Error: rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft
File:                     lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft (raw, json)
Hash identifier:          UCWDoK/SytozYtaZ2Sk9CTsl1hfDufZ2cyGcKMTpIbA=
Subject key identifier:   2A:65:AB:1E:90:B9:B3:A1:A3:D1:28:44:DF:83:E0:88:18:3A:9C:1F
Authority key identifier: 94:E8:15:94:24:16:33:32:76:44:BC:4D:57:D1:93:31:48:52:41:B0
Certificate issuer:       /CN=F366A108AF/serialNumber=94E81594241633327644BC4D57D19331485241B0
Certificate serial:       40
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft
Manifest number:          3F
Signing time:             Mon 21 Sep 2026 05:46:21 +0000
Manifest this update:     Mon 21 Sep 2026 05:46:20 +0000
Manifest next update:     Wed 23 Sep 2026 05:46:20 +0000
Files and hashes:         1: lOgVlCQWMzJ2RLxNV9GTMUhSQbA.crl (hash: 1m+tJ5cZ0DawtTJ8OoZ5rqBB46zfNHJlvPQuM7Kpo10=)
                          2: 5DA612BC85CD11F1BE9695CFCE1D38B0.roa (hash: JUY5CSxrl4d2MBblacg+dxuEsUvd0vuB9NNTqSIPLJI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:46:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A108AF, serialNumber=94E81594241633327644BC4D57D19331485241B0
        Validity
            Not Before: Sep 21 05:46:20 2026 GMT
            Not After : Sep 23 05:46:20 2026 GMT
        Subject: CN=6ab0c4ad-efe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3e:20:8b:15:35:44:d1:01:dc:99:b8:d2:93:
                    2e:8d:ed:29:3d:15:91:69:a7:22:2a:f0:79:c8:eb:
                    8a:43:b1:0e:8c:fe:d2:04:5f:62:92:e0:e8:50:d0:
                    80:f3:02:0d:60:bb:6b:17:66:46:0e:b5:ca:82:c7:
                    ea:b0:8f:e2:d9:b8:2b:e7:66:01:5d:db:47:08:8a:
                    54:9b:08:c8:57:d8:d7:80:db:51:9c:88:09:7f:a6:
                    c2:ab:5c:67:aa:50:ba:61:7c:cc:f5:7f:ab:26:6e:
                    60:87:0d:fc:cc:15:bc:4b:cc:a3:71:4d:35:8e:70:
                    9e:1e:87:51:10:07:bd:c7:40:09:85:25:a6:dd:15:
                    f4:ed:bb:07:2e:cd:9d:19:d7:2a:7d:a5:a9:b1:f5:
                    cf:6e:d2:ac:a5:9b:0f:28:99:e8:14:6b:50:b8:cb:
                    7b:7a:a5:f6:bf:70:bd:f6:b0:c7:a3:2b:1a:76:24:
                    77:dd:b3:d5:9a:8d:61:26:d6:21:63:2a:c3:9f:fa:
                    c5:69:f4:46:a6:bf:81:99:93:7b:c0:60:16:d7:1c:
                    fc:bd:91:62:a8:b4:2c:93:e4:b5:07:e4:7a:c2:90:
                    53:e4:0a:3c:8c:d7:fb:b0:62:4b:d1:d9:fc:c2:58:
                    94:12:74:df:d9:0d:cc:bc:fa:d7:04:96:00:5b:3e:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:65:AB:1E:90:B9:B3:A1:A3:D1:28:44:DF:83:E0:88:18:3A:9C:1F
            X509v3 Authority Key Identifier:
                keyid:94:E8:15:94:24:16:33:32:76:44:BC:4D:57:D1:93:31:48:52:41:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A108/8734CE8485C811F1893FC2B6CE1D38B0/lOgVlCQWMzJ2RLxNV9GTMUhSQbA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7d:12:02:72:47:00:aa:f0:62:a6:97:5c:f4:1c:78:32:e9:
         98:18:67:52:81:57:52:6f:2f:f8:f5:5f:25:32:51:22:c7:9a:
         26:ba:dd:79:79:d3:e6:65:36:88:5f:bc:59:cb:40:64:fb:16:
         75:9a:10:b1:91:be:89:4f:45:52:b6:98:2c:7e:1d:56:f5:8c:
         38:79:3f:d2:9b:e7:08:60:d0:e7:cd:52:fb:a1:31:9b:ce:c5:
         dc:a7:9b:5c:52:87:90:bf:d6:23:67:59:94:07:ba:b3:9c:0d:
         d2:d3:62:76:a3:4e:a1:a0:99:66:81:30:82:47:90:1b:d9:35:
         38:18:47:ad:e1:87:e0:1a:80:9f:49:d5:69:d2:6a:e7:cc:cb:
         25:87:3d:ab:71:48:98:72:95:9e:7f:3c:a9:53:8d:06:15:e5:
         c1:2d:81:89:97:b3:bc:cf:45:9c:cc:70:7e:c9:24:a9:da:45:
         11:50:7d:63:5b:a1:f8:07:3c:a7:35:70:0c:86:c0:9e:c7:53:
         fe:66:c0:49:92:e9:2a:cf:38:e4:47:f3:ac:12:85:90:1b:64:
         c3:08:98:5f:f5:fb:24:86:90:c5:3a:a1:55:a6:95:ae:1d:4c:
         19:e4:c2:72:c2:05:1e:32:8b:43:73:a3:64:00:b0:99:87:ac:
         7d:27:25:29
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBQDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
QTEwOEFGMTEwLwYDVQQFEyg5NEU4MTU5NDI0MTYzMzMyNzY0NEJDNEQ1N0QxOTMz
MTQ4NTI0MUIwMB4XDTI2MDkyMTA1NDYyMFoXDTI2MDkyMzA1NDYyMFowGDEWMBQG
A1UEAxMNNmFiMGM0YWQtZWZlMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALg+IIsVNUTRAdyZuNKTLo3tKT0VkWmnIirwecjrikOxDoz+0gRfYpLg6FDQ
gPMCDWC7axdmRg61yoLH6rCP4tm4K+dmAV3bRwiKVJsIyFfY14DbUZyICX+mwqtc
Z6pQumF8zPV/qyZuYIcN/MwVvEvMo3FNNY5wnh6HURAHvcdACYUlpt0V9O27By7N
nRnXKn2lqbH1z27SrKWbDyiZ6BRrULjLe3ql9r9wvfawx6MrGnYkd92z1ZqNYSbW
IWMqw5/6xWn0Rqa/gZmTe8BgFtcc/L2RYqi0LJPktQfkesKQU+QKPIzX+7BiS9HZ
/MJYlBJ039kNzLz61wSWAFs+h48CAwEAAaOCArgwggK0MB0GA1UdDgQWBBQqZase
kLmzoaPRKETfg+CIGDqcHzAfBgNVHSMEGDAWgBSU6BWUJBYzMnZEvE1X0ZMxSFJB
sDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkExMDgvODczNENFODQ4NUM4MTFGMTg5M0ZDMkI2Q0UxRDM4QjAvbE9nVmxD
UVdNekoyUkx4TlY5R1RNVWhTUWJBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbE9nVmxDUVdNekoyUkx4TlY5R1RNVWhTUWJBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY2QTEwOC84NzM0Q0U4NDg1QzgxMUYxODkzRkMyQjZDRTFE
MzhCMC9sT2dWbENRV016SjJSTHhOVjlHVE1VaFNRYkEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAFZ9EgJyRwCq8GKml1z0HHgy6ZgYZ1KB
V1JvL/j1XyUyUSLHmia63Xl50+ZlNohfvFnLQGT7FnWaELGRvolPRVK2mCx+HVb1
jDh5P9Kb5whg0OfNUvuhMZvOxdynm1xSh5C/1iNnWZQHurOcDdLTYnajTqGgmWaB
MIJHkBvZNTgYR63hh+AagJ9J1WnSaufMyyWHPatxSJhylZ5/PKlTjQYV5cEtgYmX
s7zPRZzMcH7JJKnaRRFQfWNbofgHPKc1cAyGwJ7HU/5mwEmS6SrPOORH86wShZAb
ZMMImF/1+ySGkMU6oVWmla4dTBnkwnLCBR4yi0Nzo2QAsJmHrH0nJSk=
-----END CERTIFICATE-----
Generated at Tue Sep 22 06:21:23 2026 by rpki-client