Error: rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
File:                     4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft (raw, json)
Hash identifier:          1pGNIcfsF68xpR/AtWTpMDRBu6/Ku3m92UKM9QE7Qhk=
Subject key identifier:   6A:26:23:BF:23:B3:2C:FC:AB:62:90:53:62:DE:67:80:D3:5A:16:35
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       01EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
Manifest number:          030D
Signing time:             Wed 28 Oct 2026 05:12:17 +0000
Manifest this update:     Wed 28 Oct 2026 05:12:16 +0000
Manifest next update:     Fri 30 Oct 2026 05:12:16 +0000
Files and hashes:         1: 4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl (hash: lSY6GhWfZnm1fopR1jYbp/QbtR9voDkrrXL7hqyv1+A=)
                          2: 2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa (hash: czaOHjgQKar8k0qgvhJTFcM5RM/An5KUAmLnaz+XPoM=)
                          3: AC1A84E2E64411F0BDAD2EECDAE4EC9C.roa (hash: aooplZQG6H5mHbyoOfRiSF6JsTIckWEr5yhG8Qttn8g=)
                          4: 19F984E6E64411F0A9D7D7E9DAE4EC9C.roa (hash: 9VxkkCn8NhYiyI/rZSGcTqIm2TXbsoc4ZBAeWC+Q88g=)
                          5: A78B1D62E03411F0BA23EC96DAE4EC9C.roa (hash: V4HZuRFchda4PCAZ+TqnCyZuRh7EDqhJply4K7eJCrk=)
                          6: 7DA56C80E64411F0B1CFF2EBDAE4EC9C.roa (hash: S9zi6LYdyNKNbV1IF5Woapx9qQLKuRkn4Pc0vvMefxY=)
                          7: 2A7F58C0E64111F084C774D7DAE4EC9C.roa (hash: CRFSAdvu7nT9K3BwjIvIKrNt1IE5IvnknvLaaNH+GVc=)
                          8: BA239C48E64611F0BCD6127ADAE4EC9C.roa (hash: pDUAqES4iR6kKHfb4Y65EyLXHCIq/3T7FgQfhEgu34w=)
                          9: 2BC0A8ACE02D11F0AA32FCE6DAE4EC9C.roa (hash: mp4PGUM44RsT5fvnE9G8Wfl4a9lsO8E65quGReQYOP8=)
                          10: 6A5EB832E64611F0BA498779DAE4EC9C.roa (hash: /Ja9NZA3PT3nMROcxNf0Cf+BLQcwrkhjsgvSsjw/GNo=)
                          11: ED024972E64411F09005C0EFDAE4EC9C.roa (hash: XoWr8DFFLHUUI1hS2Hcc+slXh5tzxzat68HJvhpcBCU=)
                          12: 4B4A8E74E64311F099A1D2E3DAE4EC9C.roa (hash: uqUiBa58m/oC+y5I8h0R2p0L6qWhQAxyUOIwGnr8g7E=)
                          13: 6D9EDE72E64211F099CA79DFDAE4EC9C.roa (hash: LFsqBA4grm6BGuu+IAtbdpdGd09wU0OI5vP1TJGKJGQ=)
                          14: CF332320E02D11F0BFEC9DE9DAE4EC9C.roa (hash: q9858WneVonKMS8ZfqhbKQq6JJrU4YMstg+M/qIgKgs=)
                          15: 8D48783CE4B711F08DDC53E3DAE4EC9C.roa (hash: B/ONb1nsnGd5bWbPsAXhf3fmCZlHMi+RdyKVaSXoO3w=)
                          16: 21633E18E64711F09267137EDAE4EC9C.roa (hash: eLEh0SyY43hybPcZSU5IedR+zAs7IskDltcK3L464X4=)
