Error: rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
File:                     kp-MtyJC3APxF2jH_xZcaDK3U7U.mft (raw, json)
Hash identifier:          m1uCR3WUdSVpTJJh4+B+dWywK9RkNlKE59jp1Wus8l0=
Subject key identifier:   A5:A9:2D:81:D1:A6:F1:BE:46:5E:74:A7:D6:3F:21:F9:0F:F8:BA:2C
Authority key identifier: 92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
Certificate issuer:       /CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Certificate serial:       03DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
Manifest number:          03DD
Signing time:             Thu 24 Sep 2026 03:58:50 +0000
Manifest this update:     Thu 24 Sep 2026 03:58:49 +0000
Manifest next update:     Sat 26 Sep 2026 03:58:49 +0000
Files and hashes:         1: kp-MtyJC3APxF2jH_xZcaDK3U7U.crl (hash: UTxszvRrXm/EzhtXebJ7GCAstRjywCDVN22Pq1XWUME=)
                          2: A864F076BE9611EE998D299D775412E6.roa (hash: 1SOFM20prFpQpyBQ79yS3b8vfUM/+4DhWbKvJj39ado=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 990 (0x3de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E62BAF, serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
        Validity
            Not Before: Sep 24 03:58:49 2026 GMT
            Not After : Sep 26 03:58:49 2026 GMT
        Subject: CN=6ab49ffa-d49f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:81:0f:51:fb:30:fb:3e:27:41:0f:7f:48:b8:
                    08:a2:43:54:16:89:b7:8e:c4:7a:1b:65:62:e5:89:
                    72:76:fe:fb:aa:11:b3:13:0f:b8:b1:36:16:b0:99:
                    88:67:d8:f2:49:e5:7b:c5:7a:e3:95:92:37:e6:ea:
                    46:c6:fb:dd:fb:73:b9:38:26:9c:16:57:e5:fd:07:
                    8f:32:d2:02:90:04:4c:5d:ad:d1:ce:26:a1:5e:ef:
                    38:5d:2c:6b:b7:65:00:b7:8f:c2:ba:8f:93:53:09:
                    67:8f:39:49:17:91:47:f0:77:fb:65:57:50:aa:21:
                    ab:6a:5d:9d:a9:6d:57:00:48:46:b9:cc:ed:61:83:
                    15:04:2b:cf:49:dd:dd:26:f3:e9:76:dd:88:5b:f0:
                    61:fb:ff:e1:35:d0:73:01:9c:af:ff:c0:12:93:80:
                    11:f0:2b:fa:1b:6e:08:4e:19:a1:c4:a2:cd:4e:f5:
                    60:df:36:1e:99:1b:6b:8c:c1:be:e2:35:98:5f:45:
                    44:1e:73:0b:77:31:50:d4:70:b6:02:1f:ad:6b:64:
                    b2:6e:ab:97:54:00:c0:a7:85:e5:d7:23:8d:7e:a5:
                    6a:12:7a:63:ea:c9:a4:b6:ad:c5:7c:c7:dd:e1:c5:
                    a4:4a:3b:8b:b5:7e:8e:c3:c8:d2:3d:d7:6b:bd:2d:
                    96:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A9:2D:81:D1:A6:F1:BE:46:5E:74:A7:D6:3F:21:F9:0F:F8:BA:2C
            X509v3 Authority Key Identifier:
                keyid:92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:61:d4:bc:fe:a0:00:40:9c:73:76:07:29:64:d7:23:de:07:
         f5:10:14:5b:be:25:5b:4c:1c:83:90:c6:7d:56:8d:08:2d:ef:
         f3:b1:9b:ec:0e:96:04:be:ba:0d:d8:63:23:50:e1:11:50:ed:
         fc:61:e3:c8:f0:cf:5f:bd:d7:a6:3d:6f:67:8e:d4:b1:d4:4d:
         6d:48:00:f6:f5:b7:cc:37:8f:2b:42:28:9c:e1:f5:76:3f:7b:
         0d:26:a2:8c:b2:ca:8c:85:85:a2:9c:ef:d4:9e:c1:c9:64:42:
         94:8d:bc:7f:0a:63:c1:24:82:4c:dd:b4:c2:36:2c:db:f6:46:
         10:18:28:8e:77:a2:b2:24:db:8d:cf:6e:7e:1d:71:3f:1d:6c:
         8e:e2:f8:e5:32:69:e2:8d:fd:1e:06:14:35:80:c5:bf:3f:57:
         d6:a9:27:1a:95:04:1f:95:bd:d0:15:dd:da:58:3b:aa:32:95:
         48:67:3c:8b:1c:3b:57:d5:88:7e:a8:4d:c6:fc:8f:ce:cc:8c:
         0a:96:2c:53:25:28:ad:48:c0:e6:ca:cf:1f:d6:ae:51:0d:c2:
         f1:88:67:e6:4f:cd:89:d9:11:16:23:4e:16:54:cc:68:d7:df:
         ff:9d:43:84:fc:65:43:ec:f6:37:c9:41:f5:5c:e3:a1:3c:f1:
         ff:a6:e2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:05:54 2026 by rpki-client