Error: rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
File:                     jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json)
Hash identifier:          f0Cs8f4bvcrBa2LTOAGKMZgNK4jj/vCIidYYiMk4Aj4=
Subject key identifier:   D5:B2:FE:30:9C:60:04:70:34:84:36:2A:26:28:63:0E:AD:31:03:4B
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Certificate issuer:       /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial:       06B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
Manifest number:          068C
Signing time:             Sat 26 Sep 2026 02:46:42 +0000
Manifest this update:     Sat 26 Sep 2026 02:46:41 +0000
Manifest next update:     Mon 28 Sep 2026 02:46:41 +0000
Files and hashes:         1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: Tt29CIS5CVKk8CgAfCi680DB++u2p+CCMgNtFm4I0aU=)
                          2: B3F00DD8B5D211F0A032E09CDAE4EC9C.roa (hash: pBnI8YYRnn+y8iTW/+yYOAZgWLOb00S+9jpxjry2ifU=)
                          3: 7510A490FBDA11EFA602538E762E951A.roa (hash: K8eoOxbyDzKOVr27RbOhGjO0ujSDpgusioRxfBEGdeg=)
                          4: 802F17ACB5D011F0A862F28FDAE4EC9C.roa (hash: cEa5rc+b8uoRQm6lEKjcwEO4AN3MwGfJNjZVLfnNXsQ=)
                          5: 6C4F7098FFA911EF80A256B8762E951A.roa (hash: nLVSz/e6y8EyahDhz46G+ddHGy6xFQEmZ+lSlLJOj1k=)
                          6: 14D0DD48FCAC11EF8F606291762E951A.roa (hash: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=)
                          7: 924A5592B5CF11F083499A8BDAE4EC9C.roa (hash: vI5//pHlGWHAgoJjpRzv1Mv4Rju5P+7W+b9IA6ocMm8=)
                          8: 34F044FE336D11F0A6FE177FDAE4EC9C.roa (hash: yhXToE/ivhLm4HgJKr6OrdpT7iNJJtMwXlhtqU/6qu4=)
                          9: 332A33CAFFA911EF84F40CB6762E951A.roa (hash: nAe7SVEbrFBsJsSB2QjjEXejvC3k+OkB22lneTxOJs4=)
                          10: A3F519ECB5D111F099E55E98DAE4EC9C.roa (hash: N2S0kcv9ynYD8ccz/SB7pJXYn4dSI1K0kSCmPaGO2N4=)
                          11: BEB0D28EFCAA11EF97EC4A88762E951A.roa (hash: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=)
                          12: E67C4F66FD2A11EFAFF97E57762E951A.roa (hash: 0KEac1L9NXZHhaATxDUbvggLHQuqEfxaMAc1BKGdXv0=)
                          13: 6C20E300FCAB11EFA301CF8C762E951A.roa (hash: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=)
                          14: F0DCA42CFCAA11EF9CB0AF88762E951A.roa (hash: BzJmdF2Js2FoOGSwDan1wfPrzdWX29V5MPNuA8XkzBM=)
                          15: 731820EAFD6B11EFA5FAAE9C762E951A.roa (hash: WBg3iidspfXKbYNsCa9+4QR22QeQEUUkOPouJHSY0gU=)
                          16: 84D63AD4FCAC11EFBDC66892762E951A.roa (hash: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=)
                          17: 0B36502EB5CF11F09E324387DAE4EC9C.roa (hash: FuUSeKXmdp59eIJUnwXj15oz80rdM1YNse2hoVng0XE=)
                          18: 5B20E2CAB5CF11F09368898BDAE4EC9C.roa (hash: 8lx8POTXnxQ/rETcudf+Tn5nhHis5M15ESoQBVa0Mz4=)
                          19: 115DB472B5D111F0A1AC2194DAE4EC9C.roa (hash: zLkLQwxPLh5BBWNzGvRyOityfiR56S+KxQLYKxeld8U=)
                          20: D6A36628B5D111F099116B98DAE4EC9C.roa (hash: Qb7brFTW1SmyM6hCIpLR/WnpCM+Gnw0eopnrES6lJs4=)
