Error: rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
File:                     Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft (raw, json)
Hash identifier:          JPr/chuwv65jjn135k+JMfZhqJdyXYG9pCayXiPE/uc=
Subject key identifier:   BD:E1:4A:14:31:AA:26:4A:5C:EC:C1:7D:C8:40:E7:9D:03:BB:3E:AD
Authority key identifier: 2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
Certificate issuer:       /CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Certificate serial:       0391
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
Manifest number:          038F
Signing time:             Thu 01 Oct 2026 04:10:21 +0000
Manifest this update:     Thu 01 Oct 2026 04:10:20 +0000
Manifest next update:     Sat 03 Oct 2026 04:10:20 +0000
Files and hashes:         1: Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl (hash: CNUmNaDVrlnYEj1fVgqtzicTCNsty2sLQLoaBdD2kSQ=)
                          2: 3F101946015F11EFB16E3011017001B1.roa (hash: Xh6nt99XUHYlPadPzPRYk3ee0GvJbKhlgYL2g7hGR5Q=)
                          3: 24C76BB01CB611F180AD77A3DAE4EC9C.roa (hash: WQDzjdynXr1/DFrDYosPyJCdGsQEmA9RMtr5aVeseUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 Oct 2026 04:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 913 (0x391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C49AAF, serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
        Validity
            Not Before: Oct  1 04:10:20 2026 GMT
            Not After : Oct  3 04:10:20 2026 GMT
        Subject: CN=6abddd2d-af00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dc:ee:90:b4:0d:a6:93:14:81:58:1b:2c:49:
                    c6:2b:f3:d5:b2:de:e7:f8:31:51:97:78:6f:26:53:
                    54:41:c1:37:a4:f1:c0:e3:b7:c0:b2:82:8d:12:6b:
                    43:ca:87:f4:a2:68:bb:be:72:c6:4f:e9:40:66:ce:
                    b9:15:c2:d5:2b:a0:02:de:20:b7:a6:23:65:dc:58:
                    67:b7:3d:bb:71:20:bf:cf:5f:8e:ee:b8:77:8a:70:
                    86:9c:41:92:c6:18:06:97:ab:13:59:08:d1:4e:8e:
                    53:01:e0:4a:26:1a:c5:49:59:80:e5:c1:29:3e:53:
                    63:d3:01:51:0b:48:16:b3:e4:70:5b:1a:f8:cb:79:
                    81:28:0e:f3:a8:04:04:69:52:4c:9c:e4:4c:92:3c:
                    85:ea:78:ab:22:ee:31:bc:7e:d4:07:0f:75:f9:8d:
                    2f:52:2b:a3:ec:47:8e:23:dd:f2:5a:ef:b7:ac:ab:
                    2d:e1:3b:f0:c3:01:23:a4:ec:c2:3a:a7:f3:ea:11:
                    9c:19:9e:71:ce:13:a1:6b:15:cf:f8:2d:04:25:bd:
                    54:3a:4d:3b:d2:ee:5d:bb:af:a7:2b:fb:0e:a2:56:
                    e2:82:9d:31:8e:19:5b:4a:56:f7:88:32:c6:17:32:
                    01:14:4f:f7:94:7a:59:b0:62:ed:16:95:3b:04:58:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E1:4A:14:31:AA:26:4A:5C:EC:C1:7D:C8:40:E7:9D:03:BB:3E:AD
            X509v3 Authority Key Identifier:
                keyid:2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:02:10:dd:29:fd:bc:81:e6:50:98:fd:37:ba:09:0d:db:ee:
         6c:e4:1e:42:b9:ac:23:8a:ed:d9:fe:f1:b6:49:09:5d:aa:24:
         61:58:d5:37:d1:46:a6:08:00:2f:3b:19:2c:17:c4:10:d6:c4:
         cc:32:e3:a9:c5:e3:19:5b:be:1d:18:4b:22:37:93:ce:f1:a6:
         93:cc:41:eb:f4:21:35:45:a8:db:50:4f:62:53:ed:69:4c:b1:
         fc:93:48:0e:f1:89:b4:6b:38:cd:74:6c:64:00:1c:51:b5:e9:
         5b:ef:5c:a7:d9:0c:6a:c3:6e:08:52:35:3a:ce:9f:af:7b:e6:
         d4:ff:c0:93:18:9f:59:f2:cd:39:1d:db:2f:53:38:34:b2:ef:
         3c:13:51:f9:f2:2c:b1:95:3a:b8:92:37:58:0f:72:be:9c:98:
         61:aa:bb:85:84:2b:1e:71:25:dd:27:99:af:63:53:26:f3:31:
         f0:32:66:99:a4:55:01:c2:28:7a:89:14:c5:32:a0:b3:dc:37:
         c3:13:93:b9:1d:5c:ec:5d:d3:b6:10:01:01:79:0c:a2:98:71:
         e5:c4:a0:4b:61:b8:f5:05:da:fd:88:23:53:fd:e7:17:1d:f8:
         49:1f:a6:94:ff:15:01:b8:aa:63:f3:07:77:88:0d:7e:24:76:
         74:e4:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:18:56 2026 by rpki-client