Error: rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
File:                     JLXuZ0cVou7uiGTqX17kcyPPdmw.mft (raw, json)
Hash identifier:          95hIbDiBK3d2WfdCeiwbafyDZ0Hmqiepb/i5Nm4iw2I=
Subject key identifier:   01:7A:A7:8A:32:40:8C:07:A7:08:17:64:53:02:18:08:A6:B7:A8:0D
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       036C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
Manifest number:          034A
Signing time:             Thu 29 Oct 2026 04:25:10 +0000
Manifest this update:     Thu 29 Oct 2026 04:25:09 +0000
Manifest next update:     Sat 31 Oct 2026 04:25:09 +0000
Files and hashes:         1: JLXuZ0cVou7uiGTqX17kcyPPdmw.crl (hash: CB/9JUq3a4YcXcv83HXo1yCUiTKirL2Jxn3YY7YHKLI=)
                          2: 771AE88EFB4A11F0AAFCE1A7DAE4EC9C.roa (hash: 5tEpAkBvCOfAvu8ObJ3pACeWI9scs8Yqzu2ITlQlaDQ=)
                          3: 9DF3C418FB7111F0A5973594DAE4EC9C.roa (hash: /1YlMMU4WG2QEhz0bolihk62C9fCsQxljp6A/1sNcv0=)
                          4: FC0F6B5EFB5511F0BCF3E4EADAE4EC9C.roa (hash: x7exxP2PvrkzXg2ix0W+iY27Dg1chGMloRCXgNJLLaM=)
                          5: DB044376FB5511F0A591DDEADAE4EC9C.roa (hash: Fg9P/HeaXv5QRYtAlIwHYJ5z/Th0BahCHKAK+/f3r2k=)
                          6: E1598838FB7011F0AD701490DAE4EC9C.roa (hash: JgP43kA/lXBRsZlHuqrvGUDtkQ96iasjAO3K+971hDw=)
                          7: B7DC0C10FB7011F0A1FBB18FDAE4EC9C.roa (hash: gkkYnpB0U6pQ1qp1RGflNEgY1w2rOgPlQCBUgsVxYXQ=)
                          8: 02432D1AFB7111F08C9A3D90DAE4EC9C.roa (hash: 0KEm6jxPgvSM10BRHAAO1KiRR7sFqJFpUpgqfbZ6fBI=)
                          9: 94529CFAFB7011F0A6B2258CDAE4EC9C.roa (hash: K+Bby34mABHACcENA0ib4aw1k4qJ8xaR+V02K1VowE0=)
                          10: 2A468C90FB7011F08CFAEB8BDAE4EC9C.roa (hash: iBjiD/V09quEYYt7v+D5Kd6pidCvsxSHuHnaWoDBtkM=)
                          11: 74E3E458B4CD11F0AA03ECBADAE4EC9C.roa (hash: AY0QiwrjAafEOuB3cHJtZkwE9/VN10SzQVkJB6bXQ/Y=)
                          12: 1ADF23A0FB7211F0B03CE897DAE4EC9C.roa (hash: lkmbuGj1M2XNxgNqCelIQB8e/yGVlL35nnN7RlOAw64=)
                          13: 48F28C06D4E311F08F11FDA2DAE4EC9C.roa (hash: CI4H6ZH2WY4yMzJpNZrOIHduBWMsPnflJQ3HTefTY6A=)
                          14: 073F8D34FB5511F092C4A7E6DAE4EC9C.roa (hash: aQiVzz7CCp4LQ4sRPU9y/pF5XqpbYyhPkGWXchU0sHA=)
                          15: 2405BF08FB7111F088A44D90DAE4EC9C.roa (hash: KcIa8OJXIo7gy9SBLq1jvKJhy2bsWROyS2PdIDVB0aY=)
                          16: D2CBC89AFB6F11F08BFBDC87DAE4EC9C.roa (hash: yWjSVgCdgImWguwsXiqvgBYxXDi5Rc5fmfRehJcd2BE=)
                          17: 168C273AFB5411F09E701DE2DAE4EC9C.roa (hash: 2fNUGnW/8pzXCydHd5WxxxXL3gbLVKfvLhHQevEpQPs=)
                          18: 09EFE910FB6F11F092FE9983DAE4EC9C.roa (hash: 5+kski70YgFo/B4ZKgiT473quch1JHle/5OahJEeTGY=)
