEwpDvZ59joss/Q=)
                          2: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
                          3: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
                          4: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
                          5: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
                          6: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
                          7: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
                          8: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
                          9: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
                          10: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
                          11: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
                          12: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
                          13: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
                          14: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
                          15: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
                          16: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
                          17: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
                          18: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
                          19: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
                          20: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
                          21: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
                          22: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
                          23: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
                          24: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
                          25: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
                          26: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
                          27: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
                          28: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
                          29: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
                          30: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
                          31: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
                          32: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
                          33: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 02:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2055 (0x807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Oct  8 02:24:43 2026 GMT
            Not After : Oct 10 02:24:43 2026 GMT
        Subject: CN=6ac6feeb-2902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8b:a8:9a:a4:0e:d2:f3:bd:38:e0:72:e3:5a:
                    06:46:d7:26:bf:00:82:fa:59:0b:59:ff:d6:62:5e:
                    96:38:8f:94:e7:b8:84:f8:7d:16:26:37:5e:9d:4a:
                    3c:21:ac:b2:d5:a3:de:3c:26:c2:88:34:ae:e3:87:
                    e1:9b:77:83:84:11:4b:bc:80:70:26:95:aa:ed:9d:
                    d2:a8:d7:0b:04:41:29:e1:5b:01:b8:d0:28:c9:d4:
                    d8:e9:77:94:ca:17:af:74:4a:a8:80:74:60:3a:ba:
                    6c:66:bb:d1:83:97:14:22:f3:bc:b7:4c:d7:06:42:
                    6c:45:ad:20:6d:18:5e:93:a7:e3:0b:e5:de:97:45:
                    01:3a:4b:d9:99:57:cf:0f:ea:db:59:e0:3d:ac:bd:
                    58:87:e4:52:81:00:26:33:c5:e8:70:46:cc:06:2e:
                    3f:bd:b2:be:31:93:f8:fd:66:c4:3e:44:c6:fa:5f:
                    4e:f8:6e:57:ed:ba:68:3c:df:ea:e8:22:62:ae:d8:
                    33:17:7b:9a:34:5f:d4:d3:70:1a:b0:a8:43:8d:96:
                    73:7f:56:7f:9b:ee:e7:85:84:3f:7a:c8:d5:25:ba:
                    40:c4:eb:ed:2a:7b:3b:11:da:79:27:b1:bc:df:c3:
                    ad:a2:6d:0c:f9:9b:ff:b9:59:87:bd:03:41:a2:97:
                    9b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:36:2A:3F:90:50:FA:9E:F3:0F:B4:53:88:14:27:17:B5:9D:52:C1
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:c8:f5:93:b2:0c:a5:b6:49:80:b2:ec:f1:0b:12:68:cf:
         70:4c:0b:95:81:a8:7c:0e:2d:fa:bb:cc:67:3d:23:bb:8a:8e:
         5c:4d:8b:3e:72:32:0f:ee:9a:35:76:df:f4:aa:2c:44:60:cd:
         c8:9c:65:d3:3e:45:e2:cf:22:dc:5c:08:cd:d8:88:d9:53:ad:
         da:a3:31:8b:af:95:d2:08:db:c4:95:eb:99:88:0c:20:99:05:
         34:18:c2:82:b9:ea:50:a6:27:57:e9:89:79:43:86:47:d7:08:
         31:43:de:4c:62:46:f3:ac:fe:6a:f1:62:a2:bc:98:d0:23:5d:
         5e:ff:8b:ad:18:ac:b8:f4:0d:8e:3d:ba:86:45:2e:8c:d4:29:
         26:2c:b2:79:50:6c:77:92:e0:6b:26:82:e7:12:26:61:e2:53:
         3c:a1:28:38:5c:62:ef:56:e3:34:3c:97:68:d7:cc:b4:8a:38:
         d3:e4:bc:2a:81:28:81:8f:2c:52:c5:fa:9b:2c:87:04:ac:9a:
         30:29:dc:da:dd:95:71:3b:02:53:04:ad:75:0c:6f:9a:28:1a:
         bf:a1:9d:5a:7f:6a:05:45:8e:21:ab:13:6b:16:01:02:0f:45:
         0b:d4:23:37:08:53:09:38:b1:7e:36:b2:34:76:f0:08:b6:1c:
         46:aa:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:05:14 2026 by rpki-client