Error: rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
File:                     xLvN753H5o-RhMgMCHGMIG7d9ws.mft (raw, json)
Hash identifier:          9umyQKARtjm+VDqIj6hcSNfV9OcdKasR3df7ptNevBY=
Subject key identifier:   AF:B0:90:C8:E0:44:9F:41:26:0E:5B:4B:9C:6D:F1:8F:A9:61:16:6A
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Certificate issuer:       /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial:       02C3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
Manifest number:          02A5
Signing time:             Tue 27 Oct 2026 04:44:14 +0000
Manifest this update:     Tue 27 Oct 2026 04:44:13 +0000
Manifest next update:     Thu 29 Oct 2026 04:44:13 +0000
Files and hashes:         1: xLvN753H5o-RhMgMCHGMIG7d9ws.crl (hash: Xgs00SX+QdWSkoxGYrSwuHo2VR9hPH2FsROL/BcUahY=)
                          2: 94141C50E71711EFAF193D9C762E951A.roa (hash: VGiUmDaGPBDjNZvWhcQkhm9XZwIn0CIlpM2Ja0UcQ+0=)
                          3: B8FB5766DD5A11EFB2603D5E762E951A.roa (hash: 2svHingahPmdzvx5gtKH1SYPhXizYnHWA4pucFmkyLA=)
                          4: 50CC203EDD5B11EF9DB00261762E951A.roa (hash: Z4PnVh8Bk+c+XTp3EPhtMIoJmqM2+4Q4V57HhoRV0LY=)
                          5: 00BC75E2DD6C11EFBCBF8D55762E951A.roa (hash: y7EM7ly8esE3gmQ9LHHQhoYVLXQXppG8c2G1B/8sdG0=)
                          6: B42883C6DCC411EFAC23BD65762E951A.roa (hash: AkFtukieotsHxs31iTfcs9UAP4Z5Rv++CP/N/7IV8to=)
                          7: DF9A8FB2E71511EF89845391762E951A.roa (hash: lYxv4PfU2pGQraX26B+rxFK/U2HF8vmIZzodopdyvFo=)
                          8: 3D11E624E71411EFBA884188762E951A.roa (hash: N6mTIIRTdRtPk9q/Y6bKJnmYoEtncqiN9VuNviAdVGs=)
                          9: 19688CE6E71411EFBF287786762E951A.roa (hash: 3SpAXKAI2oMnzDMtmx8bxJNcSrUMhykMz+m286lYBPc=)
                          10: 830569CEDD8411EF8C36D978762E951A.roa (hash: sDz4Gs1dxudYxxNtOWNHYeKAdaxdIwaTAlm/Pz6NP6k=)
                          11: 81B8D5EEDD8211EF8A3C396D762E951A.roa (hash: RsxH1fAU+htkReATXiltObbwhi4z8mSFSYmQbCVCbIo=)
                          12: BDF4436EE70E11EFBF868065762E951A.roa (hash: ABlF2DLPUzccMWKARFsuerTVc/Hf91fdWN1Myk8K5eY=)
                          13: D91C373CE71311EF8A4F3F84762E951A.roa (hash: L6t5A3CpklDtC6Pr0bb6KhzuYz40rl6jXuCDamji6jo=)
                          14: 3F2B1A20DD5F11EFB2C1057C762E951A.roa (hash: hO+aJIyyhqIgJLgK4ZzK1pihDT7/x5+QrELOs3PeExg=)
                          15: F2A4B242DD5911EF836FA259762E951A.roa (hash: fIuP82QOJoRzYwdnI+W0dZ872lW6Jo1aocyYnFQOGfg=)
                          16: 314121A0E71611EFB3368E93762E951A.roa (hash: tq07saenMGK8v+QpcyKGWS+QKHYWt2hPvwm5vAiTTyg=)
                          17: 3C8225CEE70B11EF90C4C54E762E951A.roa (hash: P1nsqXHVMhuhOX4+8Nj0hA2BUkP4xrW40MPYyOSP7Sg=)
                          18: B3C9F522E71411EFA2E00F89762E951A.roa (hash: 9C9VDXXQ6KQ5ThTqPs+xyYW2pc7hbMdz8GCDLQ9wuR4=)
                          19: F24D34A4E70E11EF92E4DB65762E951A.roa (hash: k/G9qck3d7Q62Hncuvh/EiwNmOeryAJ5cmUhSVW8eXA=)
                          20: A5EC6916DD6011EFB4384D86762E951A.roa (hash: AY+AO3HoFPCTXZ9NdsdrMBRaTdh3Wbi9aeFXDZL9Kl4=)
                          21: 06E8A27AE71611EF9638C291762E951A.roa (hash: Ot/zGZbzI2R4LzAmgGX8PT7Pb1NjpFW5prBl7CcOnKE=)
                          22: 7DF5A16CDD5A11EFB641675C762E951A.roa (hash: VPYWyUkSd2f/Oo+xyShQeMdrepS2BuZjuB3U+Dkf/kY=)
                          23: 4D0F66DCDCC411EF87DBFE61762E951A.roa (hash: 0pJAdh2krN7PN7ET77uSv5aEr89tUKUcawXGqKdQ8KE=)
                          24: 18F331CCE71311EF980CE67F762E951A.roa (hash: U6asCyD1O+BpSuJZbisAWolN+j2KzxhuuEzB1cz8LNI=)
