Error: rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File:                     HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier:          1gmrZ1ioFku5Nw4gy+0H9zWtcYV+ptj0AMkjGG6Eqjo=
Subject key identifier:   FD:19:66:9F:27:4F:C5:52:40:3F:C9:35:86:5E:B2:F2:39:B8:0A:85
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       07E0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number:          0791
Signing time:             Sun 30 Aug 2026 02:25:11 +0000
Manifest this update:     Sun 30 Aug 2026 02:25:10 +0000
Manifest next update:     Tue 01 Sep 2026 02:25:10 +0000
Files and hashes:         1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: mQD2hE8GFTV+fjFgLYTmc1074ZyQnnjWvqGQFR8J+dU=)
                          2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
                          3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
                          4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
                          5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
                          6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
                          7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
                          8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
                          9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
                          10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
                          11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
                          12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
                          13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
                          14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
                          15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
                          16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
                          17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
                          18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
                          19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=)
                          20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
                          21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
                          22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
                          23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
                          24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
                          25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
                          26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=)
                          27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
                          28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
                          29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
                          30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
                          31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
                          32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
                          33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
                          34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
                          35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Sep 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2016 (0x7e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Aug 30 02:25:10 2026 GMT
            Not After : Sep  1 02:25:10 2026 GMT
        Subject: CN=6a939487-3499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:a0:15:d5:c7:00:9a:99:74:a7:02:88:21:
                    0d:6e:cd:82:99:c8:1f:b5:77:e5:11:12:31:87:81:
                    c7:cb:43:41:67:90:d5:08:6d:fe:b3:16:05:a7:bf:
                    cd:10:4f:ff:e4:f3:a2:1b:5c:2d:c4:23:35:ff:d1:
                    36:31:d1:87:9b:57:ae:6f:76:f4:bb:bc:dc:a2:de:
                    e9:65:3b:b8:e3:d7:c9:e4:bf:b0:68:47:ca:8d:1d:
                    c8:92:63:bb:24:bf:c1:e2:9d:0e:49:d5:64:22:69:
                    a5:d2:6d:c5:6d:3d:33:14:fc:15:10:e2:da:d4:9c:
                    d3:3d:ba:0f:bb:82:86:9d:c9:c8:f8:9c:64:8c:38:
                    10:6c:37:fc:1e:35:ad:0a:bf:d7:5c:cd:64:14:27:
                    ea:a8:e4:d8:b2:87:b9:c9:3d:00:61:06:5a:98:67:
                    d9:76:43:9a:94:13:9b:13:32:0b:7d:db:2e:fb:31:
                    0e:ee:09:f8:ee:70:bf:50:23:b4:45:6d:2a:42:c8:
                    44:b8:79:6f:1f:a3:d9:f8:09:23:71:ea:a1:eb:4d:
                    34:01:f5:e0:9c:a7:a2:1b:12:0e:af:cd:b1:21:98:
                    36:93:9f:41:51:65:48:47:a6:39:92:26:2f:f2:9f:
                    5d:72:15:b7:88:27:93:50:db:14:f7:d0:ac:ca:d6:
                    b2:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:19:66:9F:27:4F:C5:52:40:3F:C9:35:86:5E:B2:F2:39:B8:0A:85
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:4f:1c:42:75:0f:63:d3:57:87:b7:31:52:80:e2:d1:9f:ab:
         2e:95:d7:28:ab:6a:5e:f5:e0:de:02:c4:1a:c4:0c:d4:86:21:
         65:a6:96:54:69:e8:52:23:13:f6:7c:57:b0:c6:7d:b7:4b:3f:
         49:20:6a:1f:65:97:a6:02:7c:e6:51:f1:bb:3c:0e:6f:05:89:
         fb:f2:c9:d2:4b:7b:ae:65:1a:a5:b3:e2:8c:d0:35:9e:98:71:
         b1:51:ca:a1:98:c7:ed:8d:ff:a8:fa:0e:f5:4e:a9:2f:d1:15:
         03:cc:8d:c8:62:33:67:5e:fd:c1:d3:c1:6a:9a:d9:a8:28:00:
         77:1b:2f:ab:c6:25:dc:16:1b:f8:bc:e3:ac:94:a5:98:ca:24:
         04:ff:5b:34:68:5f:fb:2b:cc:0c:23:b5:69:1c:40:20:9e:68:
         22:f0:08:3d:9e:bb:bf:62:1e:19:13:63:8d:6d:14:a4:f7:86:
         1b:b2:a0:9d:03:03:22:9b:13:60:27:9a:70:2c:3b:30:96:51:
         bc:d6:86:1d:38:c9:c3:c2:92:94:04:36:f6:8e:1f:63:1a:65:
         47:ca:2a:3d:f6:21:a5:ad:92:97:d2:17:66:d5:52:5a:be:1e:
         3b:a3:12:e7:c0:0c:49:5f:85:1c:51:5b:90:92:51:bc:04:ea:
         d8:54:cd:1e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB+AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yNjA4MzAwMjI1MTBaFw0yNjA5MDEwMjI1MTBaMBgxFjAU
BgNVBAMTDTZhOTM5NDg3LTM0OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhXKAV1ccAmpl0pwKIIQ1uzYKZyB+1d+UREjGHgcfLQ0FnkNUIbf6zFgWn
v80QT//k86IbXC3EIzX/0TYx0YebV65vdvS7vNyi3ullO7jj18nkv7BoR8qNHciS
Y7skv8HinQ5J1WQiaaXSbcVtPTMU/BUQ4trUnNM9ug+7goadycj4nGSMOBBsN/we
Na0Kv9dczWQUJ+qo5Niyh7nJPQBhBlqYZ9l2Q5qUE5sTMgt92y77MQ7uCfjucL9Q
I7RFbSpCyES4eW8fo9n4CSNx6qHrTTQB9eCcp6IbEg6vzbEhmDaTn0FRZUhHpjmS
Ji/yn11yFbeIJ5NQ2xT30KzK1rK7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/Rlm
nydPxVJAP8k1hl6y8jm4CoUwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjFDMDYvNThDOUI3OEMyMDU5MTFFQzk5MUI2ODc3RDhB
MDE0Q0UvSGRGdjFvdl9mS3NhdVJ4VjJtSDhETl8wRjBNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1TxxCdQ9j01eHtzFSgOLRn6suldco
q2pe9eDeAsQaxAzUhiFlppZUaehSIxP2fFewxn23Sz9JIGofZZemAnzmUfG7PA5v
BYn78snSS3uuZRqls+KM0DWemHGxUcqhmMftjf+o+g71Tqkv0RUDzI3IYjNnXv3B
08FqmtmoKAB3Gy+rxiXcFhv4vOOslKWYyiQE/1s0aF/7K8wMI7VpHEAgnmgi8Ag9
nru/Yh4ZE2ONbRSk94YbsqCdAwMimxNgJ5pwLDswllG81oYdOMnDwpKUBDb2jh9j
GmVHyio99iGlrZKX0hdm1VJavh47oxLnwAxJX4UcUVuQklG8BOrYVM0e
-----END CERTIFICATE-----
Generated at Sun Aug 30 07:36:55 2026 by rpki-client