Error: rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
File:                     bGAqJvssRmcHIt_HP3L8S2pz68Q.mft (raw, json)
Hash identifier:          IzltTqjcewqsBmP0ScH3lGdh8w1FAKcp0kWLJTg3Exw=
Subject key identifier:   CE:71:38:FD:C6:74:B1:0C:1D:80:D4:C0:EF:AF:AB:F5:F4:7E:03:2C
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Certificate issuer:       /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial:       08F3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
Manifest number:          08B8
Signing time:             Mon 12 Oct 2026 02:03:18 +0000
Manifest this update:     Mon 12 Oct 2026 02:03:17 +0000
Manifest next update:     Wed 14 Oct 2026 02:03:17 +0000
Files and hashes:         1: bGAqJvssRmcHIt_HP3L8S2pz68Q.crl (hash: 3yTiZHqsXVGNg49E9t0pwgF/dX4oX2bn4g9uGtrcFuE=)
                          2: 5BF7C538D6D311EE8D069B99775412E6.roa (hash: FrfjbCz4uBxhaSqCzrHh37+uZofBgE0Besu2pKbYQpw=)
                          3: 856937CCD6D211EEBB241198775412E6.roa (hash: +VWOVU8LbjtU0UeX7EzW0goMWVCEjX2fnfbvZEzd4jE=)
                          4: CE1B29ACD6D311EEA8F57C9A775412E6.roa (hash: bi5RLYyELwPTThi9QziSAVXhtDNN8osz2xOTB8BvZaU=)
                          5: 3C5C2764D6D311EE8A146899775412E6.roa (hash: zjTGG2bXnu0wyjKlk84e/maimd751NDXdZ1Zs2MN7QI=)
                          6: D57ADAA0B81111EBA7DB4454F8AEA228.roa (hash: UFXsrZ6SaipkzaQ680zeRQ03y6uI2CG5Iu4xeDfpl2Q=)
                          7: 4426DCF4D6D411EE8FD15F9B775412E6.roa (hash: thj6WdH0sCn3PirYI7wEQDI5hYFH5PWNx1mbax5v1vs=)
                          8: 8FDC027ED6D311EEBCB3209A775412E6.roa (hash: lvFe+feGwzn9NrH3W+fJJlP2uPBJK0C+hYAVj55kTmo=)
                          9: EF153C06D6D311EE81B2A69A775412E6.roa (hash: u4z/o2bi+coNZSpJQxlQFyneHgY3sC2mxikXEsI35Iw=)
                          10: 007480EE8A3511F1AE1B81AFCE1D38B0.roa (hash: cJNbbHye0DCiPyaT/oO0oofaZWFs63pIqNMXNgTOsKI=)
                          11: 2B65FB2AD6D211EEB37BA597775412E6.roa (hash: Bvui73HfKgjdOcok6Nt8x7LxjIr2l6LT4gkZ7CmIht4=)
                          12: BDD29D70D6D111EE858DC496775412E6.roa (hash: 3QpUfB1uqQrOQAiX8rmw5+mdhJJe2Ty9dlWX56QYMI8=)
                          13: 4E9C4770D6CD11EE958F778F775412E6.roa (hash: c9sQaEYAyqm+BkldBdyQdwbmIPGfxK5LWIsB7tX3aMo=)
                          14: F124952C8A3211F1A58979A1CE1D38B0.roa (hash: hJETnTjkbhY7dvnOKtTIOC7VjSbEJ5vwZEKz42QAcYk=)
                          15: AC515C42D6D311EEB9744A9A775412E6.roa (hash: 4wjBkEUcARYf3pnSVrvSkSU0KfndRSbtzqu21Hg7Duk=)
                          16: 8E545E26D6D111EE9DA36E96775412E6.roa (hash: b5cJmF73GB5Z6o/xH2F4YIMXX0yBFvv6Ldd/B3dZJm4=)
                          17: F1721C06D6D011EE90D85995775412E6.roa (hash: outMRddXF9WXOVZiQBmMyCeqJmDZ0QscQ342UcSxPB4=)
                          18: 6306BA7AD6D111EE8D123E96775412E6.roa (hash: LhniyhVI98Bu2cP0+UWqwVqSF0Ryo7Y5wEOzSwkjfCY=)
                          19: F42BE354875F11F1992EE5EBCE1D38B0.roa (hash: RE5lKG1ryU+ajdXMJ2nwYKPsD4axZEN9fRnoHhCTJp0=)
                          20: C950F2E2D6D011EEB8E22A95775412E6.roa (hash: DsFWFuYEHn/SPniNCK3MVdTIVtEKig/y5CPK0e9gNtw=)
                          21: A3456F54D6D211EEAF4D5198775412E6.roa (hash: i0yZF2PUCxhgm8UqNd/C0q9+wArj2Hxhrf+6SwwJG2A=)
