Error: rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
File:                     bGAqJvssRmcHIt_HP3L8S2pz68Q.mft (raw, json)
Hash identifier:          1Unzfxxlg1xAke64cZReFVXNV3hAYhwXWHjmxxvV06M=
Subject key identifier:   BD:41:2F:33:7C:22:59:E6:66:09:78:BB:75:CC:D6:B1:68:F1:4E:B4
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Certificate issuer:       /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial:       08E0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
Manifest number:          08A5
Signing time:             Wed 23 Sep 2026 02:03:49 +0000
Manifest this update:     Wed 23 Sep 2026 02:03:49 +0000
Manifest next update:     Fri 25 Sep 2026 02:03:49 +0000
Files and hashes:         1: bGAqJvssRmcHIt_HP3L8S2pz68Q.crl (hash: bfSPqsl1Y+MABBkPlgLhyOzHMP+jlK8E+F+LV/LG8qw=)
                          2: 5BF7C538D6D311EE8D069B99775412E6.roa (hash: FrfjbCz4uBxhaSqCzrHh37+uZofBgE0Besu2pKbYQpw=)
                          3: 856937CCD6D211EEBB241198775412E6.roa (hash: +VWOVU8LbjtU0UeX7EzW0goMWVCEjX2fnfbvZEzd4jE=)
                          4: CE1B29ACD6D311EEA8F57C9A775412E6.roa (hash: bi5RLYyELwPTThi9QziSAVXhtDNN8osz2xOTB8BvZaU=)
                          5: 3C5C2764D6D311EE8A146899775412E6.roa (hash: zjTGG2bXnu0wyjKlk84e/maimd751NDXdZ1Zs2MN7QI=)
                          6: D57ADAA0B81111EBA7DB4454F8AEA228.roa (hash: UFXsrZ6SaipkzaQ680zeRQ03y6uI2CG5Iu4xeDfpl2Q=)
                          7: 4426DCF4D6D411EE8FD15F9B775412E6.roa (hash: thj6WdH0sCn3PirYI7wEQDI5hYFH5PWNx1mbax5v1vs=)
                          8: 8FDC027ED6D311EEBCB3209A775412E6.roa (hash: lvFe+feGwzn9NrH3W+fJJlP2uPBJK0C+hYAVj55kTmo=)
                          9: EF153C06D6D311EE81B2A69A775412E6.roa (hash: u4z/o2bi+coNZSpJQxlQFyneHgY3sC2mxikXEsI35Iw=)
                          10: 007480EE8A3511F1AE1B81AFCE1D38B0.roa (hash: cJNbbHye0DCiPyaT/oO0oofaZWFs63pIqNMXNgTOsKI=)
                          11: 2B65FB2AD6D211EEB37BA597775412E6.roa (hash: Bvui73HfKgjdOcok6Nt8x7LxjIr2l6LT4gkZ7CmIht4=)
                          12: BDD29D70D6D111EE858DC496775412E6.roa (hash: 3QpUfB1uqQrOQAiX8rmw5+mdhJJe2Ty9dlWX56QYMI8=)
                          13: 4E9C4770D6CD11EE958F778F775412E6.roa (hash: c9sQaEYAyqm+BkldBdyQdwbmIPGfxK5LWIsB7tX3aMo=)
                          14: F124952C8A3211F1A58979A1CE1D38B0.roa (hash: hJETnTjkbhY7dvnOKtTIOC7VjSbEJ5vwZEKz42QAcYk=)
                          15: AC515C42D6D311EEB9744A9A775412E6.roa (hash: 4wjBkEUcARYf3pnSVrvSkSU0KfndRSbtzqu21Hg7Duk=)
                          16: 8E545E26D6D111EE9DA36E96775412E6.roa (hash: b5cJmF73GB5Z6o/xH2F4YIMXX0yBFvv6Ldd/B3dZJm4=)
                          17: F1721C06D6D011EE90D85995775412E6.roa (hash: outMRddXF9WXOVZiQBmMyCeqJmDZ0QscQ342UcSxPB4=)
                          18: 6306BA7AD6D111EE8D123E96775412E6.roa (hash: LhniyhVI98Bu2cP0+UWqwVqSF0Ryo7Y5wEOzSwkjfCY=)
                          19: F42BE354875F11F1992EE5EBCE1D38B0.roa (hash: RE5lKG1ryU+ajdXMJ2nwYKPsD4axZEN9fRnoHhCTJp0=)
                          20: C950F2E2D6D011EEB8E22A95775412E6.roa (hash: DsFWFuYEHn/SPniNCK3MVdTIVtEKig/y5CPK0e9gNtw=)
                          21: A3456F54D6D211EEAF4D5198775412E6.roa (hash: i0yZF2PUCxhgm8UqNd/C0q9+wArj2Hxhrf+6SwwJG2A=)
