Error: rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
File:                     0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft (raw, json)
Hash identifier:          iZZOMhMLKVWiv0LzPX9wm8OXK8xA0sLqEgzunTBoTms=
Subject key identifier:   2C:A7:AC:39:23:4A:3E:41:DB:9A:ED:62:BE:C1:FF:B9:6F:2E:07:93
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       059D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
Manifest number:          0565
Signing time:             Tue 22 Sep 2026 03:17:49 +0000
Manifest this update:     Tue 22 Sep 2026 03:17:48 +0000
Manifest next update:     Thu 24 Sep 2026 03:17:48 +0000
Files and hashes:         1: 0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl (hash: d3jKe7umFXZm5KKEJJ7eo5Mg8A/xlFe/aIYDUHtLTM0=)
                          2: 39FFC9BE03B811EF983A1B33017001B1.roa (hash: tS+wVtHhPrpxDmWcesUHT7utAdSi06FtleX+U4Lw7TI=)
                          3: FAEBDC4803B411EFB029601B017001B1.roa (hash: xzzx0ugjkRS9PYdo0KLQ7+H2uxfJ0K+cSqgvb2XnuPk=)
                          4: 10CCE32CC6FF11F0B93FC5E3DAE4EC9C.roa (hash: 5B0QBngF6qWUVL5UNucquvsi+fgp6vlUH+ndV+NbyTc=)
                          5: C38CBD7203B811EF86521F38017001B1.roa (hash: 2WcQX+9AjIfrNmsdsiKQyVMoPWChqItR+h5OqUTMfRk=)
                          6: BDBE112003B311EF8DDE9910017001B1.roa (hash: 82bRJv+5HJA4Fi6+OCSpOjCyBZW+S6V58aFWPp7a3SM=)
                          7: B44578A803B411EF95522E17017001B1.roa (hash: 936Q411o1qc4pT0Zx9jhIXN0Wgiyr6no0KJUyaCEE/c=)
                          8: 980A722003B311EF86B63910017001B1.roa (hash: wKMuoXYYXIiS/ZLS7PWLzLXdIFcknzJKp/rpFSrvhH8=)
                          9: E432C49203B611EFBEEC1128017001B1.roa (hash: eCtOJ1D+HQduSTMxCfcTJUfC/lccpBhF5JE1AQ+kubk=)
                          10: 5261E514C6DA11F0B15A2D81DAE4EC9C.roa (hash: mAmUFgYkXbE6+ghPUIu/1Ppy4h9mOTBy34Ydx2HW+I0=)
                          11: CF23848E03B511EF80994521017001B1.roa (hash: aMLwz+ZKh6Oz4CoRMY0xHb1x7qr39vpl6gfnLqRS/qQ=)
                          12: C8492B50C97011F0B52599DBDAE4EC9C.roa (hash: 9b0StYZI4/RVSPKeiscu/wUKHK60EMRwc+Ha1U/o1J8=)
                          13: F8A856B603B211EFB3ADE30A017001B1.roa (hash: uJrPT/XteQRfZvDwpMyFdVnvV7NPg5BDECy1d8844bY=)
                          14: 519B660C03B611EF98D15426017001B1.roa (hash: av0draMIOKhBEZ3kOVBkA1YKrpj/hJoac9vz6NKCER0=)
                          15: 056431F403B811EFA4BA5832017001B1.roa (hash: ApGOgDLRrAt7wLYHdFuvRo2DntM8bf1Tz78NFhtcxL8=)
                          16: 7EB3E7FA03BA11EF9888BB48017001B1.roa (hash: 8kFtpikZunY+lfUkg34+p4H/6y7KoFeGsFbV13OrRZM=)
                          17: 48D1B612F7D011EEB7ACF12A017001B1.roa (hash: MO6EQKtkkq85RZaTVkomcZUCuBadwthtdCSH79/DaIw=)
                          18: 7FF87C5A03B711EF917C5C2D017001B1.roa (hash: a35pKcfaaHwWPzygov5Kk7IYMKCrlD7MHrGfGQq3aco=)
