Error: rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
File:                     2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft (raw, json)
Hash identifier:          ArNOdJPY3MforkVUTwIrlWpdThjLpxKavst9DBPZu6A=
Subject key identifier:   21:31:A9:46:13:89:C3:F4:EC:96:7B:06:39:D8:9E:59:36:0B:CA:45
Authority key identifier: D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18
Certificate issuer:       /CN=F36886B3AR/serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
Certificate serial:       05B9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
Manifest number:          0582
Signing time:             Thu 24 Sep 2026 03:17:30 +0000
Manifest this update:     Thu 24 Sep 2026 03:17:29 +0000
Manifest next update:     Sat 26 Sep 2026 03:17:29 +0000
Files and hashes:         1: 2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl (hash: TUiXzcuiFL8VHX5ZcgiupySwx/WxybImIc8XEBE8A+0=)
                          2: 65C358568A9111F1ACF111E9CE1D38B0.roa (hash: JaU5nH8aptEvSi4nGdjy1c2XIZ9FUS2u9voNPYY/cdY=)
                          3: 01F4B7DC164911F1AA82037CDAE4EC9C.roa (hash: SJBq2f5PEAQ7jMq2RDwqV4pd3LXt7LixkprBqHneLz0=)
                          4: 86664F868A9211F19A6099EFCE1D38B0.roa (hash: rIungNY5EVspbMIGcy76MQ1oYEJ0edvK146736oLfvE=)
                          5: 6D3EBE72164711F19F64E7F1DAE4EC9C.roa (hash: yLI6smy3lVo+VEqO6BS2sNIl22GUPaCfOV/LStarXLY=)
                          6: 15D6A7D4164811F18DF4F4F5DAE4EC9C.roa (hash: 14smMykXcFq93duH/vGIC38LPO0s9E/b96sonJX6BGk=)
                          7: 6FF913CA16FF11F1A85261DFDAE4EC9C.roa (hash: iQniiQsV4FPnDcQIFs8/PL97KT4obDA4lMn2n96y9AE=)
                          8: AF498724164811F18B4BC67BDAE4EC9C.roa (hash: 4CjEu1vpm+wP9BTwYGqYW9uzMDMzsV6XNuV1HbMfl9g=)
                          9: 76FBD6B0164311F1BD56F3DADAE4EC9C.roa (hash: Gj9pS0NU6aD4F5/RLKRtgqvJR42xaOuVLePBdK86QyQ=)
                          10: 112931EA16FF11F189EF5EDDDAE4EC9C.roa (hash: ZgZBnTWvmwDnOvNrILpi9EmkaK0Jj9X9JXHSy8EVaWA=)
                          11: 61C5A06E164811F19DC45379DAE4EC9C.roa (hash: OTKMR3kuYYZvbI08rUILdh06l0vzSxxr/G4T2Y9Nw7o=)
                          12: 005F57B0164411F1BAFF55DDDAE4EC9C.roa (hash: FNAoTrUV+u0/qrkFEdnS32oasDVOtwHwST38Ns3Twkw=)
                          13: 4C318CCA164A11F19A859484DAE4EC9C.roa (hash: Fi5vn1JhkR8Vqf8Cp06SqG2EQ+vwVXe6FRuFoKYg4pc=)
                          14: F5CC513E16FE11F1952149DDDAE4EC9C.roa (hash: ewGQNs4bpNDJfZJL7/NDfboXQleDBS/jOqXleweJ0Ow=)
                          15: DFD2B32A164811F1831AF77BDAE4EC9C.roa (hash: x3mxEyaa11oMqg1KAkOGBWsSUvRy6oN81BPBKnojwr0=)
                          16: 02FCDA2A8A9211F1A51C89EBCE1D38B0.roa (hash: kaE23hHrEaGcX+JU9kKbhbl9cGhGBvp+953IjP3cM7s=)
                          17: 8B5CC092164811F191889C7BDAE4EC9C.roa (hash: lSB9/WEXqq3+A7EAEzssfuCjG/BvQRzkvd1f1Gn35v8=)
                          18: AAC6E05E8A9011F18378F7E4CE1D38B0.roa (hash: JIjslw1y4PxMG8w0bVuRsS73DTXnWqqEjqzGJCLK+DY=)
                          19: 2E2D703A16FF11F1AE9583DDDAE4EC9C.roa (hash: +XqUdRwBEEbCB2RNCdbzmLthsuLaA1iKWwIhtLwPD8M=)
                          20: 475E0D62164611F1865584EBDAE4EC9C.roa (hash: gVZ9dFpQtlyacvHFfLqr5zzatWzgyOJrPVlqDGNVe6g=)
                          21: D3BA0E0C164411F190617BE1DAE4EC9C.roa (hash: I6gL9OWppOVojAbbO/0MhbpSXxWSJ/sKvKIETher/Vk=)
                          22: 0B19DF248A9111F1A2F431E7CE1D38B0.roa (hash: vhoxmYwsSQulDdm74mm4Hcep+k5eg56/9gWsR/B37S4=)
                          23: D40A53188A9211F1888E83F1CE1D38B0.roa (hash: 7JtghGAE7gng9Fkb6j1avA8wH4Ce7zgj/HHbwH7T4RI=)
