Error: rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.mft
File:                     0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.mft (raw, json)
Hash identifier:          7yyn6dIp2dBtlMgSTk6GhECSr3FI0WP8PO5eNeX6cys=
Subject key identifier:   95:E9:67:2C:37:CF:16:85:26:D4:C3:1B:CE:02:41:A2:31:92:5F:7C
Authority key identifier: D1:D9:AB:95:1A:D9:E8:64:18:16:32:EC:E8:87:9B:E5:65:EE:50:23
Certificate issuer:       /CN=F367CB0AAF/serialNumber=D1D9AB951AD9E864181632ECE8879BE565EE5023
Certificate serial:       0C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.mft
Manifest number:          0B
Signing time:             Fri 18 Sep 2026 05:55:07 +0000
Manifest this update:     Fri 18 Sep 2026 05:55:06 +0000
Manifest next update:     Sun 20 Sep 2026 05:55:06 +0000
Files and hashes:         1: 0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.crl (hash: WRU37knrZclxscIhnV+7CWne0Q2aMOxcZn313NwU2ck=)
                          2: 3ABFD9BCAD0611F1A729D7A1CE1D38B0.roa (hash: yDyQo6dO/K3SISXlD2L+AJCXQhgRwxebax9u7+oli/k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CB0AAF, serialNumber=D1D9AB951AD9E864181632ECE8879BE565EE5023
        Validity
            Not Before: Sep 18 05:55:06 2026 GMT
            Not After : Sep 20 05:55:06 2026 GMT
        Subject: CN=6aacd23b-9f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8f:8b:4d:bc:eb:13:9a:e8:2f:28:75:6d:93:
                    81:19:3f:8f:8b:7b:db:a9:7f:28:36:ce:f9:52:a8:
                    22:9f:ba:c6:c0:41:21:21:bf:e8:31:25:4e:04:ac:
                    57:20:f7:3f:3c:21:a9:d2:6b:fb:6e:5b:64:57:26:
                    43:1e:70:69:a6:e6:c9:61:d8:40:23:e8:33:cc:a3:
                    72:b3:98:49:3d:9d:c9:be:e8:97:f3:89:dd:0c:b6:
                    d2:e8:e6:23:b3:cb:f2:cb:9a:69:3b:4e:67:e8:a1:
                    2f:70:02:c3:fa:1f:45:96:58:c2:12:9e:55:51:4b:
                    7b:09:48:43:d9:db:96:9a:89:ab:4d:71:d9:3c:9f:
                    08:e4:a8:0f:f9:3d:47:13:3a:99:fe:52:35:d5:ff:
                    9b:64:e7:c9:2a:c8:05:09:ab:d0:e3:3a:1f:46:5f:
                    71:ba:21:18:f3:6d:da:c0:5e:5b:ed:d4:6e:1c:6f:
                    9c:c9:1c:3b:1a:2b:46:c1:95:82:67:8c:92:12:d7:
                    1a:8a:f9:11:42:83:04:dc:50:f3:0c:50:fc:c6:a0:
                    91:c6:ff:95:60:89:71:73:b3:53:36:64:28:68:11:
                    e9:ec:38:0a:49:6d:5d:e7:de:a2:ba:83:33:25:ff:
                    2d:20:e1:ca:a3:a4:27:c8:5b:56:b4:15:32:32:2f:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E9:67:2C:37:CF:16:85:26:D4:C3:1B:CE:02:41:A2:31:92:5F:7C
            X509v3 Authority Key Identifier:
                keyid:D1:D9:AB:95:1A:D9:E8:64:18:16:32:EC:E8:87:9B:E5:65:EE:50:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CB0A/E838897EAD0411F1BAA8D719CF1D38B0/0dmrlRrZ6GQYFjLs6Ieb5WXuUCM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:67:82:0f:2b:34:9f:16:fa:2a:07:ba:cb:2e:2a:a1:69:e2:
         b7:c1:1d:4c:94:d7:ed:1f:50:f4:2e:33:19:5d:44:29:66:88:
         4b:84:b6:5d:1a:a7:3b:d0:43:ab:ee:a0:33:06:cc:11:57:2d:
         9c:2f:91:8b:ee:53:f7:8d:c9:0f:de:05:9c:35:b9:44:18:61:
         17:e8:5d:ab:48:74:e2:56:3a:ae:68:38:53:34:63:33:9e:b6:
         5e:c0:23:9b:3a:ca:9c:63:66:e4:fa:ef:f2:63:99:98:a4:1c:
         c1:3b:36:b9:88:55:ed:a6:be:ed:7e:4b:c7:d4:16:b3:4a:ab:
         3d:57:7b:9c:d6:f2:36:bb:0f:81:d3:75:e5:71:79:b7:78:d8:
         98:d3:98:9b:d1:c3:2a:4e:79:c6:ff:0a:fc:84:82:b9:13:5d:
         17:80:01:bc:b9:ef:63:8c:ef:3e:fa:ae:25:f9:b3:ed:0c:78:
         2c:78:c9:55:07:e3:97:b7:e8:f8:1f:bb:0f:9f:a5:7f:06:e4:
         cc:e3:d2:78:9c:2c:fb:dc:fe:11:be:88:3f:a0:2a:8d:10:db:
         bf:3a:5e:48:62:92:36:2f:12:40:00:56:87:39:d8:88:56:90:
         03:1e:8c:de:64:a7:ca:44:2b:b1:b8:07:0e:88:c5:23:44:81:
         c1:b9:1b:fc
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBDDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
Q0IwQUFGMTEwLwYDVQQFEyhEMUQ5QUI5NTFBRDlFODY0MTgxNjMyRUNFODg3OUJF
NTY1RUU1MDIzMB4XDTI2MDkxODA1NTUwNloXDTI2MDkyMDA1NTUwNlowGDEWMBQG
A1UEAxMNNmFhY2QyM2ItOWYxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANKPi0286xOa6C8odW2TgRk/j4t726l/KDbO+VKoIp+6xsBBISG/6DElTgSs
VyD3PzwhqdJr+25bZFcmQx5waabmyWHYQCPoM8yjcrOYST2dyb7ol/OJ3Qy20ujm
I7PL8suaaTtOZ+ihL3ACw/ofRZZYwhKeVVFLewlIQ9nblpqJq01x2TyfCOSoD/k9
RxM6mf5SNdX/m2TnySrIBQmr0OM6H0ZfcbohGPNt2sBeW+3UbhxvnMkcOxorRsGV
gmeMkhLXGor5EUKDBNxQ8wxQ/Magkcb/lWCJcXOzUzZkKGgR6ew4CkltXefeorqD
MyX/LSDhyqOkJ8hbVrQVMjIv0ZkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSV6Wcs
N88WhSbUwxvOAkGiMZJffDAfBgNVHSMEGDAWgBTR2auVGtnoZBgWMuzoh5vlZe5Q
IzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2N0NCMEEvRTgzODg5N0VBRDA0MTFGMUJBQThENzE5Q0YxRDM4QjAvMGRtcmxS
clo2R1FZRmpMczZJZWI1V1h1VUNNLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMGRtcmxSclo2R1FZRmpMczZJZWI1V1h1VUNNLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3Q0IwQS9FODM4ODk3RUFEMDQxMUYxQkFBOEQ3MTlDRjFE
MzhCMC8wZG1ybFJyWjZHUVlGakxzNkllYjVXWHVVQ00ubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADFngg8rNJ8W+ioHussuKqFp4rfBHUyU
1+0fUPQuMxldRClmiEuEtl0apzvQQ6vuoDMGzBFXLZwvkYvuU/eNyQ/eBZw1uUQY
YRfoXatIdOJWOq5oOFM0YzOetl7AI5s6ypxjZuT67/JjmZikHME7NrmIVe2mvu1+
S8fUFrNKqz1Xe5zW8ja7D4HTdeVxebd42JjTmJvRwypOecb/CvyEgrkTXReAAby5
72OM7z76riX5s+0MeCx4yVUH45e36Pgfuw+fpX8G5Mzj0nicLPvc/hG+iD+gKo0Q
2786XkhikjYvEkAAVoc52IhWkAMejN5kp8pEK7G4Bw6IxSNEgcG5G/w=
-----END CERTIFICATE-----
Generated at Sat Sep 19 12:34:02 2026 by rpki-client