Error: rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
File:                     0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft (raw, json)
Hash identifier:          /6MM4UAzQQyE5kSt48bKery6rnVW2F98S6DJRaVdID8=
Subject key identifier:   78:D2:06:8D:EB:6E:04:DA:B1:6F:48:5E:A8:25:A8:EE:50:D9:44:00
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       059C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
Manifest number:          0564
Signing time:             Mon 21 Sep 2026 03:17:26 +0000
Manifest this update:     Mon 21 Sep 2026 03:17:25 +0000
Manifest next update:     Wed 23 Sep 2026 03:17:25 +0000
Files and hashes:         1: 0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl (hash: WOsL4+LQSWitFDBp4xccuVOuoaFPbt77zSIineJUGRo=)
                          2: 39FFC9BE03B811EF983A1B33017001B1.roa (hash: tS+wVtHhPrpxDmWcesUHT7utAdSi06FtleX+U4Lw7TI=)
                          3: FAEBDC4803B411EFB029601B017001B1.roa (hash: xzzx0ugjkRS9PYdo0KLQ7+H2uxfJ0K+cSqgvb2XnuPk=)
                          4: 10CCE32CC6FF11F0B93FC5E3DAE4EC9C.roa (hash: 5B0QBngF6qWUVL5UNucquvsi+fgp6vlUH+ndV+NbyTc=)
                          5: C38CBD7203B811EF86521F38017001B1.roa (hash: 2WcQX+9AjIfrNmsdsiKQyVMoPWChqItR+h5OqUTMfRk=)
                          6: BDBE112003B311EF8DDE9910017001B1.roa (hash: 82bRJv+5HJA4Fi6+OCSpOjCyBZW+S6V58aFWPp7a3SM=)
                          7: B44578A803B411EF95522E17017001B1.roa (hash: 936Q411o1qc4pT0Zx9jhIXN0Wgiyr6no0KJUyaCEE/c=)
                          8: 980A722003B311EF86B63910017001B1.roa (hash: wKMuoXYYXIiS/ZLS7PWLzLXdIFcknzJKp/rpFSrvhH8=)
                          9: E432C49203B611EFBEEC1128017001B1.roa (hash: eCtOJ1D+HQduSTMxCfcTJUfC/lccpBhF5JE1AQ+kubk=)
                          10: 5261E514C6DA11F0B15A2D81DAE4EC9C.roa (hash: mAmUFgYkXbE6+ghPUIu/1Ppy4h9mOTBy34Ydx2HW+I0=)
                          11: CF23848E03B511EF80994521017001B1.roa (hash: aMLwz+ZKh6Oz4CoRMY0xHb1x7qr39vpl6gfnLqRS/qQ=)
                          12: C8492B50C97011F0B52599DBDAE4EC9C.roa (hash: 9b0StYZI4/RVSPKeiscu/wUKHK60EMRwc+Ha1U/o1J8=)
                          13: F8A856B603B211EFB3ADE30A017001B1.roa (hash: uJrPT/XteQRfZvDwpMyFdVnvV7NPg5BDECy1d8844bY=)
                          14: 519B660C03B611EF98D15426017001B1.roa (hash: av0draMIOKhBEZ3kOVBkA1YKrpj/hJoac9vz6NKCER0=)
                          15: 056431F403B811EFA4BA5832017001B1.roa (hash: ApGOgDLRrAt7wLYHdFuvRo2DntM8bf1Tz78NFhtcxL8=)
                          16: 7EB3E7FA03BA11EF9888BB48017001B1.roa (hash: 8kFtpikZunY+lfUkg34+p4H/6y7KoFeGsFbV13OrRZM=)
                          17: 48D1B612F7D011EEB7ACF12A017001B1.roa (hash: MO6EQKtkkq85RZaTVkomcZUCuBadwthtdCSH79/DaIw=)
                          18: 7FF87C5A03B711EF917C5C2D017001B1.roa (hash: a35pKcfaaHwWPzygov5Kk7IYMKCrlD7MHrGfGQq3aco=)
                          19: DF255D0003B311EF81582C11017001B1.roa (hash: 2gbspSAn1FaleBtgeLKwF76oQxo4DIcvXlm/ZaZeaDw=)
                          20: 8D45EA1C03B911EF8ECB013E017001B1.roa (hash: QPpku5aqb911f/bHCQAb3elnYINcM+RRUsK7N2sabe8=)
                          21: 32837C9003B711EF967A4F2C017001B1.roa (hash: +5CLxbGwXT60ubQqq8bM1C2hWckotvUlGwQf+a7WrQo=)
