Error: rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
File:                     pYptKRFMiB4AWHcnnZWrqjnuFBw.mft (raw, json)
Hash identifier:          nkFvviERVhpDZaeDny55OhNps6/9wtnb1Sf5F7eZruI=
Subject key identifier:   A1:52:88:AC:F7:8C:B8:3F:10:05:BB:44:1C:91:88:29:A2:CD:82:82
Authority key identifier: A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C
Certificate issuer:       /CN=F36D7FB7AF/serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
Certificate serial:       0500
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
Manifest number:          04F1
Signing time:             Mon 21 Sep 2026 03:25:40 +0000
Manifest this update:     Mon 21 Sep 2026 03:25:39 +0000
Manifest next update:     Wed 23 Sep 2026 03:25:39 +0000
Files and hashes:         1: pYptKRFMiB4AWHcnnZWrqjnuFBw.crl (hash: 8cwun1zm1orzjHlcVMliqRSqgpi1VEvuUVj10RaAXqk=)
                          2: 2E63F6584A9411EEA74A5E814AD9E6FC.roa (hash: kFbuohwYBsspjejBsjNQv3b4gYzYeJeZ4QVpfNwRA6M=)
                          3: C752587A400B11EEBBC46D7B4AD9E6FC.roa (hash: vQTlaBoB3sy8/njOdOy98dV2tA4dWiTOvqnT9aoOp+I=)
                          4: 013EB6404A9411EEA90CF7804AD9E6FC.roa (hash: pQcoR3YRmRscrqHBzKXHLQZx2MD1uAGqwdTHv198PjQ=)
                          5: 7E63088E4A9311EE8568477F4AD9E6FC.roa (hash: rv9TAXsAG6tgC35rrOdz5+Kwb/oSzCBw738sLnBloFc=)
                          6: 6FF821EC40B811EEAA1112234AD9E6FC.roa (hash: LpDKodbHkpLTmMWPNMNHkmwQuf/YokY9pE0HTQhIW7A=)
                          7: 9B7D8C804B0D11EE9FA36B0D4AD9E6FC.roa (hash: gcE1HsR8Mdu/vGmmLNuL2lsC+GftLbl/G1A9D8Vce3s=)
                          8: 3BDE86EE4B0D11EE8D6AAC8A4AD9E6FC.roa (hash: YgQH4Tyn11YWyadrNAmzwWqQsX+CmhhZoDQij9nE5Vg=)
                          9: A3A3B4084A9411EEB1DF22834AD9E6FC.roa (hash: 7/28k1jbRMHbMuR0caeZhrzprYSpaTkK0NUr0sw7sfI=)
                          10: 57418EF04A9411EEB410DB814AD9E6FC.roa (hash: q12m8ZQQQsDXVbIvrMrW+qu3TkUh3w0FfQrFK7Pqqvc=)
                          11: A632A7524A9311EEA933AC7F4AD9E6FC.roa (hash: 989QeyV0tCLRIDQrSwFN7hoE8gXvYUy2ldXlV1YkXGI=)
                          12: CE6060704A9311EEA5F02C804AD9E6FC.roa (hash: Hs360djHIf3ak9GbVE0Knhr4VTREbtOjL6bSMzqrUhI=)
                          13: FF0A93E0400B11EE8807FE7B4AD9E6FC.roa (hash: d4ujJVZEWVPL68c5XEuS1b7DDCDSn2VVtrxCjnaqarE=)
                          14: 6DF3308A4B0D11EEB78B6E8B4AD9E6FC.roa (hash: fKRHwC2yWp7CWASllA6SXYSSy+E/H/AFFpAl0NYIs0M=)
                          15: 53B7B60C4A9311EE9902D27E4AD9E6FC.roa (hash: Lc6p/skcV7T38Y2SJSqIQlEnAuZOjjbq8VZr0A0Y0HY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:25:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D7FB7AF, serialNumber=A58A6D29114C881E005877279D95ABAA39EE141C
        Validity
            Not Before: Sep 21 03:25:39 2026 GMT
            Not After : Sep 23 03:25:39 2026 GMT
        Subject: CN=6ab0a3b4-2263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:38:8a:46:72:0f:b6:95:a7:1d:91:c5:cc:
                    12:fb:c4:a2:e7:0d:6a:bd:b5:59:8e:a7:17:cc:78:
                    c1:48:92:8c:b8:74:b2:90:a0:f4:02:94:59:be:e3:
                    9b:03:87:c7:23:09:76:34:30:aa:e7:4c:78:bf:1a:
                    76:e3:cd:d0:d8:1c:25:84:77:d4:64:b1:aa:5e:34:
                    9a:50:ef:ce:39:78:20:ab:84:52:db:c8:04:8e:c7:
                    06:7f:69:a9:bb:f3:eb:c9:63:b9:9f:06:ed:bc:21:
                    de:8c:cf:f9:39:0b:82:e9:25:b1:d4:e2:fb:37:01:
                    75:bd:8d:ad:b1:8f:e6:a1:a6:d1:b8:8d:a3:8a:dd:
                    ac:2b:3f:0f:3c:0b:e7:3b:7b:c6:64:5e:a7:d8:ab:
                    be:32:77:22:05:f3:2f:51:f2:21:d4:b7:a8:15:d5:
                    05:36:90:66:3c:af:fa:d9:e9:18:7d:a8:9b:5d:ce:
                    c6:51:d2:5d:c8:29:cd:5a:68:70:01:99:fb:5b:33:
                    a0:bf:13:1f:33:4d:6f:1e:30:31:bb:ec:ef:9a:50:
                    c8:fc:31:aa:fc:50:be:8a:3e:24:67:d0:a9:84:0f:
                    cd:c1:15:5b:48:89:9c:c6:3b:9e:2b:95:d5:51:49:
                    00:dc:82:8c:0d:22:b0:aa:67:92:32:75:cb:d2:d1:
                    86:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:52:88:AC:F7:8C:B8:3F:10:05:BB:44:1C:91:88:29:A2:CD:82:82
            X509v3 Authority Key Identifier:
                keyid:A5:8A:6D:29:11:4C:88:1E:00:58:77:27:9D:95:AB:AA:39:EE:14:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pYptKRFMiB4AWHcnnZWrqjnuFBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7FB7/8AC1C572F62C11EDA10D3B3A4AD9E6FC/pYptKRFMiB4AWHcnnZWrqjnuFBw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:97:fd:c7:6d:cf:15:16:05:55:58:43:1b:ef:da:18:51:48:
         79:5a:d4:b2:59:a9:3a:89:15:19:69:7f:b4:b3:d9:11:c9:a5:
         aa:8f:44:87:b9:21:35:ad:c9:7a:12:72:3e:70:be:1b:d1:ae:
         4b:0f:65:fa:32:b7:05:d2:71:13:be:ab:a5:c7:9c:93:6c:5f:
         e8:22:0a:25:e0:3b:ed:03:5f:19:29:7b:d5:e7:ec:a5:73:99:
         4d:1f:86:f7:82:fa:92:3e:00:4a:30:3c:d1:1f:e8:99:24:a8:
         79:c9:c9:d3:36:f4:0a:38:fd:2f:31:49:42:c5:62:aa:42:67:
         cc:ef:fd:91:8e:67:cb:90:3d:ee:c4:b2:b5:d7:e3:d5:d9:42:
         b5:ab:62:7c:c5:bb:63:02:e8:e0:96:82:a7:17:9e:28:2c:19:
         98:bf:de:9c:6c:f7:74:6d:d3:41:69:99:f4:e2:71:84:0c:cb:
         67:81:0b:1d:f6:28:72:14:25:6b:45:61:ae:85:2e:0c:72:b8:
         a4:d4:12:6a:95:0c:ec:f4:75:c2:d6:d4:da:1b:b1:05:93:e0:
         ac:83:66:28:ab:97:9c:b2:e3:65:fb:2d:a0:75:e4:0d:19:73:
         5f:f7:aa:16:b3:27:ea:88:e8:86:04:45:d2:29:14:60:b6:f9:
         23:3e:0e:43
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBQAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDdGQjdBRjExMC8GA1UEBRMoQTU4QTZEMjkxMTRDODgxRTAwNTg3NzI3OUQ5NUFC
QUEzOUVFMTQxQzAeFw0yNjA5MjEwMzI1MzlaFw0yNjA5MjMwMzI1MzlaMBgxFjAU
BgNVBAMTDTZhYjBhM2I0LTIyNjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChPTiKRnIPtpWnHZHFzBL7xKLnDWq9tVmOpxfMeMFIkoy4dLKQoPQClFm+
45sDh8cjCXY0MKrnTHi/GnbjzdDYHCWEd9RksapeNJpQ7845eCCrhFLbyASOxwZ/
aam78+vJY7mfBu28Id6Mz/k5C4LpJbHU4vs3AXW9ja2xj+ahptG4jaOK3awrPw88
C+c7e8ZkXqfYq74ydyIF8y9R8iHUt6gV1QU2kGY8r/rZ6Rh9qJtdzsZR0l3IKc1a
aHABmftbM6C/Ex8zTW8eMDG77O+aUMj8Mar8UL6KPiRn0KmED83BFVtIiZzGO54r
ldVRSQDcgowNIrCqZ5IydcvS0YZFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoVKI
rPeMuD8QBbtEHJGIKaLNgoIwHwYDVR0jBBgwFoAUpYptKRFMiB4AWHcnnZWrqjnu
FBwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ3RkI3LzhBQzFDNTcyRjYyQzExRURBMTBEM0IzQTRBRDlFNkZDL3BZcHRL
UkZNaUI0QVdIY25uWldycWpudUZCdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BZcHRLUkZNaUI0QVdIY25uWldycWpudUZCdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDdGQjcvOEFDMUM1NzJGNjJDMTFFREExMEQzQjNBNEFE
OUU2RkMvcFlwdEtSRk1pQjRBV0hjbm5aV3Jxam51RkJ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAcl/3Hbc8VFgVVWEMb79oYUUh5WtSy
Wak6iRUZaX+0s9kRyaWqj0SHuSE1rcl6EnI+cL4b0a5LD2X6MrcF0nETvqulx5yT
bF/oIgol4DvtA18ZKXvV5+ylc5lNH4b3gvqSPgBKMDzRH+iZJKh5ycnTNvQKOP0v
MUlCxWKqQmfM7/2RjmfLkD3uxLK11+PV2UK1q2J8xbtjAujgloKnF54oLBmYv96c
bPd0bdNBaZn04nGEDMtngQsd9ihyFCVrRWGuhS4Mcrik1BJqlQzs9HXC1tTaG7EF
k+Csg2Yoq5ecsuNl+y2gdeQNGXNf96oWsyfqiOiGBEXSKRRgtvkjPg5D
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:18:46 2026 by rpki-client