Error: rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
File:                     2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft (raw, json)
Hash identifier:          70GVc6PD+4A56T2jnYHG1yrDfHMn45W2e2VMTmP6WPM=
Subject key identifier:   3E:46:51:7B:15:FD:5F:EC:E1:93:09:E1:14:D1:6B:46:93:FB:78:90
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Certificate issuer:       /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial:       05C3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
Manifest number:          058C
Signing time:             Sun 04 Oct 2026 03:16:10 +0000
Manifest this update:     Sun 04 Oct 2026 03:16:09 +0000
Manifest next update:     Tue 06 Oct 2026 03:16:09 +0000
Files and hashes:         1: 2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl (hash: bu/isPUVcYrQy8ZLv71yVGid8tBiD/AOfKtNiD7P8I8=)
                          2: 65C358568A9111F1ACF111E9CE1D38B0.roa (hash: JaU5nH8aptEvSi4nGdjy1c2XIZ9FUS2u9voNPYY/cdY=)
                          3: 01F4B7DC164911F1AA82037CDAE4EC9C.roa (hash: SJBq2f5PEAQ7jMq2RDwqV4pd3LXt7LixkprBqHneLz0=)
                          4: 86664F868A9211F19A6099EFCE1D38B0.roa (hash: rIungNY5EVspbMIGcy76MQ1oYEJ0edvK146736oLfvE=)
                          5: 6D3EBE72164711F19F64E7F1DAE4EC9C.roa (hash: yLI6smy3lVo+VEqO6BS2sNIl22GUPaCfOV/LStarXLY=)
                          6: 15D6A7D4164811F18DF4F4F5DAE4EC9C.roa (hash: 14smMykXcFq93duH/vGIC38LPO0s9E/b96sonJX6BGk=)
                          7: 6FF913CA16FF11F1A85261DFDAE4EC9C.roa (hash: iQniiQsV4FPnDcQIFs8/PL97KT4obDA4lMn2n96y9AE=)
                          8: AF498724164811F18B4BC67BDAE4EC9C.roa (hash: 4CjEu1vpm+wP9BTwYGqYW9uzMDMzsV6XNuV1HbMfl9g=)
                          9: 76FBD6B0164311F1BD56F3DADAE4EC9C.roa (hash: Gj9pS0NU6aD4F5/RLKRtgqvJR42xaOuVLePBdK86QyQ=)
                          10: 112931EA16FF11F189EF5EDDDAE4EC9C.roa (hash: ZgZBnTWvmwDnOvNrILpi9EmkaK0Jj9X9JXHSy8EVaWA=)
                          11: 61C5A06E164811F19DC45379DAE4EC9C.roa (hash: OTKMR3kuYYZvbI08rUILdh06l0vzSxxr/G4T2Y9Nw7o=)
                          12: 005F57B0164411F1BAFF55DDDAE4EC9C.roa (hash: FNAoTrUV+u0/qrkFEdnS32oasDVOtwHwST38Ns3Twkw=)
                          13: 4C318CCA164A11F19A859484DAE4EC9C.roa (hash: Fi5vn1JhkR8Vqf8Cp06SqG2EQ+vwVXe6FRuFoKYg4pc=)
                          14: F5CC513E16FE11F1952149DDDAE4EC9C.roa (hash: ewGQNs4bpNDJfZJL7/NDfboXQleDBS/jOqXleweJ0Ow=)
                          15: DFD2B32A164811F1831AF77BDAE4EC9C.roa (hash: x3mxEyaa11oMqg1KAkOGBWsSUvRy6oN81BPBKnojwr0=)
                          16: 02FCDA2A8A9211F1A51C89EBCE1D38B0.roa (hash: kaE23hHrEaGcX+JU9kKbhbl9cGhGBvp+953IjP3cM7s=)
                          17: 8B5CC092164811F191889C7BDAE4EC9C.roa (hash: lSB9/WEXqq3+A7EAEzssfuCjG/BvQRzkvd1f1Gn35v8=)