                          22: 58F9B92203B511EFB9AAA61C017001B1.roa (hash: wfruQ932JSdbaIg9RVb9zVvENhjkQ6ADpWh/ZpApbXY=)
                          23: 06ED290003B711EFA808E12B017001B1.roa (hash: 3nwhGhuRYVpIImiqWFP3vuMZlijuvEzm21qn4zV6clc=)
                          24: A28BE3EE03B511EFB056D120017001B1.roa (hash: R+mCP7u5rWLhn9EEMSGJ2CTodRAWWEkqlzeIGmxGVo0=)
                          25: 59084A3803B411EF9CC30616017001B1.roa (hash: VQ0RSSTYVjk7yqISbUry20G3lzAncR47Ax8IgCDJ6FM=)
                          26: D95C7F0803B711EFA940CD31017001B1.roa (hash: YRvxTaW01N4ChieFj2ifQBeOMmeruhjQJDufE0+oCvU=)
                          27: 1AE3C7AA03B911EF86A98F3C017001B1.roa (hash: gyS/aMybFEma33PxUMgpBfLTjikHDhVK6duizXP6PRI=)
                          28: 6AE7FF2E03B311EF903F510C017001B1.roa (hash: 3kqijSi8P/0vf9KQNjB81BG7B4/nyk3Ow12xYdd94Dg=)
                          29: E8FB648603B911EF99896D42017001B1.roa (hash: 0LRPsqp/eBeRYaF8dUu/T+Twx9GeRodgR1TnQOXBJH0=)
                          30: 34279B9203B411EF914AA515017001B1.roa (hash: KyyGeSy1rjryhQ/mTFRctgw4FH6eqpgccoKh2XdbOnE=)
                          31: 7C1F7EE603B511EFB4C5FB1C017001B1.roa (hash: Lo3e7+E8r/NSCO53r7b8CA67fySg+7NtHZB+aX3Qbtg=)
                          32: B1B059DE03B711EF90376831017001B1.roa (hash: WeVV5gDtF6GpuPWvFOh56HIeyAo/+6h+QFCO/xL7k9Y=)
                          33: 2134D1CEC97111F0A57328DCDAE4EC9C.roa (hash: 4KsMZrVYDmHAF7oozcDrCXpi3ddCFjVIcMT9oAYZc7Y=)
                          34: 61AE267AC6FF11F0B91AC8E5DAE4EC9C.roa (hash: C98IqjdBv5LJt5iWVtMJ+QAbakTE3pasElVLp+1uNuo=)
                          35: BF97846C03B911EFB079EA41017001B1.roa (hash: wNII1uoSvScpdOlwHz4BDM1DBqJs/03DHX7oHGkZtJk=)
                          36: 67ECDE3803B911EFA186603D017001B1.roa (hash: DI5kIwElQ8R+Lw20LT5yGvsY0m7hji0peiEWAehYwT8=)
                          37: B159B4A6F7CF11EEB1F39025017001B1.roa (hash: 740iX4/YNKSrtY9V4n9PWMrAZ0OIIcK6uTWL5Tg39nE=)
                          38: B295FE0A03BA11EFA4CD3749017001B1.roa (hash: 0ThrAr6vm0bBEIQGeFKPBtwPlSPx+ZpJ9O+oSkRp4ng=)
                          39: DAF813C003B411EF9A180C1B017001B1.roa (hash: rxENEqWWigTNJviQ+rAe/KPkUQD8qHgTCh4hs/xATo8=)
                          40: 8A36DFD403B411EFBCF69916017001B1.roa (hash: xKMBf2rSSOixjAS2vNdhJv84bn3oPMKHm8mgP2NWS3A=)
                          41: 0471BC4803B411EF8330A611017001B1.roa (hash: 3INpP9HwU5rpsLwrARqpf7p6nExwTzjKuLs7Tp6YsOI=)
                          42: 9058590C03B811EFB2BC6037017001B1.roa (hash: KbTrV9/1QdeVyGjJXMf67sHpdC5TxLAEU7d3+fl+nbE=)
                          43: BF6DDF5603B211EFA0BA490A017001B1.roa (hash: 8/0GoFuHQN9he6IYSmKw6dZ6XCPb7gOtdsq14wm2Isc=)
                          44: 7C256E3603B611EFAF25C126017001B1.roa (hash: HvW2XolqN7iVLLfu4e4/42VqmnpjFO4MOEZUl8OZjX4=)
                          45: 5B989A2C03BA11EFAA71D543017001B1.roa (hash: KbZuJr3ip0P+gvWdRwind0bDdrmcL70WDYjmp2NTnhE=)
                          46: 4556E87403B311EF947EEE0B017001B1.roa (hash: 5he62FEDMtk8xgthwxXe7kpX5VqIynwz1zy7Z94nIm8=)
                          47: 59DC420403B711EF9611CE2C017001B1.roa (hash: EwVt1oXV0u0an9gRO+yk2dl6LPH6mygNRS8FSwAxo9Y=)
                          48: F30D683A03B811EFB841B038017001B1.roa (hash: /fG66SOeJwlKhY/vnT1XmeFZ84fISRpkxoqX3tuqW1g=)
