Error: rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
File:                     58aANgAk7bnzRR3JE-ozBZvJBKU.mft (raw, json)
Hash identifier:          ZSwJYqdNrx8gdspG25vkancdy8LeIcmWRGCyFCcdJhQ=
Subject key identifier:   2C:A0:A6:1D:B0:E7:2B:A3:49:90:68:FF:26:06:FA:24:3F:74:E6:3B
Authority key identifier: E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5
Certificate issuer:       /CN=F369AFDDAF/serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
Certificate serial:       08DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
Manifest number:          0880
Signing time:             Sat 24 Oct 2026 02:10:19 +0000
Manifest this update:     Sat 24 Oct 2026 02:10:19 +0000
Manifest next update:     Mon 26 Oct 2026 02:10:19 +0000
Files and hashes:         1: 58aANgAk7bnzRR3JE-ozBZvJBKU.crl (hash: YC1jFzZYotVmkTW7MlGc3Rx5tNR4BhuG0BHZCzQ5Lg4=)
                          2: 0B69092C1B9811F19D0D1FA4DAE4EC9C.roa (hash: r4rq6L1loVCAAn4SzY57R0ZpXpDf4hOl2m+mNOOqHCk=)
                          3: E0A1C3FE1B9811F1A5AACFA9DAE4EC9C.roa (hash: OXl62mdJpY7UlMzTUCbwzeugc45owXh+B1Lo48CbUdg=)
                          4: 8D13FD4E688F11F19A6E38B5CE1D38B0.roa (hash: HV3okNQJeKDypQ6sH85bp1rw0dQt2ta8U2V9ECt1gwk=)
                          5: 524549DC1B9811F18A7ED8A5DAE4EC9C.roa (hash: mTNu6E6psA7ygjh3+Ru0nJy66aaqxT8n/I3XWOVKlbQ=)
                          6: D15F5E2A1B9711F195DBF2A3DAE4EC9C.roa (hash: mqDlUVSJrjORGiPKg+e1V8rvIY8eyCxvbxrFLIblui8=)
                          7: 3A984160EF7811EFBAE0E8A5762E951A.roa (hash: wHn4dF6I7Dyf+VZOr2mxt31ut8HGDMrGuegRJRtPs3Q=)
                          8: 3F1E401CABAC11F184FE54E6CE1D38B0.roa (hash: /GN4N+4OluPOeBU0epImMHALogsbpgLa9idwKElbM5Q=)
                          9: 702337061B9911F1A5FE14ACDAE4EC9C.roa (hash: CIyW3WzEGeSkisvt+LfOP3YcjK3RlVAneZQ10rkxTHQ=)
                          10: AF607CBC871611EFA4B4B85C762E951A.roa (hash: bzfiv5WUYP+OkMM7fSUuv+PsK419hvu6fLkkiMcm3F4=)
                          11: EECFB0401B9711F1B54302A4DAE4EC9C.roa (hash: MaNmV2394aEXEhAX7/i1Y7nq57S/NFMG5gwXJM2kGNU=)
                          12: 4FD7C9F427E711F0BCA00BF5DAE4EC9C.roa (hash: 7HwDCppU/f5fuwrPAf2xp7Ayrbe7TxptLlo+dblJyew=)
                          13: 9383FC9C250B11F087EC90CDDAE4EC9C.roa (hash: 0MebD9YV70bEDfj/A8gNyPDksVUE3sD/+fbZkvUcVDw=)
                          14: 24DB9B261B9911F1A2189EABDAE4EC9C.roa (hash: Sd2bbOyDBgHPbmMh4GfRUwYn+t0yNfM7pVM09Y8x0nw=)
                          15: 58F83FBC06AF11F1B8A448A0DAE4EC9C.roa (hash: q0/h4uGifHkr7lZTFUHYop3ANwau1wWMXnAeCu5UfjA=)
                          16: F4EFE80A8D1D11EF8C1A4C79762E951A.roa (hash: d4jMMXQH77HWq36R3oaT7HPszUjBz6mQV4jIDt9d5aE=)
                          17: ACF641FED6AD11F0812BC7D7DAE4EC9C.roa (hash: DefvG2gqn0YRx/oaaDEF9oWtrWF+Hp3FFyLDWRXzv1k=)
                          18: 14DDB8741B9611F1AEDEF299DAE4EC9C.roa (hash: TagLQ0892R3VVBadijR9sQxReuOMDykypp5Jn7djXRI=)
