Error: rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
File:                     4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft (raw, json)
Hash identifier:          KKfVMrYDIG483a77zMv34aKqCHDRTLrzGxFjht/wYFw=
Subject key identifier:   CB:BB:4D:D5:0E:F3:65:86:10:BE:03:98:42:AF:07:43:74:15:F3:9D
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       01F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
Manifest number:          030F
Signing time:             Thu 29 Oct 2026 05:11:33 +0000
Manifest this update:     Thu 29 Oct 2026 05:11:33 +0000
Manifest next update:     Sat 31 Oct 2026 05:11:33 +0000
Files and hashes:         1: 4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl (hash: n5a9k3cjPZF7/EAi+BqLMbCgcJ12NxhgfsO4Pk8MIEE=)
                          2: 2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa (hash: czaOHjgQKar8k0qgvhJTFcM5RM/An5KUAmLnaz+XPoM=)
                          3: AC1A84E2E64411F0BDAD2EECDAE4EC9C.roa (hash: aooplZQG6H5mHbyoOfRiSF6JsTIckWEr5yhG8Qttn8g=)
                          4: 19F984E6E64411F0A9D7D7E9DAE4EC9C.roa (hash: 9VxkkCn8NhYiyI/rZSGcTqIm2TXbsoc4ZBAeWC+Q88g=)
                          5: A78B1D62E03411F0BA23EC96DAE4EC9C.roa (hash: V4HZuRFchda4PCAZ+TqnCyZuRh7EDqhJply4K7eJCrk=)
                          6: 7DA56C80E64411F0B1CFF2EBDAE4EC9C.roa (hash: S9zi6LYdyNKNbV1IF5Woapx9qQLKuRkn4Pc0vvMefxY=)
                          7: 2A7F58C0E64111F084C774D7DAE4EC9C.roa (hash: CRFSAdvu7nT9K3BwjIvIKrNt1IE5IvnknvLaaNH+GVc=)
                          8: BA239C48E64611F0BCD6127ADAE4EC9C.roa (hash: pDUAqES4iR6kKHfb4Y65EyLXHCIq/3T7FgQfhEgu34w=)
                          9: 2BC0A8ACE02D11F0AA32FCE6DAE4EC9C.roa (hash: mp4PGUM44RsT5fvnE9G8Wfl4a9lsO8E65quGReQYOP8=)
                          10: 6A5EB832E64611F0BA498779DAE4EC9C.roa (hash: /Ja9NZA3PT3nMROcxNf0Cf+BLQcwrkhjsgvSsjw/GNo=)
                          11: ED024972E64411F09005C0EFDAE4EC9C.roa (hash: XoWr8DFFLHUUI1hS2Hcc+slXh5tzxzat68HJvhpcBCU=)
                          12: 4B4A8E74E64311F099A1D2E3DAE4EC9C.roa (hash: uqUiBa58m/oC+y5I8h0R2p0L6qWhQAxyUOIwGnr8g7E=)
                          13: 6D9EDE72E64211F099CA79DFDAE4EC9C.roa (hash: LFsqBA4grm6BGuu+IAtbdpdGd09wU0OI5vP1TJGKJGQ=)
                          14: CF332320E02D11F0BFEC9DE9DAE4EC9C.roa (hash: q9858WneVonKMS8ZfqhbKQq6JJrU4YMstg+M/qIgKgs=)
                          15: 8D48783CE4B711F08DDC53E3DAE4EC9C.roa (hash: B/ONb1nsnGd5bWbPsAXhf3fmCZlHMi+RdyKVaSXoO3w=)
                          16: 21633E18E64711F09267137EDAE4EC9C.roa (hash: eLEh0SyY43hybPcZSU5IedR+zAs7IskDltcK3L464X4=)
