Error: rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
File:                     HdFv1ov_fKsauRxV2mH8DN_0F0M.mft (raw, json)
Hash identifier:          Ded6HYxqNYHRzUdbj+8Iie18udW/GrJBMI1NONqT3xs=
Subject key identifier:   6A:DA:45:A8:22:F7:5B:8F:E6:5B:DF:AF:DB:C5:17:0B:B9:F0:E1:70
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       07E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
Manifest number:          0792
Signing time:             Mon 31 Aug 2026 02:25:50 +0000
Manifest this update:     Mon 31 Aug 2026 02:25:49 +0000
Manifest next update:     Wed 02 Sep 2026 02:25:49 +0000
Files and hashes:         1: HdFv1ov_fKsauRxV2mH8DN_0F0M.crl (hash: NPnUJ+EY/0GOA3XGvJcV1I+wWlBLGvCMfcZnk6d6prY=)
                          2: 10E2A890A01911F08A266CD6DAE4EC9C.roa (hash: uKu9ra8g3enObejQKUm/wjJcdExGU8pfNmFnYSCVAb4=)
                          3: C048D206A01811F0997A41D6DAE4EC9C.roa (hash: jhoKyB34pvQ8xNX0wPMbhbFsPkWoO13xc3OlqRsvcuI=)
                          4: 87292E6AA01A11F0B32F60DFDAE4EC9C.roa (hash: 4nhIZUohQE/GQcQXC4C3luqxwBzt+U4vIAe9MdQWT3w=)
                          5: 2AC075F0A01211F0B72F98A6DAE4EC9C.roa (hash: DK9ydq1ArB3m61vuEV0TSdIjbjRvzTpBgOxKOB1u+wk=)
                          6: 77AA62BAA01511F0949C90BEDAE4EC9C.roa (hash: 6sOD9vGb7J0UzCC20Wr5l2Kfav4Tkbio/BxVpX+Krt0=)
                          7: 8CEA5014A01411F0BFEF7AB9DAE4EC9C.roa (hash: ZmcJKQbrWBpIwE/ww8rZLi/ZhcQN8hLklhkP+Cw6Oig=)
                          8: E64C3C80A01411F0B09CCEB9DAE4EC9C.roa (hash: P67lgxodJONkr5xhx0/ZwVViknbWq1lQZGMlbP6XgkY=)
                          9: 69351E4CA01411F0BCA38EB5DAE4EC9C.roa (hash: qo4MdTAgB+4LLeVyw25K2zTCPmiwmmx5+hWl/ARollk=)
                          10: 46A7485EA01A11F08EC941DFDAE4EC9C.roa (hash: 7n38aPRG6DfSsFKjw2v4HaAQ/mbzm69U8oIgVsOvwZ8=)
                          11: 18112B68A01A11F09DD253DDDAE4EC9C.roa (hash: iHeBmMWWg3WS1fulXf5vlgJuM8lCwPKmaQN2zjvQXXM=)
                          12: 9E2163FAA01811F09E3578D2DAE4EC9C.roa (hash: eDRADB256Y80jHNt3k4fhbDC5ZHAHMd6Ca6OrAqbwIg=)
                          13: 0B6A72E4A01411F0AD73C0B4DAE4EC9C.roa (hash: Y4CZp0DWrQMWNjkjyjpL08rU6hNDzV3WDuwJ4b5/tIE=)
                          14: 3F380060A01311F0919EC6AFDAE4EC9C.roa (hash: ML1Fpn+T9RKdP9udPwEg1TO7ruJ5fEp150SBZcWBHGg=)
                          15: 7D736F44A01911F09753BADADAE4EC9C.roa (hash: LoMK2CKg1w2sxKBIOF7rjm0R24WlzIzFWpE/7DH5x8E=)
                          16: 33EB252EA01411F08F17EEB4DAE4EC9C.roa (hash: nzlwWU3jybg0Z5LtyVm9+qYiW7rcBwW9fpuAtDJVz3c=)