                          19: 360E593ED4E411F09FE3C0AADAE4EC9C.roa (hash: 4EiOzBHSIujk4Ks69ZGlktfRhgSEW8WBhQg8DJKaNJ4=)
                          20: F514235AD4E311F091552FA7DAE4EC9C.roa (hash: Z5F0JLY3mYskMg+U3W1krrAPY7K8I3NgMQAO+hmJvvI=)
                          21: 20C92AA4FB4A11F0826DFBA3DAE4EC9C.roa (hash: pU2QyAzhUpYD/rd6hihw6WwXOr/lkIocunjQQqS36KA=)
                          22: 39D08E82FB6F11F0A1AC6984DAE4EC9C.roa (hash: Ycg384WdSPMUkh98VDjWotmlGgVC8e39Nv9rbPsRAvQ=)
                          23: F88BC080FB6F11F09D34A289DAE4EC9C.roa (hash: /GE28hujkDfkadVHYpvzQjNEQIJ0HAGNjq2XCpg5udQ=)
                          24: 4729B37CFB4911F0A899D89FDAE4EC9C.roa (hash: yT0NPsWigo1cldoU0WJEXq2hmJdWuDarxTKcbBJC6Mo=)
                          25: FCADBB1CFB4911F087FEF6A3DAE4EC9C.roa (hash: Ll/t+UGJiPjy4nvQYWhEkhTvq61Iji3DxrUVlHahphw=)
                          26: CBE36C5CFB5311F0A1A48BDEDAE4EC9C.roa (hash: 9zgVKL7gnDZw7DRK/Oi9XT1ccvzS/hLfmpZnDaTQr1c=)
                          27: AAADAA7CFB6F11F0B6ADD787DAE4EC9C.roa (hash: 6wzJ/nsH9Eb8kVkU7cLwWlMlu5zc5WNxR2l0My0vI/4=)
                          28: 49EB67B4FB7011F0B44A0D8CDAE4EC9C.roa (hash: xqzlRa/T31krLVVP5laj/PfhrpGfSUH7BGUNxUu0quI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 04:25:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 876 (0x36c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF, serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Oct 29 04:25:09 2026 GMT
            Not After : Oct 31 04:25:09 2026 GMT
        Subject: CN=6ae2caa6-e1fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f1:dc:63:15:1b:b6:99:a5:69:ff:d3:f7:76:
                    04:6d:c6:83:9c:e8:d6:86:a7:b7:d7:0c:36:9a:82:
                    ea:bb:e1:0b:5c:5e:00:7d:f3:ba:61:04:a2:d7:91:
                    4f:fe:2c:bf:54:4f:06:10:a7:80:c8:8c:0c:56:cb:
                    98:ff:cc:e1:dd:bd:4f:22:a9:80:a3:ec:34:22:6c:
                    33:45:4b:70:37:81:99:c3:aa:b0:99:41:51:ee:04:
                    fd:a3:83:3a:5a:1e:ea:af:6a:5b:bb:88:41:31:ef:
                    8a:1f:34:cc:2e:54:d6:6b:43:1a:09:14:2c:85:9d:
                    88:97:88:59:76:ba:fe:b5:d3:a0:4e:53:38:28:e4:
                    8b:ef:fb:a3:9f:e0:7c:43:20:44:78:c8:05:5e:22:
                    47:0c:16:69:e7:ba:ca:16:c9:39:bf:b1:40:a1:cc:
                    30:82:05:ce:5b:59:12:e8:1f:23:52:6c:bf:57:9f:
                    e1:b6:5d:c9:7b:3c:29:5e:8c:a2:aa:31:0c:95:63:
                    3e:ca:f9:aa:b1:83:0b:82:cb:1d:0d:36:88:a9:a0:
                    d3:68:99:fc:64:ec:dd:0f:ad:91:71:01:62:f5:29:
                    a4:fa:60:9b:82:db:ab:71:ee:00:72:57:da:f7:ef:
                    33:26:4c:4d:c3:72:de:bf:0f:bc:3d:eb:ca:63:fc:
