Error: rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File:                     kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier:          SCoTCaLXp5oUbbOcpth7INQINvfHwA7iIp2QUvFxI1Q=
Subject key identifier:   6E:AB:E7:05:8B:1A:36:45:50:07:12:62:3D:EC:F4:81:E9:A7:0E:0C
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer:       /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial:       05EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number:          05EB
Signing time:             Sat 19 Sep 2026 07:16:08 +0000
Manifest this update:     Sat 19 Sep 2026 07:16:07 +0000
Manifest next update:     Mon 21 Sep 2026 07:16:07 +0000
Files and hashes:         1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: T4Jogiu5dvhH6A99+mON6685JURVSg/ZHPRenKbi/WA=)
                          2: C1B630EE8D6B11F08834F6ACDAE4EC9C.roa (hash: dgSYZC5D+KjnOh21ksdGPfjeg//i1eX1fXXuJxMe2OM=)
                          3: 401D27E081C711F0830BC9C9DAE4EC9C.roa (hash: nJPUmahtOqiPFAxwPDfnodDi2p2b719GESj2IRhzuSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
        Validity
            Not Before: Sep 19 07:16:07 2026 GMT
            Not After : Sep 21 07:16:07 2026 GMT
        Subject: CN=6aae36b8-588a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d4:e2:25:58:0d:e5:06:6a:55:db:39:ef:ef:
                    94:5b:59:35:ea:dc:2d:53:38:96:33:3b:c0:62:e3:
                    3e:8a:be:0e:ce:62:63:97:dd:fb:87:04:47:16:f1:
                    d9:ad:14:3b:89:d6:28:28:e3:9c:d5:d5:88:8d:86:
                    ce:0d:84:e0:80:0e:96:b1:3f:d1:0f:b5:15:20:3e:
                    ce:3f:6d:65:49:8f:6b:4b:31:19:8d:46:8b:7d:cb:
                    c5:9d:c2:99:94:f4:e6:bc:a7:7d:e4:7e:c2:30:3c:
                    62:7a:d0:3d:9b:07:20:22:f6:31:7f:a1:da:ca:91:
                    84:d2:48:01:72:d8:ed:81:b5:68:7e:68:6c:86:2f:
                    22:db:3c:af:82:35:f1:b1:ba:b4:6f:ca:4c:4f:d7:
                    31:fd:e0:5d:2b:e7:39:92:81:86:a1:1d:ff:45:45:
                    9d:1e:e8:93:6a:d5:1c:1d:a8:99:f3:8d:51:b8:89:
                    44:a9:c5:66:50:36:a8:2a:55:1e:24:f3:a6:0a:e2:
                    c4:d8:cc:02:a7:65:93:b6:24:de:09:b8:fb:d1:6d:
                    f2:ee:9d:f7:11:a0:d5:a7:1d:77:53:54:7e:7d:c3:
                    23:e2:93:d8:b5:29:e4:f1:3a:ce:7a:7a:03:ce:48:
                    fa:cd:3e:4e:32:84:cb:d0:6c:60:3f:fc:c2:e1:dd:
                    1b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AB:E7:05:8B:1A:36:45:50:07:12:62:3D:EC:F4:81:E9:A7:0E:0C
            X509v3 Authority Key Identifier:
                keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:58:62:1b:aa:f1:ce:99:a9:fb:51:76:4c:de:30:75:77:
         d6:dd:ee:cf:80:03:43:a9:f3:25:cf:c9:2a:b6:81:73:5e:33:
         12:c6:bc:5d:57:3c:16:28:08:91:7b:a0:ca:cf:50:75:0c:b7:
         e1:2e:f6:51:d4:19:a0:16:9e:4a:7b:c4:40:ac:01:b8:a4:92:
         00:82:4b:85:db:34:c9:3e:04:7d:7a:2a:6e:e3:bb:f4:76:fb:
         95:4a:c6:3f:fc:cc:92:cb:2c:db:25:e1:52:2d:58:68:d7:7f:
         36:ae:bd:b3:4b:93:36:f6:2c:b7:54:df:9e:3e:2d:dc:43:d8:
         17:bf:7c:17:8c:4f:49:c6:3e:16:7d:3e:a6:bb:7b:00:66:63:
         0e:b3:0b:df:28:76:34:67:ea:96:fd:3a:65:33:d5:8e:97:94:
         4e:fc:eb:43:96:72:4c:68:89:30:7f:03:15:d0:74:f0:a7:9b:
         2e:87:ac:0e:b5:d1:fd:89:7a:a1:91:11:1c:27:71:e6:b9:a0:
         24:ac:96:2f:f0:a6:00:f7:7f:96:bb:89:46:f8:16:4e:f8:14:
         bd:ab:d1:51:fa:6b:e3:69:a7:c5:4b:68:89:4d:61:63:ce:81:
         32:95:b2:2f:91:a8:ee:68:07:91:a0:fa:7e:e2:e5:d3:19:b1:
         e3:37:4c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:48:18 2026 by rpki-client