                          18: AAC6E05E8A9011F18378F7E4CE1D38B0.roa (hash: JIjslw1y4PxMG8w0bVuRsS73DTXnWqqEjqzGJCLK+DY=)
                          19: 2E2D703A16FF11F1AE9583DDDAE4EC9C.roa (hash: +XqUdRwBEEbCB2RNCdbzmLthsuLaA1iKWwIhtLwPD8M=)
                          20: 475E0D62164611F1865584EBDAE4EC9C.roa (hash: gVZ9dFpQtlyacvHFfLqr5zzatWzgyOJrPVlqDGNVe6g=)
                          21: D3BA0E0C164411F190617BE1DAE4EC9C.roa (hash: I6gL9OWppOVojAbbO/0MhbpSXxWSJ/sKvKIETher/Vk=)
                          22: 0B19DF248A9111F1A2F431E7CE1D38B0.roa (hash: vhoxmYwsSQulDdm74mm4Hcep+k5eg56/9gWsR/B37S4=)
                          23: D40A53188A9211F1888E83F1CE1D38B0.roa (hash: 7JtghGAE7gng9Fkb6j1avA8wH4Ce7zgj/HHbwH7T4RI=)
                          24: BAD1C0B2164211F1A5140FD5DAE4EC9C.roa (hash: LrKfPDaa2A9ec4OA/JYHGSq5CzhJGUqJ1ollvsbr8wI=)
                          25: 4F2349C6164711F19BD3C8F1DAE4EC9C.roa (hash: t/sQT9zOtUxK/aumZF4eGuu6FrtnQZBtft6dvkz36IM=)
                          26: FE1B57A8164611F1BE809CEFDAE4EC9C.roa (hash: Ve3RCW/q/y2pFA0BJHu2+tRYVuEEJVi+vVpApROhl0c=)
                          27: 20E578B6164911F184B5D47DDAE4EC9C.roa (hash: GjT6tvvAwcdiXjyTcs5xoFxiRyrpZUNEZqRr7lISbHE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
                          rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1475 (0x5c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
        Validity
            Not Before: Oct  4 03:16:09 2026 GMT
            Not After : Oct  6 03:16:09 2026 GMT
        Subject: CN=6ac1c4fa-f234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:0e:23:76:14:58:aa:44:9f:41:de:68:51:
                    8c:16:e8:3d:45:23:d7:0b:26:bc:64:0e:38:96:09:
                    f8:dc:56:c0:84:7b:db:b5:45:51:15:c2:b2:7c:fe:
                    87:2f:b0:5e:cf:9e:1a:40:49:ec:79:ed:87:87:f1:
                    98:75:6e:74:11:9f:f8:50:15:67:2b:8f:16:f6:9a:
                    5f:23:33:e4:09:11:39:89:21:d7:9d:c0:f3:87:18:
                    49:8f:e0:a3:7a:24:61:c2:9a:76:a7:79:79:fa:d9:
                    3c:31:d0:40:0e:39:25:52:77:6e:98:a9:5f:e8:d3:
                    58:b7:14:94:8a:98:2b:a3:be:dc:50:56:e7:02:54:
                    42:d2:9a:18:5d:09:c5:37:8c:15:fa:f7:86:f6:dd:
                    18:3c:71:49:20:c9:be:1e:60:2e:67:16:fa:fd:fa:
                    4e:ff:59:6c:67:37:82:0d:b5:08:7e:b5:a6:69:de:
                    c1:b7:0f:c5:ed:32:3c:c1:3d:ab:3a:57:8a:2a:3b:
                    2c:7d:c4:93:53:16:6e:31:04:f8:a4:57:90:b1:1f:
                    7b:98:03:d0:03:b0:ca:44:91:73:5d:0e:6b:e9:d8:
                    1a:c4:71:25:13:28:b1:b4:1b:7f:6d:5e:32:4f:34:
                    c4:a0:80:8b:38:b0:f2:75:1c:ed:37:6d:66:97:00:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:46:51:7B:15:FD:5F:EC:E1:93:09:E1:14:D1:6B:46:93:FB:78:90
