Error: rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
File:                     bGAqJvssRmcHIt_HP3L8S2pz68Q.mft (raw, json)
Hash identifier:          c+lFjYDSk7Mf0S9I6CnzP7eN/xNDkEYxuNvTzw0UduI=
Subject key identifier:   6F:0C:E6:D9:1D:27:41:5B:4C:F6:54:17:25:56:DE:1B:CC:B8:12:45
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Certificate issuer:       /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial:       08C2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
Manifest number:          0887
Signing time:             Mon 24 Aug 2026 02:03:04 +0000
Manifest this update:     Mon 24 Aug 2026 02:03:03 +0000
Manifest next update:     Wed 26 Aug 2026 02:03:03 +0000
Files and hashes:         1: bGAqJvssRmcHIt_HP3L8S2pz68Q.crl (hash: rJCG+/Cv4mSwiWqNjpHaxAfP/Sp65AJ74EmrvOLPzMs=)
                          2: 5BF7C538D6D311EE8D069B99775412E6.roa (hash: FrfjbCz4uBxhaSqCzrHh37+uZofBgE0Besu2pKbYQpw=)
                          3: 856937CCD6D211EEBB241198775412E6.roa (hash: +VWOVU8LbjtU0UeX7EzW0goMWVCEjX2fnfbvZEzd4jE=)
                          4: CE1B29ACD6D311EEA8F57C9A775412E6.roa (hash: bi5RLYyELwPTThi9QziSAVXhtDNN8osz2xOTB8BvZaU=)
                          5: 3C5C2764D6D311EE8A146899775412E6.roa (hash: zjTGG2bXnu0wyjKlk84e/maimd751NDXdZ1Zs2MN7QI=)
                          6: D57ADAA0B81111EBA7DB4454F8AEA228.roa (hash: UFXsrZ6SaipkzaQ680zeRQ03y6uI2CG5Iu4xeDfpl2Q=)
                          7: 4426DCF4D6D411EE8FD15F9B775412E6.roa (hash: thj6WdH0sCn3PirYI7wEQDI5hYFH5PWNx1mbax5v1vs=)
                          8: 8FDC027ED6D311EEBCB3209A775412E6.roa (hash: lvFe+feGwzn9NrH3W+fJJlP2uPBJK0C+hYAVj55kTmo=)
                          9: EF153C06D6D311EE81B2A69A775412E6.roa (hash: u4z/o2bi+coNZSpJQxlQFyneHgY3sC2mxikXEsI35Iw=)
                          10: 007480EE8A3511F1AE1B81AFCE1D38B0.roa (hash: cJNbbHye0DCiPyaT/oO0oofaZWFs63pIqNMXNgTOsKI=)
                          11: 2B65FB2AD6D211EEB37BA597775412E6.roa (hash: Bvui73HfKgjdOcok6Nt8x7LxjIr2l6LT4gkZ7CmIht4=)
                          12: BDD29D70D6D111EE858DC496775412E6.roa (hash: 3QpUfB1uqQrOQAiX8rmw5+mdhJJe2Ty9dlWX56QYMI8=)
                          13: 4E9C4770D6CD11EE958F778F775412E6.roa (hash: c9sQaEYAyqm+BkldBdyQdwbmIPGfxK5LWIsB7tX3aMo=)
                          14: F124952C8A3211F1A58979A1CE1D38B0.roa (hash: hJETnTjkbhY7dvnOKtTIOC7VjSbEJ5vwZEKz42QAcYk=)
                          15: AC515C42D6D311EEB9744A9A775412E6.roa (hash: 4wjBkEUcARYf3pnSVrvSkSU0KfndRSbtzqu21Hg7Duk=)
                          16: 8E545E26D6D111EE9DA36E96775412E6.roa (hash: b5cJmF73GB5Z6o/xH2F4YIMXX0yBFvv6Ldd/B3dZJm4=)
                          17: F1721C06D6D011EE90D85995775412E6.roa (hash: outMRddXF9WXOVZiQBmMyCeqJmDZ0QscQ342UcSxPB4=)
                          18: 6306BA7AD6D111EE8D123E96775412E6.roa (hash: LhniyhVI98Bu2cP0+UWqwVqSF0Ryo7Y5wEOzSwkjfCY=)
