Error: rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
File:                     gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft (raw, json)
Hash identifier:          bvJhbAVWIbk3FgomR5h662IcIpmU0tEaEU5m6lxhsTU=
Subject key identifier:   5E:37:11:E3:18:47:3C:ED:B5:6E:D4:3F:C7:E8:11:D8:ED:61:58:FF
Authority key identifier: 81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED
Certificate issuer:       /CN=F3652E81AF/serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
Certificate serial:       0735
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
Manifest number:          072D
Signing time:             Fri 25 Sep 2026 02:30:52 +0000
Manifest this update:     Fri 25 Sep 2026 02:30:52 +0000
Manifest next update:     Sun 27 Sep 2026 02:30:52 +0000
Files and hashes:         1: gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl (hash: LuoMYkVibMAEyvNOv28ZuIxhzOdw+AlMhzxWWgeY2xQ=)
                          2: AAE956961D5511F18D2C4BCDDAE4EC9C.roa (hash: eNBb4iv8KgSlwncBkb5fhFPzZUtHTRGyst8zzcUlZhw=)
                          3: 24930CEA1D5511F1A8C623CBDAE4EC9C.roa (hash: wGf2MOvj3Yluy431+2pq0vgFtAP/EDswaNN5o6eA4fw=)
                          4: 4271F39E1D5411F1A0107AC5DAE4EC9C.roa (hash: GfmgIfHQlHFs0VWeSTKqFMLmHPB6ns7vlyr6ru21/OM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:30:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1845 (0x735)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652E81AF, serialNumber=813164E535DF5B1B43F8FA6E225DD0FA98CF6FED
        Validity
            Not Before: Sep 25 02:30:52 2026 GMT
            Not After : Sep 27 02:30:52 2026 GMT
        Subject: CN=6ab5dcdc-6c0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3e:23:c5:7d:62:27:f5:7d:87:89:2e:b7:12:
                    a9:cd:2e:23:b2:ff:f2:62:7d:0c:ad:2a:1d:f0:33:
                    be:9f:7c:5d:40:b2:e6:f1:5b:bf:e1:a3:3e:9a:db:
                    3b:3b:09:cd:13:9e:3e:db:43:17:a2:10:da:6c:0f:
                    b9:81:6b:c8:f1:b8:50:96:cf:c6:ec:ee:98:97:28:
                    57:26:c2:f0:e9:04:aa:30:1f:fa:fe:89:d7:38:8a:
                    04:a7:ba:69:50:d5:c2:ef:34:73:2a:2e:42:10:88:
                    e3:2b:2e:4b:84:46:1f:66:42:c9:c4:bd:d0:71:93:
                    0f:a5:79:a9:26:19:81:d7:50:4c:fb:0f:16:6e:32:
                    dc:7e:46:7b:bc:ee:71:46:e7:09:52:e8:33:61:bc:
                    67:2d:8a:50:8b:7e:a3:29:95:cd:df:25:a6:7d:90:
                    39:aa:0c:06:8b:eb:92:f3:78:54:b9:3a:3a:9e:82:
                    e8:3c:1e:fa:f0:7a:4b:21:5e:1a:78:83:2a:95:e8:
                    a7:74:19:ca:77:8f:a1:76:6e:c6:41:2c:a0:18:1d:
                    0b:26:e9:45:08:fe:ab:c2:86:41:23:51:10:c1:71:
                    b9:3f:ac:8e:ca:c7:a7:94:28:a5:91:85:b4:d2:8c:
                    60:cf:56:e0:fb:ac:5e:c3:29:64:93:7b:03:20:0d:
                    73:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:37:11:E3:18:47:3C:ED:B5:6E:D4:3F:C7:E8:11:D8:ED:61:58:FF
            X509v3 Authority Key Identifier:
                keyid:81:31:64:E5:35:DF:5B:1B:43:F8:FA:6E:22:5D:D0:FA:98:CF:6F:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652E81/2DA244A0416711EC870A307CD8A014CE/gTFk5TXfWxtD-PpuIl3Q-pjPb-0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:82:f9:90:64:d2:76:6e:81:4a:7b:51:f3:99:35:2a:13:e3:
         71:bf:84:ae:02:45:8c:54:e5:a9:74:d2:9f:2b:27:39:52:81:
         1e:b3:09:da:54:8b:e2:f1:bb:ba:8c:ed:0e:08:83:51:6e:36:
         f7:e6:a5:6f:ce:43:e5:64:36:13:17:d8:c7:09:3c:5b:bc:af:
         7f:14:20:8e:6e:6a:5c:5a:b2:ca:8b:ff:02:be:9f:90:00:83:
         a9:67:bb:f4:ad:5d:b4:f6:66:22:54:c7:eb:36:32:6e:b2:f3:
         42:8e:f4:06:32:65:21:22:6a:56:55:bc:c2:3e:d1:3c:3b:fe:
         0f:79:09:ff:4b:c3:7d:dc:28:86:62:7a:17:70:dd:ea:6b:d0:
         34:27:99:2e:04:f2:2d:c7:c2:88:fb:1d:57:bf:f2:29:a0:46:
         04:02:36:0b:e0:71:92:77:6a:ed:d7:c0:58:81:6b:aa:9e:79:
         4d:3e:ea:1b:1b:c9:92:50:67:e4:23:0c:ad:f6:94:0a:44:4f:
         7b:7d:7d:ec:16:0d:b3:4f:08:38:98:a4:fd:0c:f7:28:0b:c4:
         5b:8d:46:31:be:c1:47:27:e2:88:4e:76:29:e4:9b:0f:59:6a:
         4e:df:69:18:47:fc:02:50:f1:4f:a1:6f:ae:6c:65:66:44:ed:
         5c:4c:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:19:40 2026 by rpki-client