Error: rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
File:                     xLvN753H5o-RhMgMCHGMIG7d9ws.mft (raw, json)
Hash identifier:          ZzRnR71BcTOSWF3pLvIYkGrc+KzSK1Ltx7EUsDzGOsY=
Subject key identifier:   B2:51:04:43:69:A6:71:91:98:51:86:7D:EF:1B:8F:A0:D7:35:07:B7
Authority key identifier: C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B
Certificate issuer:       /CN=F363DCF2AR/serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
Certificate serial:       02C2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
Manifest number:          02A4
Signing time:             Mon 26 Oct 2026 04:47:37 +0000
Manifest this update:     Mon 26 Oct 2026 04:47:36 +0000
Manifest next update:     Wed 28 Oct 2026 04:47:36 +0000
Files and hashes:         1: xLvN753H5o-RhMgMCHGMIG7d9ws.crl (hash: amj7ySD7ZpgcHAySVUtOUQb0Q10mADPDy64ScYMoWu8=)
                          2: 94141C50E71711EFAF193D9C762E951A.roa (hash: VGiUmDaGPBDjNZvWhcQkhm9XZwIn0CIlpM2Ja0UcQ+0=)
                          3: B8FB5766DD5A11EFB2603D5E762E951A.roa (hash: 2svHingahPmdzvx5gtKH1SYPhXizYnHWA4pucFmkyLA=)
                          4: 50CC203EDD5B11EF9DB00261762E951A.roa (hash: Z4PnVh8Bk+c+XTp3EPhtMIoJmqM2+4Q4V57HhoRV0LY=)
                          5: 00BC75E2DD6C11EFBCBF8D55762E951A.roa (hash: y7EM7ly8esE3gmQ9LHHQhoYVLXQXppG8c2G1B/8sdG0=)
                          6: B42883C6DCC411EFAC23BD65762E951A.roa (hash: AkFtukieotsHxs31iTfcs9UAP4Z5Rv++CP/N/7IV8to=)
                          7: DF9A8FB2E71511EF89845391762E951A.roa (hash: lYxv4PfU2pGQraX26B+rxFK/U2HF8vmIZzodopdyvFo=)
                          8: 3D11E624E71411EFBA884188762E951A.roa (hash: N6mTIIRTdRtPk9q/Y6bKJnmYoEtncqiN9VuNviAdVGs=)
                          9: 19688CE6E71411EFBF287786762E951A.roa (hash: 3SpAXKAI2oMnzDMtmx8bxJNcSrUMhykMz+m286lYBPc=)
                          10: 830569CEDD8411EF8C36D978762E951A.roa (hash: sDz4Gs1dxudYxxNtOWNHYeKAdaxdIwaTAlm/Pz6NP6k=)
                          11: 81B8D5EEDD8211EF8A3C396D762E951A.roa (hash: RsxH1fAU+htkReATXiltObbwhi4z8mSFSYmQbCVCbIo=)
                          12: BDF4436EE70E11EFBF868065762E951A.roa (hash: ABlF2DLPUzccMWKARFsuerTVc/Hf91fdWN1Myk8K5eY=)
                          13: D91C373CE71311EF8A4F3F84762E951A.roa (hash: L6t5A3CpklDtC6Pr0bb6KhzuYz40rl6jXuCDamji6jo=)
                          14: 3F2B1A20DD5F11EFB2C1057C762E951A.roa (hash: hO+aJIyyhqIgJLgK4ZzK1pihDT7/x5+QrELOs3PeExg=)
                          15: F2A4B242DD5911EF836FA259762E951A.roa (hash: fIuP82QOJoRzYwdnI+W0dZ872lW6Jo1aocyYnFQOGfg=)
                          16: 314121A0E71611EFB3368E93762E951A.roa (hash: tq07saenMGK8v+QpcyKGWS+QKHYWt2hPvwm5vAiTTyg=)
                          17: 3C8225CEE70B11EF90C4C54E762E951A.roa (hash: P1nsqXHVMhuhOX4+8Nj0hA2BUkP4xrW40MPYyOSP7Sg=)
                          18: B3C9F522E71411EFA2E00F89762E951A.roa (hash: 9C9VDXXQ6KQ5ThTqPs+xyYW2pc7hbMdz8GCDLQ9wuR4=)
                          19: F24D34A4E70E11EF92E4DB65762E951A.roa (hash: k/G9qck3d7Q62Hncuvh/EiwNmOeryAJ5cmUhSVW8eXA=)
                          20: A5EC6916DD6011EFB4384D86762E951A.roa (hash: AY+AO3HoFPCTXZ9NdsdrMBRaTdh3Wbi9aeFXDZL9Kl4=)
                          21: 06E8A27AE71611EF9638C291762E951A.roa (hash: Ot/zGZbzI2R4LzAmgGX8PT7Pb1NjpFW5prBl7CcOnKE=)
                          22: 7DF5A16CDD5A11EFB641675C762E951A.roa (hash: VPYWyUkSd2f/Oo+xyShQeMdrepS2BuZjuB3U+Dkf/kY=)
                          23: 4D0F66DCDCC411EF87DBFE61762E951A.roa (hash: 0pJAdh2krN7PN7ET77uSv5aEr89tUKUcawXGqKdQ8KE=)
                          24: 18F331CCE71311EF980CE67F762E951A.roa (hash: U6asCyD1O+BpSuJZbisAWolN+j2KzxhuuEzB1cz8LNI=)
