Error: rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.mft
File:                     PlgMUwpAQ9QcCXH5Ia3eBA9lCog.mft (raw, json)
Hash identifier:          zKHdXbzlGnNSxvyxDExJb0Kz/KUle3vYfBxU0i49m24=
Subject key identifier:   96:C0:1F:BC:8C:9C:4B:7F:FA:D5:D8:90:15:02:E0:77:9C:69:9C:4A
Authority key identifier: 3E:58:0C:53:0A:40:43:D4:1C:09:71:F9:21:AD:DE:04:0F:65:0A:88
Certificate issuer:       /CN=F36FC79DAF/serialNumber=3E580C530A4043D41C0971F921ADDE040F650A88
Certificate serial:       B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.mft
Manifest number:          B7
Signing time:             Mon 21 Sep 2026 05:31:01 +0000
Manifest this update:     Mon 21 Sep 2026 05:31:00 +0000
Manifest next update:     Wed 23 Sep 2026 05:31:00 +0000
Files and hashes:         1: PlgMUwpAQ9QcCXH5Ia3eBA9lCog.crl (hash: 2X9U3F7/uQ2rvCIjDUIKd0ZkPJxVm4D+8pKkLOoGGmM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 183 (0xb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC79DAF, serialNumber=3E580C530A4043D41C0971F921ADDE040F650A88
        Validity
            Not Before: Sep 21 05:31:00 2026 GMT
            Not After : Sep 23 05:31:00 2026 GMT
        Subject: CN=6ab0c115-8c6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:17:db:f1:5f:08:c4:b7:45:bc:87:47:72:35:
                    88:37:69:1a:7c:a5:6e:62:ae:ab:5b:3e:b0:3c:67:
                    4b:81:dd:6c:a7:f3:f6:a5:f1:6b:93:2f:f3:28:02:
                    a1:6b:44:54:0e:c3:22:a7:ac:04:ca:a4:67:b4:17:
                    74:e6:a4:ec:5f:42:9f:ba:5d:44:84:ce:18:d0:76:
                    27:6d:3f:5e:a5:1f:89:77:f9:b6:ee:63:60:d5:9a:
                    6c:5b:f5:2e:4b:e8:0b:c4:f4:b5:22:82:b3:55:e6:
                    b4:7d:0a:d0:d4:27:4f:e6:0b:46:f3:79:c0:c9:9a:
                    b8:91:7f:13:fc:31:3a:18:3a:bf:f7:87:86:31:72:
                    83:fc:8f:33:16:76:53:35:6e:f1:aa:4c:39:cc:27:
                    3e:e9:22:2f:75:07:84:dc:ec:4d:74:8d:1d:d1:01:
                    db:4d:a9:9d:1c:32:2e:f6:0f:2b:d9:f8:7b:91:01:
                    f2:dc:7a:95:2b:82:d2:05:d9:e8:9a:36:2b:31:49:
                    bb:2e:33:bb:7a:ca:aa:4c:db:85:cc:46:6d:55:ed:
                    0a:d4:7f:b6:b1:ea:b7:60:6d:5b:11:8b:07:e1:e7:
                    c2:e2:4c:74:d7:35:55:84:16:e3:9b:1b:f5:f0:57:
                    19:b4:11:8d:02:60:6b:ba:7f:cf:94:57:27:f1:1d:
                    28:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C0:1F:BC:8C:9C:4B:7F:FA:D5:D8:90:15:02:E0:77:9C:69:9C:4A
            X509v3 Authority Key Identifier:
                keyid:3E:58:0C:53:0A:40:43:D4:1C:09:71:F9:21:AD:DE:04:0F:65:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC79D/64C01760275811F1AD5D3BB6DAE4EC9C/PlgMUwpAQ9QcCXH5Ia3eBA9lCog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:6e:eb:47:21:6e:a6:c9:d6:7a:0a:19:63:b7:c3:28:c7:a8:
         5f:7b:cb:2d:5c:c9:0d:15:28:a2:6f:5f:e3:72:bb:dd:37:d7:
         f5:5f:65:e2:3e:ea:b5:88:be:42:89:1e:4a:26:ce:18:a0:e5:
         9c:39:42:66:ce:5a:f3:28:63:76:c4:bd:00:52:0e:e2:fc:09:
         65:54:f7:c9:e4:97:6f:01:c2:38:92:44:31:52:11:e4:25:c8:
         e1:1f:5a:5a:e4:b2:47:f6:43:a5:0d:d2:b9:3c:aa:e9:b2:27:
         a1:7b:4b:54:95:43:94:38:de:47:4c:84:da:95:75:f2:8b:d9:
         50:9a:67:88:d0:83:ea:f4:06:fa:06:b5:a5:7a:22:03:fb:8d:
         c5:ec:6b:29:1e:12:5f:0b:30:46:a6:0c:65:f3:49:98:59:85:
         d8:40:09:9d:98:aa:81:2f:c3:e5:94:da:33:13:42:ae:d0:38:
         e7:4f:11:96:5e:28:60:a7:ae:46:57:a9:f7:53:46:c1:d1:09:
         10:f0:99:73:7f:f0:54:87:2f:41:be:35:2f:5b:ea:20:97:8e:
         23:6c:44:b6:00:d0:2f:a5:50:98:0b:29:c8:05:bb:01:02:0b:
         63:b8:ad:bd:10:82:ee:01:1c:a2:08:f7:29:4a:4a:e6:6c:aa:
         e9:16:20:c4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICALcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkM3OURBRjExMC8GA1UEBRMoM0U1ODBDNTMwQTQwNDNENDFDMDk3MUY5MjFBRERF
MDQwRjY1MEE4ODAeFw0yNjA5MjEwNTMxMDBaFw0yNjA5MjMwNTMxMDBaMBgxFjAU
BgNVBAMTDTZhYjBjMTE1LThjNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqF9vxXwjEt0W8h0dyNYg3aRp8pW5irqtbPrA8Z0uB3Wyn8/al8WuTL/Mo
AqFrRFQOwyKnrATKpGe0F3TmpOxfQp+6XUSEzhjQdidtP16lH4l3+bbuY2DVmmxb
9S5L6AvE9LUigrNV5rR9CtDUJ0/mC0bzecDJmriRfxP8MToYOr/3h4YxcoP8jzMW
dlM1bvGqTDnMJz7pIi91B4Tc7E10jR3RAdtNqZ0cMi72DyvZ+HuRAfLcepUrgtIF
2eiaNisxSbsuM7t6yqpM24XMRm1V7QrUf7ax6rdgbVsRiwfh58LiTHTXNVWEFuOb
G/XwVxm0EY0CYGu6f8+UVyfxHSiVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUlsAf
vIycS3/61diQFQLgd5xpnEowHwYDVR0jBBgwFoAUPlgMUwpAQ9QcCXH5Ia3eBA9l
CogwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDNzlELzY0QzAxNzYwMjc1ODExRjFBRDVEM0JCNkRBRTRFQzlDL1BsZ01V
d3BBUTlRY0NYSDVJYTNlQkE5bENvZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BsZ01Vd3BBUTlRY0NYSDVJYTNlQkE5bENvZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkM3OUQvNjRDMDE3NjAyNzU4MTFGMUFENUQzQkI2REFF
NEVDOUMvUGxnTVV3cEFROVFjQ1hINUlhM2VCQTlsQ29nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzbutHIW6mydZ6Chljt8Mox6hfe8st
XMkNFSiib1/jcrvdN9f1X2XiPuq1iL5CiR5KJs4YoOWcOUJmzlrzKGN2xL0AUg7i
/AllVPfJ5JdvAcI4kkQxUhHkJcjhH1pa5LJH9kOlDdK5PKrpsiehe0tUlUOUON5H
TITalXXyi9lQmmeI0IPq9Ab6BrWleiID+43F7GspHhJfCzBGpgxl80mYWYXYQAmd
mKqBL8PllNozE0Ku0DjnTxGWXihgp65GV6n3U0bB0QkQ8Jlzf/BUhy9BvjUvW+og
l44jbES2ANAvpVCYCynIBbsBAgtjuK29EILuARyiCPcpSkrmbKrpFiDE
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:23:46 2026 by rpki-client