                          49: 9C9F4FB003B611EFB8A12227017001B1.roa (hash: RVO87omLbTuzPNyt+gyuo6dbEU3UiqJ5W8lmS1Jz7c8=)
                          50: 5B91C6B803B811EFA4C9CE36017001B1.roa (hash: JcVXEBKBXCdAnpNP9gkBki5xx1uU/257cotnySg0MZA=)
                          51: 70246ED6F7CF11EEBDBEE324017001B1.roa (hash: e1vFix2SZU+voeEXeL4846G5Zk4nH6jhf40xzuuk0vk=)
                          52: 18F314CC03BA11EFA363E442017001B1.roa (hash: zpVG8PnZugODg3d53wKyidNhCpmCyN5gzsP/0/AMopc=)
                          53: 42F3617E03B911EFBF21F33C017001B1.roa (hash: rGghr4IPbYUvGjnweFdDE8GuVv5Ia4WJ4E4L8gdF8rc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:17:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1436 (0x59c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF, serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Sep 21 03:17:25 2026 GMT
            Not After : Sep 23 03:17:25 2026 GMT
        Subject: CN=6ab0a1c6-a778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:c1:a2:76:09:8f:50:d7:3e:9b:04:c8:0b:
                    79:75:31:36:b5:6b:23:86:9b:7d:94:ac:4e:eb:19:
                    21:0f:1b:70:ea:93:80:1a:d3:72:c5:eb:81:4a:e8:
                    47:51:cf:0a:61:b1:ab:b3:54:59:41:cf:42:bb:fc:
                    cf:30:9e:2a:cb:22:2d:aa:4d:3e:a1:21:56:58:47:
                    54:e2:6a:9d:9b:c7:7f:85:02:3c:2c:5c:2e:2c:d5:
                    c5:c5:6f:98:80:56:5f:3b:7a:ac:d4:20:04:dc:76:
                    4f:29:01:bc:9e:d0:42:d0:9d:c5:4d:ee:e2:a2:4d:
                    2b:62:c1:80:fe:1d:ef:b2:44:b4:8c:aa:a1:34:e0:
                    de:a0:85:28:70:f4:0e:7a:3a:b6:f6:32:0e:16:60:
                    06:66:b5:2a:fc:43:be:4b:45:ec:74:0a:51:8b:21:
                    17:a8:75:55:9f:e8:9f:27:49:8b:17:6f:17:a3:4b:
                    e6:fa:4c:8b:b9:78:53:d2:af:ba:3b:67:d4:9e:72:
                    76:6f:da:6e:ab:97:54:bb:80:13:0a:cd:02:2a:6d:
                    6a:3f:c4:c7:1d:09:ca:d9:f5:55:3a:a2:77:4e:6e:
                    2b:e0:68:c4:e3:31:ee:2e:44:c3:41:f2:8b:e3:e3:
                    9b:f2:77:c4:42:e4:9b:32:e2:2b:bc:0f:a0:26:07:
                    18:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:D2:06:8D:EB:6E:04:DA:B1:6F:48:5E:A8:25:A8:EE:50:D9:44:00
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:ec:4a:8f:41:8e:f4:5a:0e:e5:2e:cd:06:8f:cb:b4:9c:7c:
         fe:cd:c8:91:95:5c:7e:cf:d2:18:80:2d:70:fd:19:5d:1b:98:
         44:4a:e0:e8:fa:4a:45:71:7c:11:ee:50:ab:56:a7:31:d5:2e:
         93:2d:e5:be:17:db:d6:fc:64:3c:1c:78:a9:4e:91:90:0b:eb:
         c3:60:ad:aa:4a:a0:b1:6d:14:f5:03:e6:ef:45:73:ac:e8:be:
         6d:10:91:da:8d:44:3c:d2:f2:7a:8a:aa:be:07:36:a5:8b:8b:
         68:08:be:f9:27:9e:94:2b:70:1f:fe:e8:a2:d3:5f:a7:e5:d1:
         3c:74:68:4f:0a:f0:7a:0d:4d:10:9e:10:e3:fe:a1:53:a9:bd:
         51:39:e7:2d:f2:9d:d9:cd:fd:57:c5:07:68:56:a7:b0:6c:51:
         9b:2c:f3:ff:35:04:34:e5:cf:c1:bb:b0:bf:15:a7:49:24:92:
         52:22:94:65:89:bd:b0:5e:90:8d:19:59:92:fc:6e:4c:da:60:
         29:9d:fb:67:bc:c7:52:2a:9c:b1:22:9b:72:4d:70:4c:7f:18:
         f5:11:18:e4:28:d2:99:54:28:2d:21:34:8c:ce:1f:e8:24:88:
         10:f0:c2:b9:0c:b1:65:d0:d9:15:81:4b:6b:53:4b:5b:2c:c1:
         4c:95:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:47:30 2026 by rpki-client