                          19: DF255D0003B311EF81582C11017001B1.roa (hash: 2gbspSAn1FaleBtgeLKwF76oQxo4DIcvXlm/ZaZeaDw=)
                          20: 8D45EA1C03B911EF8ECB013E017001B1.roa (hash: QPpku5aqb911f/bHCQAb3elnYINcM+RRUsK7N2sabe8=)
                          21: 32837C9003B711EF967A4F2C017001B1.roa (hash: +5CLxbGwXT60ubQqq8bM1C2hWckotvUlGwQf+a7WrQo=)
                          22: 58F9B92203B511EFB9AAA61C017001B1.roa (hash: wfruQ932JSdbaIg9RVb9zVvENhjkQ6ADpWh/ZpApbXY=)
                          23: 06ED290003B711EFA808E12B017001B1.roa (hash: 3nwhGhuRYVpIImiqWFP3vuMZlijuvEzm21qn4zV6clc=)
                          24: A28BE3EE03B511EFB056D120017001B1.roa (hash: R+mCP7u5rWLhn9EEMSGJ2CTodRAWWEkqlzeIGmxGVo0=)
                          25: 59084A3803B411EF9CC30616017001B1.roa (hash: VQ0RSSTYVjk7yqISbUry20G3lzAncR47Ax8IgCDJ6FM=)
                          26: D95C7F0803B711EFA940CD31017001B1.roa (hash: YRvxTaW01N4ChieFj2ifQBeOMmeruhjQJDufE0+oCvU=)
                          27: 1AE3C7AA03B911EF86A98F3C017001B1.roa (hash: gyS/aMybFEma33PxUMgpBfLTjikHDhVK6duizXP6PRI=)
                          28: 6AE7FF2E03B311EF903F510C017001B1.roa (hash: 3kqijSi8P/0vf9KQNjB81BG7B4/nyk3Ow12xYdd94Dg=)
                          29: E8FB648603B911EF99896D42017001B1.roa (hash: 0LRPsqp/eBeRYaF8dUu/T+Twx9GeRodgR1TnQOXBJH0=)
                          30: 34279B9203B411EF914AA515017001B1.roa (hash: KyyGeSy1rjryhQ/mTFRctgw4FH6eqpgccoKh2XdbOnE=)
                          31: 7C1F7EE603B511EFB4C5FB1C017001B1.roa (hash: Lo3e7+E8r/NSCO53r7b8CA67fySg+7NtHZB+aX3Qbtg=)
                          32: B1B059DE03B711EF90376831017001B1.roa (hash: WeVV5gDtF6GpuPWvFOh56HIeyAo/+6h+QFCO/xL7k9Y=)
                          33: 2134D1CEC97111F0A57328DCDAE4EC9C.roa (hash: 4KsMZrVYDmHAF7oozcDrCXpi3ddCFjVIcMT9oAYZc7Y=)
                          34: 61AE267AC6FF11F0B91AC8E5DAE4EC9C.roa (hash: C98IqjdBv5LJt5iWVtMJ+QAbakTE3pasElVLp+1uNuo=)
                          35: BF97846C03B911EFB079EA41017001B1.roa (hash: wNII1uoSvScpdOlwHz4BDM1DBqJs/03DHX7oHGkZtJk=)
                          36: 67ECDE3803B911EFA186603D017001B1.roa (hash: DI5kIwElQ8R+Lw20LT5yGvsY0m7hji0peiEWAehYwT8=)
                          37: B159B4A6F7CF11EEB1F39025017001B1.roa (hash: 740iX4/YNKSrtY9V4n9PWMrAZ0OIIcK6uTWL5Tg39nE=)
                          38: B295FE0A03BA11EFA4CD3749017001B1.roa (hash: 0ThrAr6vm0bBEIQGeFKPBtwPlSPx+ZpJ9O+oSkRp4ng=)
                          39: DAF813C003B411EF9A180C1B017001B1.roa (hash: rxENEqWWigTNJviQ+rAe/KPkUQD8qHgTCh4hs/xATo8=)
                          40: 8A36DFD403B411EFBCF69916017001B1.roa (hash: xKMBf2rSSOixjAS2vNdhJv84bn3oPMKHm8mgP2NWS3A=)
                          41: 0471BC4803B411EF8330A611017001B1.roa (hash: 3INpP9HwU5rpsLwrARqpf7p6nExwTzjKuLs7Tp6YsOI=)
