Error: rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
File:                     Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft (raw, json)
Hash identifier:          HpPlfZVzQ5TOBYrLQhTYynQq82qNVnPSal40dItyCb4=
Subject key identifier:   DE:C1:D6:AD:97:71:B0:3C:2A:56:E5:4A:61:78:99:3A:9F:FD:14:DA
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Certificate issuer:       /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial:       06B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
Manifest number:          06A8
Signing time:             Sun 04 Oct 2026 02:39:03 +0000
Manifest this update:     Sun 04 Oct 2026 02:39:02 +0000
Manifest next update:     Tue 06 Oct 2026 02:39:02 +0000
Files and hashes:         1: Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl (hash: x7jrvXfr7U94vCHtxBxpopasy2aGppcxsoY3AJ2LER8=)
                          2: 72BABCF46FFC11EFBB10279D762E951A.roa (hash: rlDq1sLVRqkoMbUERI8asuL0sKn6qOkKebzRsYaYfgo=)
                          3: 3BAA3D5C6FFC11EFA23C0A9B762E951A.roa (hash: ZnDxmAxeEfDaWqAukKaPEazhsegTXYgu0pD30UCvUW4=)
                          4: D1982E4E706711EF8FA752B1762E951A.roa (hash: 13e2tsP9vZSc4kP/9gYLRySR8RimddvRM/CF31h+Gls=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 02:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1715 (0x6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A34AF, serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
        Validity
            Not Before: Oct  4 02:39:02 2026 GMT
            Not After : Oct  6 02:39:02 2026 GMT
        Subject: CN=6ac1bc47-e20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:94:07:2f:e6:7d:5d:a6:a9:b0:38:22:94:f9:
                    10:95:57:90:68:0d:71:5f:59:73:b6:6a:69:ad:37:
                    91:9e:0c:38:5f:26:9a:88:c7:b2:06:6f:b0:2a:ef:
                    63:d5:5d:51:8b:67:63:01:7e:79:96:7c:2f:54:a7:
                    b9:4f:a7:43:cc:fd:c8:97:0b:25:51:ea:11:c3:55:
                    e8:83:42:f7:b3:25:26:26:66:ce:ff:65:0a:cd:ed:
                    8d:da:f3:6a:d3:b9:dc:53:af:1c:0c:f2:bc:4e:cd:
                    92:21:5d:36:65:46:a0:35:f9:d9:11:19:f7:be:dd:
                    36:b8:14:88:ef:89:76:57:62:8c:17:bb:e6:ff:f9:
                    d0:2e:38:24:0c:11:a5:43:06:51:6e:86:26:c3:40:
                    d1:f0:7a:0a:68:9a:69:86:8f:b1:a1:5b:5e:59:1c:
                    20:31:23:fe:db:e8:d0:4c:a1:8d:60:a1:b4:bc:72:
                    e2:9e:f5:73:ec:fe:26:f4:34:9a:97:4f:b4:64:23:
                    3f:d7:62:c6:d8:1e:5e:ec:18:48:7c:c7:3a:09:99:
                    5b:16:7b:54:21:23:c8:9b:aa:4b:b0:ee:3e:df:18:
                    47:3e:07:4d:53:b3:1c:98:e7:e8:00:59:31:a1:23:
