Error: rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
File:                     0RDaMi-Zhc--woypzoUgREhmujc.mft (raw, json)
Hash identifier:          8ZCZUSu9rIBSJxBqr+4R6nmT3mrij+wRD0aSLIvDNSM=
Subject key identifier:   E1:09:4A:E8:7B:51:ED:FD:C9:2D:D8:F9:A7:23:AE:4A:05:C4:CC:7C
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       0511
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
Manifest number:          0509
Signing time:             Sun 25 Oct 2026 03:27:12 +0000
Manifest this update:     Sun 25 Oct 2026 03:27:11 +0000
Manifest next update:     Tue 27 Oct 2026 03:27:11 +0000
Files and hashes:         1: 0RDaMi-Zhc--woypzoUgREhmujc.crl (hash: XNoyU/Ub1kYIJALAao3EYkgVtAN/wxeQ0jGgmczHQlg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1297 (0x511)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF, serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: Oct 25 03:27:11 2026 GMT
            Not After : Oct 27 03:27:11 2026 GMT
        Subject: CN=6add7710-c599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b1:af:cf:1c:48:a1:6e:0d:53:0e:a8:9e:70:
                    a8:2e:cd:28:9d:0d:dc:20:66:e2:af:7c:c9:3d:88:
                    95:2c:0c:91:6a:4e:6a:9c:90:ca:ff:7d:5b:1d:db:
                    c7:82:43:47:ba:dd:a0:ce:5b:7f:32:af:4a:1a:e7:
                    94:2a:3b:0d:05:fb:05:6c:4e:5e:30:70:17:a9:59:
                    83:df:3c:46:63:1b:5d:44:35:90:80:56:3d:10:87:
                    24:3f:83:81:f9:0a:07:11:81:d5:cb:e4:2e:fb:7d:
                    a7:97:69:34:e1:75:ad:91:a5:ad:f1:a7:f3:97:99:
                    0f:ee:61:62:74:15:14:0e:2f:f2:aa:23:92:8c:d0:
                    06:06:43:1c:a1:b1:d8:e2:f2:0f:b0:b8:3a:15:53:
                    2b:53:07:91:9d:49:6c:44:55:1c:0b:20:f6:e7:f4:
                    f1:2a:34:80:a5:ab:c5:ef:51:ac:af:3f:f3:2a:e1:
                    6a:47:b8:b0:91:13:87:40:49:a6:fb:ef:be:74:34:
                    00:58:3d:99:28:07:02:d5:11:9e:9a:81:5e:15:84:
                    ec:af:4d:1b:6b:ec:51:61:94:2d:70:95:82:15:bf:
                    ef:77:ec:8d:8b:56:b4:df:5b:7d:c3:61:45:f7:ae:
                    c6:ab:f4:bc:71:5a:82:4e:d9:88:18:87:20:10:6c:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:09:4A:E8:7B:51:ED:FD:C9:2D:D8:F9:A7:23:AE:4A:05:C4:CC:7C
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:10:80:01:95:20:f8:8f:90:6f:92:be:00:51:f5:29:25:67:
         ee:9d:c1:1d:8b:86:9d:5a:c6:0b:d7:4f:2c:41:fd:ab:40:0b:
         f6:9d:d1:57:55:c0:f7:a0:d5:36:24:7d:bb:89:2d:d9:00:4e:
         70:d1:7e:99:a0:40:23:08:d0:58:c9:a7:39:e2:c5:ce:f5:70:
         3f:62:e9:04:2c:62:9f:34:3e:38:95:dd:eb:f1:4a:5a:a5:ad:
         2a:48:79:b1:e9:68:77:c7:a3:21:d5:26:12:6a:ad:d1:54:5b:
         56:8a:64:85:a1:cd:cf:18:64:f0:8b:75:b8:de:97:e5:f3:14:
         bf:41:44:77:b3:44:c2:95:08:4e:8a:ed:a8:dc:84:0e:a9:01:
         94:62:45:48:af:9b:7b:27:a1:46:85:8a:69:91:81:80:ad:73:
         2c:a0:b9:b5:16:31:60:f3:5a:59:40:2e:ec:e3:8f:9d:38:6b:
         d0:88:35:1d:87:1c:f7:7c:48:5f:5a:e7:41:64:2d:7d:64:a8:
         af:e3:11:bd:2c:c3:14:44:0c:a3:ba:25:3d:3a:92:c6:02:8b:
         a3:7e:83:46:b4:56:49:9c:95:46:72:76:da:05:6b:30:ce:a3:
         73:73:61:ba:c5:fa:f5:d3:e4:46:2a:02:2a:de:25:7e:b4:c0:
         0a:87:35:24
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBREwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzIzRTFBRjExMC8GA1UEBRMoRDExMERBMzIyRjk5ODVDRkJFQzI4Q0E5Q0U4NTIw
NDQ0ODY2QkEzNzAeFw0yNjEwMjUwMzI3MTFaFw0yNjEwMjcwMzI3MTFaMBgxFjAU
BgNVBAMTDTZhZGQ3NzEwLWM1OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVsa/PHEihbg1TDqiecKguzSidDdwgZuKvfMk9iJUsDJFqTmqckMr/fVsd
28eCQ0e63aDOW38yr0oa55QqOw0F+wVsTl4wcBepWYPfPEZjG11ENZCAVj0QhyQ/
g4H5CgcRgdXL5C77faeXaTThda2Rpa3xp/OXmQ/uYWJ0FRQOL/KqI5KM0AYGQxyh
sdji8g+wuDoVUytTB5GdSWxEVRwLIPbn9PEqNIClq8XvUayvP/Mq4WpHuLCRE4dA
Sab77750NABYPZkoBwLVEZ6agV4VhOyvTRtr7FFhlC1wlYIVv+937I2LVrTfW33D
YUX3rsar9LxxWoJO2YgYhyAQbPtlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4QlK
6HtR7f3JLdj5pyOuSgXEzHwwHwYDVR0jBBgwFoAU0RDaMi+Zhc++woypzoUgREhm
ujcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcyM0UxLzdFM0ZBM0YwRkExOTExRURCRThFRTQyNTRBRDlFNkZDLzBSRGFN
aS1aaGMtLXdveXB6b1VnUkVobXVqYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBSRGFNaS1aaGMtLXdveXB6b1VnUkVobXVqYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzIzRTEvN0UzRkEzRjBGQTE5MTFFREJFOEVFNDI1NEFE
OUU2RkMvMFJEYU1pLVpoYy0td295cHpvVWdSRWhtdWpjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFEIABlSD4j5Bvkr4AUfUpJWfuncEd
i4adWsYL108sQf2rQAv2ndFXVcD3oNU2JH27iS3ZAE5w0X6ZoEAjCNBYyac54sXO
9XA/YukELGKfND44ld3r8Upapa0qSHmx6Wh3x6Mh1SYSaq3RVFtWimSFoc3PGGTw
i3W43pfl8xS/QUR3s0TClQhOiu2o3IQOqQGUYkVIr5t7J6FGhYppkYGArXMsoLm1
FjFg81pZQC7s44+dOGvQiDUdhxz3fEhfWudBZC19ZKiv4xG9LMMURAyjuiU9OpLG
AoujfoNGtFZJnJVGcnbaBWswzqNzc2G6xfr10+RGKgIq3iV+tMAKhzUk
-----END CERTIFICATE-----
Generated at Sun Oct 25 20:56:39 2026 by rpki-client