                          17: 84060446E64311F09C4464E7DAE4EC9C.roa (hash: waitUYNkQPyRyYT1K9QTpRE9p4ghHIMSe8TwdycItWM=)
                          18: 0476E0ECE64311F0AEA94AE3DAE4EC9C.roa (hash: gJqY8hbUmXFsQqTPCTHgTkcC0h4IBxALOcQy7DKycfE=)
                          19: 18C749D6E64511F0ABEFC7EFDAE4EC9C.roa (hash: HcEhn8rY0LMqLMqnW5E48TBpkZIQs7rG01NNOWL4qIw=)
                          20: 7F683120E03011F0A9A3447DDAE4EC9C.roa (hash: 1ofRyLtLCgUjtyjNbcKKGyaLNuljpNLZF/Da0DLXy4M=)
                          21: 9FCAE1F8E03311F0AC5D5790DAE4EC9C.roa (hash: 9fFA5F6vS2Uzoj6zR6HF3FdhmSp+E3nknPXSOdym9E8=)
                          22: 4AB7FB10E03311F09521888EDAE4EC9C.roa (hash: irh6AQCCs0+wQOoQ6OfFdE3/Slfmb4g/hhWQX1yIJJo=)
                          23: 3E04A562E64611F098C343F6DAE4EC9C.roa (hash: nAeuC2hLRdg6vXbdusEEb2xJLgS40FzgoKMg75pO9y8=)
                          24: 8F4481FAE03211F0AA022B8ADAE4EC9C.roa (hash: Ausb+q37534pYlI8/IZKaw5119dV1q+N5AujavUroYE=)
                          25: 41B501CEE64211F0B81528DFDAE4EC9C.roa (hash: Iddf6PXYBVJILz/SeKyZ0ezmBFU0u8wv1/n3HA9IRhY=)
                          26: BCFF79EAE64211F0A9887CE1DAE4EC9C.roa (hash: n4W44lkOz9zDgunOmEFE9ifkh0K1X90d0DaTgdPVXLs=)
                          27: DFC57B3EE64511F0880A3BF4DAE4EC9C.roa (hash: QUcAXH6eBDcHLO7OTf8jf8YtX4XaBoqh4tCsAIXOlfA=)
                          28: ED533020E03211F0ACC31F8CDAE4EC9C.roa (hash: fCuvOeeua2UEWc+GJAZ1o37pU/fgiocR0PlJYdUski4=)
                          29: 23722C36E03511F0B6921B99DAE4EC9C.roa (hash: WRAjjrpZYpNcF9po1aGn/Ii+2cKmFEDJ+A9Q0pdBqR0=)
                          30: E0C19BF4E4B911F0AC7AE4EFDAE4EC9C.roa (hash: 0uI4WyyyVggMiE9YfvPVTXuKZFhM2OQidE/EfrcubxY=)
                          31: BC91A40EE65311F0908ABDCADAE4EC9C.roa (hash: VJ4tEGO/lKPbCH4khoVBPlLUyO5FnhtR7hnaBGZuDog=)
                          32: 27D2C2D4E03211F08A7EC587DAE4EC9C.roa (hash: Y+oQ/SVDi7ToYkC/R8JaxmCr/Q9OiGSwt61GPykd+rg=)
                          33: FD6A2FC6E03311F09F27C092DAE4EC9C.roa (hash: X+2ma4rUdX20xim7i8E3RdkGIOC6nD+e2aVzXB4FFDo=)
                          34: 9617586EE65311F09345B1CADAE4EC9C.roa (hash: YTKfsfc+uNFPFqXmbc4tutzypg97/WagZDG/Snyx9nc=)
                          35: 65C9748EE64511F0B27815F2DAE4EC9C.roa (hash: Yez31KL1i1V990iqH57h6ulqHwmmM4OLYItRBUzFURY=)
                          36: 0CEAEE0AE64611F0871671F4DAE4EC9C.roa (hash: 5xW3AY+AI1m98uAIMdUQcGDUJHs1ajRXwY7eRe3tQMw=)
