Error: rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
File:                     og4gZ_DbeD3jcj4jFRfcfp_lutM.mft (raw, json)
Hash identifier:          WmwWsymfKXvf1BV8cZMckIaekwmzjzctSb9oW3LLF4Q=
Subject key identifier:   08:EC:08:B6:15:40:EF:AB:BD:31:BE:E3:04:88:FA:5D:E1:8D:AD:0F
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0630
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
Manifest number:          05D9
Signing time:             Sat 24 Oct 2026 03:18:29 +0000
Manifest this update:     Sat 24 Oct 2026 03:18:28 +0000
Manifest next update:     Mon 26 Oct 2026 03:18:28 +0000
Files and hashes:         1: og4gZ_DbeD3jcj4jFRfcfp_lutM.crl (hash: bbFJSD3NDMOKT1jXVlD5zlzu749uHXSCWqUaHMCXkzY=)
                          2: 9A0B5D56965411F199C7B7DFCE1D38B0.roa (hash: 9ydbrA3SKXkY1woYL88oh9nc8YGjXLXv6PoUJBg2810=)
                          3: 36C6B1A2965211F1AC723ED1CE1D38B0.roa (hash: mD7PSAHv8qv+Nm8H6OHQZ231IAWKVsKlIfYmZU5lrUc=)
                          4: B9682E08965011F19D99F8C8CE1D38B0.roa (hash: B4oYheHzHKAU3LOEjkRdJt9oLNCyqzoRIEPVuzXDe5U=)
                          5: B393449A965511F1994C44E6CE1D38B0.roa (hash: yPc+ltvkVldMd+mg8G94PzZBrHhZ2Z6pQQ+sSKeP/gg=)
                          6: 6B1CADC4964A11F183FD50A3CE1D38B0.roa (hash: Q3bv+/3qzjoTU/OKx/laZYEE7INTlvCdy+ChzWaJdYM=)
                          7: AABDD70C965711F1BE51AEF2CE1D38B0.roa (hash: Z0i6TcmIXn9kp704Tq1dtAyqgD1SdNCro1rAUYTSegM=)
                          8: 0D690D88965111F1ADA822C9CE1D38B0.roa (hash: 9hnmT+6YWfz8wjXRc165uqZHOTs37SFKJzvLVlmoeF4=)
                          9: 452BFAA2964F11F1B88796C0CE1D38B0.roa (hash: IiMJujnL/VBB6voYiIgew+oovEPcR9nYPKYUhXrFjDA=)
                          10: 960FDF48964911F19D526C1DCF1D38B0.roa (hash: AVhNkjwkO2e7IM680bLe+1azTxSoOu5cdxDnIen3tpQ=)
                          11: 7D941AD0965611F19A827AEACE1D38B0.roa (hash: 2gcd6W5bGv8XPY7TPxINGmpsn4kpkNoI84Aj+LDRq4E=)
                          12: 7952BE8A964D11F1825431B4CE1D38B0.roa (hash: HjvUFT6JThr4YWNVzTDVNW61g/yIvKBsGAr5vlAGCt0=)
                          13: 143330BE964A11F1985DE1A0CE1D38B0.roa (hash: EGcuzgU3K51qaDfz+xSAHphkzjp93d3M2YobU/ODCYI=)
                          14: 71E3E33A964E11F1A68361BCCE1D38B0.roa (hash: x5Otd8hdlNV/UUKeHjaRjXYUsLKulBEKDrmSphp2Rv4=)
                          15: E2B8980A965611F192B48AEECE1D38B0.roa (hash: H4Ay4vxbV8N8VLbE7TI8DM+fihDQzXEohxuW4qKdQOk=)
                          16: 2A47C3AC965311F18D5555D7CE1D38B0.roa (hash: qjEV8QH6QAXL5LpzhD+gWImbfu5cMq7Xzhp/85av8GA=)
                          17: E34E8CE4964B11F1BA3BC8ABCE1D38B0.roa (hash: FUldvyvWluOkUisORmlMzKGCqazC5G2frJ97FyzShnM=)
                          18: 4A5966C6964B11F1974C98A7CE1D38B0.roa (hash: 3lUysCJ7KKok/t8ftl1wKV8RNNYxC42RDDmAVCv2Tlc=)
