Error: rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft
File:                     SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft (raw, json)
Hash identifier:          gZkTIC02KnWa4gMoaqwg+PkZmbuslJRKpfB+CTHmGso=
Subject key identifier:   40:ED:90:04:66:3C:41:9A:90:CF:E8:9F:CB:09:B9:66:14:C9:EF:29
Authority key identifier: 49:09:FA:C7:E4:14:ED:8A:E1:D8:A2:34:35:B5:0C:80:AC:F0:FA:6F
Certificate issuer:       /CN=F36C89CDAF/serialNumber=4909FAC7E414ED8AE1D8A23435B50C80ACF0FA6F
Certificate serial:       70
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft
Manifest number:          70
Signing time:             Tue 27 Oct 2026 05:43:07 +0000
Manifest this update:     Tue 27 Oct 2026 05:43:06 +0000
Manifest next update:     Thu 29 Oct 2026 05:43:06 +0000
Files and hashes:         1: SQn6x-QU7Yrh2KI0NbUMgKzw-m8.crl (hash: NeFI2vg4TcCdgxa7cpe+sMrs5O92GUJ2LahfOyhOvCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 05:43:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C89CDAF, serialNumber=4909FAC7E414ED8AE1D8A23435B50C80ACF0FA6F
        Validity
            Not Before: Oct 27 05:43:06 2026 GMT
            Not After : Oct 29 05:43:06 2026 GMT
        Subject: CN=6ae039eb-222f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:51:eb:c3:ca:09:c5:5e:f1:ec:48:f6:04:6e:
                    7f:04:7f:d3:d1:60:9c:47:ea:d5:8f:92:71:0a:e6:
                    d7:1a:2a:ca:36:c3:55:ce:b7:14:64:71:90:00:27:
                    97:bc:02:4e:3d:47:ed:d8:bc:bd:08:b9:1c:d2:fe:
                    71:5d:a7:26:bd:ad:ae:0b:52:59:bd:c7:c3:82:9f:
                    db:a3:6a:a8:11:7d:57:ba:d6:1b:23:d4:81:45:e5:
                    12:76:a1:92:a7:01:34:17:20:97:85:6b:d1:66:23:
                    4b:62:bf:4f:1d:f4:48:26:b6:ab:a7:55:73:b1:90:
                    59:fa:14:4f:f1:10:fa:41:74:02:24:e9:f4:6b:61:
                    98:2b:f5:ba:dc:04:41:5b:9f:ab:2f:de:a4:0b:53:
                    10:0c:cc:d8:0a:d1:72:4b:2f:a4:e3:10:be:00:32:
                    a5:60:59:ec:3e:98:ba:f8:00:14:bd:5c:04:59:29:
                    9e:97:89:12:aa:83:55:0d:77:b1:d9:dd:cb:68:bf:
                    af:e9:f5:70:2d:4d:a2:c5:d8:ff:13:1f:61:d2:4e:
                    17:65:06:be:c9:d2:b7:9d:d9:a6:76:06:23:a5:47:
                    e6:73:8b:04:21:50:42:ac:2c:26:b1:49:cc:16:3e:
                    1e:53:7f:5f:a5:ad:8a:ca:33:94:89:e4:3b:a4:dd:
                    fe:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:ED:90:04:66:3C:41:9A:90:CF:E8:9F:CB:09:B9:66:14:C9:EF:29
            X509v3 Authority Key Identifier:
                keyid:49:09:FA:C7:E4:14:ED:8A:E1:D8:A2:34:35:B5:0C:80:AC:F0:FA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:40:12:98:b2:00:59:87:cc:58:f7:85:df:cc:2c:48:dd:37:
         75:00:e8:15:12:fb:12:72:66:ae:cb:4b:a7:db:92:84:b6:df:
         67:c0:23:17:80:e1:e6:84:78:e2:8b:22:ce:e7:d3:f6:38:1f:
         cb:95:d6:d6:7f:d5:fb:44:bb:62:ee:3c:06:08:7e:bc:3e:ad:
         c5:27:df:ea:ea:7f:cc:6e:44:84:bd:2b:70:69:de:f4:f2:ff:
         c2:4a:d7:2b:84:2e:94:ab:34:e3:71:a7:ad:8f:69:3b:2d:77:
         fd:7a:34:22:f2:0d:ff:b5:1b:71:bc:bb:7b:71:9f:ca:fa:2b:
         ee:50:55:05:11:c2:51:be:62:07:26:46:0b:28:3a:aa:51:06:
         75:bf:f7:e0:8d:8f:02:16:1c:37:33:63:78:6f:6d:5c:d1:54:
         e6:12:ce:b7:d2:a0:b1:a6:71:d4:b2:79:d8:7c:7d:7c:d7:0d:
         6a:d9:b5:71:b3:80:3d:a6:dc:80:c4:fa:2a:c8:27:d1:00:ad:
         0f:89:f8:90:fe:f5:ed:49:22:62:8b:06:f9:a4:f6:49:c5:f0:
         4f:0e:cf:2c:7f:b5:af:fb:39:2f:71:e1:cc:01:89:6c:25:1d:
         08:24:fa:9e:3b:ad:a0:d1:e7:89:e7:67:84:0f:97:2e:53:e5:
         10:51:5e:3d
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBcDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
ODlDREFGMTEwLwYDVQQFEyg0OTA5RkFDN0U0MTRFRDhBRTFEOEEyMzQzNUI1MEM4
MEFDRjBGQTZGMB4XDTI2MTAyNzA1NDMwNloXDTI2MTAyOTA1NDMwNlowGDEWMBQG
A1UEAxMNNmFlMDM5ZWItMjIyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMdR68PKCcVe8exI9gRufwR/09FgnEfq1Y+ScQrm1xoqyjbDVc63FGRxkAAn
l7wCTj1H7di8vQi5HNL+cV2nJr2trgtSWb3Hw4Kf26NqqBF9V7rWGyPUgUXlEnah
kqcBNBcgl4Vr0WYjS2K/Tx30SCa2q6dVc7GQWfoUT/EQ+kF0AiTp9GthmCv1utwE
QVufqy/epAtTEAzM2ArRcksvpOMQvgAypWBZ7D6YuvgAFL1cBFkpnpeJEqqDVQ13
sdndy2i/r+n1cC1NosXY/xMfYdJOF2UGvsnSt53ZpnYGI6VH5nOLBCFQQqwsJrFJ
zBY+HlN/X6WtisozlInkO6Td/tECAwEAAaOCArgwggK0MB0GA1UdDgQWBBRA7ZAE
ZjxBmpDP6J/LCblmFMnvKTAfBgNVHSMEGDAWgBRJCfrH5BTtiuHYojQ1tQyArPD6
bzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Qzg5Q0QvQkQxRjBEMTQ3QjkzMTFGMTg2OTU4RENCQ0UxRDM4QjAvU1FuNngt
UVU3WXJoMktJME5iVU1nS3p3LW04LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvU1FuNngtUVU3WXJoMktJME5iVU1nS3p3LW04LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDODlDRC9CRDFGMEQxNDdCOTMxMUYxODY5NThEQ0JDRTFE
MzhCMC9TUW42eC1RVTdZcmgyS0kwTmJVTWdLenctbTgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJBAEpiyAFmHzFj3hd/MLEjdN3UA6BUS
+xJyZq7LS6fbkoS232fAIxeA4eaEeOKLIs7n0/Y4H8uV1tZ/1ftEu2LuPAYIfrw+
rcUn3+rqf8xuRIS9K3Bp3vTy/8JK1yuELpSrNONxp62PaTstd/16NCLyDf+1G3G8
u3txn8r6K+5QVQURwlG+YgcmRgsoOqpRBnW/9+CNjwIWHDczY3hvbVzRVOYSzrfS
oLGmcdSyedh8fXzXDWrZtXGzgD2m3IDE+irIJ9EArQ+J+JD+9e1JImKLBvmk9knF
8E8Ozyx/ta/7OS9x4cwBiWwlHQgk+p47raDR54nnZ4QPly5T5RBRXj0=
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:01:08 2026 by rpki-client