Error: rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
File:                     og4gZ_DbeD3jcj4jFRfcfp_lutM.mft (raw, json)
Hash identifier:          VGGGf2EUVx/rPgJrBulqIqGSyB2fC4wJTLUd9al3ZLE=
Subject key identifier:   03:FE:54:40:C8:E0:D5:5E:ED:A1:2A:B7:D1:F3:5B:A5:27:E4:D1:8A
Authority key identifier: A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3
Certificate issuer:       /CN=F366B0C9AF/serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
Certificate serial:       0612
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
Manifest number:          05BB
Signing time:             Thu 24 Sep 2026 03:17:54 +0000
Manifest this update:     Thu 24 Sep 2026 03:17:53 +0000
Manifest next update:     Sat 26 Sep 2026 03:17:53 +0000
Files and hashes:         1: og4gZ_DbeD3jcj4jFRfcfp_lutM.crl (hash: Vv5vtOYtRQRb5tMcwZdLm9tm5+33JTTveJT3xr30UqU=)
                          2: 9A0B5D56965411F199C7B7DFCE1D38B0.roa (hash: 9ydbrA3SKXkY1woYL88oh9nc8YGjXLXv6PoUJBg2810=)
                          3: 36C6B1A2965211F1AC723ED1CE1D38B0.roa (hash: mD7PSAHv8qv+Nm8H6OHQZ231IAWKVsKlIfYmZU5lrUc=)
                          4: B9682E08965011F19D99F8C8CE1D38B0.roa (hash: B4oYheHzHKAU3LOEjkRdJt9oLNCyqzoRIEPVuzXDe5U=)
                          5: B393449A965511F1994C44E6CE1D38B0.roa (hash: yPc+ltvkVldMd+mg8G94PzZBrHhZ2Z6pQQ+sSKeP/gg=)
                          6: 6B1CADC4964A11F183FD50A3CE1D38B0.roa (hash: Q3bv+/3qzjoTU/OKx/laZYEE7INTlvCdy+ChzWaJdYM=)
                          7: AABDD70C965711F1BE51AEF2CE1D38B0.roa (hash: Z0i6TcmIXn9kp704Tq1dtAyqgD1SdNCro1rAUYTSegM=)
                          8: 0D690D88965111F1ADA822C9CE1D38B0.roa (hash: 9hnmT+6YWfz8wjXRc165uqZHOTs37SFKJzvLVlmoeF4=)
                          9: 452BFAA2964F11F1B88796C0CE1D38B0.roa (hash: IiMJujnL/VBB6voYiIgew+oovEPcR9nYPKYUhXrFjDA=)
                          10: 960FDF48964911F19D526C1DCF1D38B0.roa (hash: AVhNkjwkO2e7IM680bLe+1azTxSoOu5cdxDnIen3tpQ=)
                          11: 7D941AD0965611F19A827AEACE1D38B0.roa (hash: 2gcd6W5bGv8XPY7TPxINGmpsn4kpkNoI84Aj+LDRq4E=)
                          12: 7952BE8A964D11F1825431B4CE1D38B0.roa (hash: HjvUFT6JThr4YWNVzTDVNW61g/yIvKBsGAr5vlAGCt0=)
                          13: 143330BE964A11F1985DE1A0CE1D38B0.roa (hash: EGcuzgU3K51qaDfz+xSAHphkzjp93d3M2YobU/ODCYI=)
                          14: 71E3E33A964E11F1A68361BCCE1D38B0.roa (hash: x5Otd8hdlNV/UUKeHjaRjXYUsLKulBEKDrmSphp2Rv4=)
                          15: E2B8980A965611F192B48AEECE1D38B0.roa (hash: H4Ay4vxbV8N8VLbE7TI8DM+fihDQzXEohxuW4qKdQOk=)
                          16: 2A47C3AC965311F18D5555D7CE1D38B0.roa (hash: qjEV8QH6QAXL5LpzhD+gWImbfu5cMq7Xzhp/85av8GA=)
                          17: E34E8CE4964B11F1BA3BC8ABCE1D38B0.roa (hash: FUldvyvWluOkUisORmlMzKGCqazC5G2frJ97FyzShnM=)
                          18: 4A5966C6964B11F1974C98A7CE1D38B0.roa (hash: 3lUysCJ7KKok/t8ftl1wKV8RNNYxC42RDDmAVCv2Tlc=)
                          19: 0D09D244964E11F1876D5FB8CE1D38B0.roa (hash: cBz5B9DvFm3IFYaaq62zlXtCoIspoWLOEYI14IDW7Uc=)
