Error: rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft
File:                     4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft (raw, json)
Hash identifier:          sDKxQDvapqidCqHtPto7ekGTMlRYqCrrqkWGoftaxiI=
Subject key identifier:   A9:DC:10:B2:61:17:9E:D3:8E:80:CB:AD:FB:24:3A:13:ED:AB:15:09
Authority key identifier: E2:FB:64:37:B4:C9:4D:5F:51:22:1B:16:50:56:3A:48:FF:54:BE:09
Certificate issuer:       /CN=F36C01B9AF/serialNumber=E2FB6437B4C94D5F51221B1650563A48FF54BE09
Certificate serial:       03E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft
Manifest number:          03D4
Signing time:             Mon 21 Sep 2026 04:03:53 +0000
Manifest this update:     Mon 21 Sep 2026 04:03:52 +0000
Manifest next update:     Wed 23 Sep 2026 04:03:52 +0000
Files and hashes:         1: 4vtkN7TJTV9RIhsWUFY6SP9Uvgk.crl (hash: iTqPAnVLNWEoCozkbYRd6Jk2eLwegJoobxq+gyPRyEs=)
                          2: B6588246689511F1AA6C5AD9CE1D38B0.roa (hash: Gw42W76fdZk+NZipZsxTscdpuUV0+qJYt5/wN/ZShTo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:03:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1000 (0x3e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C01B9AF, serialNumber=E2FB6437B4C94D5F51221B1650563A48FF54BE09
        Validity
            Not Before: Sep 21 04:03:52 2026 GMT
            Not After : Sep 23 04:03:52 2026 GMT
        Subject: CN=6ab0aca9-c022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:7e:31:43:32:53:f1:3d:f9:ff:be:75:c9:
                    df:21:5f:ad:1b:aa:54:71:a9:62:93:8a:ac:ee:ed:
                    d0:60:a5:4a:fc:ae:ab:bb:f3:80:98:f6:47:4c:e1:
                    d6:b0:69:52:42:2d:24:dc:59:1c:1e:4e:64:f6:19:
                    9f:da:3c:01:ef:b9:69:b3:1e:da:d3:e2:e4:45:94:
                    bb:1d:96:d1:95:b1:7e:3d:f1:fc:39:70:6f:61:75:
                    6b:7f:61:e1:c9:64:bd:86:50:57:c7:f0:6e:16:cb:
                    76:0c:13:bc:8d:9c:3a:f7:9b:cf:6b:9d:c7:04:06:
                    b9:09:e4:ca:f1:0c:af:ca:2e:ac:32:ec:e0:d2:84:
                    7d:d4:20:4e:61:5d:7e:46:01:6b:06:02:03:ad:32:
                    e8:d4:be:88:97:dd:8b:8c:ce:7e:e1:49:4d:14:a9:
                    09:03:7a:fb:c7:6e:a1:6c:77:c2:e4:78:92:b4:99:
                    50:71:59:9c:d0:65:92:d9:40:58:38:b9:43:ab:6e:
                    25:62:b8:ed:62:7e:88:32:de:44:02:6e:3a:16:47:
                    0f:96:4f:d4:ae:5b:48:85:6b:18:17:5d:82:89:b0:
                    13:f7:ce:d5:e5:74:b2:c3:d3:01:ad:05:34:d0:9a:
                    f5:91:49:cf:95:d2:f8:c7:19:17:39:65:2e:c0:32:
                    cd:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:DC:10:B2:61:17:9E:D3:8E:80:CB:AD:FB:24:3A:13:ED:AB:15:09
            X509v3 Authority Key Identifier:
                keyid:E2:FB:64:37:B4:C9:4D:5F:51:22:1B:16:50:56:3A:48:FF:54:BE:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C01B9/895D9300DA2E11EEA0B0C4A6775412E6/4vtkN7TJTV9RIhsWUFY6SP9Uvgk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9d:25:88:0c:35:ec:2b:a6:ed:c3:2b:1a:5e:a5:f4:19:4e:
         ff:54:87:53:36:69:46:4d:06:86:d6:1e:71:ec:c0:69:49:69:
         97:e1:d8:10:c8:6a:2b:af:a8:8c:96:b4:d9:5a:8f:62:c8:00:
         c7:4c:23:bc:f3:07:0d:3c:12:d9:65:53:1d:97:ac:39:e1:2e:
         a9:25:bf:ad:ec:e3:bc:69:71:85:63:22:1d:9c:f3:35:4f:df:
         c7:08:a5:7c:93:81:f7:a0:c3:78:7d:60:86:1c:68:a9:74:86:
         83:b9:f2:9d:61:e6:6c:90:b5:d0:d1:64:78:24:c2:8b:41:cc:
         d8:48:41:bf:2c:9e:2f:0f:0e:6a:86:84:63:7f:7f:51:65:be:
         cd:1a:76:09:aa:b0:4c:2b:46:63:54:54:89:6c:96:b4:b1:8f:
         39:82:35:40:c9:34:3f:41:34:be:94:1a:86:6a:c4:2a:f7:9e:
         6f:a9:49:0b:8e:12:46:6f:32:d9:fc:d5:b6:9b:92:7c:56:41:
         7c:fa:55:0b:3b:43:f2:b1:a9:b1:9c:4c:46:2f:33:2e:58:d0:
         f7:97:c8:34:f7:3b:5a:60:ba:c1:91:36:0f:d1:29:17:6b:b3:
         82:1b:f2:38:70:47:38:e6:6c:4d:c1:61:3b:f2:1d:04:72:67:
         73:bc:5d:d2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzAxQjlBRjExMC8GA1UEBRMoRTJGQjY0MzdCNEM5NEQ1RjUxMjIxQjE2NTA1NjNB
NDhGRjU0QkUwOTAeFw0yNjA5MjEwNDAzNTJaFw0yNjA5MjMwNDAzNTJaMBgxFjAU
BgNVBAMTDTZhYjBhY2E5LWMwMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmxX4xQzJT8T35/751yd8hX60bqlRxqWKTiqzu7dBgpUr8rqu784CY9kdM
4dawaVJCLSTcWRweTmT2GZ/aPAHvuWmzHtrT4uRFlLsdltGVsX498fw5cG9hdWt/
YeHJZL2GUFfH8G4Wy3YME7yNnDr3m89rnccEBrkJ5MrxDK/KLqwy7ODShH3UIE5h
XX5GAWsGAgOtMujUvoiX3YuMzn7hSU0UqQkDevvHbqFsd8LkeJK0mVBxWZzQZZLZ
QFg4uUOrbiViuO1ifogy3kQCbjoWRw+WT9SuW0iFaxgXXYKJsBP3ztXldLLD0wGt
BTTQmvWRSc+V0vjHGRc5ZS7AMs3jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqdwQ
smEXntOOgMut+yQ6E+2rFQkwHwYDVR0jBBgwFoAU4vtkN7TJTV9RIhsWUFY6SP9U
vgkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMwMUI5Lzg5NUQ5MzAwREEyRTExRUVBMEIwQzRBNjc3NTQxMkU2LzR2dGtO
N1RKVFY5Ukloc1dVRlk2U1A5VXZnay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzR2dGtON1RKVFY5Ukloc1dVRlk2U1A5VXZnay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzAxQjkvODk1RDkzMDBEQTJFMTFFRUEwQjBDNEE2Nzc1
NDEyRTYvNHZ0a043VEpUVjlSSWhzV1VGWTZTUDlVdmdrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhnSWIDDXsK6btwysaXqX0GU7/VIdT
NmlGTQaG1h5x7MBpSWmX4dgQyGorr6iMlrTZWo9iyADHTCO88wcNPBLZZVMdl6w5
4S6pJb+t7OO8aXGFYyIdnPM1T9/HCKV8k4H3oMN4fWCGHGipdIaDufKdYeZskLXQ
0WR4JMKLQczYSEG/LJ4vDw5qhoRjf39RZb7NGnYJqrBMK0ZjVFSJbJa0sY85gjVA
yTQ/QTS+lBqGasQq955vqUkLjhJGbzLZ/NW2m5J8VkF8+lULO0PysamxnExGLzMu
WND3l8g09ztaYLrBkTYP0SkXa7OCG/I4cEc45mxNwWE78h0EcmdzvF3S
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:43:21 2026 by rpki-client