Error: rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
File:                     uzo1Sy60WgeXNxMywh_IM9si2bE.mft (raw, json)
Hash identifier:          dlgAl3Cn3bsInX18G2FIqkKSr7DhSlKIwRtUYLc8WGA=
Subject key identifier:   3E:F8:E9:97:2B:04:33:24:78:3B:68:B0:05:52:2A:D2:BA:61:35:CF
Authority key identifier: BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1
Certificate issuer:       /CN=F36FBCCDAF/serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
Certificate serial:       0711
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
Manifest number:          070B
Signing time:             Mon 21 Sep 2026 02:31:04 +0000
Manifest this update:     Mon 21 Sep 2026 02:31:03 +0000
Manifest next update:     Wed 23 Sep 2026 02:31:03 +0000
Files and hashes:         1: uzo1Sy60WgeXNxMywh_IM9si2bE.crl (hash: i+5hpYoTSjXNZQY03od6MdUfcbC1p4YDhkapnB58ZL0=)
                          2: 8E90E6161CD111EFAD3E6F387DDC24C2.roa (hash: Acxu0DX0x7zOnZo/d29ZFhmVVZhtQ4DjKj+Qddi4oY8=)
                          3: 556D1DA01CD111EF9997F1117DDC24C2.roa (hash: TUGWF0iT2TWYNHrRW0ntCFeOp6mPEZVXlZ0YLlE22V0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:31:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1809 (0x711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBCCDAF, serialNumber=BB3A354B2EB45A0797371332C21FC833DB22D9B1
        Validity
            Not Before: Sep 21 02:31:03 2026 GMT
            Not After : Sep 23 02:31:03 2026 GMT
        Subject: CN=6ab096e8-d49a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:41:65:b8:d3:33:0f:d3:c3:c3:a7:11:f8:9d:
                    58:24:2b:fe:eb:35:a9:2e:e1:f3:6b:fb:a6:85:1e:
                    61:bc:9e:17:6b:e0:20:ea:ce:d2:e3:fc:83:85:c8:
                    50:2a:db:6c:80:3b:09:7f:2a:14:32:43:05:93:2e:
                    2d:b2:47:7c:e6:01:ca:e4:a7:19:7d:11:66:44:9d:
                    e9:2c:0d:8e:91:fd:11:22:d1:3b:60:5c:95:4e:bc:
                    f2:6a:15:d6:41:98:71:78:d7:75:5a:0c:85:ea:bb:
                    f2:01:71:39:9d:53:e4:c0:e8:0f:35:cb:93:59:24:
                    a6:dc:9b:5d:5a:27:1f:55:09:aa:bb:05:40:80:66:
                    03:a6:2d:4a:18:34:57:c5:b4:58:7b:b9:a6:83:22:
                    cc:36:3c:9a:6f:29:5d:57:ff:77:b0:e0:15:1f:8a:
                    93:4d:b8:05:c3:21:d9:8e:d4:3b:f0:ff:71:32:f8:
                    dd:3a:59:c8:df:36:01:bb:f7:d6:39:a3:19:83:71:
                    ae:9d:e2:13:a0:59:6c:ce:e7:d4:37:73:1d:cc:fe:
                    30:47:ed:3f:c2:54:9e:fc:77:86:06:4a:cc:a4:ab:
                    f8:21:ae:a9:17:2a:90:ef:00:bf:35:21:20:c0:e8:
                    04:93:2d:73:f4:3d:1a:1d:33:28:53:b5:3f:a9:70:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F8:E9:97:2B:04:33:24:78:3B:68:B0:05:52:2A:D2:BA:61:35:CF
            X509v3 Authority Key Identifier:
                keyid:BB:3A:35:4B:2E:B4:5A:07:97:37:13:32:C2:1F:C8:33:DB:22:D9:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uzo1Sy60WgeXNxMywh_IM9si2bE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBCCD/43EB0FEE535011ECAB5D3E7CD8A014CE/uzo1Sy60WgeXNxMywh_IM9si2bE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:d3:16:54:49:07:9b:84:40:72:fd:eb:e5:3a:ac:27:70:81:
         3e:6c:7d:1d:9e:2a:cc:a2:dc:12:30:b6:97:b2:3b:3b:0c:6d:
         99:78:e5:56:b6:ee:99:76:4d:45:86:3b:0a:0a:b6:24:12:28:
         ac:f2:ab:16:2b:b2:34:0c:93:58:7e:76:79:4f:f5:58:49:04:
         07:15:83:9f:79:79:e8:93:15:da:bc:cc:81:c2:ea:86:89:15:
         ff:52:12:e6:da:ed:4b:47:39:88:65:28:5c:69:83:23:59:40:
         37:0c:3b:e4:b5:68:08:29:5c:63:a5:52:25:2f:8c:bf:65:4c:
         31:8e:49:b5:36:c4:57:40:80:73:2a:38:df:92:73:82:cd:11:
         d9:5e:a5:c2:e1:b7:77:ed:45:2e:a9:ca:57:5a:6c:8c:a1:e6:
         48:a9:3c:8b:30:1a:e8:ee:db:5c:dd:50:d5:43:fd:22:cd:c4:
         ae:ce:73:bf:f4:83:f2:80:67:a5:ef:91:5a:91:60:ad:44:34:
         e1:c9:a7:ff:37:02:0e:4a:65:60:90:9e:e9:08:1a:1d:d9:c2:
         12:50:87:8b:5a:5b:d5:fb:20:29:c4:69:02:a2:3a:fa:cc:c2:
         16:41:50:b7:7f:18:7b:df:f0:5e:f9:d0:30:8c:04:26:8e:b0:
         d7:9c:3a:3a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkJDQ0RBRjExMC8GA1UEBRMoQkIzQTM1NEIyRUI0NUEwNzk3MzcxMzMyQzIxRkM4
MzNEQjIyRDlCMTAeFw0yNjA5MjEwMjMxMDNaFw0yNjA5MjMwMjMxMDNaMBgxFjAU
BgNVBAMTDTZhYjA5NmU4LWQ0OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDVQWW40zMP08PDpxH4nVgkK/7rNaku4fNr+6aFHmG8nhdr4CDqztLj/IOF
yFAq22yAOwl/KhQyQwWTLi2yR3zmAcrkpxl9EWZEneksDY6R/REi0TtgXJVOvPJq
FdZBmHF413VaDIXqu/IBcTmdU+TA6A81y5NZJKbcm11aJx9VCaq7BUCAZgOmLUoY
NFfFtFh7uaaDIsw2PJpvKV1X/3ew4BUfipNNuAXDIdmO1Dvw/3Ey+N06WcjfNgG7
99Y5oxmDca6d4hOgWWzO59Q3cx3M/jBH7T/CVJ78d4YGSsykq/ghrqkXKpDvAL81
ISDA6ASTLXP0PRodMyhTtT+pcMrbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPvjp
lysEMyR4O2iwBVIq0rphNc8wHwYDVR0jBBgwFoAUuzo1Sy60WgeXNxMywh/IM9si
2bEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZCQ0NELzQzRUIwRkVFNTM1MDExRUNBQjVEM0U3Q0Q4QTAxNENFL3V6bzFT
eTYwV2dlWE54TXl3aF9JTTlzaTJiRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3V6bzFTeTYwV2dlWE54TXl3aF9JTTlzaTJiRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkJDQ0QvNDNFQjBGRUU1MzUwMTFFQ0FCNUQzRTdDRDhB
MDE0Q0UvdXpvMVN5NjBXZ2VYTnhNeXdoX0lNOXNpMmJFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAU0xZUSQebhEBy/evlOqwncIE+bH0d
nirMotwSMLaXsjs7DG2ZeOVWtu6Zdk1FhjsKCrYkEiis8qsWK7I0DJNYfnZ5T/VY
SQQHFYOfeXnokxXavMyBwuqGiRX/UhLm2u1LRzmIZShcaYMjWUA3DDvktWgIKVxj
pVIlL4y/ZUwxjkm1NsRXQIBzKjjfknOCzRHZXqXC4bd37UUuqcpXWmyMoeZIqTyL
MBro7ttc3VDVQ/0izcSuznO/9IPygGel75FakWCtRDThyaf/NwIOSmVgkJ7pCBod
2cISUIeLWlvV+yApxGkCojr6zMIWQVC3fxh73/Be+dAwjAQmjrDXnDo6
-----END CERTIFICATE-----
Generated at Mon Sep 21 21:52:48 2026 by rpki-client