                          20: D1B35C4A964A11F1A9334AA5CE1D38B0.roa (hash: CywFwXwO57V+G+qKXanYKXzslXo+pvmgnB0sPfz4Qlg=)
                          21: 0003EB00965511F1A89214E2CE1D38B0.roa (hash: bJ/AwVbXvH5oI9Wq9Bx4pjeoWSjMX2y9ocj2t2wOSlQ=)
                          22: 38A9976A964C11F1A2ABB1ADCE1D38B0.roa (hash: IuA8djpn8pomAqnkttuVs83YEh3kh4BoZRzPHCzyxJs=)
                          23: D2EDFC9C964E11F199968ABCCE1D38B0.roa (hash: 80PKzJSUUvOfmGmgnLKimc/Cz5K72HQjxrAx+ivf+qY=)
                          24: BBB288DC964811F1A3562917CF1D38B0.roa (hash: GjZxB4dPZqHDPeSVsknSX3nyrmfDyng8H/MO1sMugm0=)
                          25: BEC2EABC964D11F1966B28B8CE1D38B0.roa (hash: dBXag7eweIDHY4x5vWF18oTMja/pLioNe8TURJJOtVk=)
                          26: 87484988965211F18E4923D3CE1D38B0.roa (hash: A7BQL9sVmwfNQ72W1lrec16zLPKtPRst/xTvfysNk+U=)
                          27: 506DD63C965511F1968EF6E3CE1D38B0.roa (hash: n+XL1c/UPDisymY/PcMZ8UKIJ0mv9YkHTerYJqqWEnM=)
                          28: 7245468C965011F1842EC3C6CE1D38B0.roa (hash: HrQYfa3tnHofYHdCTBNG+G+Rx2CjskAj29G6YJzxm5E=)
                          29: 74CB7A60965111F188B326CDCE1D38B0.roa (hash: KenKvsRCEIepoC4MYAMufus226uqT0wFb407ViaQ1Dc=)
                          30: AA2F562C964C11F1BFF1F6AFCE1D38B0.roa (hash: qo9TNoX+DuMTeTCBTnGp29BHxz9ddk8HS98FpNYcgyI=)
                          31: 1B0CB2C4965011F1B9BFD8C4CE1D38B0.roa (hash: BM4MwkU5kxGeZnZ9A0z5MKng3av6eYK6XmnEPpPwTGo=)
                          32: 47728E20965411F1BBD9CDDDCE1D38B0.roa (hash: Qeo3H1HGcevLZTN4Nuv51fd5pxKh2Gq/5XICKwoKtgw=)
                          33: 3DF49F7A965711F18DC5A2EECE1D38B0.roa (hash: GFdwEQLG07+8YTdc9CZnVdtHh60WdmHPaORquH0PD/Y=)
                          34: 4612A3AA964811F186903615CF1D38B0.roa (hash: ZLtzEtpqJTK3DXyZfk5lHAYHoD8VrbfAWoJlVWHWVZs=)
                          35: 3130C2F4964911F1A2536719CF1D38B0.roa (hash: CKqRQ8VCsWfAtTEx+RFsh/l0NkveqUa6IZQlvQAby7E=)
                          36: 175C9016964D11F1BA0805B4CE1D38B0.roa (hash: VUSs4tGN7yUEV7A4E7Vvnz6ZdEu9kBruV6NHxloQvRY=)
                          37: 0F939D76965611F18250F7E9CE1D38B0.roa (hash: nc3mYP9PwxD0FAbglODXqz1JWBoC/DwJfMZdRVYCz/4=)
                          38: C66F961E964F11F1BF4A62C4CE1D38B0.roa (hash: HJdeVzZ+KAFj48NbnrJ/Sd5n8n4QCNPNvEuR5VhY8mw=)
                          39: E4C5FF60965211F1906D69D5CE1D38B0.roa (hash: 6Q3VI0zTOvrmijMD5CMU7nIvjfUcjzl1TMQp2+JoLig=)
                          40: C4646E40965311F1BFDBA2D9CE1D38B0.roa (hash: C4lZeYETrv/x0WVhqFFuv6SNxCRMb2VywH8lQ3I94B4=)
                          41: 66E964AC964711F195C4B810CF1D38B0.roa (hash: ILS3iLDN82STJQc2xF3bz3uYstdUmIRt5SQtcGnOkDE=)
                          42: 069DAC72965411F194148ADDCE1D38B0.roa (hash: 3PbP4tjF3F+6KtSaiqtH3lqR4s/PfsHzCc/W8sRwDbo=)