                          19: F42BE354875F11F1992EE5EBCE1D38B0.roa (hash: RE5lKG1ryU+ajdXMJ2nwYKPsD4axZEN9fRnoHhCTJp0=)
                          20: C950F2E2D6D011EEB8E22A95775412E6.roa (hash: DsFWFuYEHn/SPniNCK3MVdTIVtEKig/y5CPK0e9gNtw=)
                          21: A3456F54D6D211EEAF4D5198775412E6.roa (hash: i0yZF2PUCxhgm8UqNd/C0q9+wArj2Hxhrf+6SwwJG2A=)
                          22: 9E593C109B6F11EBAD7A975FF8AEA228.roa (hash: xET6XUHCDmCqH38ucd3N48zFFOtJqzDtFTRniETpe74=)
                          23: 3BFE8668876111F1A98F1AF4CE1D38B0.roa (hash: Z+yJ9FcpMmm2v6EDv3fvnGmbZ/nIaxlYnchakU4g7C4=)
                          24: 7B4A77D0D6D011EE92478694775412E6.roa (hash: 6/E4WWAyLck9mcyWnGg9mW1yIS7byXqvWkF6AZ9smA0=)
                          25: DF891880876011F1830CE9F1CE1D38B0.roa (hash: H6grOpUgmmbUupL8oKvn5RUKSzVClZwovYf9bcqWgxg=)
                          26: 219DD314D6D311EEB90E4199775412E6.roa (hash: ma6pwemz7R0BRkqrdUQIGdjzYbB9f9tRhXx3930ePjo=)
                          27: BEE18022D6D211EEBB32B898775412E6.roa (hash: eNd31dWrGRSxclpdfp4+cBtfE1vmno7ZJ97SnmGt++I=)
                          28: 17D28782D6D111EEBFE28F95775412E6.roa (hash: KS2vg7aLfGAwDnrbeNSYJnAv18QQEcmCJ8O5zl72tMM=)
                          29: 0872FC84D6D311EEAE521499775412E6.roa (hash: uaAyaNhStXwawCKK27MqfIZk5EOR+TRXg8S4yeXYiE0=)
                          30: 86AB974A8A3211F18AFBDBA0CE1D38B0.roa (hash: 1cXTxnZs75tnvy4l6NPeWheUC5AUarlP+avu1Um9RK0=)
                          31: CAC86F829B7911EB9C8AEE6CF8AEA228.roa (hash: cRcLcik8i+TyllzdHcW3JEfLJ5cwxs7RcND5vl+JdK4=)
                          32: B34ECFDE8A3111F1A83C6016CF1D38B0.roa (hash: WWcREXZ/VIFzmTTYzmuui5KSZyqOd0anmtzmN+ePjHk=)
                          33: 480FF262D6D211EEA412CF97775412E6.roa (hash: SReaLb0pInnaleH0F6Ur69MwCZCFHDNNWKBSRKXCOHM=)
                          34: 78EE6C50D6D311EE8E30F999775412E6.roa (hash: OmyWMkWZqAwBmqum01dwiU7OnnccgS3behI0J5OgbJU=)
                          35: 0D11E6DCD6D411EEB675D59A775412E6.roa (hash: e4MN0Odk8P7mNcs/8c9IYXswLI1eDxy+ES9x4+fg7IE=)
                          36: 25AFCD1CD6D411EEBE04379B775412E6.roa (hash: wQ53Tz4Ea9/8C2+Qv/h7Bn2lmPYDJIiNvN6ok68fVzI=)
                          37: F686AFB6875B11F199EE42D5CE1D38B0.roa (hash: GZMNV2OYqv3JwxOdqfI7vQcvOtsSdk2TBvIMh2GaSLM=)
                          38: 3BAF7912D6D111EE9297CA95775412E6.roa (hash: 9LV/z2eT53+SR9GSgRyJIEeM+2UdLnUe8mus876T9SQ=)
                          39: DB5426FCD6D111EE8821F696775412E6.roa (hash: ewSN3NtRrJJE/mn0lq0kjCSH8LZR+bHGqCfgNdGJeus=)
                          40: B5920B428A3311F1BD1B65A6CE1D38B0.roa (hash: us7Da5REqF3CmHDXTnuZes6SLlHCA0F5bCyQ6RESrCE=)
                          41: A6F2088AD6D011EEAB1BFF94775412E6.roa (hash: OujszP2Qz0rfTPsT2WgXJ59nmkNNMZcwUxlCNRpm33E=)