                          19: 0D09D244964E11F1876D5FB8CE1D38B0.roa (hash: cBz5B9DvFm3IFYaaq62zlXtCoIspoWLOEYI14IDW7Uc=)
                          20: D1B35C4A964A11F1A9334AA5CE1D38B0.roa (hash: CywFwXwO57V+G+qKXanYKXzslXo+pvmgnB0sPfz4Qlg=)
                          21: 0003EB00965511F1A89214E2CE1D38B0.roa (hash: bJ/AwVbXvH5oI9Wq9Bx4pjeoWSjMX2y9ocj2t2wOSlQ=)
                          22: 38A9976A964C11F1A2ABB1ADCE1D38B0.roa (hash: IuA8djpn8pomAqnkttuVs83YEh3kh4BoZRzPHCzyxJs=)
                          23: D2EDFC9C964E11F199968ABCCE1D38B0.roa (hash: 80PKzJSUUvOfmGmgnLKimc/Cz5K72HQjxrAx+ivf+qY=)
                          24: BBB288DC964811F1A3562917CF1D38B0.roa (hash: GjZxB4dPZqHDPeSVsknSX3nyrmfDyng8H/MO1sMugm0=)
                          25: BEC2EABC964D11F1966B28B8CE1D38B0.roa (hash: dBXag7eweIDHY4x5vWF18oTMja/pLioNe8TURJJOtVk=)
                          26: 87484988965211F18E4923D3CE1D38B0.roa (hash: A7BQL9sVmwfNQ72W1lrec16zLPKtPRst/xTvfysNk+U=)
                          27: 506DD63C965511F1968EF6E3CE1D38B0.roa (hash: n+XL1c/UPDisymY/PcMZ8UKIJ0mv9YkHTerYJqqWEnM=)
                          28: 7245468C965011F1842EC3C6CE1D38B0.roa (hash: HrQYfa3tnHofYHdCTBNG+G+Rx2CjskAj29G6YJzxm5E=)
                          29: 74CB7A60965111F188B326CDCE1D38B0.roa (hash: KenKvsRCEIepoC4MYAMufus226uqT0wFb407ViaQ1Dc=)
                          30: AA2F562C964C11F1BFF1F6AFCE1D38B0.roa (hash: qo9TNoX+DuMTeTCBTnGp29BHxz9ddk8HS98FpNYcgyI=)
                          31: 1B0CB2C4965011F1B9BFD8C4CE1D38B0.roa (hash: BM4MwkU5kxGeZnZ9A0z5MKng3av6eYK6XmnEPpPwTGo=)
                          32: 47728E20965411F1BBD9CDDDCE1D38B0.roa (hash: Qeo3H1HGcevLZTN4Nuv51fd5pxKh2Gq/5XICKwoKtgw=)
                          33: 3DF49F7A965711F18DC5A2EECE1D38B0.roa (hash: GFdwEQLG07+8YTdc9CZnVdtHh60WdmHPaORquH0PD/Y=)
                          34: 4612A3AA964811F186903615CF1D38B0.roa (hash: ZLtzEtpqJTK3DXyZfk5lHAYHoD8VrbfAWoJlVWHWVZs=)
                          35: 3130C2F4964911F1A2536719CF1D38B0.roa (hash: CKqRQ8VCsWfAtTEx+RFsh/l0NkveqUa6IZQlvQAby7E=)
                          36: 175C9016964D11F1BA0805B4CE1D38B0.roa (hash: VUSs4tGN7yUEV7A4E7Vvnz6ZdEu9kBruV6NHxloQvRY=)
                          37: 0F939D76965611F18250F7E9CE1D38B0.roa (hash: nc3mYP9PwxD0FAbglODXqz1JWBoC/DwJfMZdRVYCz/4=)
                          38: C66F961E964F11F1BF4A62C4CE1D38B0.roa (hash: HJdeVzZ+KAFj48NbnrJ/Sd5n8n4QCNPNvEuR5VhY8mw=)
                          39: E4C5FF60965211F1906D69D5CE1D38B0.roa (hash: 6Q3VI0zTOvrmijMD5CMU7nIvjfUcjzl1TMQp2+JoLig=)
                          40: C4646E40965311F1BFDBA2D9CE1D38B0.roa (hash: C4lZeYETrv/x0WVhqFFuv6SNxCRMb2VywH8lQ3I94B4=)
                          41: 66E964AC964711F195C4B810CF1D38B0.roa (hash: ILS3iLDN82STJQc2xF3bz3uYstdUmIRt5SQtcGnOkDE=)