                          37: 9A04FBE2E64511F09F9A5BF3DAE4EC9C.roa (hash: pXs0IUGkAP6lzSFilYD3ZhWaFNX+8DRTkKn+r7yjKys=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 05:12:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Oct 28 05:12:16 2026 GMT
            Not After : Oct 30 05:12:16 2026 GMT
        Subject: CN=6ae18431-456a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:24:9e:5c:46:71:7b:2b:17:90:4f:ff:df:4a:
                    f8:47:c0:82:1a:53:95:b6:37:64:dd:b6:e3:e5:c0:
                    db:7e:a5:ea:ce:9f:b8:27:a5:fd:3f:3c:6b:d1:00:
                    fe:c7:0c:5a:62:09:70:16:33:2a:08:df:d8:4f:60:
                    c3:70:b7:74:45:f0:55:cd:df:76:6c:aa:0b:b2:e4:
                    80:dd:54:06:b4:f3:64:dd:5e:e5:ff:ac:cd:cd:ff:
                    66:dc:21:5a:f7:77:3a:33:ca:2f:2f:e6:ec:51:72:
                    3e:76:9b:6b:b1:1c:66:24:f0:37:1d:d4:41:1a:6d:
                    f0:2c:7b:b7:da:68:80:23:79:37:92:de:2f:d6:39:
                    db:7c:f7:74:c7:0c:99:d1:f8:92:30:f3:9b:8e:f4:
                    84:e0:2c:c7:61:bb:de:d9:bb:ff:f5:ac:de:98:2a:
                    9c:7f:a9:2b:21:17:6a:ce:c5:ee:c4:72:1e:86:04:
                    5d:d5:3d:a0:ab:3e:aa:c7:ac:f4:10:8a:ae:64:e7:
                    9e:69:d0:ef:33:2e:d1:88:ad:16:83:14:8e:80:13:
                    cc:6f:c1:37:c4:7a:4f:58:fc:ce:7d:e2:c2:1c:a7:
                    8f:0e:74:28:c5:47:f8:1d:50:df:b9:78:9f:7a:cd:
                    ea:a7:dc:d2:8a:44:9b:04:7f:77:47:94:18:da:d0:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:26:23:BF:23:B3:2C:FC:AB:62:90:53:62:DE:67:80:D3:5A:16:35
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:36:9a:5b:1b:2d:88:24:00:95:c5:94:e6:29:0a:33:e6:95:
         33:a8:aa:a3:5c:c4:c5:2b:d8:99:e8:a5:a7:c3:b7:fc:f4:f6:
         3a:a6:f5:60:36:4b:29:80:de:0e:6b:6d:87:4a:04:6d:c2:50:
         5a:72:59:0d:0d:ce:7c:c9:fb:3d:02:d8:be:af:3b:48:a2:91:
         3c:9e:1f:b3:a3:95:14:0d:3b:66:39:22:c8:dd:7b:9a:5b:14:
         d6:a7:b7:fb:a0:34:1b:83:50:51:d7:1e:6a:24:5e:df:ff:0f:
         60:d0:a0:60:e6:3a:5d:f0:72:d2:72:92:cc:c9:00:e6:a6:50:
         7b:62:6d:bc:88:0e:96:7d:4d:fa:d9:67:b2:64:7b:36:08:83:
         44:16:2a:4a:f7:e8:a0:56:40:18:c5:fe:e7:9a:e3:5d:27:be:
         32:27:0e:ee:5d:e8:03:12:9b:72:d4:fa:3f:b5:ad:3d:56:80:
         22:b6:77:4a:2c:e1:64:e7:e6:ad:95:79:47:b0:72:36:d9:6f:
         31:d0:87:d9:5c:ef:a3:5e:a7:7f:7f:ab:70:68:85:71:f9:18:
         e6:b8:58:45:99:1d:4d:06:e2:73:b0:d7:b7:f8:97:96:13:4c:
         57:a1:fb:1d:5a:de:71:f0:d2:8d:4a:9e:d5:60:04:b4:2d:c2:
         e7:e6:e6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:02 2026 by rpki-client