Error: rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
File:                     gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft (raw, json)
Hash identifier:          cO4ybGbxaR0aV5HSDlEaJh2N22Ocl6sAs4X08lKU7FQ=
Subject key identifier:   94:B7:27:CD:40:C3:5D:85:37:BF:3D:21:A1:12:4F:EF:EE:8E:39:75
Authority key identifier: 80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96
Certificate issuer:       /CN=F36D46F6AF/serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
Certificate serial:       019C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
Manifest number:          019B
Signing time:             Tue 29 Sep 2026 05:06:53 +0000
Manifest this update:     Tue 29 Sep 2026 05:06:53 +0000
Manifest next update:     Thu 01 Oct 2026 05:06:53 +0000
Files and hashes:         1: gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl (hash: KfmZqfuWr8HiCgE1AqfVQ7t26dqpZonGselLuFzCRAo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D46F6AF, serialNumber=80A0D689EB2B23565D87D29213A2E138582AB096
        Validity
            Not Before: Sep 29 05:06:53 2026 GMT
            Not After : Oct  1 05:06:53 2026 GMT
        Subject: CN=6abb476d-f09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c1:24:be:11:9e:16:4d:a1:9f:53:94:8a:d8:
                    b3:51:db:1c:c2:6b:7d:9c:6f:90:1a:89:26:96:26:
                    84:59:64:e8:10:19:48:b8:8b:44:c0:25:46:e1:d6:
                    1a:ed:38:7e:ba:a9:0b:65:75:0c:ae:d0:93:e4:c1:
                    15:51:ba:63:0c:b3:e7:76:2c:23:44:e1:f1:18:8e:
                    c3:e1:f3:5c:1c:d2:8a:35:ac:d3:2b:5c:4e:aa:96:
                    91:2f:2e:da:6d:31:46:66:cf:2c:6b:10:79:58:83:
                    bf:26:50:81:ef:c0:ae:06:26:23:fb:76:ff:b5:fa:
                    f5:6f:9a:b2:75:c6:26:89:73:84:f4:ff:9b:ed:33:
                    3c:08:5e:98:e3:0b:b8:71:95:f3:c7:78:63:d6:a3:
                    c9:d4:8b:26:ee:34:b5:e4:6e:97:fc:d8:dd:89:6f:
                    f6:ba:2a:7e:ab:2c:5a:64:63:4e:e6:36:60:b8:43:
                    8f:0d:c4:30:cf:28:c7:a3:b0:15:c9:15:e0:db:7a:
                    a6:92:bd:ec:b1:95:a1:1a:01:3a:a1:a1:74:e2:63:
                    b0:98:87:e8:e9:9c:5a:2a:90:88:d0:77:4c:e5:fc:
                    88:70:27:a8:9a:c5:a6:5c:e8:a0:06:96:2a:50:00:
                    a3:ee:09:c1:ab:1e:f6:00:9f:83:ac:c9:f6:15:38:
                    f3:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B7:27:CD:40:C3:5D:85:37:BF:3D:21:A1:12:4F:EF:EE:8E:39:75
            X509v3 Authority Key Identifier:
                keyid:80:A0:D6:89:EB:2B:23:56:5D:87:D2:92:13:A2:E1:38:58:2A:B0:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gKDWiesrI1Zdh9KSE6LhOFgqsJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D46F6/609C86867D8B11F0BB7F96AFDAE4EC9C/gKDWiesrI1Zdh9KSE6LhOFgqsJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:52:51:57:59:17:45:35:fc:ab:0a:0f:ab:6e:91:26:c9:d7:
         7e:b6:00:a7:33:54:16:33:0f:7e:2d:ca:90:60:4f:ac:7a:d0:
         fe:37:7c:16:08:fd:cd:4a:b3:33:0e:62:4e:65:e9:eb:a4:a5:
         9c:e3:70:aa:0e:79:aa:9f:3c:b2:83:46:d3:5f:4d:8e:8f:97:
         a1:f3:df:47:08:16:ba:47:c2:e6:37:0f:15:d1:ec:18:5b:aa:
         81:81:e7:86:1e:c7:05:e2:de:9b:b4:6f:07:b2:72:e1:6a:24:
         5c:fc:e8:a6:6c:62:48:13:98:24:6e:89:2f:8c:07:b4:cb:de:
         09:eb:22:08:2a:ee:74:94:91:fe:e4:01:eb:ba:c9:b5:b3:fc:
         93:91:75:01:02:76:4f:7c:a6:85:46:d5:a3:27:ac:3b:f7:54:
         4e:b4:5f:73:37:59:d1:3a:e1:74:af:80:08:2b:e8:94:62:b0:
         9c:ac:b9:7e:ba:13:85:f8:da:21:71:44:4c:26:2f:4c:36:1b:
         47:c8:7b:a1:2f:60:30:c9:83:92:23:b5:4c:ff:44:17:e1:97:
         e9:5b:63:08:8f:5c:e8:df:51:c2:a8:29:cc:10:ce:19:35:cc:
         09:f2:28:35:aa:91:01:86:15:37:19:7f:83:58:b6:30:e9:70:
         ec:54:76:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 21:13:44 2026 by rpki-client