Error: rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
File:                     9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft (raw, json)
Hash identifier:          tE+mBLAJrnBJMwJDH9OpKAnD/dzBWR3IY2k2EZ2rUEk=
Subject key identifier:   6D:BB:58:68:7B:B6:19:E5:59:E8:B4:C0:5E:99:EA:92:B1:84:9E:FB
Authority key identifier: F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
Certificate issuer:       /CN=F36EED3EAF/serialNumber=F59284D76678851F7AA743B13F6C067479550074
Certificate serial:       04EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
Manifest number:          04EA
Signing time:             Mon 26 Oct 2026 03:30:32 +0000
Manifest this update:     Mon 26 Oct 2026 03:30:31 +0000
Manifest next update:     Wed 28 Oct 2026 03:30:31 +0000
Files and hashes:         1: 9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl (hash: W/+A/e7eesIjqfSF8q1680ooDhwOMkTi8JL7VQ9PLSo=)
                          2: C226B7D40AA411EEAEA4A5484AD9E6FC.roa (hash: Qm72goTpyMAJ3Op/uLoxMku/eqrMrQ5Gy2DoW/t8FVs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259 (0x4eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EED3EAF, serialNumber=F59284D76678851F7AA743B13F6C067479550074
        Validity
            Not Before: Oct 26 03:30:31 2026 GMT
            Not After : Oct 28 03:30:31 2026 GMT
        Subject: CN=6adec958-e9ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a2:e2:23:ec:bc:a6:05:a4:a4:94:de:7b:14:
                    c9:fe:d7:67:d1:2b:2e:1b:66:89:ef:10:f4:72:12:
                    d1:9e:bd:b8:8b:36:16:17:28:c0:1c:c7:5e:b6:8d:
                    63:d4:22:ef:75:20:3c:a2:ac:67:29:b4:b3:e0:68:
                    12:9b:ef:ff:49:18:db:de:ab:1c:40:5f:c9:03:8a:
                    5d:4b:64:43:c6:27:70:49:ea:72:91:fa:8b:ac:8b:
                    2c:a1:5a:8f:c9:e2:d1:58:7f:76:21:6d:09:01:86:
                    4e:17:5f:f5:9a:c2:ac:8e:14:2d:42:fd:0e:7a:f8:
                    4e:a0:21:f2:c3:b4:0b:11:6c:ac:a3:bc:16:3b:b6:
                    60:b8:f4:0f:94:ab:fd:47:7b:49:fe:70:bd:d1:80:
                    a0:c5:31:7f:0c:0b:d8:b2:f7:39:f7:19:77:d9:e5:
                    63:09:2d:34:9f:a9:6b:56:58:e3:f5:b0:05:f9:77:
                    62:ea:ab:df:68:cb:fb:e7:d6:c9:00:53:93:3c:eb:
                    fb:f1:23:0b:b5:47:17:cd:33:e6:c9:92:13:22:8e:
                    0d:dd:c1:11:c8:7a:3f:29:28:46:df:84:d6:40:e4:
                    9c:2d:5e:28:82:c9:72:ac:89:d7:d9:bc:be:29:46:
                    59:78:7f:00:e3:83:65:e2:78:11:c4:05:61:77:0c:
                    1e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BB:58:68:7B:B6:19:E5:59:E8:B4:C0:5E:99:EA:92:B1:84:9E:FB