                          22: 9E593C109B6F11EBAD7A975FF8AEA228.roa (hash: xET6XUHCDmCqH38ucd3N48zFFOtJqzDtFTRniETpe74=)
                          23: 3BFE8668876111F1A98F1AF4CE1D38B0.roa (hash: Z+yJ9FcpMmm2v6EDv3fvnGmbZ/nIaxlYnchakU4g7C4=)
                          24: 7B4A77D0D6D011EE92478694775412E6.roa (hash: 6/E4WWAyLck9mcyWnGg9mW1yIS7byXqvWkF6AZ9smA0=)
                          25: DF891880876011F1830CE9F1CE1D38B0.roa (hash: H6grOpUgmmbUupL8oKvn5RUKSzVClZwovYf9bcqWgxg=)
                          26: 219DD314D6D311EEB90E4199775412E6.roa (hash: ma6pwemz7R0BRkqrdUQIGdjzYbB9f9tRhXx3930ePjo=)
                          27: BEE18022D6D211EEBB32B898775412E6.roa (hash: eNd31dWrGRSxclpdfp4+cBtfE1vmno7ZJ97SnmGt++I=)
                          28: 17D28782D6D111EEBFE28F95775412E6.roa (hash: KS2vg7aLfGAwDnrbeNSYJnAv18QQEcmCJ8O5zl72tMM=)
                          29: 0872FC84D6D311EEAE521499775412E6.roa (hash: uaAyaNhStXwawCKK27MqfIZk5EOR+TRXg8S4yeXYiE0=)
                          30: 86AB974A8A3211F18AFBDBA0CE1D38B0.roa (hash: 1cXTxnZs75tnvy4l6NPeWheUC5AUarlP+avu1Um9RK0=)
                          31: CAC86F829B7911EB9C8AEE6CF8AEA228.roa (hash: cRcLcik8i+TyllzdHcW3JEfLJ5cwxs7RcND5vl+JdK4=)
                          32: B34ECFDE8A3111F1A83C6016CF1D38B0.roa (hash: WWcREXZ/VIFzmTTYzmuui5KSZyqOd0anmtzmN+ePjHk=)
                          33: 480FF262D6D211EEA412CF97775412E6.roa (hash: SReaLb0pInnaleH0F6Ur69MwCZCFHDNNWKBSRKXCOHM=)
                          34: 78EE6C50D6D311EE8E30F999775412E6.roa (hash: OmyWMkWZqAwBmqum01dwiU7OnnccgS3behI0J5OgbJU=)
                          35: 0D11E6DCD6D411EEB675D59A775412E6.roa (hash: e4MN0Odk8P7mNcs/8c9IYXswLI1eDxy+ES9x4+fg7IE=)
                          36: 25AFCD1CD6D411EEBE04379B775412E6.roa (hash: wQ53Tz4Ea9/8C2+Qv/h7Bn2lmPYDJIiNvN6ok68fVzI=)
                          37: F686AFB6875B11F199EE42D5CE1D38B0.roa (hash: GZMNV2OYqv3JwxOdqfI7vQcvOtsSdk2TBvIMh2GaSLM=)
                          38: 3BAF7912D6D111EE9297CA95775412E6.roa (hash: 9LV/z2eT53+SR9GSgRyJIEeM+2UdLnUe8mus876T9SQ=)
                          39: DB5426FCD6D111EE8821F696775412E6.roa (hash: ewSN3NtRrJJE/mn0lq0kjCSH8LZR+bHGqCfgNdGJeus=)
                          40: B5920B428A3311F1BD1B65A6CE1D38B0.roa (hash: us7Da5REqF3CmHDXTnuZes6SLlHCA0F5bCyQ6RESrCE=)
                          41: A6F2088AD6D011EEAB1BFF94775412E6.roa (hash: OujszP2Qz0rfTPsT2WgXJ59nmkNNMZcwUxlCNRpm33E=)
                          42: B29E9F927C3011F1B9BAD50CCF1D38B0.roa (hash: xhAGI52qHSNuFNKGdwEucuv7TORPXybel8KfNXzFFs4=)
                          43: 667B3C368A3311F1BDBA13A6CE1D38B0.roa (hash: myJvSItIkO9IivipUhoXB/6c8s2Kg2sKR7kiJ9xOWQQ=)
                          44: 0C656A1CD6D211EEA3097A97775412E6.roa (hash: cvJyT5CebJwP06P0uIDwDI30LKDEQpUavmqLqIgUcwg=)
                          45: F3AFCDAAD6D111EEAB171997775412E6.roa (hash: pzVcoikjRd5kBQQBkN8RD4GAK76FMzHKo0b/mdKF3fM=)
                          46: 782F5ACE875F11F192479FE9CE1D38B0.roa (hash: vTMr3angMMBQDnu2OUBQHKu7EJNLw04DfTTyz8Jar6M=)
                          47: 2BF911C47C3111F1B56C500DCF1D38B0.roa (hash: opGWqfZjzu2YmLnNTjfxQmjr4TL4DAvyx0NFJ1joiUM=)
                          48: 8AE5472A9B7711EBB592026AF8AEA228.roa (hash: JYtg38AemjdFQ9T4jRQ9y/cKWVHvuahgrREnbxpFFVA=)