                          17: 508EE634A01911F087E8F1D6DAE4EC9C.roa (hash: 4FyWxdVz9ZB89dnEYa1UQaV9BgwPCDZcCQ64zRWzhRY=)
                          18: EA82641AA01311F09744A3B4DAE4EC9C.roa (hash: PvyVycDl600xSYGgD1LSND0w48iaigMGKSIG0uMiAw4=)
                          19: 9D32F69A977E11F097D5EA99DAE4EC9C.roa (hash: 8T6MXp4d7k4QlXY2d72nQUcRick423J+7EbbPvV9VsA=)
                          20: F19DC41AA01811F09F5B62D6DAE4EC9C.roa (hash: TZ8+f6VOZFccWd8TuXEcbvL38bAwB9OZXRVHDIZr0No=)
                          21: 4C032782A01511F0999B65BEDAE4EC9C.roa (hash: ANPrThqCPCkYsx7dRQ398hItHVf+UOOUIIoPdsOJOUo=)
                          22: A34959B8A01911F0A89ED4DADAE4EC9C.roa (hash: E3HAjnixDN1XWV/LOWT5w5sQJ03lSjiuDVqAWFJfBmI=)
                          23: C642CE7CA01411F0B494AFB9DAE4EC9C.roa (hash: aqI2o4BrWljOyaNlrUsbDBgDucPGaFRS97cYN1ybOns=)
                          24: 94B2F070A01511F0B59AAFBEDAE4EC9C.roa (hash: kwH5u3K/Hl+qIz66y3+qwY9El0PaIlycS18OnhiM728=)
                          25: 2F962140A01911F081B8AED6DAE4EC9C.roa (hash: ujK0C2V+Qi9u6MTQjYHs+CJbsfw5+IZrPSzJeVNBBYs=)
                          26: 04AB017A977D11F0A97D3391DAE4EC9C.roa (hash: nkdk6GBaqBguv0UXSrzYeA5QBtv1EdIeuvUWxhgAHHY=)
                          27: 93B9577EA01311F0B7824FB0DAE4EC9C.roa (hash: mkR2GLOQGEWqlqYNGWBX32sAXhIvbJfjR8LQZ8jggh0=)
                          28: C2CC2352A01311F0BA2D6BB2DAE4EC9C.roa (hash: 8dkPZG1bVKa6ng9BDONfAwpgPvxPAcZCz/nmcH4/hSQ=)
                          29: FD658BE4A01211F0BF85CAABDAE4EC9C.roa (hash: Jjrt4iFN9aQQeExy1Q5uaDTAkOEyoLMTHJMPctSRjM0=)
                          30: 6DA4387EA01311F08B3FF2AFDAE4EC9C.roa (hash: SoreU7BbeZI0MVABkoxSNUmBXY1Qer83v7w3hSgZbOk=)
                          31: CC94B1F0A01911F0A21BE7DADAE4EC9C.roa (hash: eol3C2aK1kCFY/RXjcfLIKnAxFpxEJhGrZQgt5Mo8mo=)
                          32: 28E4B6B2A01511F0BAD17CBCDAE4EC9C.roa (hash: O+8YfGKgcic5dSt9d0Vx7+HftSOAGPejOIugvkS/Q/Y=)
                          33: 072D5AC4A01511F09A0839BADAE4EC9C.roa (hash: yix9tcBAo74wcqdhwzt3WKH7uoqvm4BIlGZZkDl24+U=)
                          34: BE045106A01211F094A319ABDAE4EC9C.roa (hash: iFrlWdC+BKPWivrrH+4J7SzVi5ek4QeDzjIdOx16K2s=)
                          35: EE2BF774A01911F0B0CB31DBDAE4EC9C.roa (hash: HrO9DcmxgUKYwJpAAbnzvgRqkHtqT2odz+DewxsVQ7g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 00:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF, serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Aug 31 02:25:49 2026 GMT
