Error: rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.mft
File:                     7VfgtGjEhH4gPl_aVuNbUL839Ls.mft (raw, json)
Hash identifier:          Y3PmVGNtuTqa8f+1sDZ2cbJGeFZfNqsf35IFKsWLORo=
Subject key identifier:   1D:53:CD:41:DF:59:A2:C1:AB:75:8B:82:E0:6E:D5:B1:C5:78:74:7E
Authority key identifier: ED:57:E0:B4:68:C4:84:7E:20:3E:5F:DA:56:E3:5B:50:BF:37:F4:BB
Certificate issuer:       /CN=F369FC1BAF/serialNumber=ED57E0B468C4847E203E5FDA56E35B50BF37F4BB
Certificate serial:       017A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7VfgtGjEhH4gPl_aVuNbUL839Ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.mft
Manifest number:          0178
Signing time:             Sun 25 Oct 2026 05:11:28 +0000
Manifest this update:     Sun 25 Oct 2026 05:11:28 +0000
Manifest next update:     Tue 27 Oct 2026 05:11:28 +0000
Files and hashes:         1: 7VfgtGjEhH4gPl_aVuNbUL839Ls.crl (hash: Pju3rIcm5kZi7CUQOyIWqcgW8oF9CF5DU85RloR7X1I=)
                          2: 8B5B7D6EDC4011F08D304CC9DAE4EC9C.roa (hash: hiIjpigy09h7c2t5nWZmOFrajIjy73Fate2mP9CJmtU=)
                          3: 7DFFD740AF1E11F09974FEE2DAE4EC9C.roa (hash: 05pUEJYVlzsT6hoEBGKouCrbR+JUBlrPj8nbP+9PHsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7VfgtGjEhH4gPl_aVuNbUL839Ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369FC1BAF, serialNumber=ED57E0B468C4847E203E5FDA56E35B50BF37F4BB
        Validity
            Not Before: Oct 25 05:11:28 2026 GMT
            Not After : Oct 27 05:11:28 2026 GMT
        Subject: CN=6add8f80-8b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:37:85:f5:a9:fe:3b:d5:fd:4c:b1:f4:c9:c8:
                    97:0c:d9:c8:39:43:85:e1:db:84:14:f1:37:88:0b:
                    fe:38:93:9a:4b:95:42:b3:62:0e:1a:24:ce:f3:2e:
                    9e:b5:f3:d6:c6:49:cf:7c:e0:50:e2:a8:9a:cc:03:
                    e2:c6:83:21:94:8d:81:17:c2:88:2e:32:7a:1e:9c:
                    36:da:41:82:93:b6:65:f9:98:fd:df:22:ea:8c:90:
                    fe:6f:d8:5f:d5:4a:a9:1e:09:63:97:70:16:d3:73:
                    49:42:05:64:30:55:35:4d:9e:4c:8a:b6:04:79:2b:
                    0b:74:31:23:d4:3e:b1:2b:a8:55:b9:3a:dc:a2:8e:
                    91:06:fd:85:9c:43:0c:7c:f4:84:39:97:de:42:5e:
                    f3:91:c3:42:18:be:cf:82:cf:82:e5:e0:9d:ba:40:
                    51:6c:47:06:95:6b:d7:e2:a7:43:76:06:2b:41:cb:
                    c9:7e:eb:3b:c5:8b:70:91:e8:1d:c1:de:51:b5:5d:
                    1a:3c:32:14:5e:1e:e5:fe:30:88:d0:39:4a:ca:4e:
                    73:b6:00:72:1a:9a:a4:c8:89:18:07:9b:51:01:07:
                    84:1b:5c:96:c7:ed:c0:89:0f:31:c1:b1:5a:ce:05:
                    90:81:70:26:49:15:bb:b8:cf:5f:7f:86:d3:12:e6:
                    0c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:53:CD:41:DF:59:A2:C1:AB:75:8B:82:E0:6E:D5:B1:C5:78:74:7E
            X509v3 Authority Key Identifier:
                keyid:ED:57:E0:B4:68:C4:84:7E:20:3E:5F:DA:56:E3:5B:50:BF:37:F4:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7VfgtGjEhH4gPl_aVuNbUL839Ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369FC1B/9F06A6EAAF1D11F097F349DEDAE4EC9C/7VfgtGjEhH4gPl_aVuNbUL839Ls.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:dc:8e:7d:df:0a:f0:fc:43:dd:41:04:04:b0:ef:4d:82:49:
         71:77:a4:04:aa:d0:e7:e1:08:2d:68:3d:fe:2f:aa:4a:27:0c:
         e2:f7:b1:0d:ed:1f:fd:92:d7:9d:f0:6c:04:aa:75:1f:89:b3:
         4c:29:c7:9f:39:de:59:c7:9c:7d:2e:e9:c2:f7:10:10:e6:64:
         4c:aa:a4:0c:99:a7:83:8d:2a:6b:62:cd:c8:be:40:bb:7d:87:
         6b:a4:f4:9d:31:18:c6:1d:c7:cd:bc:5a:a3:e9:b0:d4:65:33:
         3b:92:0a:ea:9f:01:9c:56:18:1b:08:e5:c2:6e:5d:0d:aa:a1:
         d1:11:76:55:38:43:00:68:54:f2:59:7f:ea:85:13:df:90:ea:
         ed:cf:ae:08:be:5c:f4:64:d7:b9:58:7a:60:fc:8a:ab:92:23:
         c9:46:97:8f:c1:df:18:b7:d4:73:b3:e2:2b:69:e8:fe:1d:c1:
         70:d9:49:4b:65:12:cb:74:87:17:21:40:6c:27:4c:91:9a:34:
         b2:33:b2:80:bf:2f:65:40:35:89:a4:fc:d4:12:77:c8:ee:18:
         1b:cf:79:54:ad:45:71:68:f0:4c:f5:1b:3c:69:7f:72:7d:58:
         6b:3a:d6:f7:ad:03:c9:05:d5:b1:27:f5:1b:c1:5b:1f:1c:6d:
         c6:71:16:47
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAXowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OUZDMUJBRjExMC8GA1UEBRMoRUQ1N0UwQjQ2OEM0ODQ3RTIwM0U1RkRBNTZFMzVC
NTBCRjM3RjRCQjAeFw0yNjEwMjUwNTExMjhaFw0yNjEwMjcwNTExMjhaMBgxFjAU
BgNVBAMTDTZhZGQ4ZjgwLThiMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMN4X1qf471f1MsfTJyJcM2cg5Q4Xh24QU8TeIC/44k5pLlUKzYg4aJM7z
Lp6189bGSc984FDiqJrMA+LGgyGUjYEXwoguMnoenDbaQYKTtmX5mP3fIuqMkP5v
2F/VSqkeCWOXcBbTc0lCBWQwVTVNnkyKtgR5Kwt0MSPUPrErqFW5OtyijpEG/YWc
Qwx89IQ5l95CXvORw0IYvs+Cz4Ll4J26QFFsRwaVa9fip0N2BitBy8l+6zvFi3CR
6B3B3lG1XRo8MhReHuX+MIjQOUrKTnO2AHIamqTIiRgHm1EBB4QbXJbH7cCJDzHB
sVrOBZCBcCZJFbu4z19/htMS5gzLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHVPN
Qd9ZosGrdYuC4G7VscV4dH4wHwYDVR0jBBgwFoAU7VfgtGjEhH4gPl/aVuNbUL83
9LswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlGQzFCLzlGMDZBNkVBQUYxRDExRjA5N0YzNDlERURBRTRFQzlDLzdWZmd0
R2pFaEg0Z1BsX2FWdU5iVUw4MzlMcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdWZmd0R2pFaEg0Z1BsX2FWdU5iVUw4MzlMcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OUZDMUIvOUYwNkE2RUFBRjFEMTFGMDk3RjM0OURFREFF
NEVDOUMvN1ZmZ3RHakVoSDRnUGxfYVZ1TmJVTDgzOUxzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL3I593wrw/EPdQQQEsO9Ngklxd6QE
qtDn4QgtaD3+L6pKJwzi97EN7R/9kted8GwEqnUfibNMKcefOd5Zx5x9LunC9xAQ
5mRMqqQMmaeDjSprYs3IvkC7fYdrpPSdMRjGHcfNvFqj6bDUZTM7kgrqnwGcVhgb
COXCbl0NqqHREXZVOEMAaFTyWX/qhRPfkOrtz64Ivlz0ZNe5WHpg/IqrkiPJRpeP
wd8Yt9Rzs+Iraej+HcFw2UlLZRLLdIcXIUBsJ0yRmjSyM7KAvy9lQDWJpPzUEnfI
7hgbz3lUrUVxaPBM9Rs8aX9yfVhrOtb3rQPJBdWxJ/UbwVsfHG3GcRZH
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:03:06 2026 by rpki-client