                          49: 6767E44ED6D211EE8B04FE97775412E6.roa (hash: HbXlNZmbbzwsIbWwhktUnRDS/upzcP5OA1nlcNgiVjw=)
                          50: F066303ED6D211EEBF42ED98775412E6.roa (hash: iNB4D2jFI+zEfaLP5CPTliLyaE9QGOHoTz4gv4BQRjI=)
                          51: D8D46616D6D211EEA937E098775412E6.roa (hash: c/ZKZC1RBjoyck2n3W48sbd9nSOfzrFGUaPT6SAYtQQ=)
                          52: 91A719A2875E11F19FD4A6E3CE1D38B0.roa (hash: e9VE8z7Sd6NSlTKu7XWZn/vylNIqsNIvqf5/ddyjI+A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
                          rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2291 (0x8f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
        Validity
            Not Before: Oct 12 02:03:17 2026 GMT
            Not After : Oct 14 02:03:17 2026 GMT
        Subject: CN=6acc3fe6-87f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:00:6c:8e:b6:15:9c:0f:99:03:ce:db:a6:98:
                    6a:54:b8:84:23:41:c0:97:03:a9:4c:24:72:6c:9c:
                    ac:dd:0d:34:5b:cf:54:1f:40:61:27:a7:56:7c:5c:
                    50:10:0d:38:5c:94:af:f6:08:84:4a:25:69:c1:e2:
                    a9:cc:79:ed:14:99:cf:d1:38:94:79:6c:c8:c1:40:
                    5a:f0:5b:0c:79:e0:b3:50:2c:ca:2d:64:d3:a0:93:
                    ea:2f:ce:15:a0:97:31:85:b0:21:ee:a2:da:2a:c2:
                    86:85:3b:1c:f5:5d:ce:0d:fb:e7:47:b3:56:b7:1c:
                    46:39:93:e8:8b:d3:f1:d5:62:52:62:b4:37:81:68:
                    02:ce:88:b7:7e:19:8e:b6:48:df:5f:90:0b:e9:33:
                    fb:7c:ae:f7:1d:65:46:f8:0a:f0:f0:37:82:ef:74:
                    9e:a8:03:18:a2:6d:cc:69:7f:2d:aa:b5:b5:e0:91:
                    77:6b:77:c9:50:dd:44:4f:22:aa:44:9b:ad:e2:28:
                    44:10:8f:a7:c5:ea:1b:cf:28:fe:03:28:2e:bc:dc:
                    37:02:69:1a:0e:df:97:ca:56:4c:66:73:f3:1b:7a:
                    a9:d7:38:68:1e:a6:31:ea:6f:07:c4:56:a8:a3:90:
                    e9:44:12:af:98:ef:1c:a3:97:58:af:3a:7c:78:5e:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:71:38:FD:C6:74:B1:0C:1D:80:D4:C0:EF:AF:AB:F5:F4:7E:03:2C
            X509v3 Authority Key Identifier:
                keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:9f:43:61:41:ee:83:2b:40:3d:0a:00:b8:d9:f3:a2:40:00:
         b3:83:0f:86:bc:46:be:9c:33:15:19:9d:f8:32:49:9c:c8:92:
         82:7d:40:6d:53:21:a5:ff:a3:37:e1:c0:7e:e5:78:cb:e7:66:
         42:76:97:13:58:3d:0e:07:e2:4a:81:aa:1e:50:c9:ef:7f:7f:
         21:61:d5:c8:c6:22:c3:0b:83:15:73:e0:b3:dc:59:f2:b4:db:
         16:32:0a:f3:03:19:be:75:01:4e:0a:96:05:ca:03:5c:6c:a4:
         a6:e3:c1:da:e1:c1:da:f1:b7:1a:1d:97:58:a0:6c:0d:12:a7:
         5f:42:68:f9:73:e6:12:47:23:85:0b:eb:8e:b5:c7:73:ec:93:
         86:91:f9:14:5a:ac:71:ff:b2:4e:29:91:ac:c3:e2:28:79:b1:
         a4:d9:5d:ae:a9:de:dc:07:1d:a6:45:89:8e:cc:1a:4b:ff:c7:
         65:a9:f4:67:ce:22:35:94:8d:9c:85:74:1e:97:a7:59:13:53:
         fe:60:a3:0a:11:8f:3c:58:26:cf:5a:63:69:09:33:1a:ba:3c:
         2e:1b:c6:fe:a8:94:7d:ef:e3:32:eb:e2:bc:e8:83:94:e1:a1:
         21:96:db:44:c4:36:ef:55:a4:88:86:f4:b3:7b:f4:52:3e:a3:
         48:6b:3f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 08:49:57 2026 by rpki-client