Error: rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
File:                     RtQFVYABqLApuWqxNAbWmh3XQEU.mft (raw, json)
Hash identifier:          YEalkTGbMeWMo4a2jD2qz+M/tg4Ov7bFZyXjuu89U74=
Subject key identifier:   EC:09:2E:BF:B4:17:C9:AD:5A:3F:80:2F:AA:90:F7:ED:B6:EF:EC:40
Authority key identifier: 46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45
Certificate issuer:       /CN=F3619C8CAF/serialNumber=46D405558001A8B029B96AB13406D69A1DD74045
Certificate serial:       032B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
Manifest number:          0325
Signing time:             Sat 10 Oct 2026 04:26:02 +0000
Manifest this update:     Sat 10 Oct 2026 04:26:01 +0000
Manifest next update:     Mon 12 Oct 2026 04:26:01 +0000
Files and hashes:         1: RtQFVYABqLApuWqxNAbWmh3XQEU.crl (hash: iySnVnqodmId+dJohD/0fq5qszYjvoTHRwZ2s5JfjtE=)
                          2: 1B05F788A4FA11F0885D037BDAE4EC9C.roa (hash: GjkulRsKKJbZVrp77ugYgp/kqLitaMudIz+NNcc4dbE=)
                          3: F71D77E2AA8611EF98B0D05E762E951A.roa (hash: Ihj2mACjaGHf96/o4yy3js68n256Vu9f7Bim7nWvWLM=)
                          4: 3EAC507A5FFE11EFA5993885762E951A.roa (hash: 4mY/TWC9DuCZsuGXVqoat7c6bUR73636kXTYSKoNoxk=)
                          5: DE5116B4609011EF8D12C1B3762E951A.roa (hash: 9S7+mdx2DKBgrgKmUfkV+mK4JJ+yxtDU858vKwTfcjs=)
                          6: 647FC9285FFC11EFBB5ADB78762E951A.roa (hash: H2q1fmOzE7jtNl9AE16ng8aqC1lbAw9rIP10pKwdV+Y=)
                          7: 522D5DA65FEA11EFAF87018A762E951A.roa (hash: UJHI6TLE0pysd9O5tp5SxgrLxypzmdtkRQHX43GWISE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C8CAF, serialNumber=46D405558001A8B029B96AB13406D69A1DD74045
        Validity
            Not Before: Oct 10 04:26:01 2026 GMT
            Not After : Oct 12 04:26:01 2026 GMT
        Subject: CN=6ac9be5a-2dfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:b4:ee:08:4f:c8:12:a3:00:32:9f:fa:90:
                    f1:9e:25:ad:55:82:6a:76:14:5a:da:3d:52:01:86:
                    a1:f9:9f:a9:df:ff:9c:44:3e:6c:a6:0c:a3:0d:03:
                    63:da:da:cb:26:cd:be:f4:fe:cb:0f:e6:87:f3:59:
                    c7:62:d5:6f:e3:1c:80:65:76:8e:26:0c:55:97:e3:
                    87:e1:ba:5a:54:73:15:26:29:ae:a9:cf:2c:1d:09:
                    3b:b3:23:f1:80:f0:da:87:48:ba:4a:dd:6a:88:e4:
                    63:1c:8f:7c:48:da:f9:7c:e5:87:0b:f2:9b:34:cf:
                    0f:a1:63:b7:7e:83:10:bb:3e:04:94:e3:f1:4f:42:
                    c3:bb:02:7d:57:73:b8:f0:7e:70:c4:51:cc:4d:05:
                    5c:66:42:e1:fa:ac:aa:aa:e7:4e:48:17:c4:2c:8f:
                    70:ae:d4:ee:0d:fc:38:93:9c:50:08:af:05:45:61:
                    a5:33:c0:50:ae:08:34:3f:3f:95:48:7c:38:f9:13:
                    75:6d:6e:8b:b3:57:e1:f8:6c:69:8d:9d:35:ae:76:
                    ed:18:d0:d5:99:25:db:a6:90:be:bc:9a:f5:a0:3b:
                    b3:d1:4f:90:c5:bd:e9:e7:d7:29:c6:9f:20:9b:5c:
                    ec:de:f6:ad:a8:09:9e:ac:82:b8:ed:aa:d2:3a:10:
                    09:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:09:2E:BF:B4:17:C9:AD:5A:3F:80:2F:AA:90:F7:ED:B6:EF:EC:40
            X509v3 Authority Key Identifier:
                keyid:46:D4:05:55:80:01:A8:B0:29:B9:6A:B1:34:06:D6:9A:1D:D7:40:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RtQFVYABqLApuWqxNAbWmh3XQEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C8C/C3E10AFC5FDA11EF8EE59AA9762E951A/RtQFVYABqLApuWqxNAbWmh3XQEU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9c:c9:b9:2b:5f:f4:e7:a0:df:17:b7:7d:53:04:1c:59:84:
         74:35:5b:bc:57:d6:5b:e8:dc:fa:d6:cd:cf:65:40:9e:9a:b5:
         11:8b:4f:43:39:9a:72:a7:13:38:fa:2c:da:23:42:31:5b:74:
         b0:f9:31:14:21:65:10:90:b2:f3:a3:b6:da:6c:9e:c3:85:35:
         02:11:cd:64:94:67:d3:46:db:d8:c8:ca:db:b0:52:f8:38:89:
         75:02:72:4d:22:1e:0e:fa:2e:15:48:c7:05:d5:a9:92:5b:f7:
         3d:23:e1:63:92:14:67:4e:d1:cb:f8:74:57:b8:82:d1:48:46:
         52:d6:55:08:2b:11:a2:f2:cd:c3:f7:55:c5:7f:bb:fb:ac:aa:
         2b:16:99:17:65:87:ee:91:61:81:a3:52:3f:0f:1a:cf:ff:49:
         80:60:0d:32:ca:9b:3d:a9:a2:39:a4:3c:9f:0c:fd:e1:c6:71:
         fc:47:6e:9e:a2:5f:fd:29:86:19:df:e9:5c:29:15:36:e5:55:
         5d:24:b2:4e:90:fe:ce:a5:c8:88:8a:39:3f:37:bd:01:42:0f:
         4e:6e:70:1f:27:ca:67:92:c0:c6:a4:3a:9d:17:d8:9e:b5:2a:
         88:83:93:70:d3:7b:5a:d6:62:05:49:73:01:f1:3d:5d:71:19:
         e8:94:fd:1e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAyswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlDOENBRjExMC8GA1UEBRMoNDZENDA1NTU4MDAxQThCMDI5Qjk2QUIxMzQwNkQ2
OUExREQ3NDA0NTAeFw0yNjEwMTAwNDI2MDFaFw0yNjEwMTIwNDI2MDFaMBgxFjAU
BgNVBAMTDTZhYzliZTVhLTJkZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyrLTuCE/IEqMAMp/6kPGeJa1Vgmp2FFraPVIBhqH5n6nf/5xEPmymDKMN
A2Pa2ssmzb70/ssP5ofzWcdi1W/jHIBldo4mDFWX44fhulpUcxUmKa6pzywdCTuz
I/GA8NqHSLpK3WqI5GMcj3xI2vl85YcL8ps0zw+hY7d+gxC7PgSU4/FPQsO7An1X
c7jwfnDEUcxNBVxmQuH6rKqq505IF8Qsj3Cu1O4N/DiTnFAIrwVFYaUzwFCuCDQ/
P5VIfDj5E3VtbouzV+H4bGmNnTWudu0Y0NWZJdumkL68mvWgO7PRT5DFvenn1ynG
nyCbXOze9q2oCZ6sgrjtqtI6EAm5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7Aku
v7QXya1aP4AvqpD37bbv7EAwHwYDVR0jBBgwFoAURtQFVYABqLApuWqxNAbWmh3X
QEUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5QzhDL0MzRTEwQUZDNUZEQTExRUY4RUU1OUFBOTc2MkU5NTFBL1J0UUZW
WUFCcUxBcHVXcXhOQWJXbWgzWFFFVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1J0UUZWWUFCcUxBcHVXcXhOQWJXbWgzWFFFVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTlDOEMvQzNFMTBBRkM1RkRBMTFFRjhFRTU5QUE5NzYy
RTk1MUEvUnRRRlZZQUJxTEFwdVdxeE5BYldtaDNYUUVVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBznMm5K1/056DfF7d9UwQcWYR0NVu8
V9Zb6Nz61s3PZUCemrURi09DOZpypxM4+izaI0IxW3Sw+TEUIWUQkLLzo7babJ7D
hTUCEc1klGfTRtvYyMrbsFL4OIl1AnJNIh4O+i4VSMcF1amSW/c9I+FjkhRnTtHL
+HRXuILRSEZS1lUIKxGi8s3D91XFf7v7rKorFpkXZYfukWGBo1I/DxrP/0mAYA0y
yps9qaI5pDyfDP3hxnH8R26eol/9KYYZ3+lcKRU25VVdJLJOkP7OpciIijk/N70B
Qg9ObnAfJ8pnksDGpDqdF9ietSqIg5Nw03ta1mIFSXMB8T1dcRnolP0e
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:16:03 2026 by rpki-client