                          42: B29E9F927C3011F1B9BAD50CCF1D38B0.roa (hash: xhAGI52qHSNuFNKGdwEucuv7TORPXybel8KfNXzFFs4=)
                          43: 667B3C368A3311F1BDBA13A6CE1D38B0.roa (hash: myJvSItIkO9IivipUhoXB/6c8s2Kg2sKR7kiJ9xOWQQ=)
                          44: 0C656A1CD6D211EEA3097A97775412E6.roa (hash: cvJyT5CebJwP06P0uIDwDI30LKDEQpUavmqLqIgUcwg=)
                          45: F3AFCDAAD6D111EEAB171997775412E6.roa (hash: pzVcoikjRd5kBQQBkN8RD4GAK76FMzHKo0b/mdKF3fM=)
                          46: 782F5ACE875F11F192479FE9CE1D38B0.roa (hash: vTMr3angMMBQDnu2OUBQHKu7EJNLw04DfTTyz8Jar6M=)
                          47: 2BF911C47C3111F1B56C500DCF1D38B0.roa (hash: opGWqfZjzu2YmLnNTjfxQmjr4TL4DAvyx0NFJ1joiUM=)
                          48: 8AE5472A9B7711EBB592026AF8AEA228.roa (hash: JYtg38AemjdFQ9T4jRQ9y/cKWVHvuahgrREnbxpFFVA=)
                          49: 6767E44ED6D211EE8B04FE97775412E6.roa (hash: HbXlNZmbbzwsIbWwhktUnRDS/upzcP5OA1nlcNgiVjw=)
                          50: F066303ED6D211EEBF42ED98775412E6.roa (hash: iNB4D2jFI+zEfaLP5CPTliLyaE9QGOHoTz4gv4BQRjI=)
                          51: D8D46616D6D211EEA937E098775412E6.roa (hash: c/ZKZC1RBjoyck2n3W48sbd9nSOfzrFGUaPT6SAYtQQ=)
                          52: 91A719A2875E11F19FD4A6E3CE1D38B0.roa (hash: e9VE8z7Sd6NSlTKu7XWZn/vylNIqsNIvqf5/ddyjI+A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
                          rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 26 Aug 2026 02:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
        Validity
            Not Before: Aug 24 02:03:03 2026 GMT
            Not After : Aug 26 02:03:03 2026 GMT
        Subject: CN=6a8ba658-dc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7c:8f:6c:df:10:3a:f1:63:09:b4:56:56:34:
                    d5:1d:af:ef:13:78:ce:c6:92:3e:df:18:b0:3c:5d:
                    fc:94:62:37:55:f8:bc:48:f0:a3:17:5e:74:69:a1:
                    10:42:2f:17:32:e4:77:99:ed:2c:9b:a7:4c:51:6e:
                    c1:6c:4f:94:c8:3d:62:26:27:00:e0:b4:95:dd:31:
                    88:96:dc:90:0c:0e:36:93:cd:84:8d:a3:99:7d:36:
                    2d:27:c8:8f:eb:6f:e5:fb:88:10:94:9e:c9:e1:b7:
                    1e:de:00:52:21:57:a7:09:7e:d3:03:fe:16:1e:27:
                    0e:d9:6a:a6:69:1c:4c:58:90:51:0e:e1:b4:12:c6:
                    fa:16:35:c8:8b:a2:1a:bf:6d:42:52:f2:46:1c:de:
                    e8:b4:b2:ce:84:9b:72:ee:42:cc:e7:e3:9a:a0:9f:
                    d6:f9:7c:1a:0d:0a:1f:75:49:ae:e8:dd:f7:e6:2f:
                    06:3f:6d:ad:03:af:8b:c1:0d:22:72:d2:fa:48:ee:
                    13:e0:06:e9:12:9f:0f:fe:e0:cf:8f:22:3e:e0:69:
                    b3:bb:c4:c8:ce:10:f6:6b:d3:c8:a2:8d:b4:2a:6d:
                    59:0d:7e:07:cf:be:0e:fd:e0:77:24:f4:a1:66:b9:
                    61:55:b8:9c:9b:9f:10:2e:83:f3:d8:94:06:56:a1:
                    51:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0C:E6:D9:1D:27:41:5B:4C:F6:54:17:25:56:DE:1B:CC:B8:12:45
            X509v3 Authority Key Identifier:
                keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:92:21:63:c3:d9:4c:27:3a:ea:f2:6f:f3:da:07:8d:25:5f:
         fc:47:ed:13:42:c7:5d:3b:f7:c5:a0:5d:1a:a8:a7:ca:96:83:
         20:5c:d1:91:cb:7e:7b:8e:53:51:6d:bd:47:84:3b:a5:c9:ba:
         9f:8e:d0:6d:7c:4a:bd:fe:3a:12:5f:58:39:97:a7:ac:19:96:
         78:ae:ea:5c:fc:9d:fa:28:f8:d7:46:ac:32:d3:b7:c4:31:4a:
         ca:d3:ba:86:ef:80:fc:a9:01:32:b1:a3:4a:19:60:a6:d7:3a:
         3a:93:fc:e1:1b:d0:50:e7:2a:35:05:16:0a:86:66:6c:66:c8:
         35:5c:b9:84:14:b8:c7:cd:c7:81:dd:44:00:9f:e9:fc:dd:b2:
         ae:23:b2:22:db:46:52:6c:ce:d3:99:a5:8b:8f:76:d9:06:c7:
         79:af:3a:63:86:c1:86:0c:36:a6:33:fd:5c:17:20:18:cb:da:
         79:f0:49:a3:e2:6d:53:af:02:ce:97:83:b8:9b:1f:9f:6d:70:
         c3:28:02:32:52:d6:c5:44:94:3f:b4:97:c2:ee:10:17:43:8b:
         d7:70:14:c2:bf:c2:bd:89:8c:7a:69:33:30:6d:0c:61:44:85:
         a4:b5:81:56:04:d9:b5:52:d1:89:50:96:87:c7:aa:6d:95:08:
         19:a8:77:5d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCMIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZBUjExMC8GA1UEBRMoNkM2MDJBMjZGQjJDNDY2NzA3MjJERkM3M0Y3MkZD
NEI2QTczRUJDNDAeFw0yNjA4MjQwMjAzMDNaFw0yNjA4MjYwMjAzMDNaMBgxFjAU
BgNVBAMTDTZhOGJhNjU4LWRjOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCfI9s3xA68WMJtFZWNNUdr+8TeM7Gkj7fGLA8XfyUYjdV+LxI8KMXXnRp
oRBCLxcy5HeZ7Sybp0xRbsFsT5TIPWImJwDgtJXdMYiW3JAMDjaTzYSNo5l9Ni0n
yI/rb+X7iBCUnsnhtx7eAFIhV6cJftMD/hYeJw7ZaqZpHExYkFEO4bQSxvoWNciL
ohq/bUJS8kYc3ui0ss6Em3LuQszn45qgn9b5fBoNCh91Sa7o3ffmLwY/ba0Dr4vB
DSJy0vpI7hPgBukSnw/+4M+PIj7gabO7xMjOEPZr08iijbQqbVkNfgfPvg794Hck
9KFmuWFVuJybnxAug/PYlAZWoVEhAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUbwzm
2R0nQVtM9lQXJVbeG8y4EkUwHwYDVR0jBBgwFoAUbGAqJvssRmcHIt/HP3L8S2pz
68QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzUxQUIyRDVFODdENTExRUI5M0I3NTI0N0Y4QUVBMjI4L2JHQXFK
dnNzUm1jSEl0X0hQM0w4UzJwejY4US5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2JHQXFKdnNzUm1jSEl0X0hQM0w4UzJwejY4US5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0IyMTYvNTFBQjJENUU4N0Q1MTFFQjkzQjc1MjQ3RjhBRUEy
MjgvYkdBcUp2c3NSbWNISXRfSFAzTDhTMnB6NjhRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRkiFjw9lMJzrq8m/z2geNJV/8R+0TQsdd
O/fFoF0aqKfKloMgXNGRy357jlNRbb1HhDulybqfjtBtfEq9/joSX1g5l6esGZZ4
rupc/J36KPjXRqwy07fEMUrK07qG74D8qQEysaNKGWCm1zo6k/zhG9BQ5yo1BRYK
hmZsZsg1XLmEFLjHzceB3UQAn+n83bKuI7Ii20ZSbM7TmaWLj3bZBsd5rzpjhsGG
DDamM/1cFyAYy9p58Emj4m1TrwLOl4O4mx+fbXDDKAIyUtbFRJQ/tJfC7hAXQ4vX
cBTCv8K9iYx6aTMwbQxhRIWktYFWBNm1UtGJUJaHx6ptlQgZqHdd
-----END CERTIFICATE-----
Generated at Mon Aug 24 23:47:52 2026 by rpki-client