                          43: D549DBCA964711F1B59E2C11CF1D38B0.roa (hash: 0fB1EX6gjMfqiJL3NlytdowABaOXAWKUSBhWC8d6n3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:17:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554 (0x612)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366B0C9AF, serialNumber=A20E2067F0DB783DE3723E231517DC7E9FE5BAD3
        Validity
            Not Before: Sep 24 03:17:53 2026 GMT
            Not After : Sep 26 03:17:53 2026 GMT
        Subject: CN=6ab49662-a790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:34:7a:33:ac:90:37:8c:7f:47:bf:5d:6c:
                    8e:a1:fc:cb:da:f6:91:d2:23:bf:86:e9:07:1e:44:
                    58:8b:3a:fc:dc:37:c8:56:82:fa:95:92:66:a4:1f:
                    b9:7d:9e:09:b1:23:29:6c:cf:b5:57:88:b7:ad:0c:
                    4c:02:e3:c6:99:04:1d:0a:52:d6:46:5c:7d:2c:cb:
                    f1:9d:1a:42:bc:39:dc:6f:67:8d:36:30:cc:81:e3:
                    cc:e9:6b:e5:12:3b:f7:5a:95:8f:1f:6c:51:02:19:
                    a9:1c:10:2d:70:ea:78:26:0e:27:a2:f4:30:ee:33:
                    c5:37:e5:b9:b5:31:14:95:bd:25:c5:0a:ec:cf:f9:
                    3a:47:15:7a:62:ee:bb:da:24:a0:7e:87:92:49:25:
                    c9:47:1f:90:d3:0f:ee:0f:6c:9d:a5:ef:34:4d:ce:
                    fa:55:b6:0c:1b:65:bc:dd:13:57:3e:81:a0:e0:95:
                    78:16:e1:bf:d1:e7:e7:5c:26:ea:d1:0a:c8:f3:e3:
                    1b:c1:1d:8f:f3:e1:be:65:02:b8:a2:e4:73:13:33:
                    08:42:e7:fa:7e:30:40:02:32:5a:ac:30:cd:6b:e0:
                    34:53:bd:55:bb:aa:de:66:71:10:1e:ad:4f:a4:af:
                    23:80:dd:ab:82:79:56:d6:ce:5e:23:3f:80:d8:05:
                    a7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FE:54:40:C8:E0:D5:5E:ED:A1:2A:B7:D1:F3:5B:A5:27:E4:D1:8A
            X509v3 Authority Key Identifier:
                keyid:A2:0E:20:67:F0:DB:78:3D:E3:72:3E:23:15:17:DC:7E:9F:E5:BA:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/og4gZ_DbeD3jcj4jFRfcfp_lutM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366B0C9/F126518CBC4011EDAB594EDCF1222468/og4gZ_DbeD3jcj4jFRfcfp_lutM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:89:28:08:e3:68:fa:89:e4:30:d0:35:7c:4f:d8:7c:e5:aa:
         46:f0:40:ab:51:c3:c7:25:51:3d:e1:5c:ea:9b:0e:04:01:27:
         a8:8a:2b:c6:bf:e3:99:5e:19:2f:46:43:48:31:2c:93:08:43:
         30:7c:26:cf:63:e5:fd:d9:b7:b7:0c:0f:cb:cb:2e:d1:c6:f7:
         c6:c7:6f:76:16:4a:ca:1f:61:bf:43:18:f1:af:44:79:f7:5c:
         b6:0b:68:e8:b3:bf:87:d4:b6:64:f8:ad:72:64:d0:9c:a4:82:
         4f:2d:04:8f:4b:9a:03:02:9d:82:96:1f:51:59:a6:64:60:73:
         7d:3f:b1:ca:b0:df:ce:62:64:e5:36:30:00:fc:c0:a2:78:8d:
         bb:6e:88:17:b8:b9:a5:4f:7e:7a:2b:c0:e1:19:ec:79:b8:f1:
         c0:0a:6e:31:94:83:25:92:7c:5c:82:b4:16:a0:2f:dd:79:1f:
         98:20:bc:15:e8:0c:4f:27:92:da:c8:bd:dc:53:1c:4a:a7:cb:
         1c:0a:9f:d0:ae:14:c9:59:33:f5:24:3f:79:83:78:3e:1e:62:
         4a:b7:f1:32:d5:a6:28:60:b4:c4:52:b7:92:09:af:bd:af:d4:
         cc:56:05:3e:e9:b8:ab:e0:97:ab:e8:51:8a:b8:20:15:b9:36:
         ad:30:90:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:56:10 2026 by rpki-client