Error: rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
File:                     xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft (raw, json)
Hash identifier:          eoNgHn2PIqyOHG+sml6VMPXj76w0k1gozc6ZOq2y4eY=
Subject key identifier:   63:91:22:9C:F1:FA:F5:C8:AF:12:FF:9D:F1:02:81:3B:8C:5B:F3:78
Authority key identifier: C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4
Certificate issuer:       /CN=F363C3E1AF/serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
Certificate serial:       0AE3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
Manifest number:          0ADF
Signing time:             Fri 30 Oct 2026 01:23:21 +0000
Manifest this update:     Fri 30 Oct 2026 01:23:20 +0000
Manifest next update:     Sun 01 Nov 2026 01:23:20 +0000
Files and hashes:         1: xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl (hash: GTElp6r90E6aMyrdSWpwIxt/C8R+nScans1iOjTGnTU=)
                          2: 95B5298A8BFA11F186C65C0ECF1D38B0.roa (hash: dGGy+tGu/d3VEa+RmdR8hyWyPwfvdAS4Rg9besvo/cY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 01 Nov 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2787 (0xae3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C3E1AF, serialNumber=C40F95E97D832F0F576D13EE35AEB3D75A5D30D4
        Validity
            Not Before: Oct 30 01:23:20 2026 GMT
            Not After : Nov  1 01:23:20 2026 GMT
        Subject: CN=6ae3f189-fb4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:94:59:ed:27:0e:45:d5:d9:36:c6:24:58:
                    9d:8c:14:07:10:01:1a:26:61:31:87:05:37:61:40:
                    d5:d0:9f:1a:25:fa:7a:74:c2:a6:24:0c:88:20:ba:
                    4b:3c:52:63:99:79:17:9b:60:20:4d:dc:92:d3:5a:
                    50:85:7b:1e:dd:7f:cf:fb:20:91:7d:44:23:71:03:
                    71:d6:45:e3:9f:9a:a5:2b:4a:15:15:02:d9:6e:f1:
                    87:29:82:09:bb:e3:2f:44:c2:65:73:3a:0f:02:e6:
                    32:9a:09:11:dd:b7:b8:4d:33:ce:d4:ea:08:ab:ba:
                    68:98:b5:8a:c4:62:c1:52:b3:7c:7c:2f:38:b3:29:
                    ce:45:eb:f5:7f:1e:7c:f2:a5:a8:64:ad:66:62:f3:
                    7a:c3:e4:96:1d:6b:d9:8a:36:af:1e:e7:a0:06:b3:
                    56:92:cd:e4:b8:b4:06:62:71:97:ce:b1:b4:ff:c4:
                    43:3c:be:3e:df:07:fa:c2:07:9d:4c:50:4a:5b:df:
                    53:86:b7:31:0b:57:7e:6d:e2:8f:a1:e9:ae:7a:31:
                    a8:63:48:8b:c3:f8:c4:70:05:60:9e:1e:63:7d:06:
                    c3:aa:0e:74:11:ad:91:d3:a2:a2:78:b1:30:18:2b:
                    54:3d:e3:44:ff:e1:46:9a:72:08:49:93:cd:4a:d3:
                    7c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:91:22:9C:F1:FA:F5:C8:AF:12:FF:9D:F1:02:81:3B:8C:5B:F3:78
            X509v3 Authority Key Identifier:
                keyid:C4:0F:95:E9:7D:83:2F:0F:57:6D:13:EE:35:AE:B3:D7:5A:5D:30:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xA-V6X2DLw9XbRPuNa6z11pdMNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C3E1/AAC01F88821611E9BD1EFE3CF8AEA228/xA-V6X2DLw9XbRPuNa6z11pdMNQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b1:ae:4e:8f:ba:8b:7a:b3:b9:11:9b:e4:f5:f5:8e:f8:87:
         ca:7a:f9:01:d6:c2:11:51:ac:d3:b7:94:6c:b0:ae:36:b6:28:
         75:63:b6:03:90:d2:7b:10:34:ad:77:f4:84:8a:46:25:6e:a4:
         2e:8e:55:95:24:25:29:af:c3:f4:e5:58:c9:eb:98:32:cd:0b:
         38:34:64:a8:36:2c:49:b7:08:fc:65:6e:23:80:fe:aa:92:80:
         c7:27:47:b9:e2:ef:f8:10:e1:12:4f:2a:28:ed:89:97:5d:a6:
         34:01:19:29:ee:be:bb:ff:e8:64:62:c2:30:1d:42:1f:80:99:
         1b:64:50:d5:79:01:44:65:49:90:ad:7a:93:e6:05:e2:f6:1d:
         42:52:f6:48:6d:1e:91:bd:f9:b7:2b:a0:93:5d:63:2f:ab:d0:
         c4:4a:f4:7d:62:9e:56:41:ac:8d:68:34:d2:5a:dc:9e:ad:8c:
         74:ba:9f:75:d4:0d:d4:2e:79:8c:31:b3:16:20:6f:79:4e:f9:
         42:7c:38:10:28:9a:e7:c6:cd:58:bc:41:83:1f:b1:57:5e:26:
         0f:bf:d4:c6:81:be:af:ff:9c:97:f9:d3:ff:3b:85:e6:25:01:
         de:46:d4:1b:5d:a7:88:37:5a:49:d9:0e:ec:a0:9e:a2:37:21:
         ae:98:db:9e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCuMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0MzRTFBRjExMC8GA1UEBRMoQzQwRjk1RTk3RDgzMkYwRjU3NkQxM0VFMzVBRUIz
RDc1QTVEMzBENDAeFw0yNjEwMzAwMTIzMjBaFw0yNjExMDEwMTIzMjBaMBgxFjAU
BgNVBAMTDTZhZTNmMTg5LWZiNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLwpRZ7ScORdXZNsYkWJ2MFAcQARomYTGHBTdhQNXQnxol+np0wqYkDIgg
uks8UmOZeRebYCBN3JLTWlCFex7df8/7IJF9RCNxA3HWReOfmqUrShUVAtlu8Ycp
ggm74y9EwmVzOg8C5jKaCRHdt7hNM87U6girumiYtYrEYsFSs3x8LzizKc5F6/V/
HnzypahkrWZi83rD5JYda9mKNq8e56AGs1aSzeS4tAZicZfOsbT/xEM8vj7fB/rC
B51MUEpb31OGtzELV35t4o+h6a56MahjSIvD+MRwBWCeHmN9BsOqDnQRrZHToqJ4
sTAYK1Q940T/4UaacghJk81K03zVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUY5Ei
nPH69civEv+d8QKBO4xb83gwHwYDVR0jBBgwFoAUxA+V6X2DLw9XbRPuNa6z11pd
MNQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNDM0UxL0FBQzAxRjg4ODIxNjExRTlCRDFFRkUzQ0Y4QUVBMjI4L3hBLVY2
WDJETHc5WGJSUHVOYTZ6MTFwZE1OUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hBLVY2WDJETHc5WGJSUHVOYTZ6MTFwZE1OUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0MzRTEvQUFDMDFGODg4MjE2MTFFOUJEMUVGRTNDRjhB
RUEyMjgveEEtVjZYMkRMdzlYYlJQdU5hNnoxMXBkTU5RLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGsa5Oj7qLerO5EZvk9fWO+IfKevkB
1sIRUazTt5RssK42tih1Y7YDkNJ7EDStd/SEikYlbqQujlWVJCUpr8P05VjJ65gy
zQs4NGSoNixJtwj8ZW4jgP6qkoDHJ0e54u/4EOESTyoo7YmXXaY0ARkp7r67/+hk
YsIwHUIfgJkbZFDVeQFEZUmQrXqT5gXi9h1CUvZIbR6Rvfm3K6CTXWMvq9DESvR9
Yp5WQayNaDTSWtyerYx0up911A3ULnmMMbMWIG95TvlCfDgQKJrnxs1YvEGDH7FX
XiYPv9TGgb6v/5yX+dP/O4XmJQHeRtQbXaeIN1pJ2Q7soJ6iNyGumNue
-----END CERTIFICATE-----
Generated at Fri Oct 30 13:54:15 2026 by rpki-client