                          17: 84060446E64311F09C4464E7DAE4EC9C.roa (hash: waitUYNkQPyRyYT1K9QTpRE9p4ghHIMSe8TwdycItWM=)
                          18: 0476E0ECE64311F0AEA94AE3DAE4EC9C.roa (hash: gJqY8hbUmXFsQqTPCTHgTkcC0h4IBxALOcQy7DKycfE=)
                          19: 18C749D6E64511F0ABEFC7EFDAE4EC9C.roa (hash: HcEhn8rY0LMqLMqnW5E48TBpkZIQs7rG01NNOWL4qIw=)
                          20: 7F683120E03011F0A9A3447DDAE4EC9C.roa (hash: 1ofRyLtLCgUjtyjNbcKKGyaLNuljpNLZF/Da0DLXy4M=)
                          21: 9FCAE1F8E03311F0AC5D5790DAE4EC9C.roa (hash: 9fFA5F6vS2Uzoj6zR6HF3FdhmSp+E3nknPXSOdym9E8=)
                          22: 4AB7FB10E03311F09521888EDAE4EC9C.roa (hash: irh6AQCCs0+wQOoQ6OfFdE3/Slfmb4g/hhWQX1yIJJo=)
                          23: 3E04A562E64611F098C343F6DAE4EC9C.roa (hash: nAeuC2hLRdg6vXbdusEEb2xJLgS40FzgoKMg75pO9y8=)
                          24: 8F4481FAE03211F0AA022B8ADAE4EC9C.roa (hash: Ausb+q37534pYlI8/IZKaw5119dV1q+N5AujavUroYE=)
                          25: 41B501CEE64211F0B81528DFDAE4EC9C.roa (hash: Iddf6PXYBVJILz/SeKyZ0ezmBFU0u8wv1/n3HA9IRhY=)
                          26: BCFF79EAE64211F0A9887CE1DAE4EC9C.roa (hash: n4W44lkOz9zDgunOmEFE9ifkh0K1X90d0DaTgdPVXLs=)
                          27: DFC57B3EE64511F0880A3BF4DAE4EC9C.roa (hash: QUcAXH6eBDcHLO7OTf8jf8YtX4XaBoqh4tCsAIXOlfA=)
                          28: ED533020E03211F0ACC31F8CDAE4EC9C.roa (hash: fCuvOeeua2UEWc+GJAZ1o37pU/fgiocR0PlJYdUski4=)
                          29: 23722C36E03511F0B6921B99DAE4EC9C.roa (hash: WRAjjrpZYpNcF9po1aGn/Ii+2cKmFEDJ+A9Q0pdBqR0=)
                          30: E0C19BF4E4B911F0AC7AE4EFDAE4EC9C.roa (hash: 0uI4WyyyVggMiE9YfvPVTXuKZFhM2OQidE/EfrcubxY=)
                          31: BC91A40EE65311F0908ABDCADAE4EC9C.roa (hash: VJ4tEGO/lKPbCH4khoVBPlLUyO5FnhtR7hnaBGZuDog=)
                          32: 27D2C2D4E03211F08A7EC587DAE4EC9C.roa (hash: Y+oQ/SVDi7ToYkC/R8JaxmCr/Q9OiGSwt61GPykd+rg=)
                          33: FD6A2FC6E03311F09F27C092DAE4EC9C.roa (hash: X+2ma4rUdX20xim7i8E3RdkGIOC6nD+e2aVzXB4FFDo=)
                          34: 9617586EE65311F09345B1CADAE4EC9C.roa (hash: YTKfsfc+uNFPFqXmbc4tutzypg97/WagZDG/Snyx9nc=)
                          35: 65C9748EE64511F0B27815F2DAE4EC9C.roa (hash: Yez31KL1i1V990iqH57h6ulqHwmmM4OLYItRBUzFURY=)
                          36: 0CEAEE0AE64611F0871671F4DAE4EC9C.roa (hash: 5xW3AY+AI1m98uAIMdUQcGDUJHs1ajRXwY7eRe3tQMw=)