                          19: 3EFFC5021B9611F1ABDCF899DAE4EC9C.roa (hash: OEBSOLOtuEEr7LITI1TX1uWnikP4GZ8AEgjDIlq1cvE=)
                          20: 852AD7B827E711F0BFC09DF5DAE4EC9C.roa (hash: NefVteUHYyDwbTOkKR0OdJps3C0o9kNvy2BeEIzbcG4=)
                          21: EFEB23DA1B9511F1BA203498DAE4EC9C.roa (hash: v+qFwaaht2QuxKIwyNjf4TTsShwAcY+6iT/Scb7JCgI=)
                          22: 7423C0761B9611F1A790169CDAE4EC9C.roa (hash: wFNRseHPNhpqYn9AtgzATv+E9Kytd9SUDOwd9sd5QJA=)
                          23: 8FA8B8661B9511F197EF0596DAE4EC9C.roa (hash: UCEd1H1cKMGw7dWRsynqiMGNaXBFFg/1Xx9djVpxQ7Y=)
                          24: 4B5654F296DA11EF82B2B74D762E951A.roa (hash: ZcnfvBN38YEq7lAkTi2/k1kT/CQUDrGwaR+y7cjWcTw=)
                          25: 5F0BEF181BB611F189A8ADD1DAE4EC9C.roa (hash: NQquyVC4cnvdXsxHj7uaNV5CrT0LMfKcIAeKp0BFMLI=)
                          26: B5CDAB981B9811F1B49AFAA7DAE4EC9C.roa (hash: okz/XIpdGjV3fTBBVZmdvxqkxKK2rpB3+IcXfScdJ9k=)
                          27: 74A6DAE01B9811F19309A2A7DAE4EC9C.roa (hash: b8rwnTmBVc0IlB6IRsprx5se6KL66PEw8Ftr/oDL5g4=)
                          28: 5656DE221B9911F1BAA305ACDAE4EC9C.roa (hash: d1sCupRsCtmgYH5lcdqUegyx4RnKSvvMlQeEHE659Gg=)
                          29: 20E1A3021B9511F1AC4F3394DAE4EC9C.roa (hash: 9NW30Qu2gXnwd3q63LPoYGNqe8vJ4uiODjI440PZlho=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268 (0x8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFDDAF, serialNumber=E7C680360024EDB9F3451DC913EA33059BC904A5
        Validity
            Not Before: Oct 24 02:10:19 2026 GMT
            Not After : Oct 26 02:10:19 2026 GMT
        Subject: CN=6adc138b-67b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fc:2b:e4:c1:a5:a8:62:44:50:10:1c:e9:7f:
                    30:16:56:8d:24:c4:5a:0a:3f:d1:a5:30:41:89:46:
                    e1:3a:68:22:c3:bb:e6:f4:27:d5:12:1d:9b:f9:5b:
                    cf:95:83:10:d9:30:07:6b:15:a5:9e:4b:74:be:89:
                    29:57:3b:67:6d:40:51:0e:e1:15:83:2b:4e:d5:c8:
                    79:4f:c7:d6:93:fd:38:f2:33:ca:b4:0f:35:85:c1:
                    29:c9:e0:75:b5:35:38:bd:a8:95:d2:a9:68:ac:17:
                    dc:4d:cf:35:84:36:99:3c:77:3e:cd:83:e6:8a:bf:
                    80:05:d4:4a:a0:85:fb:c6:ae:5b:9e:86:79:73:e9:
                    55:ce:66:b4:87:b4:99:59:02:65:7d:fb:32:0f:81:
                    53:24:da:b3:eb:70:6e:a2:a9:92:2a:74:13:0f:cb:
                    6e:63:25:59:d1:b1:1e:db:bb:86:54:1f:4b:65:a2:
                    ab:db:b1:4f:37:ae:2f:48:fa:63:9a:aa:22:14:fe:
                    af:86:d9:27:c0:28:b7:e9:ed:53:b8:38:dd:dd:d1:
                    31:a4:b5:5e:f6:e0:a9:53:f6:63:43:ff:bf:ff:3e:
                    9e:b0:a3:ed:d6:8a:6b:47:b6:69:f1:bf:30:93:85:
                    91:60:92:17:cf:ab:b5:23:8e:a0:eb:d9:1a:5d:81:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A0:A6:1D:B0:E7:2B:A3:49:90:68:FF:26:06:FA:24:3F:74:E6:3B
