Error: rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft
File:                     SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft (raw, json)
Hash identifier:          VEpVy6MRkRlrXvaRjy1oNzTJpN/sFRVkfPmc8Ly9QQU=
Subject key identifier:   54:9E:2A:69:DB:B4:6B:A4:DE:FA:22:5A:24:8D:F0:EC:B1:32:73:93
Authority key identifier: 49:09:FA:C7:E4:14:ED:8A:E1:D8:A2:34:35:B5:0C:80:AC:F0:FA:6F
Certificate issuer:       /CN=F36C89CDAF/serialNumber=4909FAC7E414ED8AE1D8A23435B50C80ACF0FA6F
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft
Manifest number:          60
Signing time:             Sun 11 Oct 2026 05:45:23 +0000
Manifest this update:     Sun 11 Oct 2026 05:45:22 +0000
Manifest next update:     Tue 13 Oct 2026 05:45:22 +0000
Files and hashes:         1: SQn6x-QU7Yrh2KI0NbUMgKzw-m8.crl (hash: NZxxMcBTSvkxMu8DFAyfub5R2al1msP3Pr1QWomWBbs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C89CDAF, serialNumber=4909FAC7E414ED8AE1D8A23435B50C80ACF0FA6F
        Validity
            Not Before: Oct 11 05:45:22 2026 GMT
            Not After : Oct 13 05:45:22 2026 GMT
        Subject: CN=6acb2273-91b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:77:0c:d5:c1:68:18:e9:88:15:cd:d0:00:35:
                    14:29:43:50:39:1b:3e:5b:5e:37:c0:d9:5e:7c:a4:
                    e1:e4:33:bd:6b:41:ab:52:1c:90:43:d8:a6:c6:d5:
                    b9:65:91:4d:e1:53:9f:50:8b:48:f4:8c:c7:0d:48:
                    f0:a8:43:61:01:71:2b:7c:34:9a:f6:b6:21:de:b7:
                    71:df:31:50:0d:4a:0c:fa:d3:f5:05:e3:f1:08:80:
                    07:fa:f9:2d:3a:97:34:f7:7d:c8:54:82:7a:15:78:
                    0a:60:89:df:f5:0a:81:e0:a3:fe:a0:e1:e9:d8:03:
                    c4:50:dd:4f:1e:22:fa:10:11:3a:26:99:f2:8a:28:
                    5d:a5:44:95:84:13:0a:18:3a:a5:cc:94:2d:49:07:
                    26:e7:7a:96:a5:f7:ee:07:82:a1:be:b6:fc:91:a5:
                    e8:c7:6e:34:92:1f:3b:0f:ca:e5:47:ea:2c:d3:0b:
                    99:cd:73:01:cf:a9:2f:0d:8b:e1:5b:58:81:24:40:
                    ae:06:db:5d:64:6b:71:f7:7b:72:9d:e0:cf:09:ec:
                    3e:b1:09:7f:25:2a:37:84:78:4b:7c:11:2b:12:04:
                    37:3c:7d:93:b4:db:21:a2:42:8d:cb:54:4f:e4:c3:
                    17:8c:9c:b5:d5:77:0a:dc:67:99:07:83:e6:2c:85:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:9E:2A:69:DB:B4:6B:A4:DE:FA:22:5A:24:8D:F0:EC:B1:32:73:93
            X509v3 Authority Key Identifier:
                keyid:49:09:FA:C7:E4:14:ED:8A:E1:D8:A2:34:35:B5:0C:80:AC:F0:FA:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/BD1F0D147B9311F186958DCBCE1D38B0/SQn6x-QU7Yrh2KI0NbUMgKzw-m8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a5:28:8c:b6:b7:42:0c:d1:9b:4b:66:db:f9:77:cd:b9:df:
         34:e9:f6:cf:b7:e2:25:9b:0a:cf:1c:07:28:0e:4a:d2:74:39:
         37:0e:b2:de:4c:97:4c:35:30:69:f7:33:e8:b1:0a:8b:9e:f1:
         fc:1e:99:c7:f4:7c:f7:ba:0a:36:1f:95:73:b1:0f:3d:72:31:
         87:63:46:2f:fe:e2:e9:05:34:5b:7a:d0:b8:b3:86:91:61:35:
         ed:6c:30:e6:f5:3f:20:ba:fc:80:47:23:c3:c9:e1:23:0e:9e:
         4a:e7:a6:49:c5:83:30:94:bf:37:9a:e4:0f:bb:d7:80:67:3b:
         9c:fe:8c:2e:9e:c8:99:6a:67:d6:ef:50:f7:ce:3d:5a:b4:5f:
         ad:4f:ee:b7:8e:0d:83:ec:d2:80:7f:c3:e0:4a:d0:be:af:3c:
         44:98:cf:04:2d:8c:77:fe:cb:6e:0a:2e:20:72:07:f1:d7:0b:
         73:94:a8:25:48:12:a7:de:32:4a:d3:bb:5a:50:67:03:36:3e:
         18:cb:ec:5b:d7:fb:14:3b:7c:e9:76:ac:d1:0f:4c:72:c9:b2:
         a3:48:44:5b:75:d1:10:de:3e:2f:d7:3d:c1:ce:e4:f6:61:98:
         35:26:62:c8:6a:6e:1e:8b:03:ce:af:d2:ff:16:76:bc:7e:03:
         cf:1a:08:58
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBYDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
ODlDREFGMTEwLwYDVQQFEyg0OTA5RkFDN0U0MTRFRDhBRTFEOEEyMzQzNUI1MEM4
MEFDRjBGQTZGMB4XDTI2MTAxMTA1NDUyMloXDTI2MTAxMzA1NDUyMlowGDEWMBQG
A1UEAxMNNmFjYjIyNzMtOTFiODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANZ3DNXBaBjpiBXN0AA1FClDUDkbPlteN8DZXnyk4eQzvWtBq1IckEPYpsbV
uWWRTeFTn1CLSPSMxw1I8KhDYQFxK3w0mva2Id63cd8xUA1KDPrT9QXj8QiAB/r5
LTqXNPd9yFSCehV4CmCJ3/UKgeCj/qDh6dgDxFDdTx4i+hAROiaZ8oooXaVElYQT
Chg6pcyULUkHJud6lqX37geCob62/JGl6MduNJIfOw/K5UfqLNMLmc1zAc+pLw2L
4VtYgSRArgbbXWRrcfd7cp3gzwnsPrEJfyUqN4R4S3wRKxIENzx9k7TbIaJCjctU
T+TDF4yctdV3CtxnmQeD5iyFZa8CAwEAAaOCArgwggK0MB0GA1UdDgQWBBRUnipp
27RrpN76IlokjfDssTJzkzAfBgNVHSMEGDAWgBRJCfrH5BTtiuHYojQ1tQyArPD6
bzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Qzg5Q0QvQkQxRjBEMTQ3QjkzMTFGMTg2OTU4RENCQ0UxRDM4QjAvU1FuNngt
UVU3WXJoMktJME5iVU1nS3p3LW04LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvU1FuNngtUVU3WXJoMktJME5iVU1nS3p3LW04LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDODlDRC9CRDFGMEQxNDdCOTMxMUYxODY5NThEQ0JDRTFE
MzhCMC9TUW42eC1RVTdZcmgyS0kwTmJVTWdLenctbTgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAGmlKIy2t0IM0ZtLZtv5d8253zTp9s+3
4iWbCs8cBygOStJ0OTcOst5Ml0w1MGn3M+ixCoue8fwemcf0fPe6CjYflXOxDz1y
MYdjRi/+4ukFNFt60LizhpFhNe1sMOb1PyC6/IBHI8PJ4SMOnkrnpknFgzCUvzea
5A+714BnO5z+jC6eyJlqZ9bvUPfOPVq0X61P7reODYPs0oB/w+BK0L6vPESYzwQt
jHf+y24KLiByB/HXC3OUqCVIEqfeMkrTu1pQZwM2PhjL7FvX+xQ7fOl2rNEPTHLJ
sqNIRFt10RDePi/XPcHO5PZhmDUmYshqbh6LA86v0v8Wdrx+A88aCFg=
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:17:31 2026 by rpki-client