            X509v3 Authority Key Identifier:
                keyid:F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:2a:65:25:1f:25:b1:7d:c9:cf:e6:10:27:64:c6:bf:f4:8e:
         28:6e:85:15:01:ee:ef:c1:15:37:e8:b2:85:63:2b:15:08:b3:
         7f:b8:50:61:7c:d2:f6:5b:30:5c:e6:63:0e:fd:72:49:50:2e:
         b6:53:00:e3:49:5e:5d:21:e2:48:ac:b3:37:ef:0e:b2:92:55:
         f3:0c:40:8d:9c:00:95:6a:b5:95:fa:34:9d:af:e9:8d:82:ba:
         08:a7:be:4c:95:95:ca:99:15:9d:a0:12:21:b9:d5:c5:68:43:
         99:3d:b9:c7:75:56:bf:29:83:ff:f3:a3:cd:dc:76:e4:0b:8d:
         61:ea:3b:b9:df:a9:df:f7:5a:d5:5c:7f:0f:39:b6:5f:ac:7b:
         b0:70:15:cf:71:45:3a:c6:c9:73:63:13:53:17:19:dd:a9:41:
         5e:9a:f0:a5:b7:6a:bd:ca:cf:d3:d7:3e:50:bc:07:4f:1b:af:
         f0:18:b6:90:6f:84:6c:da:58:ed:bd:21:0f:d8:87:8f:cb:9d:
         ae:c1:e9:c6:44:08:b5:1d:0d:ad:e2:9e:8f:80:37:c5:48:00:
         7b:34:7a:c5:76:b6:f9:f1:4f:8b:3c:46:45:b7:ea:9d:7c:b2:
         be:e2:6c:e5:96:ed:9a:5d:f1:d4:17:b6:42:34:8c:38:24:82:
         4c:23:5f:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBOswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUVEM0VBRjExMC8GA1UEBRMoRjU5Mjg0RDc2Njc4ODUxRjdBQTc0M0IxM0Y2QzA2
NzQ3OTU1MDA3NDAeFw0yNjEwMjYwMzMwMzFaFw0yNjEwMjgwMzMwMzFaMBgxFjAU
BgNVBAMTDTZhZGVjOTU4LWU5YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqouIj7LymBaSklN57FMn+12fRKy4bZonvEPRyEtGevbiLNhYXKMAcx162
jWPUIu91IDyirGcptLPgaBKb7/9JGNveqxxAX8kDil1LZEPGJ3BJ6nKR+ousiyyh
Wo/J4tFYf3YhbQkBhk4XX/WawqyOFC1C/Q56+E6gIfLDtAsRbKyjvBY7tmC49A+U
q/1He0n+cL3RgKDFMX8MC9iy9zn3GXfZ5WMJLTSfqWtWWOP1sAX5d2Lqq99oy/vn
1skAU5M86/vxIwu1RxfNM+bJkhMijg3dwRHIej8pKEbfhNZA5JwtXiiCyXKsidfZ
vL4pRll4fwDjg2XieBHEBWF3DB7dAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbbtY
aHu2GeVZ6LTAXpnqkrGEnvswHwYDVR0jBBgwFoAU9ZKE12Z4hR96p0OxP2wGdHlV
AHQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVFRDNFLzJBRjhGQjY2MEFBMzExRUVBRjJDRkE0MzRBRDlFNkZDLzlaS0Ux
Mlo0aFI5NnAwT3hQMndHZEhsVkFIUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlaS0UxMlo0aFI5NnAwT3hQMndHZEhsVkFIUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUVEM0UvMkFGOEZCNjYwQUEzMTFFRUFGMkNGQTQzNEFE
OUU2RkMvOVpLRTEyWjRoUjk2cDBPeFAyd0dkSGxWQUhRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHKmUlHyWxfcnP5hAnZMa/9I4oboUV
Ae7vwRU36LKFYysVCLN/uFBhfNL2WzBc5mMO/XJJUC62UwDjSV5dIeJIrLM37w6y
klXzDECNnACVarWV+jSdr+mNgroIp75MlZXKmRWdoBIhudXFaEOZPbnHdVa/KYP/
86PN3HbkC41h6ju536nf91rVXH8PObZfrHuwcBXPcUU6xslzYxNTFxndqUFemvCl
t2q9ys/T1z5QvAdPG6/wGLaQb4Rs2ljtvSEP2IePy52uwenGRAi1HQ2t4p6PgDfF
SAB7NHrFdrb58U+LPEZFt+qdfLK+4mzllu2aXfHUF7ZCNIw4JIJMI19v
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:56:33 2026 by rpki-client