            Not After : Sep  2 02:25:49 2026 GMT
        Subject: CN=6a94e62e-3646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:eb:94:ba:9e:08:ac:bb:91:bb:d8:fd:16:b2:
                    f3:8e:71:f2:a1:e6:8f:90:9e:7c:ad:9a:d2:56:83:
                    bc:93:3a:79:f6:55:78:7f:79:f0:ba:c0:ca:f6:8e:
                    b3:c3:e5:21:40:30:21:6b:63:f4:ab:72:ed:80:ff:
                    84:a6:4c:6c:c3:ac:ac:c7:41:a6:42:f0:27:2c:87:
                    0b:ac:bd:0a:e6:e4:bf:6d:b5:f2:27:34:95:3d:d7:
                    ce:6d:4c:27:de:7d:74:57:47:38:53:89:9f:85:a9:
                    ec:93:8b:85:7c:52:88:04:82:eb:af:54:1e:f7:33:
                    70:2e:d9:6a:24:ab:06:b8:84:9c:d8:26:0d:9a:13:
                    92:f4:9b:5f:1f:b0:32:d0:e6:24:c3:80:36:a9:c0:
                    fa:25:92:50:26:5c:da:09:72:5b:67:22:ca:69:d9:
                    5b:a5:7b:3c:ec:2c:4e:75:c4:93:db:bf:8c:76:7e:
                    2a:3c:e1:2d:f8:34:cf:d2:08:e1:6e:25:39:da:03:
                    f3:95:89:fa:91:c2:b3:51:ec:ea:a1:72:08:1d:99:
                    62:e3:dc:4c:11:bd:33:18:86:c8:9b:e4:b1:e9:c0:
                    94:7c:bd:53:22:18:1d:c6:7c:c4:a6:9c:88:35:05:
                    77:7e:31:ba:e7:6b:cf:5e:20:b3:c6:1a:2a:08:fc:
                    a5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:45:A8:22:F7:5B:8F:E6:5B:DF:AF:DB:C5:17:0B:B9:F0:E1:70
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:38:eb:5a:3c:62:cc:c5:98:fb:12:82:f5:87:21:8f:0b:91:
         45:5f:46:1e:13:21:24:29:92:d5:cb:35:24:e5:90:3b:1a:e0:
         ba:36:74:73:e2:16:c7:66:8b:e1:9d:4d:cb:e0:16:da:cc:26:
         63:99:ad:1b:54:d5:32:2e:91:32:3f:30:41:63:03:74:5c:ac:
         13:0a:81:98:68:e4:6a:a9:5e:ec:6f:9a:0f:ca:cc:6a:62:be:
         a8:bd:96:cc:d7:9c:6d:d6:b8:33:dd:b4:cf:f1:8f:06:57:05:
         01:ea:29:0b:2e:c8:64:21:1b:ec:e2:e4:2e:18:29:cf:ea:42:
         95:85:5d:a3:17:9f:0d:75:71:3d:ef:ce:86:82:ed:20:1f:32:
         5a:16:6e:4e:9f:4b:df:e5:33:2a:d6:9e:3f:bf:fc:79:67:fb:
         f3:cb:bc:89:47:cf:f0:ef:f0:1f:9f:de:6c:c3:28:ae:3f:1c:
         0c:92:0d:e1:08:5b:1b:40:6d:55:c0:db:fa:e9:f6:93:8f:b3:
         0c:54:92:20:ae:63:7e:52:10:fa:27:99:48:58:f5:9c:ec:67:
         58:e9:4b:47:98:e0:7f:83:d8:c1:dd:be:73:c3:45:3d:36:e7:
         62:ef:a4:dc:b8:20:7d:07:59:20:ba:11:c5:ec:57:68:67:a8:
         93:16:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 08:18:38 2026 by rpki-client