                          22: 9E593C109B6F11EBAD7A975FF8AEA228.roa (hash: xET6XUHCDmCqH38ucd3N48zFFOtJqzDtFTRniETpe74=)
                          23: 3BFE8668876111F1A98F1AF4CE1D38B0.roa (hash: Z+yJ9FcpMmm2v6EDv3fvnGmbZ/nIaxlYnchakU4g7C4=)
                          24: 7B4A77D0D6D011EE92478694775412E6.roa (hash: 6/E4WWAyLck9mcyWnGg9mW1yIS7byXqvWkF6AZ9smA0=)
                          25: DF891880876011F1830CE9F1CE1D38B0.roa (hash: H6grOpUgmmbUupL8oKvn5RUKSzVClZwovYf9bcqWgxg=)
                          26: 219DD314D6D311EEB90E4199775412E6.roa (hash: ma6pwemz7R0BRkqrdUQIGdjzYbB9f9tRhXx3930ePjo=)
                          27: BEE18022D6D211EEBB32B898775412E6.roa (hash: eNd31dWrGRSxclpdfp4+cBtfE1vmno7ZJ97SnmGt++I=)
                          28: 17D28782D6D111EEBFE28F95775412E6.roa (hash: KS2vg7aLfGAwDnrbeNSYJnAv18QQEcmCJ8O5zl72tMM=)
                          29: 0872FC84D6D311EEAE521499775412E6.roa (hash: uaAyaNhStXwawCKK27MqfIZk5EOR+TRXg8S4yeXYiE0=)
                          30: 86AB974A8A3211F18AFBDBA0CE1D38B0.roa (hash: 1cXTxnZs75tnvy4l6NPeWheUC5AUarlP+avu1Um9RK0=)
                          31: CAC86F829B7911EB9C8AEE6CF8AEA228.roa (hash: cRcLcik8i+TyllzdHcW3JEfLJ5cwxs7RcND5vl+JdK4=)
                          32: B34ECFDE8A3111F1A83C6016CF1D38B0.roa (hash: WWcREXZ/VIFzmTTYzmuui5KSZyqOd0anmtzmN+ePjHk=)
                          33: 480FF262D6D211EEA412CF97775412E6.roa (hash: SReaLb0pInnaleH0F6Ur69MwCZCFHDNNWKBSRKXCOHM=)
                          34: 78EE6C50D6D311EE8E30F999775412E6.roa (hash: OmyWMkWZqAwBmqum01dwiU7OnnccgS3behI0J5OgbJU=)
                          35: 0D11E6DCD6D411EEB675D59A775412E6.roa (hash: e4MN0Odk8P7mNcs/8c9IYXswLI1eDxy+ES9x4+fg7IE=)
                          36: 25AFCD1CD6D411EEBE04379B775412E6.roa (hash: wQ53Tz4Ea9/8C2+Qv/h7Bn2lmPYDJIiNvN6ok68fVzI=)
                          37: F686AFB6875B11F199EE42D5CE1D38B0.roa (hash: GZMNV2OYqv3JwxOdqfI7vQcvOtsSdk2TBvIMh2GaSLM=)
                          38: 3BAF7912D6D111EE9297CA95775412E6.roa (hash: 9LV/z2eT53+SR9GSgRyJIEeM+2UdLnUe8mus876T9SQ=)
                          39: DB5426FCD6D111EE8821F696775412E6.roa (hash: ewSN3NtRrJJE/mn0lq0kjCSH8LZR+bHGqCfgNdGJeus=)
                          40: B5920B428A3311F1BD1B65A6CE1D38B0.roa (hash: us7Da5REqF3CmHDXTnuZes6SLlHCA0F5bCyQ6RESrCE=)
                          41: A6F2088AD6D011EEAB1BFF94775412E6.roa (hash: OujszP2Qz0rfTPsT2WgXJ59nmkNNMZcwUxlCNRpm33E=)
                          42: B29E9F927C3011F1B9BAD50CCF1D38B0.roa (hash: xhAGI52qHSNuFNKGdwEucuv7TORPXybel8KfNXzFFs4=)
                          43: 667B3C368A3311F1BDBA13A6CE1D38B0.roa (hash: myJvSItIkO9IivipUhoXB/6c8s2Kg2sKR7kiJ9xOWQQ=)
                          44: 0C656A1CD6D211EEA3097A97775412E6.roa (hash: cvJyT5CebJwP06P0uIDwDI30LKDEQpUavmqLqIgUcwg=)
                          45: F3AFCDAAD6D111EEAB171997775412E6.roa (hash: pzVcoikjRd5kBQQBkN8RD4GAK76FMzHKo0b/mdKF3fM=)
                          46: 782F5ACE875F11F192479FE9CE1D38B0.roa (hash: vTMr3angMMBQDnu2OUBQHKu7EJNLw04DfTTyz8Jar6M=)
                          47: 2BF911C47C3111F1B56C500DCF1D38B0.roa (hash: opGWqfZjzu2YmLnNTjfxQmjr4TL4DAvyx0NFJ1joiUM=)
                          48: 8AE5472A9B7711EBB592026AF8AEA228.roa (hash: JYtg38AemjdFQ9T4jRQ9y/cKWVHvuahgrREnbxpFFVA=)