                          42: 069DAC72965411F194148ADDCE1D38B0.roa (hash: 3PbP4tjF3F+6KtSaiqtH3lqR4s/PfsHzCc/W8sRwDbo=)
                          43: D549DBCA964711F1B59E2C11CF1D38B0.roa (hash: 0fB1EX6gjMfqiJL3NlytdowABaOXAWKUSBhWC8d6n3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Oct 24 03:18:28 2026 GMT
            Not After : Oct 26 03:18:28 2026 GMT
        Subject: CN=6adc2385-f3d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:78:e5:33:8f:81:24:7f:4e:fa:3b:0a:50:36:
                    3a:c8:9f:bb:c3:33:1e:99:0c:ce:2a:0c:94:8a:b0:
                    c9:d1:80:46:98:4f:87:b3:f6:4f:f0:de:2a:fc:d9:
                    cb:21:be:0f:e0:af:18:fc:15:06:b6:90:01:6a:dd:
                    c5:ac:86:71:42:22:ee:13:60:2a:dd:41:52:65:64:
                    38:eb:07:32:0d:47:15:c6:8d:af:f5:e1:50:fb:24:
                    67:a6:f8:c4:8f:e2:fe:77:b7:2c:96:44:a3:04:18:
                    c1:d1:75:06:10:21:1a:fe:29:1a:37:76:b2:6c:3c:
                    02:9c:20:be:9b:ec:07:b2:69:3b:40:d4:7a:c9:59:
                    d8:d1:08:8b:4f:13:60:c2:f9:45:76:5a:e5:33:b9:
                    66:ae:e1:db:d7:36:0c:2b:fe:f9:8f:05:21:7c:a4:
                    c9:48:08:e4:8f:76:4b:f7:e7:cb:fe:5a:6a:ce:3c:
                    0c:9a:59:33:35:8f:48:52:9c:f1:7b:09:d0:2b:f5:
                    6a:86:7d:c0:54:7c:06:8e:8d:bb:99:35:8d:58:59:
                    54:e8:a5:25:e4:35:e7:b1:04:82:84:03:a8:51:6e:
                    0f:60:3c:35:c3:38:a1:15:bf:46:b4:f7:18:48:d9:
                    4f:7d:eb:71:d5:14:f6:e5:79:f1:67:0d:bc:b5:02:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:EC:08:B6:15:40:EF:AB:BD:31:BE:E3:04:88:FA:5D:E1:8D:AD:0F
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:62:67:3e:88:8f:b6:50:0f:2e:91:3a:3a:18:bc:25:c3:52:
         cb:0d:e1:e6:b6:ac:68:80:ad:10:dc:86:e2:c1:88:0d:6a:83:
         62:28:c6:c9:3f:7e:bb:74:1e:5b:99:fe:58:d6:a4:0f:ee:b3:
         01:e8:b8:f2:88:e7:dd:e8:5b:b4:94:e6:99:96:1a:d9:c2:64:
         cb:9e:0b:4b:7f:9e:0f:9f:b4:05:34:70:27:28:b3:74:0c:dd:
         ac:24:31:f9:7a:52:74:3b:3c:3f:fd:68:f1:ef:f6:11:92:b0:
         dd:b5:db:c2:d3:be:bc:27:f4:26:58:1f:22:cb:cf:ba:dd:8a:
         32:f3:33:f9:6c:16:0f:d3:e2:dd:fd:26:42:5a:09:54:b2:c7:
         c0:b2:92:fb:c2:d3:7d:0c:d0:95:3a:64:75:ab:04:fd:47:d6:
         c5:e3:37:ec:68:e4:a6:49:2c:4f:6a:a2:14:31:49:fc:01:fe:
         72:ca:7a:a3:02:1d:2b:ed:f8:d6:b5:a3:2b:7a:fb:b1:f3:f9:
         01:8a:dd:23:21:74:7d:cf:f3:ef:74:e9:90:3a:08:cc:fd:4a:
         80:d9:7a:fb:32:fe:e6:37:42:ad:80:ce:17:30:1f:a6:bf:d2:
         9e:ab:30:75:1f:c2:cc:2a:d4:af:d6:2f:3b:20:2e:b8:95:90:
         93:41:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 17:30:48 2026 by rpki-client