                          42: 9058590C03B811EFB2BC6037017001B1.roa (hash: KbTrV9/1QdeVyGjJXMf67sHpdC5TxLAEU7d3+fl+nbE=)
                          43: BF6DDF5603B211EFA0BA490A017001B1.roa (hash: 8/0GoFuHQN9he6IYSmKw6dZ6XCPb7gOtdsq14wm2Isc=)
                          44: 7C256E3603B611EFAF25C126017001B1.roa (hash: HvW2XolqN7iVLLfu4e4/42VqmnpjFO4MOEZUl8OZjX4=)
                          45: 5B989A2C03BA11EFAA71D543017001B1.roa (hash: KbZuJr3ip0P+gvWdRwind0bDdrmcL70WDYjmp2NTnhE=)
                          46: 4556E87403B311EF947EEE0B017001B1.roa (hash: 5he62FEDMtk8xgthwxXe7kpX5VqIynwz1zy7Z94nIm8=)
                          47: 59DC420403B711EF9611CE2C017001B1.roa (hash: EwVt1oXV0u0an9gRO+yk2dl6LPH6mygNRS8FSwAxo9Y=)
                          48: F30D683A03B811EFB841B038017001B1.roa (hash: /fG66SOeJwlKhY/vnT1XmeFZ84fISRpkxoqX3tuqW1g=)
                          49: 9C9F4FB003B611EFB8A12227017001B1.roa (hash: RVO87omLbTuzPNyt+gyuo6dbEU3UiqJ5W8lmS1Jz7c8=)
                          50: 5B91C6B803B811EFA4C9CE36017001B1.roa (hash: JcVXEBKBXCdAnpNP9gkBki5xx1uU/257cotnySg0MZA=)
                          51: 70246ED6F7CF11EEBDBEE324017001B1.roa (hash: e1vFix2SZU+voeEXeL4846G5Zk4nH6jhf40xzuuk0vk=)
                          52: 18F314CC03BA11EFA363E442017001B1.roa (hash: zpVG8PnZugODg3d53wKyidNhCpmCyN5gzsP/0/AMopc=)
                          53: 42F3617E03B911EFBF21F33C017001B1.roa (hash: rGghr4IPbYUvGjnweFdDE8GuVv5Ia4WJ4E4L8gdF8rc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1437 (0x59d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF, serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Sep 22 03:17:48 2026 GMT
            Not After : Sep 24 03:17:48 2026 GMT
        Subject: CN=6ab1f35d-76bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5c:8d:f9:ea:34:9e:ed:c6:bb:6c:cb:31:19:
                    10:b6:41:59:98:6e:c9:68:70:f9:0f:a8:c4:8a:1c:
                    e7:41:74:5b:a2:9d:bf:37:ac:4e:b8:ad:fd:1f:90:
                    d5:ef:a0:c3:72:24:e0:5b:27:36:66:b0:97:8f:c2:
                    c8:e7:0d:8b:64:7d:b8:df:71:23:08:34:c1:d4:22:
                    85:e6:2f:6a:82:4a:49:62:d2:96:4e:eb:8f:88:a3:
                    1f:37:49:54:23:41:db:c1:52:c1:65:f3:de:b3:cb:
                    e1:01:b6:c1:d5:96:47:44:10:d4:13:24:c8:8e:c8:
                    ca:b3:74:fc:3c:f3:5e:0c:11:0b:44:a4:82:b2:c5:
                    74:41:d2:ba:82:a9:92:39:5d:c4:31:e9:1d:b2:c8:
                    43:8e:e1:bb:76:ca:ea:54:31:26:6f:32:23:15:26:
                    01:f6:f8:39:e2:e1:20:26:33:d0:5c:ec:da:b7:6e:
                    06:24:86:fb:e3:1a:5c:6e:2c:45:64:4d:02:c7:4e:
                    2d:3d:ea:08:6b:4f:d5:88:aa:f9:ca:16:9a:ab:b8:
                    7f:0c:21:c3:0b:87:45:04:77:55:ae:26:88:ee:9b:
                    c2:a1:45:9c:53:06:d6:21:ab:8a:77:11:2d:52:40:
                    b1:3d:5b:e9:86:a2:21:a4:8a:fb:6c:4b:aa:d6:b6:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A7:AC:39:23:4A:3E:41:DB:9A:ED:62:BE:C1:FF:B9:6F:2E:07:93
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:fd:c2:46:3c:d8:f8:99:83:4e:a7:2a:32:2e:7c:43:9d:
         2a:38:d6:d7:f3:99:c5:bb:46:de:13:44:e2:53:f5:16:a0:40:
         45:02:84:1f:72:e0:31:1b:2d:13:ca:42:fc:b8:9c:01:fd:93:
         0e:85:67:dc:33:32:36:c6:a6:1a:96:26:5a:44:db:2d:1c:fa:
         e0:0c:c1:7b:6b:be:3e:80:7f:d2:9d:08:f5:12:0f:52:35:59:
         8c:d9:52:b6:57:09:54:a5:4a:98:a5:70:d8:b7:93:df:04:25:
         a0:96:d5:f0:7c:c5:91:e6:ed:1d:dd:ef:ac:7c:7d:f1:e5:bb:
         23:6d:10:0b:99:8e:d7:8d:79:dc:80:63:cf:63:14:7d:d4:32:
         15:f2:76:98:54:a2:38:0e:9e:78:6d:30:86:82:b3:ea:69:c4:
         a2:f0:fd:bf:7d:3b:bf:25:52:d2:80:c6:1e:34:4c:b9:39:bf:
         44:06:a3:bb:e6:9d:de:92:ad:6b:61:95:60:05:ae:f2:b2:34:
         95:a3:85:08:df:fc:53:a4:8a:1a:4f:88:cb:e6:1e:0b:35:dc:
         42:70:cf:28:70:5b:69:0d:a5:27:8d:a7:de:06:d2:0c:e3:86:
         1f:af:b4:6a:60:b3:65:f5:13:7a:cf:7e:ae:04:f8:e2:9e:7b:
         bc:4d:fd:7a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBZ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OURCNUVBRjExMC8GA1UEBRMoRDNFMkUwQkNFQjYxRkI5QzQ1Mjc4MjZFNjEwRDQ2
NzY5OUQ2M0UxNDAeFw0yNjA5MjIwMzE3NDhaFw0yNjA5MjQwMzE3NDhaMBgxFjAU
BgNVBAMTDTZhYjFmMzVkLTc2YmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsXI356jSe7ca7bMsxGRC2QVmYbslocPkPqMSKHOdBdFuinb83rE64rf0f
kNXvoMNyJOBbJzZmsJePwsjnDYtkfbjfcSMINMHUIoXmL2qCSkli0pZO64+Iox83
SVQjQdvBUsFl896zy+EBtsHVlkdEENQTJMiOyMqzdPw8814MEQtEpIKyxXRB0rqC
qZI5XcQx6R2yyEOO4bt2yupUMSZvMiMVJgH2+Dni4SAmM9Bc7Nq3bgYkhvvjGlxu
LEVkTQLHTi096ghrT9WIqvnKFpqruH8MIcMLh0UEd1WuJojum8KhRZxTBtYhq4p3
ES1SQLE9W+mGoiGkivtsS6rWthVpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULKes
OSNKPkHbmu1ivsH/uW8uB5MwHwYDVR0jBBgwFoAU0+LgvOth+5xFJ4JuYQ1GdpnW
PhQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlEQjVFL0QxRUE1OTE0QkYzMTExRURBN0U3MTdEMEYxMjIyNDY4LzAtTGd2
T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzAtTGd2T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OURCNUUvRDFFQTU5MTRCRjMxMTFFREE3RTcxN0QwRjEy
MjI0NjgvMC1MZ3ZPdGgtNXhGSjRKdVlRMUdkcG5XUGhRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+cP3CRjzY+JmDTqcqMi58Q50qONbX
85nFu0beE0TiU/UWoEBFAoQfcuAxGy0TykL8uJwB/ZMOhWfcMzI2xqYaliZaRNst
HPrgDMF7a74+gH/SnQj1Eg9SNVmM2VK2VwlUpUqYpXDYt5PfBCWgltXwfMWR5u0d
3e+sfH3x5bsjbRALmY7XjXncgGPPYxR91DIV8naYVKI4Dp54bTCGgrPqacSi8P2/
fTu/JVLSgMYeNEy5Ob9EBqO75p3ekq1rYZVgBa7ysjSVo4UI3/xTpIoaT4jL5h4L
NdxCcM8ocFtpDaUnjafeBtIM44Yfr7RqYLNl9RN6z36uBPjinnu8Tf16
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:28:41 2026 by rpki-client