                    5b:c7:3b:fb:20:48:fe:d6:5d:e2:e2:51:5a:a4:fa:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C1:D6:AD:97:71:B0:3C:2A:56:E5:4A:61:78:99:3A:9F:FD:14:DA
            X509v3 Authority Key Identifier:
                keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c6:ee:99:15:f0:39:1e:db:08:02:4f:78:8e:9f:c0:5c:06:
         bd:1b:37:06:71:7a:47:ab:e5:16:02:f5:62:75:5e:c6:92:5e:
         fe:8b:c1:c9:7c:89:81:e4:ee:0e:1e:4b:93:e6:b8:ba:d5:08:
         6d:82:80:f3:ff:cc:05:f4:f6:89:1d:3e:3f:3e:15:82:18:ee:
         36:92:15:02:93:ca:61:00:e4:5e:b1:8c:5f:eb:d6:34:c2:5e:
         74:03:01:89:72:57:9a:6b:94:cf:ff:ab:45:48:9e:cb:58:08:
         f2:9a:52:68:bf:97:6c:78:53:06:5f:f5:da:98:f9:06:47:52:
         74:f9:68:f2:82:f1:22:d2:fc:39:24:7d:7d:4d:8c:eb:84:a9:
         38:d2:5b:cb:d9:6c:12:92:09:32:d9:38:68:f8:02:bb:90:79:
         ec:5a:0a:fd:4f:03:77:cb:3d:23:b0:e0:ba:de:94:92:28:67:
         c6:4d:e2:98:c2:65:4b:23:dd:5a:93:28:bd:7b:b6:49:4c:26:
         1c:ec:4f:21:76:d8:99:82:7b:aa:53:42:c6:f5:87:51:54:b1:
         97:58:69:b7:f7:4a:6e:fd:59:a1:94:48:ba:cf:53:ca:4b:07:
         85:af:ec:02:4c:94:52:ad:e3:8f:2d:c6:5d:d2:a6:af:54:02:
         39:f9:8f:2a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBrMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTVBMzRBRjExMC8GA1UEBRMoMTMxRERFNEYwMDM3OUNGNEYxNDNENUQwMEUxMzdE
Njk3QTBFQjc4MzAeFw0yNjEwMDQwMjM5MDJaFw0yNjEwMDYwMjM5MDJaMBgxFjAU
BgNVBAMTDTZhYzFiYzQ3LWUyMGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDClAcv5n1dpqmwOCKU+RCVV5BoDXFfWXO2ammtN5GeDDhfJpqIx7IGb7Aq
72PVXVGLZ2MBfnmWfC9Up7lPp0PM/ciXCyVR6hHDVeiDQvezJSYmZs7/ZQrN7Y3a
82rTudxTrxwM8rxOzZIhXTZlRqA1+dkRGfe+3Ta4FIjviXZXYowXu+b/+dAuOCQM
EaVDBlFuhibDQNHwegpommmGj7GhW15ZHCAxI/7b6NBMoY1gobS8cuKe9XPs/ib0
NJqXT7RkIz/XYsbYHl7sGEh8xzoJmVsWe1QhI8ibqkuw7j7fGEc+B01TsxyY5+gA
WTGhI1vHO/sgSP7WXeLiUVqk+sTzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3sHW
rZdxsDwqVuVKYXiZOp/9FNowHwYDVR0jBBgwFoAUEx3eTwA3nPTxQ9XQDhN9aXoO
t4MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE1QTM0LzAyQjUyNjkyQUMwRTExRUNCM0JDMEZCMDVBNDBENTc3L0V4M2VU
d0EzblBUeFE5WFFEaE45YVhvT3Q0TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0V4M2VUd0EzblBUeFE5WFFEaE45YVhvT3Q0TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTVBMzQvMDJCNTI2OTJBQzBFMTFFQ0IzQkMwRkIwNUE0
MEQ1NzcvRXgzZVR3QTNuUFR4UTlYUURoTjlhWG9PdDRNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCQxu6ZFfA5HtsIAk94jp/AXAa9GzcG
cXpHq+UWAvVidV7Gkl7+i8HJfImB5O4OHkuT5ri61QhtgoDz/8wF9PaJHT4/PhWC
GO42khUCk8phAOResYxf69Y0wl50AwGJcleaa5TP/6tFSJ7LWAjymlJov5dseFMG
X/XamPkGR1J0+WjygvEi0vw5JH19TYzrhKk40lvL2WwSkgky2Tho+AK7kHnsWgr9
TwN3yz0jsOC63pSSKGfGTeKYwmVLI91akyi9e7ZJTCYc7E8hdtiZgnuqU0LG9YdR
VLGXWGm390pu/VmhlEi6z1PKSweFr+wCTJRSreOPLcZd0qavVAI5+Y8q
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:09:51 2026 by rpki-client