                    19:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7A:A7:8A:32:40:8C:07:A7:08:17:64:53:02:18:08:A6:B7:A8:0D
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:44:7b:64:d4:35:b3:e2:fd:b0:7e:c7:c6:4c:89:39:2a:
         5d:ab:12:ce:87:4a:a5:14:9a:2f:a7:24:94:d4:0c:ab:1d:71:
         68:04:4b:e8:55:1e:5d:65:68:86:36:37:2e:be:c7:25:3d:66:
         df:4f:46:fb:e7:cc:88:5f:1b:df:73:0e:64:16:fb:dc:4d:a2:
         23:39:8e:0b:96:ee:98:d7:a9:47:79:05:5a:54:fb:d0:87:e2:
         26:ea:b1:75:80:7c:8b:09:f0:dd:33:fa:bd:08:48:2e:a7:c6:
         b7:44:35:e1:f6:b0:aa:f0:e4:5b:00:b1:5d:3c:ad:62:de:eb:
         6f:3e:f8:0e:ae:a4:50:e2:55:99:aa:da:74:66:b8:cd:26:c2:
         0a:8f:be:f0:f1:13:7c:14:51:18:c1:cf:6e:60:12:da:43:e8:
         6a:e1:d1:29:4b:e5:7e:4f:68:7c:d6:70:a4:8e:b3:6b:41:3a:
         05:6e:2b:0f:ab:ed:f0:43:3f:3a:4f:bb:d8:c1:e8:70:f6:7b:
         aa:dc:8c:11:16:53:f1:a3:3e:b5:13:4d:d2:03:60:eb:77:8a:
         94:a9:9e:26:63:a6:a5:5f:51:8d:6e:f8:fa:5a:5e:94:c0:cb:
         cf:43:84:23:61:78:39:4b:d1:7e:95:b3:76:aa:10:43:90:68:
         a6:e5:39:47
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA2wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzY3OEZBRjExMC8GA1UEBRMoMjRCNUVFNjc0NzE1QTJFRUVFODg2NEVBNUY1RUU0
NzMyM0NGNzY2QzAeFw0yNjEwMjkwNDI1MDlaFw0yNjEwMzEwNDI1MDlaMBgxFjAU
BgNVBAMTDTZhZTJjYWE2LWUxZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDR8dxjFRu2maVp/9P3dgRtxoOc6NaGp7fXDDaaguq74QtcXgB987phBKLX
kU/+LL9UTwYQp4DIjAxWy5j/zOHdvU8iqYCj7DQibDNFS3A3gZnDqrCZQVHuBP2j
gzpaHuqvalu7iEEx74ofNMwuVNZrQxoJFCyFnYiXiFl2uv6106BOUzgo5Ivv+6Of
4HxDIER4yAVeIkcMFmnnusoWyTm/sUChzDCCBc5bWRLoHyNSbL9Xn+G2Xcl7PCle
jKKqMQyVYz7K+aqxgwuCyx0NNoipoNNomfxk7N0PrZFxAWL1KaT6YJuC26tx7gBy
V9r37zMmTE3Dct6/D7w968pj/Bn9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAXqn
ijJAjAenCBdkUwIYCKa3qA0wHwYDVR0jBBgwFoAUJLXuZ0cVou7uiGTqX17kcyPP
dmwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc2NzhGLzkyNUM4MEZDNjUwQjExRUZCRTI5MDI1Njc2MkU5NTFBL0pMWHVa
MGNWb3U3dWlHVHFYMTdrY3lQUGRtdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0pMWHVaMGNWb3U3dWlHVHFYMTdrY3lQUGRtdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzY3OEYvOTI1QzgwRkM2NTBCMTFFRkJFMjkwMjU2NzYy
RTk1MUEvSkxYdVowY1ZvdTd1aUdUcVgxN2tjeVBQZG13Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASwkR7ZNQ1s+L9sH7HxkyJOSpdqxLO
h0qlFJovpySU1AyrHXFoBEvoVR5dZWiGNjcuvsclPWbfT0b758yIXxvfcw5kFvvc
TaIjOY4Llu6Y16lHeQVaVPvQh+Im6rF1gHyLCfDdM/q9CEgup8a3RDXh9rCq8ORb
ALFdPK1i3utvPvgOrqRQ4lWZqtp0ZrjNJsIKj77w8RN8FFEYwc9uYBLaQ+hq4dEp
S+V+T2h81nCkjrNrQToFbisPq+3wQz86T7vYwehw9nuq3IwRFlPxoz61E03SA2Dr
d4qUqZ4mY6alX1GNbvj6Wl6UwMvPQ4QjYXg5S9F+lbN2qhBDkGim5TlH
-----END CERTIFICATE-----
Generated at Fri Oct 30 02:52:42 2026 by rpki-client