Error: rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
File:                     9cC2O6peevekOGtjf9EgajaC0MM.mft (raw, json)
Hash identifier:          p82WCTV2iKHy6d4qo6ugqPr9ZW3BZ7ZOli7Sl0Yb8mE=
Subject key identifier:   B2:97:F3:3E:47:DF:B7:ED:31:9B:09:0C:7A:1E:36:25:A2:29:BD:25
Authority key identifier: F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3
Certificate issuer:       /CN=F36F731FAF/serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
Certificate serial:       04E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
Manifest number:          04D2
Signing time:             Wed 28 Oct 2026 03:37:24 +0000
Manifest this update:     Wed 28 Oct 2026 03:37:24 +0000
Manifest next update:     Fri 30 Oct 2026 03:37:24 +0000
Files and hashes:         1: 9cC2O6peevekOGtjf9EgajaC0MM.crl (hash: fbtc97h7lFAq/smPtkh1ObQ+Slx7ZkIJ0AiE6V433yo=)
                          2: 267EAD8272DF11F0AD464C91DAE4EC9C.roa (hash: C7Gyg+4x8Hh2iqCcntRO+fHKd/DGeXvmNHuRFLOmz04=)
                          3: 6FBE03AE72E311F0BDEFCDABDAE4EC9C.roa (hash: GDOqL1OTznuXTMdN5hvVfNOqFauRmjCI7pSQfs/61Bg=)
                          4: 2470589872E311F0B4EE5DABDAE4EC9C.roa (hash: WDF/PbAAV4TFNjA9XU2xgOeBCnlYy/RDmqiM+sgfu1o=)
                          5: 91475E9A72E211F09C8B08A7DAE4EC9C.roa (hash: dmA6rvzXEJFKOZ61W1TI8NubIg9lNoADQlry0wfROZM=)
                          6: D2AC214272E011F08FD2499ADAE4EC9C.roa (hash: eAUkLW2UflJP71U92dqZlcLwcktEmsvuPM9OK2RRXnQ=)
                          7: 80842C1C72DF11F0BF649F91DAE4EC9C.roa (hash: aZOMO0+Z7igI3PaEyE+67UEBIfUxAUFnCbsi9OnPJZU=)
                          8: 4B479B12743111F0A63B64B4DAE4EC9C.roa (hash: F8PB0Xl+VxolCksfnH9PLc4qAD+h/G6brzLlc4/i1tQ=)
                          9: F8B6E34672DF11F0891FBB95DAE4EC9C.roa (hash: w2bbzRZUts884GdGNQ/ARumhi7i/n68wBygotYrEdRQ=)
                          10: DD3C16F672E211F09AF665A7DAE4EC9C.roa (hash: 67phmLpraZ+TtW1XJir/6xrM9G94j8vX+qHMp4plIeo=)
                          11: 25448AB472DE11F0AFF50189DAE4EC9C.roa (hash: OUwQI8Wpq7YkfutxF3r2SbuF+hjD7BMye8Cgl6fS3Tw=)
                          12: 01F8D29672E711F0B012AEC1DAE4EC9C.roa (hash: ZCo20DEZ3jjBn9iev2zsxyuNhGfd+XXOlj6pMmP9mwQ=)
                          13: 63498D5272E111F0B646849EDAE4EC9C.roa (hash: 21/eCvRVXcBmFJZT4KGihw0yio6Yd2hm4xWHCwHphyk=)
                          14: 2539CEB072E011F08CD40396DAE4EC9C.roa (hash: hShops0GwFAXo5gbF/S8a7PguYniu2oQp8CEizQK5tY=)
                          15: DD22D36872E111F0AC53A5A2DAE4EC9C.roa (hash: QuCk5ffNaczjJdVdreAb3kkct9VCmQhrEAkYSnzbe2o=)
