Error: rpki.afrinic.net/repository/member_repository/F363DFDE/601E8B8CFCA411E9B9D60F45F8AEA228/n__gtCMVaUezHiTcJm3Nm1we5g0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363DFDE/601E8B8CFCA411E9B9D60F45F8AEA228/n__gtCMVaUezHiTcJm3Nm1we5g0.mft
File:                     n__gtCMVaUezHiTcJm3Nm1we5g0.mft (raw, json)
Hash identifier:          gJ94f5zaLw5riA0AJSWAh6LWxFEijHWJNB2yspJXWBA=
Subject key identifier:   65:D7:45:40:B3:7D:98:A0:17:81:2E:C3:7E:48:20:A9:D5:C9:BE:01
Authority key identifier: 9F:FF:E0:B4:23:15:69:47:B3:1E:24:DC:26:6D:CD:9B:5C:1E:E6:0D
Certificate issuer:       /CN=F363DFDEAF/serialNumber=9FFFE0B423156947B31E24DC266DCD9B5C1EE60D
Certificate serial:       0A0E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/n__gtCMVaUezHiTcJm3Nm1we5g0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363DFDE/601E8B8CFCA411E9B9D60F45F8AEA228/n__gtCMVaUezHiTcJm3Nm1we5g0.mft
Manifest number:          0A0A
Signing time:             Fri 11 Sep 2026 01:39:07 +0000
Manifest this update:     Fri 11 Sep 2026 01:39:06 +0000
Manifest next update:     Sun 13 Sep 2026 01:39:06 +0000
Files and hashes:         1: n__gtCMVaUezHiTcJm3Nm1we5g0.crl (hash: QflZDg+y4y5h1O9S37ihe04ZlrTYPocGJ7xibI0gAM4=)
                          2: 9574A7E4DD9911F0A96EE1C4DAE4EC9C.roa (hash: Ldw7+Dr8r6HYd7Zax8a9l+H0KYER7uJAKhY/Z2wYe44=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363DFDE/601E8B8CFCA411E9B9D60F45F8AEA228/n__gtCMVaUezHiTcJm3Nm1we5g0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363DFDE/601E8B8CFCA411E9B9D60F45F8AEA228/n__gtCMVaUezHiTcJm3Nm1we5g0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/n__gtCMVaUezHiTcJm3Nm1we5g0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 01:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2574 (0xa0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363DFDEAF, serialNumber=9FFFE0B423156947B31E24DC266DCD9B5C1EE60D
        Validity
            Not Before: Sep 11 01:39:06 2026 GMT
            Not After : Sep 13 01:39:06 2026 GMT
        Subject: CN=6aa35bba-6928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fa:1c:62:f6:ee:9b:b5:bb:8f:99:e4:f0:2c:
                    de:78:4e:ec:3b:cf:35:fc:96:97:f5:93:7d:24:05:
                    00:de:4a:fe:ea:46:91:f0:b1:74:cb:e9:ee:8b:79:
                    23:b5:41:7b:4b:8f:d8:49:61:49:a8:d5:c2:ee:6d:
                    6d:e9:9b:9c:f2:24:fb:7e:a9:2b:2b:5d:1e:6d:46:
                    69:94:45:31:80:00:de:17:13:65:67:46:48:0a:53:
                    be:67:33:34:ad:8b:c9:36:cd:40:3f:0b:df:2e:1b:
                    c9:51:47:02:ab:39:20:d4:e8:7f:c9:f1:f3:84:21:
                    19:12:48:0e:62:56:99:c2:18:c4:91:0d:c2:60:30:
                    25:07:6b:58:46:9e:b7:1e:ca:af:68:f5:86:1e:b4:
                    1e:93:a0:03:7d:72:5a:91:82:46:86:1d:1f:25:7a:
                    e5:30:18:b6:bb:21:fe:d4:a0:ea:3d:b9:81:8a:b3:
                    aa:59:01:4f:ff:30:5a:b9:d7:e5:a7:c9:9d:11:7d:
                    62:ee:dc:b6:7a:da:e4:05:64:26:1c:d9:4d:f3:c2:
                    5b:ef:59:01:70:f8:9d:ab:1b:e5:7f:3a:86:a8:4e:
                    60:22:0d:97:77:29:47:34:54:65:0c:a5:af:18:5b:
                    ee:86:3e:7a:9a:e1:ae:a3:d4:b8:36:87:da:43:df:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D7:45:40:B3:7D:98:A0:17:81:2E:C3:7E:48:20:A9:D5:C9:BE:01
            X509v3 Authority Key Identifier:
                keyid:9F:FF:E0:B4:23:15:69:47:B3:1E:24:DC:26:6D:CD:9B:5C:1E:E6:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363DFDE/601E8B8CFCA411E9B9D60F45F8AEA228/n__gtCMVaUezHiTcJm3Nm1we5g0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/n__gtCMVaUezHiTcJm3Nm1we5g0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363DFDE/601E8B8CFCA411E9B9D60F45F8AEA228/n__gtCMVaUezHiTcJm3Nm1we5g0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:aa:5f:9d:54:a6:b4:6f:ff:de:b4:0f:ba:82:e3:25:85:97:
         eb:fa:fc:0e:b8:f3:30:99:fa:a9:15:72:97:1b:46:7d:49:44:
         b8:b8:9f:9d:0b:01:b9:af:76:05:32:22:99:84:69:de:e2:d5:
         8a:b7:af:9b:5e:9b:f5:3e:c7:11:29:8a:ce:66:31:99:c8:71:
         8f:58:03:fb:36:c2:f3:46:6c:b9:61:5a:1a:ff:e8:32:95:70:
         e8:78:b6:02:d2:c1:d3:19:3a:55:00:88:ba:70:fc:8b:e2:3a:
         fa:02:47:71:c0:f9:6e:ea:dd:55:14:57:bc:30:b9:05:7f:c6:
         6a:76:70:ba:ca:ee:a6:fd:87:88:06:dd:90:47:10:a6:2b:db:
         e0:62:92:b8:ef:5c:ec:46:4a:31:be:db:af:85:28:ed:bf:e2:
         4c:b8:70:b4:43:33:c7:34:29:a5:24:b2:aa:00:e3:d7:7d:0d:
         7f:ae:1a:65:50:a1:40:fe:77:bf:9a:a5:7e:7f:34:5e:c5:78:
         2f:1a:d6:32:58:db:59:03:85:3e:08:ad:92:22:e9:eb:f3:08:
         56:0b:73:12:df:91:12:a9:05:43:e1:57:fa:50:d7:bb:64:63:
         a3:6a:35:5f:41:5f:c5:be:ad:53:bc:a5:cd:b2:ad:6e:30:c6:
         1d:95:c1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:22:49 2026 by rpki-client