Error: rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
File:                     4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft (raw, json)
Hash identifier:          Ce5tk4qh6/XQVc5X5CV2fxFVtt7dn/vb0CqkRYnlU5I=
Subject key identifier:   47:B1:64:59:6C:56:F8:E2:93:2B:14:07:2A:47:75:60:6C:44:36:04
Authority key identifier: E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7
Certificate issuer:       /CN=F3625D7BAF/serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
Certificate serial:       01CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
Manifest number:          02C5
Signing time:             Tue 22 Sep 2026 05:12:59 +0000
Manifest this update:     Tue 22 Sep 2026 05:12:58 +0000
Manifest next update:     Thu 24 Sep 2026 05:12:58 +0000
Files and hashes:         1: 4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl (hash: dPL0Co5oSNtyA5vXNnxlJGocyiwuvRa0KBMVJHTRzWU=)
                          2: 2D0BAEFEE02E11F0BA05BDEBDAE4EC9C.roa (hash: czaOHjgQKar8k0qgvhJTFcM5RM/An5KUAmLnaz+XPoM=)
                          3: AC1A84E2E64411F0BDAD2EECDAE4EC9C.roa (hash: aooplZQG6H5mHbyoOfRiSF6JsTIckWEr5yhG8Qttn8g=)
                          4: 19F984E6E64411F0A9D7D7E9DAE4EC9C.roa (hash: 9VxkkCn8NhYiyI/rZSGcTqIm2TXbsoc4ZBAeWC+Q88g=)
                          5: A78B1D62E03411F0BA23EC96DAE4EC9C.roa (hash: V4HZuRFchda4PCAZ+TqnCyZuRh7EDqhJply4K7eJCrk=)
                          6: 7DA56C80E64411F0B1CFF2EBDAE4EC9C.roa (hash: S9zi6LYdyNKNbV1IF5Woapx9qQLKuRkn4Pc0vvMefxY=)
                          7: 2A7F58C0E64111F084C774D7DAE4EC9C.roa (hash: CRFSAdvu7nT9K3BwjIvIKrNt1IE5IvnknvLaaNH+GVc=)
                          8: BA239C48E64611F0BCD6127ADAE4EC9C.roa (hash: pDUAqES4iR6kKHfb4Y65EyLXHCIq/3T7FgQfhEgu34w=)
                          9: 2BC0A8ACE02D11F0AA32FCE6DAE4EC9C.roa (hash: mp4PGUM44RsT5fvnE9G8Wfl4a9lsO8E65quGReQYOP8=)
                          10: 6A5EB832E64611F0BA498779DAE4EC9C.roa (hash: /Ja9NZA3PT3nMROcxNf0Cf+BLQcwrkhjsgvSsjw/GNo=)
                          11: ED024972E64411F09005C0EFDAE4EC9C.roa (hash: XoWr8DFFLHUUI1hS2Hcc+slXh5tzxzat68HJvhpcBCU=)
                          12: 4B4A8E74E64311F099A1D2E3DAE4EC9C.roa (hash: uqUiBa58m/oC+y5I8h0R2p0L6qWhQAxyUOIwGnr8g7E=)
                          13: 6D9EDE72E64211F099CA79DFDAE4EC9C.roa (hash: LFsqBA4grm6BGuu+IAtbdpdGd09wU0OI5vP1TJGKJGQ=)
                          14: CF332320E02D11F0BFEC9DE9DAE4EC9C.roa (hash: q9858WneVonKMS8ZfqhbKQq6JJrU4YMstg+M/qIgKgs=)
                          15: 8D48783CE4B711F08DDC53E3DAE4EC9C.roa (hash: B/ONb1nsnGd5bWbPsAXhf3fmCZlHMi+RdyKVaSXoO3w=)
                          16: 21633E18E64711F09267137EDAE4EC9C.roa (hash: eLEh0SyY43hybPcZSU5IedR+zAs7IskDltcK3L464X4=)
