Error: rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
File:                     kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft (raw, json)
Hash identifier:          6Q9WLQdXf5DAAQ4VljkjkQ7+kG+++xAmexsIWgn+Ld0=
Subject key identifier:   D0:9B:6B:5A:F8:25:8C:E5:71:2D:22:F9:50:EE:2E:D0:D1:8C:EA:47
Authority key identifier: 90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D
Certificate issuer:       /CN=F366F2B5AF/serialNumber=9093645F56187261E65B708274DBD52C00DF250D
Certificate serial:       02F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
Manifest number:          02F5
Signing time:             Fri 25 Sep 2026 04:29:47 +0000
Manifest this update:     Fri 25 Sep 2026 04:29:46 +0000
Manifest next update:     Sun 27 Sep 2026 04:29:46 +0000
Files and hashes:         1: kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl (hash: 4THi3YIYG75CDsXYd4i3zMQf1QAiuU+b5DK6dwS6UEQ=)
                          2: 6217C884742E11EFA821E659762E951A.roa (hash: DqF+PQ0X8r1rRPiZ8RZ4fS3gA5sEXR5BPLyS3G+8cdE=)
                          3: 132CDF5C741511EFA9C5BABD762E951A.roa (hash: 02xv9vPnDrOOLcJupKl7YdL1bTFmoSlfefstM9Glp04=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 759 (0x2f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F2B5AF, serialNumber=9093645F56187261E65B708274DBD52C00DF250D
        Validity
            Not Before: Sep 25 04:29:46 2026 GMT
            Not After : Sep 27 04:29:46 2026 GMT
        Subject: CN=6ab5f8bb-dd8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d4:38:1d:13:5c:44:ff:c5:79:bd:f8:d6:4b:
                    45:cb:c2:c4:8e:66:8a:b5:c1:e4:fe:a4:d3:4a:f5:
                    89:de:d5:8c:00:cf:6d:a3:ea:c1:a2:db:7a:ef:fe:
                    21:12:bf:a3:ad:3d:6c:43:79:f3:f7:fd:f1:6c:ec:
                    3f:8a:e4:bf:90:a1:23:4e:7f:a4:c0:8c:0c:84:d8:
                    4f:b4:32:9d:c1:d3:6d:e3:ab:1d:7b:af:ba:52:ef:
                    7b:ef:fd:3f:56:06:98:6a:96:bd:62:65:b2:c3:33:
                    8b:63:65:3d:2b:d2:c4:7a:1c:72:ca:d6:d0:f1:26:
                    a3:4e:20:9e:7b:c4:dd:a3:16:22:ec:19:92:01:ed:
                    47:c3:5e:b9:36:f5:e4:61:b7:5f:b6:46:c3:ac:cc:
                    d0:f1:0d:fb:88:b8:f8:4a:fd:30:8f:14:14:b2:af:
                    12:0f:90:9f:9c:cf:82:99:ef:84:dd:08:c4:67:75:
                    64:20:f5:fe:8c:6a:03:c0:d8:af:d4:f3:5d:a9:de:
                    8f:29:bb:a9:b1:3c:a5:d6:94:93:9c:1f:96:af:d1:
                    3f:3e:bf:07:d3:a4:46:9a:b2:68:0e:a9:cf:0e:5b:
                    b0:51:5f:ec:7f:15:da:e4:8a:de:d4:26:30:e5:ba:
                    4f:e4:aa:f5:b1:f7:e1:4a:cb:cc:82:bb:3f:ee:3a:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9B:6B:5A:F8:25:8C:E5:71:2D:22:F9:50:EE:2E:D0:D1:8C:EA:47
