Error: rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
File:                     jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft (raw, json)
Hash identifier:          92W2ArrOn3a4rTCXMUdPlGiBmNWMH9v40Wezv5o5WmQ=
Subject key identifier:   7C:5C:82:93:2C:1E:EE:4E:19:98:13:C7:4B:9F:6A:DB:FC:4E:55:3C
Authority key identifier: 8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64
Certificate issuer:       /CN=F36BC80AAF/serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
Certificate serial:       06BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
Manifest number:          0695
Signing time:             Mon 05 Oct 2026 02:45:40 +0000
Manifest this update:     Mon 05 Oct 2026 02:45:39 +0000
Manifest next update:     Wed 07 Oct 2026 02:45:39 +0000
Files and hashes:         1: jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl (hash: 2Adss0r+ea/V+9wj4SdvSXB5Q7HtywoftF1/aCdP0pU=)
                          2: B3F00DD8B5D211F0A032E09CDAE4EC9C.roa (hash: pBnI8YYRnn+y8iTW/+yYOAZgWLOb00S+9jpxjry2ifU=)
                          3: 7510A490FBDA11EFA602538E762E951A.roa (hash: K8eoOxbyDzKOVr27RbOhGjO0ujSDpgusioRxfBEGdeg=)
                          4: 802F17ACB5D011F0A862F28FDAE4EC9C.roa (hash: cEa5rc+b8uoRQm6lEKjcwEO4AN3MwGfJNjZVLfnNXsQ=)
                          5: 6C4F7098FFA911EF80A256B8762E951A.roa (hash: nLVSz/e6y8EyahDhz46G+ddHGy6xFQEmZ+lSlLJOj1k=)
                          6: 14D0DD48FCAC11EF8F606291762E951A.roa (hash: We9A0b1twQQd49MjYQiHevJV7RGbH0zGgiiv0BmjU4w=)
                          7: 924A5592B5CF11F083499A8BDAE4EC9C.roa (hash: vI5//pHlGWHAgoJjpRzv1Mv4Rju5P+7W+b9IA6ocMm8=)
                          8: 34F044FE336D11F0A6FE177FDAE4EC9C.roa (hash: yhXToE/ivhLm4HgJKr6OrdpT7iNJJtMwXlhtqU/6qu4=)
                          9: 332A33CAFFA911EF84F40CB6762E951A.roa (hash: nAe7SVEbrFBsJsSB2QjjEXejvC3k+OkB22lneTxOJs4=)
                          10: A3F519ECB5D111F099E55E98DAE4EC9C.roa (hash: N2S0kcv9ynYD8ccz/SB7pJXYn4dSI1K0kSCmPaGO2N4=)
                          11: BEB0D28EFCAA11EF97EC4A88762E951A.roa (hash: jZflyQkEOdvyH7cORlNM6RzxEc6T6GfFgEfB6W779Ik=)
                          12: E67C4F66FD2A11EFAFF97E57762E951A.roa (hash: 0KEac1L9NXZHhaATxDUbvggLHQuqEfxaMAc1BKGdXv0=)
                          13: 6C20E300FCAB11EFA301CF8C762E951A.roa (hash: OvsUXNSmfjEutAwyrB9JnPffvmOpMIjkA04wcKDLKRY=)
                          14: F0DCA42CFCAA11EF9CB0AF88762E951A.roa (hash: BzJmdF2Js2FoOGSwDan1wfPrzdWX29V5MPNuA8XkzBM=)
                          15: 731820EAFD6B11EFA5FAAE9C762E951A.roa (hash: WBg3iidspfXKbYNsCa9+4QR22QeQEUUkOPouJHSY0gU=)
                          16: 84D63AD4FCAC11EFBDC66892762E951A.roa (hash: eiarFVPH9xcpuLJ9GJbS6IkBNStXLIhNVgC/u2KChdQ=)
                          17: 0B36502EB5CF11F09E324387DAE4EC9C.roa (hash: FuUSeKXmdp59eIJUnwXj15oz80rdM1YNse2hoVng0XE=)
                          18: 5B20E2CAB5CF11F09368898BDAE4EC9C.roa (hash: 8lx8POTXnxQ/rETcudf+Tn5nhHis5M15ESoQBVa0Mz4=)
                          19: 115DB472B5D111F0A1AC2194DAE4EC9C.roa (hash: zLkLQwxPLh5BBWNzGvRyOityfiR56S+KxQLYKxeld8U=)
                          20: D6A36628B5D111F099116B98DAE4EC9C.roa (hash: Qb7brFTW1SmyM6hCIpLR/WnpCM+Gnw0eopnrES6lJs4=)
                          21: 5673440CFCAC11EF9614E491762E951A.roa (hash: 6r9fkhk67fd1QL6JR1kRn7YKpBT/BIiBUWKwgxbcGDI=)