                          17: 84060446E64311F09C4464E7DAE4EC9C.roa (hash: waitUYNkQPyRyYT1K9QTpRE9p4ghHIMSe8TwdycItWM=)
                          18: 0476E0ECE64311F0AEA94AE3DAE4EC9C.roa (hash: gJqY8hbUmXFsQqTPCTHgTkcC0h4IBxALOcQy7DKycfE=)
                          19: 18C749D6E64511F0ABEFC7EFDAE4EC9C.roa (hash: HcEhn8rY0LMqLMqnW5E48TBpkZIQs7rG01NNOWL4qIw=)
                          20: 7F683120E03011F0A9A3447DDAE4EC9C.roa (hash: 1ofRyLtLCgUjtyjNbcKKGyaLNuljpNLZF/Da0DLXy4M=)
                          21: 9FCAE1F8E03311F0AC5D5790DAE4EC9C.roa (hash: 9fFA5F6vS2Uzoj6zR6HF3FdhmSp+E3nknPXSOdym9E8=)
                          22: 4AB7FB10E03311F09521888EDAE4EC9C.roa (hash: irh6AQCCs0+wQOoQ6OfFdE3/Slfmb4g/hhWQX1yIJJo=)
                          23: 3E04A562E64611F098C343F6DAE4EC9C.roa (hash: nAeuC2hLRdg6vXbdusEEb2xJLgS40FzgoKMg75pO9y8=)
                          24: 8F4481FAE03211F0AA022B8ADAE4EC9C.roa (hash: Ausb+q37534pYlI8/IZKaw5119dV1q+N5AujavUroYE=)
                          25: 41B501CEE64211F0B81528DFDAE4EC9C.roa (hash: Iddf6PXYBVJILz/SeKyZ0ezmBFU0u8wv1/n3HA9IRhY=)
                          26: BCFF79EAE64211F0A9887CE1DAE4EC9C.roa (hash: n4W44lkOz9zDgunOmEFE9ifkh0K1X90d0DaTgdPVXLs=)
                          27: DFC57B3EE64511F0880A3BF4DAE4EC9C.roa (hash: QUcAXH6eBDcHLO7OTf8jf8YtX4XaBoqh4tCsAIXOlfA=)
                          28: ED533020E03211F0ACC31F8CDAE4EC9C.roa (hash: fCuvOeeua2UEWc+GJAZ1o37pU/fgiocR0PlJYdUski4=)
                          29: 23722C36E03511F0B6921B99DAE4EC9C.roa (hash: WRAjjrpZYpNcF9po1aGn/Ii+2cKmFEDJ+A9Q0pdBqR0=)
                          30: E0C19BF4E4B911F0AC7AE4EFDAE4EC9C.roa (hash: 0uI4WyyyVggMiE9YfvPVTXuKZFhM2OQidE/EfrcubxY=)
                          31: BC91A40EE65311F0908ABDCADAE4EC9C.roa (hash: VJ4tEGO/lKPbCH4khoVBPlLUyO5FnhtR7hnaBGZuDog=)
                          32: 27D2C2D4E03211F08A7EC587DAE4EC9C.roa (hash: Y+oQ/SVDi7ToYkC/R8JaxmCr/Q9OiGSwt61GPykd+rg=)
                          33: FD6A2FC6E03311F09F27C092DAE4EC9C.roa (hash: X+2ma4rUdX20xim7i8E3RdkGIOC6nD+e2aVzXB4FFDo=)
                          34: 9617586EE65311F09345B1CADAE4EC9C.roa (hash: YTKfsfc+uNFPFqXmbc4tutzypg97/WagZDG/Snyx9nc=)
                          35: 65C9748EE64511F0B27815F2DAE4EC9C.roa (hash: Yez31KL1i1V990iqH57h6ulqHwmmM4OLYItRBUzFURY=)
                          36: 0CEAEE0AE64611F0871671F4DAE4EC9C.roa (hash: 5xW3AY+AI1m98uAIMdUQcGDUJHs1ajRXwY7eRe3tQMw=)
                          37: 9A04FBE2E64511F09F9A5BF3DAE4EC9C.roa (hash: pXs0IUGkAP6lzSFilYD3ZhWaFNX+8DRTkKn+r7yjKys=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625D7BAF, serialNumber=E2FE56AFE66AB0DF3E395EDDB41893E00DF6AEF7
        Validity