                          25: E85D3C24DD5D11EF9F43C972762E951A.roa (hash: pGLOjm7GcbhVCAv4nSzg8/IEawOYrqF7wFQJVytsdnk=)
                          26: 3C836F96DD5C11EFB1D93769762E951A.roa (hash: iSI1Fg5i7pMaZuu3tpqcqvjjxXpFCYkWT8ucZIu0CLs=)
                          27: 1F3D7F78DD8211EF8E6CD76A762E951A.roa (hash: zr9mOOEpAw72/JZefMTyPFlI4TAyCVb1YiFHRT1Jgco=)
                          28: 2EB0BC54E70F11EFBF4A1268762E951A.roa (hash: 1jrEr+w8kh2VQB/TRu48/EIry3GrfRf6fRHj0ymkhOQ=)
                          29: 61908B4AE79B11EFB6805B7C762E951A.roa (hash: Xn+9BY2JsZcHSY8zfrWdXyWmaJjlSC/5wGIcSiN9iMc=)
                          30: 971449FADD5F11EFA3B35B7F762E951A.roa (hash: O/UnJEfpoStkh1iBmk5+WnDltBgh7Ls1BY+41hPq/2s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
                          rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DCF2AR, serialNumber=C4BBCDEF9DC7E68F9184C80C08718C206EDDF70B
        Validity
            Not Before: Oct 26 04:47:36 2026 GMT
            Not After : Oct 28 04:47:36 2026 GMT
        Subject: CN=6adedb69-ea3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:15:5f:d9:13:df:70:dd:c0:08:7a:70:8a:12:
                    d1:df:7b:c2:75:a6:c2:e6:9d:0e:ad:16:da:17:a5:
                    60:91:ef:b3:cd:9a:5d:5a:74:87:46:bf:c6:43:b6:
                    7c:e3:81:c0:0f:e2:4a:f0:47:08:7f:09:12:f2:4b:
                    74:b7:d5:e4:3e:df:a2:26:e5:82:8d:70:97:de:34:
                    b8:e0:60:16:6f:68:27:3f:50:5e:a0:d5:65:dd:01:
                    df:08:58:9d:56:38:c0:9e:a4:01:79:39:8b:39:6b:
                    51:7a:41:2f:ca:e6:ab:30:0a:28:ce:50:7d:5a:a2:
                    6e:db:36:3f:83:a8:12:ad:13:69:03:e7:50:ee:b9:
                    43:1c:eb:40:0e:2f:10:29:ef:7a:52:21:c2:a2:65:
                    ba:f3:09:90:24:a0:f6:18:e7:e5:1b:38:46:21:bc:
                    0c:e2:0f:65:76:5d:0c:d2:69:7f:05:11:dc:1f:94:
                    8c:e8:3f:41:9f:de:23:2a:0a:13:51:39:c9:ee:44:
                    60:b8:f1:9a:57:ef:5b:7b:7a:54:81:ca:b8:68:ff:
                    78:b2:11:09:1e:14:14:79:d2:6e:f0:98:28:1c:9f:
                    56:94:64:a9:78:e5:d0:b0:b5:bf:12:74:87:72:2d:
                    e2:25:12:29:9b:e8:11:24:69:82:3b:87:68:de:4d:
                    be:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:51:04:43:69:A6:71:91:98:51:86:7D:EF:1B:8F:A0:D7:35:07:B7
            X509v3 Authority Key Identifier:
                keyid:C4:BB:CD:EF:9D:C7:E6:8F:91:84:C8:0C:08:71:8C:20:6E:DD:F7:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xLvN753H5o-RhMgMCHGMIG7d9ws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DCF2/A18531B6DCBE11EFBE2B50BB762E951A/xLvN753H5o-RhMgMCHGMIG7d9ws.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:b7:f2:a9:a2:52:12:f8:fa:49:31:9f:21:d6:c2:08:e3:a4:
         1e:b7:e7:48:be:a0:fe:59:7e:20:75:2a:52:e9:21:83:30:7d:
         db:23:ee:a9:5b:50:76:1c:2d:58:7f:83:c8:10:e9:4e:6d:51:
         72:b6:85:32:57:4d:2c:b0:7a:a2:89:32:61:0d:84:a3:b7:ed:
         24:25:c2:43:e6:0c:52:37:23:91:02:f3:db:ab:b3:5e:b1:38:
         f5:00:1f:b5:c4:42:ed:41:96:d6:c8:c5:a9:0d:6d:bc:9a:47:
         9c:db:38:88:53:b7:19:e7:93:15:2a:fb:d2:22:ec:b1:27:30:
         a2:c6:73:d4:f5:32:b8:78:32:e8:70:3c:78:16:59:23:08:e2:
         e4:16:d8:47:56:07:8e:5f:77:57:58:61:d6:55:66:0c:0d:8a:
         0b:11:a0:e5:b1:38:45:07:12:79:39:53:a8:af:f1:76:a5:62:
         b9:3d:4f:33:ef:9a:fd:24:9a:57:64:65:56:a3:5d:99:89:e8:
         7f:e5:f1:4a:18:b5:65:f6:48:85:e2:b9:c5:56:d2:3f:20:4d:
         1b:74:b0:69:af:16:8f:3c:65:de:92:35:2e:7a:2e:b8:60:31:
         07:15:c1:6f:4d:24:3e:b4:8d:b5:be:0f:6c:f6:33:b4:fe:80:
         55:f3:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:53:53 2026 by rpki-client