Error: rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
File:                     b60oLUjzGQY2QqK5qAO2puATULQ.mft (raw, json)
Hash identifier:          eCXrxY7O8S7FnTMTmRwlvqqeDOWFc5eGYkwAZz12QVc=
Subject key identifier:   04:1A:C5:12:A3:B5:89:B3:99:BE:19:B4:17:71:F1:67:92:A5:43:87
Authority key identifier: 6F:AD:28:2D:48:F3:19:06:36:42:A2:B9:A8:03:B6:A6:E0:13:50:B4
Certificate issuer:       /CN=F36FDBB4AF/serialNumber=6FAD282D48F319063642A2B9A803B6A6E01350B4
Certificate serial:       0380
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
Manifest number:          037F
Signing time:             Fri 23 Oct 2026 04:13:41 +0000
Manifest this update:     Fri 23 Oct 2026 04:13:40 +0000
Manifest next update:     Sun 25 Oct 2026 04:13:40 +0000
Files and hashes:         1: b60oLUjzGQY2QqK5qAO2puATULQ.crl (hash: M234CJKt0GYYZMgYFY1XF+hjJsY106lmPeR++PLbL2Q=)
                          2: 5AE15E321D8E11EFB150AF207DDC24C2.roa (hash: 02fS43r1eNuS1EPFvyivvFwrFFekmWd3UmleeUTRe0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 04:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDBB4AF, serialNumber=6FAD282D48F319063642A2B9A803B6A6E01350B4
        Validity
            Not Before: Oct 23 04:13:40 2026 GMT
            Not After : Oct 25 04:13:40 2026 GMT
        Subject: CN=6adadef5-5bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b0:c5:ed:f0:32:0a:4c:7b:28:e5:03:9b:fb:
                    eb:6a:e9:3f:6c:d9:5c:e2:a1:1c:1d:e0:dd:78:87:
                    4c:51:94:2f:e6:d4:65:2d:4f:89:66:aa:d8:17:cd:
                    be:98:ac:60:41:e1:93:4b:9b:e3:dd:46:64:24:05:
                    5f:b9:15:71:78:ee:7c:39:ed:2a:b5:65:c6:79:2d:
                    ec:ef:d3:9e:0b:85:84:13:9a:62:3f:30:61:20:8a:
                    74:0f:ce:4e:45:41:08:f6:dc:bb:4c:9b:fe:8c:74:
                    ff:88:95:f7:da:60:fc:b0:4d:55:6b:8d:15:23:dc:
                    e8:36:8c:fe:54:bf:0b:88:c6:41:d1:e1:85:de:87:
                    61:de:da:f9:4a:d6:7c:f2:e4:f9:ed:3e:e9:21:2a:
                    56:f5:e3:eb:c5:ec:4f:9d:d5:3e:24:4a:32:ed:4c:
                    81:39:cb:f8:27:d3:bc:73:d3:82:0f:bc:d8:96:a5:
                    84:c2:b9:35:1c:72:3d:6f:35:31:a8:67:0e:12:fd:
                    32:7f:31:6a:57:19:65:86:a4:b3:ac:7c:eb:3f:9a:
                    93:b2:3b:da:ee:b7:15:6f:43:ec:fc:88:37:73:ee:
                    52:33:6f:ec:93:98:86:64:25:4c:72:98:83:61:92:
                    14:e3:4d:60:bb:9f:43:4c:17:cd:20:8d:ea:7c:d9:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:C5:12:A3:B5:89:B3:99:BE:19:B4:17:71:F1:67:92:A5:43:87
            X509v3 Authority Key Identifier:
                keyid:6F:AD:28:2D:48:F3:19:06:36:42:A2:B9:A8:03:B6:A6:E0:13:50:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:a5:67:75:dd:6d:ec:df:f9:f7:d4:f1:9b:b9:61:c9:b1:3e:
         2f:8c:f0:3a:b2:cf:7d:50:2f:4c:4f:1c:28:fe:df:0d:bb:92:
         5a:f0:02:69:b6:df:95:4d:91:54:e0:3c:a0:1e:52:f2:4b:fc:
         5b:48:66:5a:5c:ae:6b:01:d7:fe:17:3a:be:cf:3e:cd:9f:3f:
         3e:72:46:c0:ef:72:aa:53:b3:e8:83:c9:89:f0:39:e0:f9:ac:
         bf:c1:cf:89:1a:ad:42:4a:fb:5c:66:3b:56:91:1f:e4:cd:db:
         73:64:9f:79:0f:ba:2a:60:51:4e:3d:4d:d7:71:22:18:a8:a3:
         1d:f6:bb:4a:a5:79:55:00:09:72:d2:38:44:de:64:e8:4c:ca:
         b4:0a:2b:e2:06:1b:fd:5e:4f:9d:20:64:ba:9c:5c:21:e9:c8:
         f4:c0:d6:15:8e:3d:18:5d:62:82:8c:8a:63:e6:86:2c:19:40:
         56:c4:87:4a:39:11:fe:c0:fb:7a:ad:64:12:f8:01:ef:78:25:
         aa:86:96:57:23:98:ca:6f:0b:a2:64:1f:2f:1f:27:f7:f9:19:
         b3:9b:b0:44:b7:97:4f:9f:85:e7:0c:5c:26:f8:3c:aa:78:b5:
         be:60:2d:ba:a9:dc:72:03:71:3a:ea:f0:a8:14:ec:c6:b6:97:
         2f:06:1b:bd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA4AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkRCQjRBRjExMC8GA1UEBRMoNkZBRDI4MkQ0OEYzMTkwNjM2NDJBMkI5QTgwM0I2
QTZFMDEzNTBCNDAeFw0yNjEwMjMwNDEzNDBaFw0yNjEwMjUwNDEzNDBaMBgxFjAU
BgNVBAMTDTZhZGFkZWY1LTViZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClsMXt8DIKTHso5QOb++tq6T9s2VzioRwd4N14h0xRlC/m1GUtT4lmqtgX
zb6YrGBB4ZNLm+PdRmQkBV+5FXF47nw57Sq1ZcZ5Lezv054LhYQTmmI/MGEginQP
zk5FQQj23LtMm/6MdP+IlffaYPywTVVrjRUj3Og2jP5UvwuIxkHR4YXeh2He2vlK
1nzy5PntPukhKlb14+vF7E+d1T4kSjLtTIE5y/gn07xz04IPvNiWpYTCuTUccj1v
NTGoZw4S/TJ/MWpXGWWGpLOsfOs/mpOyO9rutxVvQ+z8iDdz7lIzb+yTmIZkJUxy
mINhkhTjTWC7n0NMF80gjep82S0zAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBBrF
EqO1ibOZvhm0F3HxZ5KlQ4cwHwYDVR0jBBgwFoAUb60oLUjzGQY2QqK5qAO2puAT
ULQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZEQkI0L0Y0RTBERjE0MUQ4QzExRUZCOUM1QThFNDdDREMyNEMyL2I2MG9M
VWp6R1FZMlFxSzVxQU8ycHVBVFVMUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2I2MG9MVWp6R1FZMlFxSzVxQU8ycHVBVFVMUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkRCQjQvRjRFMERGMTQxRDhDMTFFRkI5QzVBOEU0N0NE
QzI0QzIvYjYwb0xVanpHUVkyUXFLNXFBTzJwdUFUVUxRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3pWd13W3s3/n31PGbuWHJsT4vjPA6
ss99UC9MTxwo/t8Nu5Ja8AJptt+VTZFU4DygHlLyS/xbSGZaXK5rAdf+Fzq+zz7N
nz8+ckbA73KqU7Pog8mJ8Dng+ay/wc+JGq1CSvtcZjtWkR/kzdtzZJ95D7oqYFFO
PU3XcSIYqKMd9rtKpXlVAAly0jhE3mToTMq0CiviBhv9Xk+dIGS6nFwh6cj0wNYV
jj0YXWKCjIpj5oYsGUBWxIdKORH+wPt6rWQS+AHveCWqhpZXI5jKbwuiZB8vHyf3
+Rmzm7BEt5dPn4XnDFwm+DyqeLW+YC26qdxyA3E66vCoFOzGtpcvBhu9
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:44:26 2026 by rpki-client