                          49: 6767E44ED6D211EE8B04FE97775412E6.roa (hash: HbXlNZmbbzwsIbWwhktUnRDS/upzcP5OA1nlcNgiVjw=)
                          50: F066303ED6D211EEBF42ED98775412E6.roa (hash: iNB4D2jFI+zEfaLP5CPTliLyaE9QGOHoTz4gv4BQRjI=)
                          51: D8D46616D6D211EEA937E098775412E6.roa (hash: c/ZKZC1RBjoyck2n3W48sbd9nSOfzrFGUaPT6SAYtQQ=)
                          52: 91A719A2875E11F19FD4A6E3CE1D38B0.roa (hash: e9VE8z7Sd6NSlTKu7XWZn/vylNIqsNIvqf5/ddyjI+A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
                          rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2272 (0x8e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AR, serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
        Validity
            Not Before: Sep 23 02:03:49 2026 GMT
            Not After : Sep 25 02:03:49 2026 GMT
        Subject: CN=6ab33385-bc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:59:15:1e:30:a6:4e:17:d8:b6:34:62:3b:
                    e0:c6:53:8f:44:bc:af:8a:fa:f4:1d:38:ba:d4:51:
                    27:65:e4:4e:ca:79:99:0e:45:b5:ae:e2:95:39:a8:
                    c6:3d:ca:50:3d:a5:34:fb:27:a7:58:15:41:2e:ae:
                    de:ec:4c:4e:84:a4:12:46:48:64:6b:e4:b8:88:f8:
                    d2:5e:24:91:40:b6:86:83:08:45:c0:7f:fc:9a:2d:
                    eb:e0:8e:b3:df:26:cd:e1:7b:db:17:5b:28:ce:c9:
                    ae:06:53:af:64:e4:01:5f:15:1f:9e:71:e1:72:80:
                    89:0c:04:9e:23:e4:09:38:48:47:3c:46:82:88:e5:
                    4d:04:90:98:64:6d:74:b4:ea:21:a5:af:77:e7:bd:
                    62:90:5d:30:78:0e:2c:e5:2a:94:8a:91:f2:7e:1d:
                    cb:dc:1b:a5:3b:b1:3e:50:ef:05:43:6a:52:4b:46:
                    34:f3:89:36:cc:09:2a:d0:19:f6:96:f4:fa:c3:91:
                    2d:ef:a1:38:e3:31:d1:3d:a1:97:d9:10:1e:01:4b:
                    3d:4e:ba:8b:d9:7b:de:a5:7d:8f:5a:2d:47:92:30:
                    a5:01:a3:c7:b3:03:5b:1c:e6:b0:ca:a6:96:33:5d:
                    ef:08:c7:79:b1:53:c9:18:b4:91:52:d7:3e:66:52:
                    f5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:41:2F:33:7C:22:59:E6:66:09:78:BB:75:CC:D6:B1:68:F1:4E:B4
            X509v3 Authority Key Identifier:
                keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:72:09:84:a5:41:26:ed:fc:49:c9:23:9c:a3:7d:e8:66:a4:
         1c:bb:65:27:a4:d9:fc:e2:62:b4:8a:47:10:85:68:c5:fa:5c:
         d0:49:f6:99:fe:96:ee:dd:37:79:ed:da:a9:9c:a8:a3:6d:9d:
         7b:bf:b3:08:21:9b:3a:b1:67:62:9f:be:52:83:e5:ee:8f:38:
         e9:25:94:1a:ed:1b:b1:77:2f:c9:08:8c:8b:28:53:2e:be:75:
         62:07:4c:6f:b9:d8:fd:a7:aa:ee:84:e2:76:99:25:db:de:48:
         f4:ff:1b:00:0a:4e:b2:dd:fe:cc:68:c8:36:55:a6:6a:a3:84:
         41:74:0a:0f:d3:d7:54:b7:5d:57:f9:71:15:d5:5e:ac:ab:e0:
         3a:d6:52:cd:4c:86:0f:77:fc:ef:f5:9d:ae:d5:8c:83:27:41:
         6e:6e:36:a0:de:59:13:12:c0:70:3e:82:31:8c:72:f7:8b:4c:
         3a:d8:69:00:cd:af:cc:e3:c4:b7:01:d6:6e:11:6f:7a:fe:a3:
         be:b3:af:b8:01:4e:fc:2f:16:55:20:7b:9d:85:1d:ba:4c:3e:
         d9:d8:47:69:45:06:e9:ab:da:70:b5:02:69:f2:11:b8:89:d8:
         b1:34:16:ac:06:c5:e2:e3:e6:95:cf:cf:9e:01:93:d4:63:df:
         ef:b3:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:23:27 2026 by rpki-client