                          16: AD23161472E111F08259CAA0DAE4EC9C.roa (hash: CXW28jJhcJI4pbvFp4dtjP/zrfIgrsyQ25MiQvCPSyE=)
                          17: 32652F9472E511F09A23C0B6DAE4EC9C.roa (hash: eZURWL+ZrtdxT2rF22IPu3O6ltuid4qJqQt7RblkS5I=)
                          18: B185F28C72DF11F0A2456A95DAE4EC9C.roa (hash: JthSN0OOhvboQ7GailBpQ0PlPXIDL2fkxmvjlY0OCAE=)
                          19: 6C09F61A72E211F09581F0A6DAE4EC9C.roa (hash: UcVgAglDQSEP0uPY3QLGRmH+dWW7hvJEw53QIFsBsFQ=)
                          20: 121D078272E211F0A497F1A2DAE4EC9C.roa (hash: QV56lqv72VjNV1FXxfBXzR+88I2equPTmmIREvSVQyw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1256 (0x4e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAF, serialNumber=F5C0B63BAA5E7AF7A4386B637FD1206A3682D0C3
        Validity
            Not Before: Oct 28 03:37:24 2026 GMT
            Not After : Oct 30 03:37:24 2026 GMT
        Subject: CN=6ae16df4-27f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:36:d9:3d:64:f0:00:67:75:b6:e1:4c:4a:
                    a7:14:81:c0:59:b3:95:84:3e:b0:2d:a7:a5:bb:9c:
                    1f:83:6b:90:db:5a:ba:9e:e6:34:85:e0:33:3e:09:
                    43:a7:f4:45:d5:a1:82:42:6c:11:bf:4c:68:42:60:
                    7f:ec:76:cf:11:f0:a6:31:3e:25:e5:3a:c6:c7:1a:
                    db:1c:f2:30:f8:ef:2f:46:5d:30:49:62:8d:24:e9:
                    2f:b8:17:26:90:8a:8d:2b:19:a6:5f:1b:9f:1a:cc:
                    fe:d5:1c:d2:6c:ba:88:92:a6:5d:74:14:a3:30:14:
                    c6:ab:cd:5e:e4:45:32:fe:79:25:d7:3f:cb:06:f1:
                    94:eb:09:c7:ea:8c:2f:02:d3:6a:58:c8:ec:f0:d6:
                    1a:fd:44:7e:40:cc:e4:c2:17:bf:ab:e8:0e:c0:c3:
                    a6:8b:25:be:51:19:cf:ff:65:ed:b7:0a:a6:0d:41:
                    34:58:24:b5:ef:77:08:6a:bb:e4:f1:44:9a:72:5e:
                    6a:fe:e4:12:c4:b0:fe:2a:1d:cb:e2:0f:24:38:cc:
                    7b:5f:82:3c:4a:c3:94:53:a9:69:58:76:0f:3c:c9:
                    c3:03:21:45:42:74:1c:47:8c:78:f5:88:5a:c5:d1:
                    33:a0:aa:b3:cc:96:98:5c:d9:b4:53:00:d2:9c:c8:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:97:F3:3E:47:DF:B7:ED:31:9B:09:0C:7A:1E:36:25:A2:29:BD:25
            X509v3 Authority Key Identifier:
                keyid:F5:C0:B6:3B:AA:5E:7A:F7:A4:38:6B:63:7F:D1:20:6A:36:82:D0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9cC2O6peevekOGtjf9EgajaC0MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/A187DF92379711EEA4C498314AD9E6FC/9cC2O6peevekOGtjf9EgajaC0MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:83:f5:7a:47:b3:6f:d9:39:c1:c2:fb:00:da:67:87:95:2e:
         06:de:84:d0:62:1b:74:80:bf:f3:1c:c2:fd:3c:3f:83:1f:a0:
         06:16:5f:01:42:46:a1:eb:89:0e:aa:77:2a:b8:e7:3b:f6:d7:
         bf:96:61:0c:58:58:60:18:63:34:98:ae:af:03:4d:71:e4:81:
         d9:10:5d:e6:d5:a2:b2:3a:ed:15:03:83:81:3e:e3:6b:05:44:
         84:62:9e:d5:21:7f:c5:c4:85:17:04:26:46:49:25:ea:3e:21:
         23:6a:8a:0f:49:e0:be:01:77:ed:30:f8:56:82:f0:f0:0e:a8:
         c7:be:92:7a:1b:5f:51:af:8f:6c:90:eb:09:e6:41:97:a6:94:
         e7:8d:c9:67:31:89:61:a9:c6:6f:64:e4:19:47:6c:56:74:0b:
         bb:7e:52:3d:ec:45:2a:ad:0c:08:f6:46:b0:d6:34:71:6e:6f:
         10:57:ff:c6:1c:76:16:8e:62:fb:26:5d:ee:d2:13:14:31:0c:
         1b:0e:d5:e3:a0:2b:a5:f3:f6:70:39:45:a8:c8:ae:9c:9e:f1:
         57:8c:e0:98:1b:c7:a3:86:9f:3b:7f:26:4b:d0:1a:24:c9:8b:
         37:79:bf:7f:75:78:e0:ae:67:bb:df:99:60:fd:b3:c4:4e:f2:
         25:5c:32:77
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBOgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjczMUZBRjExMC8GA1UEBRMoRjVDMEI2M0JBQTVFN0FGN0E0Mzg2QjYzN0ZEMTIw
NkEzNjgyRDBDMzAeFw0yNjEwMjgwMzM3MjRaFw0yNjEwMzAwMzM3MjRaMBgxFjAU
BgNVBAMTDTZhZTE2ZGY0LTI3ZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCg9jbZPWTwAGd1tuFMSqcUgcBZs5WEPrAtp6W7nB+Da5DbWrqe5jSF4DM+
CUOn9EXVoYJCbBG/TGhCYH/sds8R8KYxPiXlOsbHGtsc8jD47y9GXTBJYo0k6S+4
FyaQio0rGaZfG58azP7VHNJsuoiSpl10FKMwFMarzV7kRTL+eSXXP8sG8ZTrCcfq
jC8C02pYyOzw1hr9RH5AzOTCF7+r6A7Aw6aLJb5RGc//Ze23CqYNQTRYJLXvdwhq
u+TxRJpyXmr+5BLEsP4qHcviDyQ4zHtfgjxKw5RTqWlYdg88ycMDIUVCdBxHjHj1
iFrF0TOgqrPMlphc2bRTANKcyHXRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUspfz
Pkfft+0xmwkMeh42JaIpvSUwHwYDVR0jBBgwFoAU9cC2O6peevekOGtjf9EgajaC
0MMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY3MzFGL0ExODdERjkyMzc5NzExRUVBNEM0OTgzMTRBRDlFNkZDLzljQzJP
NnBlZXZla09HdGpmOUVnYWphQzBNTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzljQzJPNnBlZXZla09HdGpmOUVnYWphQzBNTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjczMUYvQTE4N0RGOTIzNzk3MTFFRUE0QzQ5ODMxNEFE
OUU2RkMvOWNDMk82cGVldmVrT0d0amY5RWdhamFDME1NLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7g/V6R7Nv2TnBwvsA2meHlS4G3oTQ
Yht0gL/zHML9PD+DH6AGFl8BQkah64kOqncquOc79te/lmEMWFhgGGM0mK6vA01x
5IHZEF3m1aKyOu0VA4OBPuNrBUSEYp7VIX/FxIUXBCZGSSXqPiEjaooPSeC+AXft
MPhWgvDwDqjHvpJ6G19Rr49skOsJ5kGXppTnjclnMYlhqcZvZOQZR2xWdAu7flI9
7EUqrQwI9kaw1jRxbm8QV//GHHYWjmL7Jl3u0hMUMQwbDtXjoCul8/ZwOUWoyK6c
nvFXjOCYG8ejhp87fyZL0BokyYs3eb9/dXjgrme735lg/bPETvIlXDJ3
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:19:29 2026 by rpki-client