            X509v3 Authority Key Identifier:
                keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:8f:64:69:6f:2d:a4:12:2b:4d:64:b8:21:69:69:1b:f1:de:
         84:42:77:08:31:a0:cc:6a:2f:26:8c:ea:ef:7f:f0:a2:60:d4:
         05:6b:d7:52:bb:e7:42:54:40:b8:b4:f4:7b:34:d5:ba:fa:b7:
         d7:57:80:37:e0:63:97:d7:49:4e:59:d3:10:a6:e9:bc:d8:1a:
         39:22:d2:3c:14:36:6e:bb:44:1b:3c:77:b1:4c:4a:6f:d7:7b:
         98:77:41:c8:90:a3:8f:38:4f:9f:39:4c:17:96:75:4c:92:98:
         62:a7:d0:86:cb:a1:cb:93:2a:4f:ef:56:bc:a8:a4:0d:c6:4c:
         8c:5e:c5:72:75:b5:58:7c:1e:20:2e:94:d1:cd:a8:a7:20:cd:
         3a:6e:36:f4:a7:c4:e6:7a:3e:85:b8:32:fe:70:d7:43:c5:c3:
         7c:c2:70:bc:46:3d:b5:97:60:cf:1a:57:4f:67:c8:b9:d2:57:
         aa:42:09:0c:16:73:a5:d9:1c:27:bf:00:2b:76:71:44:40:fb:
         ce:bd:84:fa:a7:fd:09:8b:85:5b:c4:2a:58:c7:76:dd:9a:98:
         86:39:1b:2e:76:ed:6c:2e:8d:48:3c:b7:cf:f7:95:9a:d5:63:
         1e:69:52:54:cc:dc:6f:77:59:b0:13:6a:bf:2b:07:a1:66:f7:
         12:13:43:cb
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBcMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODg2QjNBUjExMC8GA1UEBRMoRDlDMEIyMzNBQ0IwNjM1NDM1NzREM0Y1RjMyN0JF
QjhCMkI5OTExODAeFw0yNjEwMDQwMzE2MDlaFw0yNjEwMDYwMzE2MDlaMBgxFjAU
BgNVBAMTDTZhYzFjNGZhLWYyMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCx+Q4jdhRYqkSfQd5oUYwW6D1FI9cLJrxkDjiWCfjcVsCEe9u1RVEVwrJ8
/ocvsF7PnhpASex57YeH8Zh1bnQRn/hQFWcrjxb2ml8jM+QJETmJIdedwPOHGEmP
4KN6JGHCmnaneXn62Twx0EAOOSVSd26YqV/o01i3FJSKmCujvtxQVucCVELSmhhd
CcU3jBX694b23Rg8cUkgyb4eYC5nFvr9+k7/WWxnN4INtQh+taZp3sG3D8XtMjzB
Pas6V4oqOyx9xJNTFm4xBPikV5CxH3uYA9ADsMpEkXNdDmvp2BrEcSUTKLG0G39t
XjJPNMSggIs4sPJ1HO03bWaXAKQTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUPkZR
exX9X+zhkwnhFNFrRpP7eJAwHwYDVR0jBBgwFoAU2cCyM6ywY1Q1dNP18ye+uLK5
kRgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4NkIzLzVBNDExRjlFQjhFRjExRURBNUIwOUREQUYxMjIyNDY4LzJjQ3lN
Nnl3WTFRMWROUDE4eWUtdUxLNWtSZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzJjQ3lNNnl3WTFRMWROUDE4eWUtdUxLNWtSZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODg2QjMvNUE0MTFGOUVCOEVGMTFFREE1QjA5RERBRjEyMjI0
NjgvMmNDeU02eXdZMVExZE5QMTh5ZS11TEs1a1JnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDaj2Rpby2kEitNZLghaWkb8d6EQncIMaDM
ai8mjOrvf/CiYNQFa9dSu+dCVEC4tPR7NNW6+rfXV4A34GOX10lOWdMQpum82Bo5
ItI8FDZuu0QbPHexTEpv13uYd0HIkKOPOE+fOUwXlnVMkphip9CGy6HLkypP71a8
qKQNxkyMXsVydbVYfB4gLpTRzainIM06bjb0p8Tmej6FuDL+cNdDxcN8wnC8Rj21
l2DPGldPZ8i50leqQgkMFnOl2RwnvwArdnFEQPvOvYT6p/0Ji4VbxCpYx3bdmpiG
ORsudu1sLo1IPLfP95Wa1WMeaVJUzNxvd1mwE2q/KwehZvcSE0PL
-----END CERTIFICATE-----
Generated at Sun Oct 4 13:38:19 2026 by rpki-client