                          22: 43255EBEB5D211F09330919CDAE4EC9C.roa (hash: WP/J10zandfKZR2eaHtY6wCS0JXLuclaCdl/D//TPkU=)
                          23: 84C45A96B5D211F098A59F9CDAE4EC9C.roa (hash: ZdT4oas310Raqs+Gms+VBmMixtSzPUmOs/XEA15Oe3k=)
                          24: 5FFD958AB6C011F0A433F7F3DAE4EC9C.roa (hash: lwAlG/Cp9JYBv5HsI1r0REKGcAMN2vMOXvb01TEL3gk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1726 (0x6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BC80AAF, serialNumber=8C8F8CE2AD55B9366BEC6EDF492CD9C1498E0664
        Validity
            Not Before: Oct  5 02:45:39 2026 GMT
            Not After : Oct  7 02:45:39 2026 GMT
        Subject: CN=6ac30f54-174a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4c:96:f6:41:c0:50:c1:c0:34:75:68:db:9f:
                    cc:b5:3b:03:09:27:49:fb:08:94:86:a8:ea:09:8e:
                    b6:a7:78:75:b9:a3:72:a2:73:7b:97:f5:64:a6:ef:
                    2c:9e:22:63:1f:f7:11:62:e8:70:71:58:7d:5d:1a:
                    36:4e:62:4b:07:f9:d6:76:67:8d:38:81:af:58:47:
                    05:2d:e1:69:33:a8:e0:34:1e:1e:11:1d:05:ed:33:
                    3b:00:7c:95:0f:14:b4:6c:c4:9a:61:71:33:07:09:
                    65:c4:17:8e:8d:3d:4d:0b:7f:6e:a3:1f:59:e5:43:
                    38:25:2c:66:ff:7c:92:4e:b3:71:b7:53:b8:a7:41:
                    33:21:05:09:93:27:fd:57:8d:e1:4b:58:33:89:07:
                    d3:ed:a6:49:fe:ad:46:1f:d8:c3:e1:50:3b:ef:78:
                    df:c0:a6:c7:86:8a:0b:10:ef:be:89:b2:25:28:d8:
                    bc:ff:92:92:df:e2:e2:9b:15:7e:7d:d9:fa:da:69:
                    5e:86:f7:31:85:4f:1e:9d:42:1a:71:88:92:78:d8:
                    79:73:ce:59:b8:83:66:18:77:86:6a:6b:3b:c3:cf:
                    a8:c5:8c:f3:7a:99:a3:c6:60:eb:63:54:6d:f0:f4:
                    8d:15:7f:b9:5a:96:87:b5:c0:68:b4:86:54:ae:fa:
                    f5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5C:82:93:2C:1E:EE:4E:19:98:13:C7:4B:9F:6A:DB:FC:4E:55:3C
            X509v3 Authority Key Identifier:
                keyid:8C:8F:8C:E2:AD:55:B9:36:6B:EC:6E:DF:49:2C:D9:C1:49:8E:06:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BC80A/472EF5B2E75C11EC9D7F90D8F1222468/jI-M4q1VuTZr7G7fSSzZwUmOBmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:00:45:0e:a3:67:cd:2d:e2:4f:49:b9:98:be:72:f8:17:19:
         bf:6e:14:27:6d:f3:39:22:87:dd:33:61:c2:74:a1:0a:1c:58:
         a2:f1:84:72:22:db:3f:82:0e:db:f7:0a:cc:e8:6c:18:92:90:
         1b:fb:56:d8:e2:9e:f6:7a:f4:aa:1a:a6:38:f8:c3:bd:60:1d:
         51:86:f8:19:29:62:3e:5f:19:16:ba:a2:29:f7:5d:05:94:29:
         d0:a8:bc:ee:65:1b:df:f0:9a:22:74:41:27:08:ee:29:47:48:
         86:94:40:5e:3a:7a:f7:6d:05:30:80:b9:81:4e:1c:ae:8b:0c:
         9a:77:63:0d:d9:4d:ea:c5:99:48:46:ee:60:cc:b1:6d:8b:c3:
         60:78:28:58:f1:d6:e9:cf:39:80:22:bc:a6:77:0f:3b:6b:c6:
         0a:80:68:a8:e8:11:81:35:1c:82:f4:b8:e7:f9:46:4b:15:5b:
         c7:68:0c:3a:68:ba:ef:b5:fe:9f:fe:e0:ea:dc:96:91:03:f6:
         78:3e:b4:56:4b:88:83:15:22:be:9b:a4:60:0d:a5:97:bd:02:
         cf:1d:0a:04:3f:4e:5c:2c:17:c0:d8:44:bd:24:20:41:d5:be:
         88:15:a2:28:f1:c4:ea:8b:a4:9c:93:37:12:00:1d:cf:32:53:
         bb:90:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 11:17:22 2026 by rpki-client