Error: rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
File:                     B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft (raw, json)
Hash identifier:          gWKtI+8SiXrigjxGmCJhLiDf/c6O2JuhMWKnCi6aqtc=
Subject key identifier:   EB:E4:E4:6F:35:19:56:E5:12:F3:37:75:31:4E:5C:52:22:FE:D7:3F
Authority key identifier: 07:E6:65:30:BA:54:25:EC:EA:C5:E3:C3:0A:92:78:18:CD:FF:AD:BF
Certificate issuer:       /CN=F36297A8AF/serialNumber=07E66530BA5425ECEAC5E3C30A927818CDFFADBF
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
Manifest number:          15
Signing time:             Sun 27 Sep 2026 05:53:36 +0000
Manifest this update:     Sun 27 Sep 2026 05:53:35 +0000
Manifest next update:     Tue 29 Sep 2026 05:53:35 +0000
Files and hashes:         1: B-ZlMLpUJezqxePDCpJ4GM3_rb8.crl (hash: 7XoRZomGm0VOG9/2+QHJOL25fo6cZZb6FqwK0yisqlE=)
                          2: EBAC716AAB6511F193033AC8CE1D38B0.roa (hash: 7Idq3YwjiHdERP1x0fXbeTuTnxcNWtbWLH9CE2SMjo4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 05:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36297A8AF, serialNumber=07E66530BA5425ECEAC5E3C30A927818CDFFADBF
        Validity
            Not Before: Sep 27 05:53:35 2026 GMT
            Not After : Sep 29 05:53:35 2026 GMT
        Subject: CN=6ab8af60-a8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:20:15:7f:f4:2e:c4:15:b5:a1:c0:81:c6:75:
                    a0:19:21:33:f1:38:5f:c3:11:05:ab:7b:68:92:a7:
                    a8:44:a9:a4:96:2d:db:b7:b6:01:05:57:d2:8c:46:
                    46:4c:d1:9e:72:be:7e:54:73:46:dd:be:b0:88:3d:
                    21:e9:d6:35:6f:5b:0e:5c:34:43:2c:b7:ae:02:1a:
                    ec:bd:04:8b:2a:02:e8:a2:f7:ac:7d:d4:4c:be:03:
                    e3:26:c0:6d:42:63:bd:0d:de:b4:b6:18:ea:e5:24:
                    de:7d:aa:ec:32:5a:69:73:43:b0:64:cd:83:19:7c:
                    e3:33:1f:f4:23:03:cd:09:00:f4:94:75:51:e5:ec:
                    b1:cb:20:55:45:b4:43:8f:af:8d:d6:34:c3:e0:d0:
                    dd:48:2c:8e:16:95:42:08:68:de:51:e2:5d:10:3c:
                    45:04:67:be:1c:b9:f8:24:cf:7a:24:20:66:96:e6:
                    19:c3:06:de:ca:87:9d:6f:c6:7b:22:5d:19:cf:2b:
                    a1:de:d3:a5:f2:74:f3:c3:39:22:72:83:43:a4:b6:
                    76:fd:ee:a0:1c:7a:43:48:a8:53:e2:4c:a5:ff:86:
                    70:d5:ef:68:5b:d0:2c:ad:10:65:0a:68:1b:a1:d2:
                    97:5f:9c:c4:7f:cb:1c:76:07:f8:e5:40:7a:4f:a1:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E4:E4:6F:35:19:56:E5:12:F3:37:75:31:4E:5C:52:22:FE:D7:3F
            X509v3 Authority Key Identifier:
                keyid:07:E6:65:30:BA:54:25:EC:EA:C5:E3:C3:0A:92:78:18:CD:FF:AD:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:82:44:dd:d5:73:20:8c:3d:81:af:cc:f6:b4:cb:6a:0d:32:
         f0:1a:7b:ea:3c:a5:3e:00:db:51:0b:0d:1d:aa:e5:7b:bb:b0:
         33:ac:fa:08:68:84:ed:71:1e:58:f2:af:44:b2:52:4c:d9:71:
         34:0b:e3:b1:30:9d:6b:0d:27:a2:6e:d1:3d:d8:69:ac:ba:90:
         9c:41:ec:c6:1a:0e:c5:19:c3:ad:0a:aa:96:b8:51:41:36:33:
         d4:e6:2b:64:ae:d0:d1:47:7b:ac:0d:a1:57:08:a8:ca:83:e5:
         94:ed:79:81:fd:bb:f2:a7:30:a5:2d:a3:95:3f:c7:a5:1f:78:
         69:1a:24:39:7e:76:c8:33:9e:4d:b9:96:2c:b4:90:d8:2d:96:
         cd:cc:1f:d4:c0:59:00:68:5c:87:2c:59:21:6d:66:83:ce:0b:
         19:1b:fa:2f:cb:52:50:67:18:8c:45:36:b3:f3:53:16:46:34:
         5f:2d:5d:c7:1a:e6:53:2e:9e:3a:e4:c9:64:3b:66:64:86:d3:
         0e:14:b5:27:d8:9f:d4:31:b1:56:2a:85:bc:cc:82:7c:f1:a5:
         c4:ce:6e:e0:33:73:e7:20:b7:b8:d8:16:7b:11:90:1e:99:47:
         53:2b:95:ed:28:b6:c5:c3:02:98:e1:96:90:89:0c:b1:0c:2d:
         5a:a0:70:d3
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBFjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
OTdBOEFGMTEwLwYDVQQFEygwN0U2NjUzMEJBNTQyNUVDRUFDNUUzQzMwQTkyNzgx
OENERkZBREJGMB4XDTI2MDkyNzA1NTMzNVoXDTI2MDkyOTA1NTMzNVowGDEWMBQG
A1UEAxMNNmFiOGFmNjAtYThiMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMggFX/0LsQVtaHAgcZ1oBkhM/E4X8MRBat7aJKnqESppJYt27e2AQVX0oxG
RkzRnnK+flRzRt2+sIg9IenWNW9bDlw0Qyy3rgIa7L0EiyoC6KL3rH3UTL4D4ybA
bUJjvQ3etLYY6uUk3n2q7DJaaXNDsGTNgxl84zMf9CMDzQkA9JR1UeXsscsgVUW0
Q4+vjdY0w+DQ3UgsjhaVQgho3lHiXRA8RQRnvhy5+CTPeiQgZpbmGcMG3sqHnW/G
eyJdGc8rod7TpfJ088M5InKDQ6S2dv3uoBx6Q0ioU+JMpf+GcNXvaFvQLK0QZQpo
G6HSl1+cxH/LHHYH+OVAek+hKPsCAwEAAaOCArgwggK0MB0GA1UdDgQWBBTr5ORv
NRlW5RLzN3UxTlxSIv7XPzAfBgNVHSMEGDAWgBQH5mUwulQl7OrF48MKkngYzf+t
vzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Mjk3QTgvRkRDNDE3NzhBQjY0MTFGMTgxMEJEMkMxQ0UxRDM4QjAvQi1abE1M
cFVKZXpxeGVQRENwSjRHTTNfcmI4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvQi1abE1McFVKZXpxeGVQRENwSjRHTTNfcmI4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYyOTdBOC9GREM0MTc3OEFCNjQxMUYxODEwQkQyQzFDRTFE
MzhCMC9CLVpsTUxwVUplenF4ZVBEQ3BKNEdNM19yYjgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAH+CRN3VcyCMPYGvzPa0y2oNMvAae+o8
pT4A21ELDR2q5Xu7sDOs+ghohO1xHljyr0SyUkzZcTQL47EwnWsNJ6Ju0T3Yaay6
kJxB7MYaDsUZw60Kqpa4UUE2M9TmK2Su0NFHe6wNoVcIqMqD5ZTteYH9u/KnMKUt
o5U/x6UfeGkaJDl+dsgznk25liy0kNgtls3MH9TAWQBoXIcsWSFtZoPOCxkb+i/L
UlBnGIxFNrPzUxZGNF8tXcca5lMunjrkyWQ7ZmSG0w4UtSfYn9QxsVYqhbzMgnzx
pcTObuAzc+cgt7jYFnsRkB6ZR1Mrle0otsXDApjhlpCJDLEMLVqgcNM=
-----END CERTIFICATE-----
Generated at Mon Sep 28 07:21:15 2026 by rpki-client