                          25: E85D3C24DD5D11EF9F43C972762E951A.roa (hash: pGLOjm7GcbhVCAv4nSzg8/IEawOYrqF7wFQJVytsdnk=)
                          26: 3C836F96DD5C11EFB1D93769762E951A.roa (hash: iSI1Fg5i7pMaZuu3tpqcqvjjxXpFCYkWT8ucZIu0CLs=)
                          27: 1F3D7F78DD8211EF8E6CD76A762E951A.roa (hash: zr9mOOEpAw72/JZefMTyPFlI4TAyCVb1YiFHRT1Jgco=)
                          28: 2EB0BC54E70F11EFBF4A1268762E951A.roa (hash: 1jrEr+w8kh2VQB/TRu48/EIry3GrfRf6fRHj0ymkhOQ=)
                          29: 61908B4AE79B11EFB6805B7C762E951A.roa (hash: Xn+9BY2JsZcHSY8zfrWdXyWmaJjlSC/5wGIcSiN9iMc=)
                          30: 971449FADD5F11EFA3B35B7F762E951A.roa (hash: O/UnJEfpoStkh1iBmk5+WnDltBgh7Ls1BY+41hPq/2s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
                          rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 707 (0x2c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
        Validity
            Not Before: Oct 27 04:44:13 2026 GMT
            Not After : Oct 29 04:44:13 2026 GMT
        Subject: CN=6ae02c1e-fa17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:af:11:2f:e9:88:e3:3d:69:9a:2b:6e:f9:
                    01:c4:a1:ba:53:a1:c4:ee:18:1d:0d:64:d5:d4:2d:
                    00:2c:19:d6:65:ee:69:9c:60:1e:00:e1:65:49:bd:
                    4e:09:76:2c:9b:e7:df:bc:e1:22:73:0c:c0:d4:1f:
                    cb:b7:76:42:90:62:f1:32:2c:0a:37:68:3e:69:ca:
                    bb:7a:33:fb:f4:78:e9:76:5c:1d:41:94:a7:f7:65:
                    a6:4c:58:62:36:b1:5e:15:72:ee:b1:43:87:94:93:
                    63:d1:cb:b2:76:80:c7:81:3c:9f:46:8a:89:0b:f0:
                    85:4e:db:ef:c6:f6:fe:17:97:3c:98:96:8c:c1:b8:
                    62:b1:fd:12:03:ef:06:13:63:70:4c:94:77:95:13:
                    27:df:4c:5d:a4:2d:46:6a:d0:7d:90:44:4d:9b:a8:
                    8b:9d:c1:90:34:7d:4f:3a:e4:e9:92:91:d7:f4:ce:
                    9e:70:59:94:da:de:dd:a2:c8:8a:50:41:0a:0a:5a:
                    42:b3:71:a0:6f:cb:76:9d:aa:bc:e8:73:04:61:d9:
                    8a:81:dd:8d:c3:53:dd:e3:fd:1b:8c:de:fb:1c:65:
                    c6:8e:f3:85:7c:44:5c:dc:40:a3:e3:79:ac:0d:3e:
                    19:10:8e:d8:ed:a6:83:33:74:c6:6c:cb:59:38:da:
                    15:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B0:90:C8:E0:44:9F:41:26:0E:5B:4B:9C:6D:F1:8F:A9:61:16:6A
            X509v3 Authority Key Identifier:
                keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:5e:36:1f:e7:61:a9:60:12:38:8d:be:c4:d4:0a:78:fa:73:
         36:8b:c3:de:45:2e:38:5c:2b:d7:27:e6:81:d0:87:dc:a4:d7:
         57:f4:88:0e:67:f1:31:0e:2c:bc:83:69:45:7e:bb:dd:6d:5e:
         ab:96:31:da:c8:9f:76:c2:94:f6:e0:0e:ad:8b:4d:24:8f:20:
         22:54:52:1b:f5:14:2c:1e:1b:09:0d:39:a6:6d:09:a5:5b:fc:
         0e:7d:01:45:32:61:0a:62:9d:16:e2:bc:93:fc:54:42:4b:ef:
         1c:3b:cf:98:ff:e0:6d:d3:06:fb:a9:24:1b:37:4b:b1:d4:7f:
         ef:85:27:62:44:b6:67:e7:b0:79:93:20:19:c4:3e:90:62:af:
         19:89:7a:d2:b9:8d:a9:b9:af:60:ef:cf:62:00:73:5b:09:fd:
         d1:32:ee:0d:16:3d:65:ac:a2:89:1e:ee:bb:84:ec:5c:bc:8f:
         ff:c7:ff:f1:b1:08:e7:cc:8a:7e:ed:30:ef:c6:af:78:a8:df:
         bb:0f:5d:d0:61:c4:91:09:1f:5e:c5:ad:49:63:41:a9:65:53:
         10:1b:32:a5:fc:21:31:36:31:fb:02:86:2c:a5:f2:53:34:f0:
         09:90:22:fd:03:f4:5d:ed:25:41:5d:9a:05:50:98:bb:5e:d8:
         84:65:8a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:18:30 2026 by rpki-client