Error: rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
File:                     LNMcPCUfXtoYP5OOf8s6Sh26id0.mft (raw, json)
Hash identifier:          bm5Wmjz8faavPzd9oP3yVOEC5yW7B9Xmm82bG0wFH1A=
Subject key identifier:   10:E4:69:A6:94:8E:E8:6A:93:1A:47:DF:19:8C:99:7F:DC:AC:5F:F3
Authority key identifier: 2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD
Certificate issuer:       /CN=F36FDDEEAF/serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
Certificate serial:       095C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
Manifest number:          094E
Signing time:             Tue 20 Oct 2026 01:51:30 +0000
Manifest this update:     Tue 20 Oct 2026 01:51:29 +0000
Manifest next update:     Thu 22 Oct 2026 01:51:29 +0000
Files and hashes:         1: LNMcPCUfXtoYP5OOf8s6Sh26id0.crl (hash: sFPITYNLw80butfRweMNhcV7CmCTISaazGmZj3U+cYY=)
                          2: F0EF141C4FAD11F0A2CF018ADAE4EC9C.roa (hash: s9CANyFnnMQFBebtZSUl9JpC2l7TIpoth6Vtnvo8L04=)
                          3: 8CBEF34A4FAD11F093912788DAE4EC9C.roa (hash: LYzjFbg1hC2pJNCyNVlFyFaCoTckxwNGPohEbA60zjQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 01:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396 (0x95c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDEEAF, serialNumber=2CD31C3C251F5EDA183F938E7FCB3A4A1DBA89DD
        Validity
            Not Before: Oct 20 01:51:29 2026 GMT
            Not After : Oct 22 01:51:29 2026 GMT
        Subject: CN=6ad6c922-90e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:00:63:16:dc:13:0e:f4:fc:02:0d:64:a8:
                    75:7d:b2:82:c5:20:d2:93:f4:93:e0:71:28:1d:52:
                    23:f0:8a:fa:6a:f4:45:20:bb:38:35:4a:61:77:96:
                    15:c2:76:3d:27:e9:4d:8a:b5:b9:c5:63:37:62:fe:
                    1d:cf:d9:5e:b7:aa:15:89:11:57:9e:09:11:f2:08:
                    9e:ba:af:fa:5c:32:a9:33:95:b7:3a:66:0c:35:18:
                    0e:6c:0e:35:06:03:d4:d9:d8:f5:99:ff:b6:7e:a2:
                    f3:7a:07:68:48:4b:e1:e5:01:6e:28:e7:b0:9f:71:
                    65:8d:dc:60:d8:b8:4c:70:7b:82:f7:6a:39:1e:9f:
                    9d:33:f2:00:21:73:4c:35:fa:4b:fc:9d:54:c9:66:
                    f1:d1:80:6c:92:4a:80:3f:26:bd:48:7b:e7:2b:8d:
                    92:1e:45:b4:9b:ee:09:e0:9a:38:fc:41:6b:71:71:
                    f0:6b:63:f9:1e:02:0c:36:7e:5b:c6:41:46:eb:3b:
                    2d:52:bd:ba:df:ae:74:cc:60:86:7d:11:db:d7:51:
                    b7:5f:1c:2d:57:25:c5:fd:4e:c3:c9:3a:13:98:f5:
                    bc:81:4f:ca:8f:13:c7:48:ef:fc:f2:91:55:ef:d9:
                    db:35:5c:77:7a:5a:cf:22:0b:4c:69:ee:7a:65:33:
                    26:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E4:69:A6:94:8E:E8:6A:93:1A:47:DF:19:8C:99:7F:DC:AC:5F:F3
            X509v3 Authority Key Identifier:
                keyid:2C:D3:1C:3C:25:1F:5E:DA:18:3F:93:8E:7F:CB:3A:4A:1D:BA:89:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LNMcPCUfXtoYP5OOf8s6Sh26id0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDEE/214C5AECB49B11EAA3F61F0FF8AEA228/LNMcPCUfXtoYP5OOf8s6Sh26id0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:6b:90:be:fa:04:ac:10:b7:1a:54:ed:89:09:7b:2a:2e:
         01:55:3e:48:b9:bc:df:f7:bb:21:26:6c:78:ac:fc:c1:71:88:
         58:36:56:81:f5:84:55:80:17:f7:56:f5:e4:c0:c6:96:17:32:
         7c:72:31:a8:22:45:60:e5:aa:b4:64:f9:f9:19:e2:9a:c4:37:
         6f:6d:0f:1d:c7:65:21:2d:eb:9f:42:d3:96:48:14:d4:b7:48:
         46:24:79:c5:07:a2:25:af:0b:5a:f9:84:0f:be:a8:fa:b9:b1:
         e6:36:2c:b9:c6:80:22:1d:5e:43:cf:8d:99:77:c9:69:3c:e7:
         9f:6f:9a:d4:b0:bb:0f:01:d1:b4:a0:93:43:df:8d:64:0e:c2:
         da:b5:0e:17:9f:0e:a4:8e:f6:4d:6b:6b:e4:8e:dd:67:e3:3c:
         4c:88:5c:1c:97:3e:fd:15:3f:5d:20:44:ad:64:32:c4:cc:73:
         8d:c9:71:0a:61:b0:31:6e:3d:08:8d:95:9f:a9:18:db:8d:fd:
         b1:17:a3:d3:b9:c1:57:d5:6a:06:0b:38:e6:22:42:cd:9c:be:
         ae:1b:94:97:62:2c:b7:1f:f0:bf:6e:7e:16:bd:37:d4:dc:f1:
         23:a2:8e:81:f6:b3:fd:59:00:35:51:3e:e6:bf:94:40:dd:58:
         c6:09:78:84
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCVwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkRERUVBRjExMC8GA1UEBRMoMkNEMzFDM0MyNTFGNUVEQTE4M0Y5MzhFN0ZDQjNB
NEExREJBODlERDAeFw0yNjEwMjAwMTUxMjlaFw0yNjEwMjIwMTUxMjlaMBgxFjAU
BgNVBAMTDTZhZDZjOTIyLTkwZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBdQBjFtwTDvT8Ag1kqHV9soLFINKT9JPgcSgdUiPwivpq9EUguzg1SmF3
lhXCdj0n6U2KtbnFYzdi/h3P2V63qhWJEVeeCRHyCJ66r/pcMqkzlbc6Zgw1GA5s
DjUGA9TZ2PWZ/7Z+ovN6B2hIS+HlAW4o57CfcWWN3GDYuExwe4L3ajken50z8gAh
c0w1+kv8nVTJZvHRgGySSoA/Jr1Ie+crjZIeRbSb7gngmjj8QWtxcfBrY/keAgw2
flvGQUbrOy1SvbrfrnTMYIZ9EdvXUbdfHC1XJcX9TsPJOhOY9byBT8qPE8dI7/zy
kVXv2ds1XHd6Ws8iC0xp7nplMyZdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEORp
ppSO6GqTGkffGYyZf9ysX/MwHwYDVR0jBBgwFoAULNMcPCUfXtoYP5OOf8s6Sh26
id0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZEREVFLzIxNEM1QUVDQjQ5QjExRUFBM0Y2MUYwRkY4QUVBMjI4L0xOTWNQ
Q1VmWHRvWVA1T09mOHM2U2gyNmlkMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xOTWNQQ1VmWHRvWVA1T09mOHM2U2gyNmlkMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkRERUUvMjE0QzVBRUNCNDlCMTFFQUEzRjYxRjBGRjhB
RUEyMjgvTE5NY1BDVWZYdG9ZUDVPT2Y4czZTaDI2aWQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCXw2uQvvoErBC3GlTtiQl7Ki4BVT5I
ubzf97shJmx4rPzBcYhYNlaB9YRVgBf3VvXkwMaWFzJ8cjGoIkVg5aq0ZPn5GeKa
xDdvbQ8dx2UhLeufQtOWSBTUt0hGJHnFB6Ilrwta+YQPvqj6ubHmNiy5xoAiHV5D
z42Zd8lpPOefb5rUsLsPAdG0oJND341kDsLatQ4Xnw6kjvZNa2vkjt1n4zxMiFwc
lz79FT9dIEStZDLEzHONyXEKYbAxbj0IjZWfqRjbjf2xF6PTucFX1WoGCzjmIkLN
nL6uG5SXYiy3H/C/bn4WvTfU3PEjoo6B9rP9WQA1UT7mv5RA3VjGCXiE
-----END CERTIFICATE-----
Generated at Tue Oct 20 12:27:03 2026 by rpki-client