                          21: 5673440CFCAC11EF9614E491762E951A.roa (hash: 6r9fkhk67fd1QL6JR1kRn7YKpBT/BIiBUWKwgxbcGDI=)
                          22: 43255EBEB5D211F09330919CDAE4EC9C.roa (hash: WP/J10zandfKZR2eaHtY6wCS0JXLuclaCdl/D//TPkU=)
                          23: 84C45A96B5D211F098A59F9CDAE4EC9C.roa (hash: ZdT4oas310Raqs+Gms+VBmMixtSzPUmOs/XEA15Oe3k=)
                          24: 5FFD958AB6C011F0A433F7F3DAE4EC9C.roa (hash: lwAlG/Cp9JYBv5HsI1r0REKGcAMN2vMOXvb01TEL3gk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1717 (0x6b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
        Validity
            Not Before: Sep 26 02:46:41 2026 GMT
            Not After : Sep 28 02:46:41 2026 GMT
        Subject: CN=6ab73212-9849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ee:71:9d:41:13:ba:62:9d:ab:f8:44:2a:ef:
                    d1:8d:d2:d6:06:05:11:8c:80:b3:67:b0:ef:48:9b:
                    08:04:2a:a4:6d:f0:50:41:3c:18:3b:2d:68:49:50:
                    20:8e:51:df:90:24:3c:0f:af:a5:bb:ee:32:0d:ce:
                    45:67:19:1c:f2:6a:89:5b:89:5f:d3:ca:2e:f1:7f:
                    f2:9a:db:78:0c:01:e9:77:92:56:62:c3:66:38:a5:
                    99:8b:1d:e9:43:ed:10:04:b1:e5:7e:a0:5a:0c:e3:
                    77:08:e0:e7:7e:ac:e0:9a:b8:1d:37:2f:8b:0d:2e:
                    38:2a:5a:84:b9:44:ee:ca:9f:77:50:90:5c:62:d6:
                    99:3e:79:6d:c6:ce:ab:77:09:23:13:cd:d1:5e:7f:
                    07:02:05:0e:61:5b:d7:1d:98:80:a6:f7:5e:c5:d9:
                    68:ec:ef:81:9d:3a:83:df:e7:c4:11:b2:0d:86:27:
                    ed:9c:5f:6a:05:38:01:c4:5d:cb:d0:20:72:59:58:
                    7b:35:d8:55:05:5c:7f:26:6f:3f:5c:21:6b:99:11:
                    8b:b0:db:f8:3c:ec:18:d2:dc:c5:d3:b2:dc:9e:2c:
                    2c:5a:59:e0:ee:c7:bf:4b:7f:59:89:91:62:60:c0:
                    3e:84:13:85:d0:bf:81:5e:56:4b:64:39:38:7a:93:
                    d0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B2:FE:30:9C:60:04:70:34:84:36:2A:26:28:63:0E:AD:31:03:4B
            X509v3 Authority Key Identifier:
                keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:d4:7d:5f:61:bf:3c:5e:91:15:dc:89:7e:ce:4c:0e:e3:
         44:80:d9:ca:e4:ac:88:e3:d1:b7:c8:73:b9:5b:d7:5b:d1:78:
         c5:57:82:73:84:26:f3:5d:fc:d9:e0:4d:d2:c0:5e:c6:9d:d7:
         4a:e1:0c:c2:de:4f:ff:b6:5a:2d:f8:85:d3:35:69:d3:22:50:
         28:7a:6b:ba:b1:c9:a4:8c:c7:06:b5:6b:e2:10:6f:9d:af:ba:
         7c:04:55:81:47:85:1d:7a:fa:f8:f8:2d:fa:f1:fc:92:a1:6f:
         0d:03:ec:97:4e:28:45:0f:d6:99:87:39:45:48:28:03:f9:17:
         00:97:b3:0e:70:14:90:a4:4c:40:9a:83:01:d9:73:07:21:f8:
         20:5b:85:d0:e7:fe:50:72:4e:03:94:1f:e4:1a:bb:fa:2f:3e:
         bb:41:e7:8a:50:14:05:1f:56:d3:dc:49:15:c2:eb:69:75:97:
         8b:6c:82:df:51:f8:e8:47:33:a6:f1:fb:4c:48:4e:12:14:66:
         34:62:45:0d:3a:31:ce:bc:de:a0:ed:10:ac:bd:57:a7:e9:2d:
         44:13:8a:1a:78:d5:2e:f1:a2:09:c7:d2:a4:1b:83:ae:c8:d8:
         2a:87:93:17:f6:09:18:b3:df:a3:b0:f5:89:02:49:b6:ae:a5:
         d8:ae:48:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:34:13 2026 by rpki-client