                          37: 9A04FBE2E64511F09F9A5BF3DAE4EC9C.roa (hash: pXs0IUGkAP6lzSFilYD3ZhWaFNX+8DRTkKn+r7yjKys=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 05:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Oct 29 05:11:33 2026 GMT
            Not After : Oct 31 05:11:33 2026 GMT
        Subject: CN=6ae2d585-307b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d5:bf:3c:12:75:cb:42:58:98:a8:49:96:30:
                    b5:55:1f:f7:61:ec:98:4b:a8:8a:e6:26:73:8f:40:
                    3d:11:0b:bf:eb:c4:23:79:7f:61:35:06:fc:e5:d2:
                    1e:43:9e:ca:4b:28:98:db:63:f1:39:5e:13:20:40:
                    69:c3:9c:df:e7:58:ea:f1:da:dd:66:2f:be:e3:a7:
                    9d:ab:b1:b8:17:16:c4:07:53:a6:77:c1:07:dc:72:
                    dd:a2:a6:63:88:0c:06:7e:d9:6e:99:fe:0a:06:26:
                    fe:5e:00:72:df:d7:c4:d3:8a:4a:86:cf:4d:db:8e:
                    f8:98:60:34:cb:89:6a:5e:c8:7b:99:38:30:3f:d0:
                    04:b1:1e:8c:47:0d:42:ac:94:47:2c:2d:d7:b4:89:
                    0a:8f:78:0e:39:9e:54:3a:5d:4f:9e:b0:fa:cc:33:
                    c5:aa:72:e1:00:fb:03:22:8e:ab:fb:98:13:8a:21:
                    d2:9d:b2:19:3e:e2:1c:1c:49:75:19:ef:80:06:d7:
                    c5:ba:99:6f:58:dd:ed:c8:b9:81:c4:7d:b1:c2:02:
                    78:2a:7a:54:b3:00:d2:97:b4:1e:7a:ce:7f:b8:3c:
                    ed:eb:41:56:f7:9d:21:22:2c:83:1b:8f:c6:71:43:
                    a7:f7:b0:66:4d:3c:51:60:67:06:ea:b4:2c:bc:f8:
                    60:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BB:4D:D5:0E:F3:65:86:10:BE:03:98:42:AF:07:43:74:15:F3:9D
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:34:ba:e5:45:b0:ed:6f:1c:4c:b3:0a:02:42:58:cf:94:2d:
         ce:e3:cc:14:f3:50:1b:b2:ea:4f:f7:52:0d:80:65:bd:96:33:
         c0:1b:2f:9d:0a:1f:3c:bf:41:49:95:3d:5a:cd:60:dc:92:1a:
         e5:74:e0:4d:f0:0b:e1:ab:72:b9:c4:9a:73:cf:c4:2d:85:4d:
         8f:f2:70:1b:a3:61:10:6f:53:3f:ec:e7:b9:fa:86:5a:23:b8:
         92:7a:89:6e:66:cb:68:c2:87:95:b8:59:0b:13:8a:64:cf:ca:
         f4:0b:6c:7f:b1:eb:9d:65:0c:b1:07:fe:e1:93:d7:57:f4:a3:
         ea:e8:a2:d3:56:cf:1d:b9:ea:d0:5e:c5:84:f3:ea:cf:bd:5a:
         b0:6a:bf:ed:5b:c8:21:3d:c1:10:c6:07:a2:03:e5:a1:64:5b:
         40:38:e3:b9:7b:10:52:68:bd:23:14:96:95:49:24:c4:ad:8a:
         1d:5d:2b:f4:70:d9:7a:e5:46:ba:0f:af:47:9c:e4:d6:ad:aa:
         69:47:ed:d4:32:b8:89:fa:1a:77:95:24:41:1e:e6:58:97:70:
         da:9c:3d:a7:a8:e5:12:d7:47:fd:12:69:50:87:f8:5b:44:7a:
         f1:b4:6e:ce:0f:ab:70:ce:a9:ea:25:78:ce:e3:b7:25:7b:ef:
         9d:11:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:49:45 2026 by rpki-client