            X509v3 Authority Key Identifier:
                keyid:90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5e:ee:8e:a5:6d:13:93:96:4c:b2:02:e6:f7:43:a5:3e:15:
         03:16:0f:8e:6c:7f:f4:7c:ab:54:58:25:96:3f:d0:91:cd:ab:
         19:c6:0f:52:09:42:71:44:a4:f4:ed:aa:05:dd:41:57:8b:70:
         c0:68:2e:88:ad:ea:f7:f6:99:50:49:73:1b:cf:d6:f9:b1:52:
         7a:ed:d2:e0:70:59:45:1b:d2:bb:8b:36:36:5a:06:eb:cb:e2:
         4d:12:18:36:f4:3c:c3:39:16:be:e3:0e:a8:05:be:19:f6:e9:
         99:06:79:24:7f:31:20:48:8e:9b:2a:4e:1a:27:eb:c8:02:f9:
         79:1a:d9:dc:ee:1d:e3:15:51:93:7e:21:58:47:b0:f1:13:d5:
         fd:64:dc:6d:d5:33:9e:d7:e4:e8:15:5c:be:30:90:4e:66:2b:
         ba:a9:67:bf:3f:fb:64:a4:86:a8:ee:19:3d:c8:ff:98:f2:5c:
         30:9a:4d:42:cf:89:d1:6b:8b:10:9f:72:d2:b3:a4:cf:cf:78:
         12:e4:01:48:1b:b6:c2:99:a4:4e:41:9b:19:48:37:20:b0:65:
         6f:64:04:0a:bc:71:d0:0c:0f:fd:a4:d4:ef:e3:fc:bd:08:ca:
         74:1d:b2:82:ed:00:c4:3a:37:dc:ee:88:78:27:25:9e:86:19:
         be:e3:78:52
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAvcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkYyQjVBRjExMC8GA1UEBRMoOTA5MzY0NUY1NjE4NzI2MUU2NUI3MDgyNzREQkQ1
MkMwMERGMjUwRDAeFw0yNjA5MjUwNDI5NDZaFw0yNjA5MjcwNDI5NDZaMBgxFjAU
BgNVBAMTDTZhYjVmOGJiLWRkOGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDY1DgdE1xE/8V5vfjWS0XLwsSOZoq1weT+pNNK9Yne1YwAz22j6sGi23rv
/iESv6OtPWxDefP3/fFs7D+K5L+QoSNOf6TAjAyE2E+0Mp3B023jqx17r7pS73vv
/T9WBphqlr1iZbLDM4tjZT0r0sR6HHLK1tDxJqNOIJ57xN2jFiLsGZIB7UfDXrk2
9eRht1+2RsOszNDxDfuIuPhK/TCPFBSyrxIPkJ+cz4KZ74TdCMRndWQg9f6MagPA
2K/U812p3o8pu6mxPKXWlJOcH5av0T8+vwfTpEaasmgOqc8OW7BRX+x/Fdrkit7U
JjDluk/kqvWx9+FKy8yCuz/uOpFlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0Jtr
WvgljOVxLSL5UO4u0NGM6kcwHwYDVR0jBBgwFoAUkJNkX1YYcmHmW3CCdNvVLADf
JQ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGMkI1L0E5QzA2QThDNzQxMTExRUY4QjBBOURBODc2MkU5NTFBL2tKTmtY
MVlZY21IbVczQ0NkTnZWTEFEZkpRMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tKTmtYMVlZY21IbVczQ0NkTnZWTEFEZkpRMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkYyQjUvQTlDMDZBOEM3NDExMTFFRjhCMEE5REE4NzYy
RTk1MUEva0pOa1gxWVljbUhtVzNDQ2ROdlZMQURmSlEwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOXu6OpW0Tk5ZMsgLm90OlPhUDFg+O
bH/0fKtUWCWWP9CRzasZxg9SCUJxRKT07aoF3UFXi3DAaC6Irer39plQSXMbz9b5
sVJ67dLgcFlFG9K7izY2Wgbry+JNEhg29DzDORa+4w6oBb4Z9umZBnkkfzEgSI6b
Kk4aJ+vIAvl5Gtnc7h3jFVGTfiFYR7DxE9X9ZNxt1TOe1+ToFVy+MJBOZiu6qWe/
P/tkpIao7hk9yP+Y8lwwmk1Cz4nRa4sQn3LSs6TPz3gS5AFIG7bCmaROQZsZSDcg
sGVvZAQKvHHQDA/9pNTv4/y9CMp0HbKC7QDEOjfc7oh4JyWehhm+43hS
-----END CERTIFICATE-----
Generated at Fri Sep 25 13:00:57 2026 by rpki-client