Error: rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
File:                     lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft (raw, json)
Hash identifier:          no+Ts+Krgh43x/HwcgBm+Q8egfBMTSy9yNYcbwFFARo=
Subject key identifier:   4C:05:49:06:67:C5:7B:E9:4E:AC:78:6A:4F:D4:EC:F8:5E:1B:5A:07
Authority key identifier: 94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F
Certificate issuer:       /CN=F3678120AF/serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
Manifest number:          12
Signing time:             Mon 21 Sep 2026 05:53:34 +0000
Manifest this update:     Mon 21 Sep 2026 05:53:34 +0000
Manifest next update:     Wed 23 Sep 2026 05:53:33 +0000
Files and hashes:         1: lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl (hash: oBfiiMGIukiOTKYtxtEbbW9RibMXMZPaFaQcNGWBbWM=)
                          2: 283FBF48ABE711F19A2237C3CE1D38B0.roa (hash: qlXe9ToMMBUPUD4aHrT0VkPmkGJ+IKxVVrZ+TC2S6oE=)
                          3: B150BA40ABE611F1A282F4C0CE1D38B0.roa (hash: N+dAXbLJBG8rn1KXTP6prlFDogrJTuX/AgdM1sWu2Xs=)
                          4: 5E55C7C6ABE711F1AC4C05C5CE1D38B0.roa (hash: M8OhoCRyxezZkdhtLD8T2oEZ3sfrS8/jU8st2mVSqts=)
                          5: F2AD0818ABE611F191B005C1CE1D38B0.roa (hash: 8dZYLt8eP39M8BLG9aZ5YDmDaOwnDTF/lzL80thb30g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:53:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678120AF, serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
        Validity
            Not Before: Sep 21 05:53:34 2026 GMT
            Not After : Sep 23 05:53:33 2026 GMT
        Subject: CN=6ab0c65e-a786
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:6a:f5:e7:76:8a:c8:ef:ae:81:cb:15:4d:
                    c5:0f:51:e1:4e:6a:07:ab:97:29:63:bd:84:e8:68:
                    f4:78:db:2e:4b:df:f8:90:53:ab:73:85:7a:51:b2:
                    1f:f7:e7:44:54:3f:50:69:dd:84:ec:f9:96:ce:d9:
                    7e:9b:1b:d8:71:3c:2b:cf:79:83:32:39:f0:4f:f7:
                    89:6e:68:9d:b3:f3:71:f8:d2:76:d5:12:9c:e3:92:
                    72:19:3e:ad:62:d6:b7:e9:ed:6c:a6:8e:b8:e3:f3:
                    a5:b8:23:03:ab:3f:76:fa:ab:4e:20:21:1b:f6:55:
                    bc:87:8d:ee:eb:79:89:7c:85:e8:cb:a5:5f:09:f8:
                    92:ae:03:c2:a6:59:ab:4c:92:d4:45:e3:84:8d:cb:
                    4c:aa:88:71:9a:ee:f1:75:b9:eb:7c:59:4d:97:dc:
                    a4:2b:da:44:f7:8c:c8:8a:ed:aa:a6:21:f5:2e:d2:
                    bb:1f:97:4c:c1:94:6b:0b:43:0f:95:06:27:10:d3:
                    32:b8:c2:b4:1a:08:4e:e2:c4:c4:0a:dd:05:1b:74:
                    98:f3:8d:d8:03:ef:23:87:c2:e7:ee:c9:91:48:9b:
                    2c:0e:8f:82:7d:74:bd:6e:69:11:4f:3b:3a:4e:fe:
                    dd:60:8e:b0:59:4e:de:0e:4e:0e:dd:34:c5:82:bd:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:05:49:06:67:C5:7B:E9:4E:AC:78:6A:4F:D4:EC:F8:5E:1B:5A:07
            X509v3 Authority Key Identifier:
                keyid:94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:8c:b9:c2:6c:cd:f5:65:b3:6a:cf:9d:01:43:79:c4:2c:f7:
         e1:65:5c:d4:12:3f:7f:ef:90:6f:30:22:ec:92:13:f4:9f:85:
         d3:8e:9f:8b:ce:9d:df:e2:6c:cd:ce:19:96:6a:fb:db:12:18:
         2d:94:a6:37:eb:f7:ad:2f:bb:e6:4b:30:3b:ac:47:31:7b:13:
         10:eb:a5:6f:2d:d8:71:ff:2d:38:93:d3:89:3f:a2:a8:ab:7a:
         3a:a6:a8:4f:7f:4c:12:1a:3c:b7:d0:2c:4f:63:d9:20:1c:9f:
         41:f9:94:8a:b4:a2:72:90:2c:a4:3a:e1:27:f7:89:2e:14:58:
         23:97:92:f9:0e:8c:b5:e2:05:ad:84:8e:9f:cd:30:e8:8c:00:
         aa:84:5a:ff:2e:7f:96:7f:e1:df:ff:f6:b8:6c:e1:7e:42:81:
         ea:46:bc:5e:b5:19:35:f9:f1:64:d7:76:fb:35:82:4d:d1:73:
         7d:98:68:af:5d:96:57:6a:f5:ce:b5:25:c0:4b:57:05:b4:7a:
         dc:06:df:dc:b9:3a:0c:f8:c9:4f:d0:86:67:43:02:c0:70:63:
         29:17:87:01:e4:03:88:c4:8d:da:53:94:a9:5a:fb:86:5f:f6:
         bb:41:38:d9:4b:e7:43:e7:ee:df:70:9d:5b:48:ed:f4:25:0e:
         63:b6:ae:0f
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBFjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
ODEyMEFGMTEwLwYDVQQFEyg5NDMzRjFENUFGRjJBNEEzQTQ4NDAzOUNCMDQzMTJG
QTQ2MjJEMDlGMB4XDTI2MDkyMTA1NTMzNFoXDTI2MDkyMzA1NTMzM1owGDEWMBQG
A1UEAxMNNmFiMGM2NWUtYTc4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMakavXndorI766ByxVNxQ9R4U5qB6uXKWO9hOho9HjbLkvf+JBTq3OFelGy
H/fnRFQ/UGndhOz5ls7Zfpsb2HE8K895gzI58E/3iW5onbPzcfjSdtUSnOOSchk+
rWLWt+ntbKaOuOPzpbgjA6s/dvqrTiAhG/ZVvIeN7ut5iXyF6MulXwn4kq4DwqZZ
q0yS1EXjhI3LTKqIcZru8XW563xZTZfcpCvaRPeMyIrtqqYh9S7Sux+XTMGUawtD
D5UGJxDTMrjCtBoITuLExArdBRt0mPON2APvI4fC5+7JkUibLA6Pgn10vW5pEU87
Ok7+3WCOsFlO3g5ODt00xYK9B4ECAwEAAaOCArgwggK0MB0GA1UdDgQWBBRMBUkG
Z8V76U6seGpP1Oz4XhtaBzAfBgNVHSMEGDAWgBSUM/HVr/Kko6SEA5ywQxL6RiLQ
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzgxMjAvMjA2NUVERTZBQkUzMTFGMUJDRkJEREFDQ0UxRDM4QjAvbERQeDFh
X3lwS09raEFPY3NFTVMta1lpMEo4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbERQeDFhX3lwS09raEFPY3NFTVMta1lpMEo4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3ODEyMC8yMDY1RURFNkFCRTMxMUYxQkNGQkREQUNDRTFE
MzhCMC9sRFB4MWFfeXBLT2toQU9jc0VNUy1rWWkwSjgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGKMucJszfVls2rPnQFDecQs9+FlXNQS
P3/vkG8wIuySE/SfhdOOn4vOnd/ibM3OGZZq+9sSGC2Upjfr960vu+ZLMDusRzF7
ExDrpW8t2HH/LTiT04k/oqirejqmqE9/TBIaPLfQLE9j2SAcn0H5lIq0onKQLKQ6
4Sf3iS4UWCOXkvkOjLXiBa2Ejp/NMOiMAKqEWv8uf5Z/4d//9rhs4X5CgepGvF61
GTX58WTXdvs1gk3Rc32YaK9dlldq9c61JcBLVwW0etwG39y5Ogz4yU/QhmdDAsBw
YykXhwHkA4jEjdpTlKla+4Zf9rtBONlL50Pn7t9wnVtI7fQlDmO2rg8=
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:14 2026 by rpki-client