Error: rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft
File:                     69luHbn6eKk21PMiZ2g9Z9rcToE.mft (raw, json)
Hash identifier:          Zo+ZRoZfmFbW9DCvIVnsROFZMbySTF8gyj5Mudny9Rc=
Subject key identifier:   CA:B6:7C:23:95:8B:06:78:47:11:53:F3:16:8B:9D:70:1C:3F:B6:33
Authority key identifier: EB:D9:6E:1D:B9:FA:78:A9:36:D4:F3:22:67:68:3D:67:DA:DC:4E:81
Certificate issuer:       /CN=F3642DBCAR/serialNumber=EBD96E1DB9FA78A936D4F32267683D67DADC4E81
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/arin/69luHbn6eKk21PMiZ2g9Z9rcToE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft
Manifest number:          17
Signing time:             Mon 26 Oct 2026 06:02:22 +0000
Manifest this update:     Mon 26 Oct 2026 06:02:22 +0000
Manifest next update:     Wed 28 Oct 2026 06:02:22 +0000
Files and hashes:         1: 69luHbn6eKk21PMiZ2g9Z9rcToE.crl (hash: aC311LVx9DOg6c6xiOgTjdGBAMHh0P/sfm68Ip18gh4=)
                          2: 296BF2E6C0CE11F19B8E92DECE1D38B0.roa (hash: XAseiyBWB5jDnRAZhCoIwHpcS+883V/iadUMuY7UQ4M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft
                          rsync://rpki.afrinic.net/repository/arin/69luHbn6eKk21PMiZ2g9Z9rcToE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 06:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642DBCAR, serialNumber=EBD96E1DB9FA78A936D4F32267683D67DADC4E81
        Validity
            Not Before: Oct 26 06:02:22 2026 GMT
            Not After : Oct 28 06:02:22 2026 GMT
        Subject: CN=6adeecee-8396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:b7:5c:9d:37:6f:e5:62:d7:39:d0:4c:0e:
                    8c:95:f1:76:fb:98:02:6b:89:d9:87:68:54:fc:db:
                    71:44:34:f2:e8:c9:1b:b7:11:ac:e2:a6:6d:27:88:
                    84:3b:13:9b:a3:2e:4b:df:98:98:90:aa:11:a7:8d:
                    9d:a6:98:b8:b8:70:d9:e2:f3:d7:b5:5b:3d:65:5f:
                    88:b1:78:0e:7c:cf:9c:83:1f:b7:42:47:5e:d9:f1:
                    9a:48:38:22:37:5a:39:a5:c5:ca:6a:d2:db:8a:73:
                    4a:da:e8:ee:95:f2:ad:61:6f:16:55:c9:45:12:ae:
                    a7:6f:a3:1f:12:c9:76:06:8e:47:16:86:5c:37:4e:
                    ff:fb:2b:ba:dd:bc:fc:7b:f8:f4:33:43:a1:85:87:
                    b3:d6:74:fa:82:57:0f:b9:7e:ad:03:d5:2a:0f:70:
                    a5:b2:03:e5:de:f6:ac:4a:94:f1:66:12:aa:32:ec:
                    e9:3c:9e:7c:f4:40:e1:29:43:3e:c2:06:50:d8:0a:
                    00:9e:38:fb:65:d8:18:93:9c:9b:4a:61:5b:40:e3:
                    bd:2f:8d:1e:15:e6:22:5f:8a:9e:db:de:d5:67:6e:
                    95:30:1c:79:ca:30:c5:68:4f:49:21:8e:c7:e7:61:
                    1c:8d:a3:36:9b:1d:39:65:61:71:cb:d0:16:4a:c4:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B6:7C:23:95:8B:06:78:47:11:53:F3:16:8B:9D:70:1C:3F:B6:33
            X509v3 Authority Key Identifier:
                keyid:EB:D9:6E:1D:B9:FA:78:A9:36:D4:F3:22:67:68:3D:67:DA:DC:4E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/69luHbn6eKk21PMiZ2g9Z9rcToE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642DBC/4D0B0652C0CD11F1B0A6C8D9CE1D38B0/69luHbn6eKk21PMiZ2g9Z9rcToE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c3:4f:d9:f9:33:a6:81:27:43:c9:b7:b7:6a:6d:3e:d3:7d:
         d5:a3:80:68:3a:d7:61:e6:45:fa:23:eb:83:e6:2d:f0:87:e5:
         46:20:3a:3d:92:c9:4f:9c:f1:36:03:82:cc:68:b8:f5:9e:b1:
         be:67:48:f6:81:46:61:23:be:61:57:38:43:af:d9:f9:c8:e9:
         fe:2c:1e:55:74:d7:b1:26:ca:f9:15:26:e2:98:ab:b1:12:2b:
         60:56:e0:df:6a:54:ff:f0:e4:02:c6:ec:ad:0b:7f:58:40:4d:
         78:fc:8d:44:f7:68:a6:b8:7a:2c:c4:e7:a3:1a:8a:ad:ca:10:
         a4:5d:18:6f:72:77:28:6f:84:25:3a:0d:18:4d:c0:ed:83:ab:
         af:1f:83:0b:49:08:0d:24:55:68:69:dc:4f:f3:a8:71:e9:07:
         cb:f8:8e:1e:b8:c8:83:7b:84:19:59:9e:b5:48:fb:9c:08:63:
         f2:b8:fe:53:69:95:65:9f:3c:4b:3f:de:78:c6:0e:80:0b:c2:
         c7:8d:68:58:f5:cc:bb:c9:fb:65:0c:70:a7:9d:db:47:f0:2c:
         a3:d3:a3:95:04:91:e4:9a:15:ce:4c:bf:ab:cd:73:ea:4f:39:
         15:70:77:10:85:75:c9:61:88:6d:3a:d3:8e:30:1f:03:0c:95:
         5c:e4:a9:0c
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBGDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY0
MkRCQ0FSMTEwLwYDVQQFEyhFQkQ5NkUxREI5RkE3OEE5MzZENEYzMjI2NzY4M0Q2
N0RBREM0RTgxMB4XDTI2MTAyNjA2MDIyMloXDTI2MTAyODA2MDIyMlowGDEWMBQG
A1UEAxMNNmFkZWVjZWUtODM5NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMDbt1ydN2/lYtc50EwOjJXxdvuYAmuJ2YdoVPzbcUQ08ujJG7cRrOKmbSeI
hDsTm6MuS9+YmJCqEaeNnaaYuLhw2eLz17VbPWVfiLF4DnzPnIMft0JHXtnxmkg4
IjdaOaXFymrS24pzStro7pXyrWFvFlXJRRKup2+jHxLJdgaORxaGXDdO//srut28
/Hv49DNDoYWHs9Z0+oJXD7l+rQPVKg9wpbID5d72rEqU8WYSqjLs6TyefPRA4SlD
PsIGUNgKAJ44+2XYGJOcm0phW0DjvS+NHhXmIl+Kntve1WdulTAcecowxWhPSSGO
x+dhHI2jNpsdOWVhccvQFkrEbc0CAwEAAaOCArUwggKxMB0GA1UdDgQWBBTKtnwj
lYsGeEcRU/MWi51wHD+2MzAfBgNVHSMEGDAWgBTr2W4dufp4qTbU8yJnaD1n2txO
gTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NDJEQkMvNEQwQjA2NTJDMENEMTFGMUIwQTZDOEQ5Q0UxRDM4QjAvNjlsdUhi
bjZlS2syMVBNaVoyZzlaOXJjVG9FLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
NjlsdUhibjZlS2syMVBNaVoyZzlaOXJjVG9FLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzY0MkRCQy80RDBCMDY1MkMwQ0QxMUYxQjBBNkM4RDlDRTFEMzhC
MC82OWx1SGJuNmVLazIxUE1pWjJnOVo5cmNUb0UubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAAnDT9n5M6aBJ0PJt7dqbT7TfdWjgGg612Hm
Rfoj64PmLfCH5UYgOj2SyU+c8TYDgsxouPWesb5nSPaBRmEjvmFXOEOv2fnI6f4s
HlV017EmyvkVJuKYq7ESK2BW4N9qVP/w5ALG7K0Lf1hATXj8jUT3aKa4eizE56Ma
iq3KEKRdGG9ydyhvhCU6DRhNwO2Dq68fgwtJCA0kVWhp3E/zqHHpB8v4jh64yIN7
hBlZnrVI+5wIY/K4/lNplWWfPEs/3njGDoALwseNaFj1zLvJ+2UMcKed20fwLKPT
o5UEkeSaFc5Mv6vNc+pPORVwdxCFdclhiG06044wHwMMlVzkqQw=
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:55 2026 by rpki-client