Error: rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
File:                     hyEw5ps_uANbGyXT9vuXSioHjsw.mft (raw, json)
Hash identifier:          CKj664Nrrh9zwT0hP2SvFrBTWdfj5YjP2h7+6Brvrzc=
Subject key identifier:   1D:3A:63:51:CD:5E:46:62:D5:3B:B9:00:A9:EC:5E:F2:76:5A:7F:FC
Authority key identifier: 87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC
Certificate issuer:       /CN=F36E2B8CAF/serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
Certificate serial:       0512
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
Manifest number:          04ED
Signing time:             Tue 22 Sep 2026 03:30:37 +0000
Manifest this update:     Tue 22 Sep 2026 03:30:36 +0000
Manifest next update:     Thu 24 Sep 2026 03:30:36 +0000
Files and hashes:         1: hyEw5ps_uANbGyXT9vuXSioHjsw.crl (hash: lAjrKF4zm6kn/M5vvrFVvlnpyYqnbcW4cOEcSpGEc5g=)
                          2: 25446056ABF711EFA5BE276F762E951A.roa (hash: iljiyK5RbJraa2JUb3gm2wrIQ/7n/PcStGqRRGQslUY=)
                          3: 577D6658216911EF965030097DDC24C2.roa (hash: RohDz18h3S3xSW/GheawmAZBCLdDn+5IgXFlTzJSpT4=)
                          4: 0E6CEF8EABF611EF8D257368762E951A.roa (hash: 3IMYv2fYZHxMilsGAD7UzjHLGo67Jrz37D1HYZiI4Ac=)
                          5: 0F846D08216C11EF8074BA1B7DDC24C2.roa (hash: 2cHpMzYFLIaciTpzwpVBdKjF8btucqV90CHDQfekd3U=)
                          6: 8A675A6A216911EFA20C79097DDC24C2.roa (hash: yTfQ67chD1jSLhE+T2mU2SumVlLVpCyW/SllRT06N5k=)
                          7: 83F3DB32D1B211EF9334217C762E951A.roa (hash: ISG8ILe2W2IxpAsqb/seypxE6lrcAl4MLmyqyncIBh8=)
                          8: AD702BCA216B11EFA0A890177DDC24C2.roa (hash: L2LITle01miKDVPWtOlGBo1zGUpqyZVW4YbQ391uSR8=)
                          9: 7BF8CB1A216B11EFB08D5D177DDC24C2.roa (hash: 8B0YCo/VKxR+j2N3GuqRtbGq6x4x2IoScSr7pqTTOtE=)
                          10: CBF565BE5B3B11F08BFC88BCDAE4EC9C.roa (hash: CbJPohRYMuWwMa2AJ9lcD9673rUrCFi9pH5tHUngHkQ=)
                          11: E9C372C8216911EF92868B0D7DDC24C2.roa (hash: XPvj7OAyAyjAK7avgf+wB+oHqzalqpcS9RwapMEi6BQ=)
                          12: 8B9981B4D1B411EF8E1B9C88762E951A.roa (hash: tm49JQ/az2bLBxn4bJbR8uYdImEtSTPE410n/e1S+rA=)
                          13: DCDFFE44216B11EF91D8CC177DDC24C2.roa (hash: qX1PTVriwlSDQ1zznWEjSNOEWW/errKhB19KwazvHCA=)
                          14: FBFA4C90E06E11EF87F2F9A9762E951A.roa (hash: oV526bUSVjnbh/hqM0EEIKGSmaWKBsdnxNGAaxT6u1Y=)
                          15: 9CC8E63CE06E11EFA35596A7762E951A.roa (hash: tnxSoqA43WiGOfqUI3P0OD/A29+9xuwJnrtEPxKmVjM=)
                          16: 42DD302C216C11EF81B7191C7DDC24C2.roa (hash: JJMt9932QgU+2OiDvLkyOUAa4AsBbuGAtem/jVVFQNU=)
                          17: 63FF131ECBD211EEB933CA84775412E6.roa (hash: yK1f2ZwWbUbh9pLIwEau+PoX7oQm1JMNE9rftEPDtB4=)
                          18: 74007D02ABF611EF84EDDE6A762E951A.roa (hash: KZGGhsqVyrno2LUhnkf8Uvj8V+irkoe9+uULUCYcyBA=)
                          19: CEF17564ABF511EFBDA49866762E951A.roa (hash: 8BXeQXZRcKRCn2PxlkZ/H8leejJBWYahhy9w+VGTV0w=)
                          20: C0A39C84ABF611EF811BC96C762E951A.roa (hash: jNvssZb4MW5AzsDrnJ2ltfmd0tnSlweuzx6hP5AWVJw=)
                          21: E2508EF0216811EFAE69D2047DDC24C2.roa (hash: +d1lZthDDgWXzpp9t9wep4/UCQeV5PqY4q6qmeSb/0E=)