            Not Before: Sep 22 05:12:58 2026 GMT
            Not After : Sep 24 05:12:58 2026 GMT
        Subject: CN=6ab20e5b-f8cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:de:6a:5e:f1:f1:a1:e8:76:2c:da:13:49:43:
                    32:1d:3c:d4:b1:cf:20:af:3e:27:8e:02:52:c2:7d:
                    3e:54:6d:1b:e3:22:e5:ff:09:6b:90:51:04:98:5f:
                    d7:6c:74:83:61:dd:93:eb:88:07:a9:4f:d5:dc:ea:
                    cd:91:fc:6e:26:91:4f:56:41:26:af:8c:e4:8e:7f:
                    56:8c:ed:2c:2e:88:73:45:63:1a:5c:5e:a5:87:4a:
                    bd:b0:46:21:4a:d1:57:04:4d:fa:bf:3a:8b:fc:ec:
                    65:ad:95:7d:df:62:39:53:6e:ec:83:7d:32:30:e1:
                    f7:4a:65:b2:e0:71:f2:45:53:12:2c:f4:40:73:0e:
                    69:c0:b8:89:e3:60:06:ae:5d:0c:b7:26:05:21:24:
                    7a:02:8b:35:09:24:c5:18:de:d7:7f:ec:4f:b8:2e:
                    61:50:b8:30:26:38:9f:bd:a6:d2:69:45:49:10:0a:
                    55:eb:e5:53:93:c2:d7:c6:f4:93:6a:ba:a6:42:86:
                    a1:02:10:fa:60:c8:49:64:cf:2f:78:ee:81:f7:3f:
                    04:16:1a:da:85:ce:3c:63:81:8a:3b:c2:7d:56:73:
                    36:16:44:a6:83:7a:c7:70:7f:97:a0:26:d5:9c:fd:
                    18:b0:57:3a:fc:fa:41:c6:0b:cd:53:cd:9e:5e:03:
                    6b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B1:64:59:6C:56:F8:E2:93:2B:14:07:2A:47:75:60:6C:44:36:04
            X509v3 Authority Key Identifier:
                keyid:E2:FE:56:AF:E6:6A:B0:DF:3E:39:5E:DD:B4:18:93:E0:0D:F6:AE:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625D7B/3CE88D08BDA911F08CA0897ADAE4EC9C/4v5Wr-ZqsN8-OV7dtBiT4A32rvc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:43:1b:dc:4d:59:b6:d6:4c:d4:9c:06:b7:58:36:af:44:c2:
         55:48:c1:95:8c:ea:db:82:b5:85:a4:84:01:ce:27:64:dc:79:
         88:aa:f3:08:34:d4:a1:48:9e:a7:b6:b3:d3:e9:12:2a:31:9f:
         3b:bd:06:b0:e1:39:8e:a4:7f:b9:ae:da:69:b0:65:e8:18:61:
         fe:5e:83:02:51:ae:a8:68:fc:e5:95:cb:a3:6b:2f:a6:2b:d6:
         d4:cc:e2:63:f4:83:94:6f:44:56:1b:7a:76:cf:ef:06:94:b3:
         54:b7:22:9d:88:c5:fd:97:4a:90:22:4b:3f:d4:fe:02:08:fd:
         f2:ed:86:0f:cd:4c:a6:2a:ad:2e:70:b6:8a:b3:04:b5:90:fa:
         5f:fb:aa:50:cd:aa:70:b7:d5:3f:92:c4:0e:aa:08:4d:43:d4:
         53:48:11:ae:69:ad:fc:38:d2:e0:7a:54:c1:27:49:fe:e7:b0:
         ea:07:dc:7f:12:ce:c8:49:8b:fa:ff:65:d6:60:a2:a3:d4:be:
         da:d4:63:0f:75:3e:c1:72:29:c0:85:96:57:92:d2:3c:b8:93:
         40:f0:82:5a:77:e5:be:6f:02:e3:63:e0:15:6b:8a:7d:54:9c:
         fa:98:27:d2:15:47:06:f7:3f:bd:8a:d8:03:61:a2:60:22:7d:
         ff:16:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:38:56 2026 by rpki-client