                          24: BAD1C0B2164211F1A5140FD5DAE4EC9C.roa (hash: LrKfPDaa2A9ec4OA/JYHGSq5CzhJGUqJ1ollvsbr8wI=)
                          25: 4F2349C6164711F19BD3C8F1DAE4EC9C.roa (hash: t/sQT9zOtUxK/aumZF4eGuu6FrtnQZBtft6dvkz36IM=)
                          26: FE1B57A8164611F1BE809CEFDAE4EC9C.roa (hash: Ve3RCW/q/y2pFA0BJHu2+tRYVuEEJVi+vVpApROhl0c=)
                          27: 20E578B6164911F184B5D47DDAE4EC9C.roa (hash: GjT6tvvAwcdiXjyTcs5xoFxiRyrpZUNEZqRr7lISbHE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
                          rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36886B3AR, serialNumber=D9C0B233ACB063543574D3F5F327BEB8B2B99118
        Validity
            Not Before: Sep 24 03:17:29 2026 GMT
            Not After : Sep 26 03:17:29 2026 GMT
        Subject: CN=6ab4964a-b4e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:42:03:90:10:21:ea:12:5f:19:eb:f0:1e:13:
                    ac:19:74:49:c6:27:d0:6e:fb:08:8c:e5:99:2b:5a:
                    ab:ac:05:53:2f:b2:04:b7:40:08:73:74:2b:36:58:
                    8c:a8:03:2b:f6:d9:ef:ae:ea:03:b9:6e:4d:1a:98:
                    f5:33:0f:32:6e:8a:4e:de:76:1e:35:26:07:6c:2d:
                    05:c4:6a:0b:6d:2c:5a:c2:b3:af:d1:02:5f:b5:c5:
                    65:2b:51:b2:fb:32:7f:be:82:60:56:df:ed:8f:a8:
                    6d:31:2b:86:d3:4e:d1:13:f0:2a:cc:d6:c4:d4:28:
                    4b:9b:48:5f:b4:f6:a5:81:27:87:ee:0a:24:b1:21:
                    00:0a:d1:a9:07:23:a5:fd:6e:45:99:e6:77:d1:70:
                    c3:41:14:6e:a4:de:90:d9:fc:94:7e:02:14:3e:92:
                    1a:a8:80:68:3c:f8:db:1e:7a:2e:fd:3c:2a:de:8f:
                    c0:97:0f:c5:70:87:e4:2d:a1:0b:45:3e:13:43:02:
                    ec:d5:10:db:e5:b0:ba:3c:c6:f7:3f:3c:56:a6:e9:
                    11:7f:b2:c5:ff:cd:3e:66:3b:2a:02:d1:44:4f:82:
                    a4:2a:58:00:e0:17:dd:de:bd:58:96:c9:f8:06:ad:
                    0e:d1:73:9f:2e:f8:5c:68:e4:ac:7d:4a:a4:7e:cf:
                    d9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:31:A9:46:13:89:C3:F4:EC:96:7B:06:39:D8:9E:59:36:0B:CA:45
            X509v3 Authority Key Identifier:
                keyid:D9:C0:B2:33:AC:B0:63:54:35:74:D3:F5:F3:27:BE:B8:B2:B9:91:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/2cCyM6ywY1Q1dNP18ye-uLK5kRg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36886B3/5A411F9EB8EF11EDA5B09DDAF1222468/2cCyM6ywY1Q1dNP18ye-uLK5kRg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8d:30:43:93:0d:08:c3:39:6d:1d:27:cc:5b:08:70:54:89:
         62:24:49:1e:8f:76:f5:3e:52:ec:26:52:d5:9d:c0:db:33:46:
         86:d6:f3:2e:79:87:85:4f:35:7f:f9:e1:7b:46:52:88:b4:9b:
         de:2c:d4:bf:e6:af:89:f3:d7:4f:07:23:2c:d2:b2:c6:86:c2:
         39:46:ba:85:0a:a0:59:1c:51:f0:5f:31:4c:97:d8:76:61:02:
         6f:e1:ce:55:fb:66:05:b7:3e:63:43:a9:95:ad:2a:df:6c:05:
         08:9f:e2:67:72:1d:e9:46:5c:87:22:2b:77:26:17:0b:5a:cc:
         e1:ba:a0:81:9e:3e:7d:ce:fe:f3:4c:9f:c2:54:e7:4d:38:54:
         87:81:54:28:8e:48:29:8e:3a:53:27:f2:a6:36:69:1b:50:fc:
         19:f8:55:75:5c:02:af:28:66:23:e0:99:2f:1e:22:0a:b9:46:
         88:d6:ea:db:d3:83:3f:59:ff:4f:b4:99:59:d1:55:5c:54:9b:
         40:a6:0b:0d:c2:5a:8e:4d:6c:42:a1:4c:4c:db:5f:3d:25:42:
         4c:b7:1e:4c:3f:a9:8f:b7:be:a7:85:fb:65:90:12:da:b2:2b:
         34:ba:7f:58:52:66:a5:d6:60:86:93:83:bb:75:2e:37:de:9b:
         be:75:f6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:18:32 2026 by rpki-client