            X509v3 Authority Key Identifier:
                keyid:E7:C6:80:36:00:24:ED:B9:F3:45:1D:C9:13:EA:33:05:9B:C9:04:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/58aANgAk7bnzRR3JE-ozBZvJBKU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFDD/3DB42DDAC1F211EBBA2FF03EF8AEA228/58aANgAk7bnzRR3JE-ozBZvJBKU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d3:94:84:0d:0f:41:57:12:e2:72:b9:5c:a2:1e:9b:d9:50:
         49:14:08:95:9e:de:0e:94:ac:f8:9d:3c:72:22:88:bb:76:c8:
         e1:62:83:75:23:cb:87:92:14:90:38:ff:19:5d:f9:3f:14:1a:
         5b:b0:e3:dc:20:f6:94:20:0e:a0:f9:75:41:31:26:6b:96:f5:
         e2:0c:92:a8:76:af:4d:b4:a2:cd:5b:a6:2f:f3:9e:3b:c7:6e:
         82:f6:ef:91:4d:03:5c:75:0b:65:4b:51:b7:1c:a8:c9:52:4f:
         f0:8f:64:1b:d1:48:4e:f0:1a:8d:96:d5:23:4a:d2:3c:7d:27:
         d6:ed:c4:f3:8c:59:33:b7:c1:0e:f9:79:43:84:1c:96:f1:19:
         77:99:53:77:a2:4c:06:9f:af:3e:b6:d2:70:75:6f:5a:7b:68:
         e2:d4:e7:1c:ca:e6:40:98:41:f3:0a:19:02:6c:8c:5b:ef:1a:
         bf:aa:9d:96:1f:9b:00:b6:af:7e:b1:49:ea:fa:1e:b4:0d:6d:
         ab:16:84:e8:f3:41:39:89:3c:c5:92:4f:b6:cb:bf:ea:e3:82:
         c5:33:99:3c:bc:67:2b:bc:87:32:1a:0b:f8:54:fd:e9:c7:b8:
         0c:fa:f7:26:1d:a5:92:ae:cb:c1:30:e5:24:4f:c4:34:49:38:
         d6:15:ed:7a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCNwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUFGRERBRjExMC8GA1UEBRMoRTdDNjgwMzYwMDI0RURCOUYzNDUxREM5MTNFQTMz
MDU5QkM5MDRBNTAeFw0yNjEwMjQwMjEwMTlaFw0yNjEwMjYwMjEwMTlaMBgxFjAU
BgNVBAMTDTZhZGMxMzhiLTY3YjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDP/CvkwaWoYkRQEBzpfzAWVo0kxFoKP9GlMEGJRuE6aCLDu+b0J9USHZv5
W8+VgxDZMAdrFaWeS3S+iSlXO2dtQFEO4RWDK07VyHlPx9aT/TjyM8q0DzWFwSnJ
4HW1NTi9qJXSqWisF9xNzzWENpk8dz7Ng+aKv4AF1EqghfvGrluehnlz6VXOZrSH
tJlZAmV9+zIPgVMk2rPrcG6iqZIqdBMPy25jJVnRsR7bu4ZUH0tloqvbsU83ri9I
+mOaqiIU/q+G2SfAKLfp7VO4ON3d0TGktV724KlT9mND/7//Pp6wo+3WimtHtmnx
vzCThZFgkhfPq7UjjqDr2RpdgXv9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULKCm
HbDnK6NJkGj/Jgb6JD905jswHwYDVR0jBBgwFoAU58aANgAk7bnzRR3JE+ozBZvJ
BKUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlBRkRELzNEQjQyRERBQzFGMjExRUJCQTJGRjAzRUY4QUVBMjI4LzU4YUFO
Z0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzU4YUFOZ0FrN2JuelJSM0pFLW96Qlp2SkJLVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUFGREQvM0RCNDJEREFDMUYyMTFFQkJBMkZGMDNFRjhB
RUEyMjgvNThhQU5nQWs3Ym56UlIzSkUtb3pCWnZKQktVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBE05SEDQ9BVxLicrlcoh6b2VBJFAiV
nt4OlKz4nTxyIoi7dsjhYoN1I8uHkhSQOP8ZXfk/FBpbsOPcIPaUIA6g+XVBMSZr
lvXiDJKodq9NtKLNW6Yv8547x26C9u+RTQNcdQtlS1G3HKjJUk/wj2Qb0UhO8BqN
ltUjStI8fSfW7cTzjFkzt8EO+XlDhByW8Rl3mVN3okwGn68+ttJwdW9ae2ji1Occ
yuZAmEHzChkCbIxb7xq/qp2WH5sAtq9+sUnq+h60DW2rFoTo80E5iTzFkk+2y7/q
44LFM5k8vGcrvIcyGgv4VP3px7gM+vcmHaWSrsvBMOUkT8Q0STjWFe16
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:44:15 2026 by rpki-client