                          22: CA0A748AE06E11EFBBAD83A9762E951A.roa (hash: MjyQPYZ0w1yB65mwCyV+9VzWTla8w8d5zJEWXodWAO0=)
                          23: BF3F3B0E216911EFAB4FB3097DDC24C2.roa (hash: XcpHVmzBKOmbyKD8fxSft+zKQ7P+pByDMjIrDjuzNus=)
                          24: 1A427EB8216911EF830131057DDC24C2.roa (hash: /FE9YVa8jHhpZkpXQnpV9/OOWPfHFAhwKy6l7Mkx+ME=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1298 (0x512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B8CAF, serialNumber=872130E69B3FB8035B1B25D3F6FB974A2A078ECC
        Validity
            Not Before: Sep 22 03:30:36 2026 GMT
            Not After : Sep 24 03:30:36 2026 GMT
        Subject: CN=6ab1f65c-1d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:e8:3d:9d:c8:7c:53:2e:91:1a:74:94:cf:
                    d3:a8:39:d8:3f:ef:cb:5f:56:bf:01:19:33:bc:59:
                    6b:95:e8:95:70:a4:a7:3d:6e:9e:89:b9:31:fd:70:
                    d9:84:c2:c5:8e:8b:9a:c1:23:1d:da:de:ff:86:35:
                    a6:26:14:c6:13:a6:e2:77:87:7e:b3:9a:01:f7:4f:
                    5c:b7:94:01:c0:f2:ea:cf:0b:f5:80:dd:fd:c8:b3:
                    ee:67:d8:e7:22:e9:95:a4:7d:f4:d1:7e:b7:50:3d:
                    4a:37:67:96:56:89:5b:b0:f7:8e:e0:29:1b:9c:b2:
                    05:c8:63:02:7a:d8:e5:53:cf:31:41:87:08:9b:c5:
                    65:1f:cf:ae:9b:53:3c:f1:7d:07:c9:66:c0:a8:6e:
                    b5:13:38:1b:eb:74:a6:87:96:8c:2b:de:e4:0b:b4:
                    ec:dc:68:cf:23:a2:55:8b:a9:2d:fe:83:5f:f5:77:
                    76:06:98:7b:d3:0a:6d:cf:2a:3b:c0:ba:b5:b2:da:
                    75:21:97:ef:46:1b:57:c0:3a:38:b0:51:18:83:d3:
                    54:cc:5c:8a:5a:2e:3a:c3:34:bb:88:bb:f8:c2:35:
                    dc:8b:66:49:70:76:08:cb:27:1a:99:2a:78:47:a5:
                    73:fc:0d:ae:d9:1b:0a:7a:88:be:c4:cc:f2:f5:23:
                    96:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:63:51:CD:5E:46:62:D5:3B:B9:00:A9:EC:5E:F2:76:5A:7F:FC
            X509v3 Authority Key Identifier:
                keyid:87:21:30:E6:9B:3F:B8:03:5B:1B:25:D3:F6:FB:97:4A:2A:07:8E:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hyEw5ps_uANbGyXT9vuXSioHjsw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B8C/C8F9DF1E0B6211EE862D868A4AD9E6FC/hyEw5ps_uANbGyXT9vuXSioHjsw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c9:22:0d:6e:76:6d:67:07:d2:bb:db:ff:dc:6a:a9:11:9b:
         c7:c8:e7:ac:82:5c:64:a3:46:f7:b3:05:c9:d9:bd:e5:e8:19:
         a0:96:b6:1a:fc:65:87:d0:f6:77:81:9b:39:6b:30:b5:ca:de:
         3c:03:b9:90:e5:7d:1b:35:00:76:1f:4f:58:c8:af:9e:d7:1d:
         9c:8b:46:92:bf:6e:7d:32:37:19:dc:af:12:e6:c7:15:d4:ee:
         6e:c5:db:01:f3:57:02:ee:e6:13:aa:f4:82:a6:95:16:3e:6e:
         2f:f1:cb:7d:9c:05:72:e5:cc:65:2c:67:77:ab:50:3e:50:c4:
         70:22:8a:65:f2:5a:41:9b:7a:ab:c5:2d:b9:f1:80:32:8f:7a:
         5d:f1:1f:5d:20:6a:91:60:5d:ff:47:6f:35:1a:86:1d:24:2e:
         e9:b9:e5:18:47:58:ba:40:1a:f3:0a:a0:e4:a9:0e:7e:f3:2d:
         28:f0:cd:51:27:ae:1e:81:a9:8f:f4:0c:72:7c:a6:79:4b:0f:
         4d:bd:0a:e1:75:ab:0a:5c:0b:a3:9c:1a:36:e6:53:e4:39:9a:
         44:66:92:71:b5:cd:ec:67:40:d3:9a:e6:9e:83:8c:a9:79:8e:
         39:5b:6b:99:1e:d4:35:52:a7:a3:16:86:48:77:60:12:e0:97:
         44:ad:95:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:55:13 2026 by rpki-client