Error: rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
File:                     -wkj-GnVLjM4ArnFPXizuoZUMMw.mft (raw, json)
Hash identifier:          VMx1mooI0d9H6UkOVd5Ut4a8BiVhYftDapnY8IsS5XA=
Subject key identifier:   0F:07:20:D9:31:B5:F6:43:08:CD:E9:72:86:61:F6:E4:9F:D8:79:FB
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Certificate issuer:       /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial:       0621
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
Manifest number:          0618
Signing time:             Sat 24 Oct 2026 02:59:12 +0000
Manifest this update:     Sat 24 Oct 2026 02:59:11 +0000
Manifest next update:     Mon 26 Oct 2026 02:59:11 +0000
Files and hashes:         1: -wkj-GnVLjM4ArnFPXizuoZUMMw.crl (hash: ohaAI9bSXKK3LsiPClAgEFCzFfxtEri0Nr2q7Z3ZjmE=)
                          2: 4B454DAA8A6D11F1A0B53D0FCF1D38B0.roa (hash: 1A0L1uPFsmbrXqK3o6gBdtlVfG97lH1yGo2/hTF0JqM=)
                          3: 4B67D68A8A6E11F184D19A14CF1D38B0.roa (hash: mQKkOZp4IJ77KNXjngRxYZITAGUOeXF20aGNVpbflBA=)
                          4: 294052808A6E11F1A4749014CF1D38B0.roa (hash: YiyEUT/QFYS6/b8U7AFIlPC+Y4DtjYaVbmQ5D0jAWoc=)
                          5: E3C653308A6D11F1A6412914CF1D38B0.roa (hash: p9hlGzewGMaj5gPBDqvEO3e2S+ZbZso+XQB0hn7n8wY=)
                          6: 8ADC1A3E8A6D11F180BD560FCF1D38B0.roa (hash: rjs89YTmGWh9XUMaq59FoPkx586pjsdr+zg9OuFmDk8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1569 (0x621)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Validity
            Not Before: Oct 24 02:59:11 2026 GMT
            Not After : Oct 26 02:59:11 2026 GMT
        Subject: CN=6adc1f00-8b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6a:fd:9c:03:29:bc:87:36:a2:17:07:fa:b0:
                    72:de:39:83:15:a5:d9:f8:7b:63:80:37:cd:a6:bd:
                    dd:65:26:a8:d8:b7:96:3d:12:63:1a:51:36:ad:b8:
                    ac:45:e5:f3:2d:13:2b:10:53:a5:3b:b6:eb:0c:59:
                    5a:8d:a5:22:5f:90:5e:76:aa:3c:69:03:7a:00:df:
                    eb:0c:6c:73:a3:63:37:b8:10:c3:d1:66:0b:11:02:
                    8e:86:d7:fa:0a:42:cf:e3:a3:dd:de:36:1b:5f:55:
                    9a:09:f4:ad:0d:1d:ed:8b:6f:50:c3:23:95:52:7a:
                    d8:3a:18:b3:08:24:d0:e8:1f:66:f8:b9:c2:e8:c4:
                    3a:7c:5f:eb:a6:1c:d9:ea:70:35:7f:c2:12:46:37:
                    72:78:40:71:af:fe:17:3c:4a:ce:61:49:7e:40:e2:
                    55:30:11:65:14:bb:d4:40:d1:25:d6:d7:ab:b8:3e:
                    f5:08:e1:64:c6:f2:ca:82:fc:c6:6c:3b:53:9e:69:
                    cb:9e:2c:bb:42:45:1c:61:4a:24:41:08:9b:ec:da:
                    b9:5c:86:da:5f:a2:83:d0:03:18:ec:67:43:94:01:
                    12:bc:d4:ea:02:7f:01:c9:11:fe:9d:0a:15:ed:ef:
                    7c:06:78:35:45:4b:ff:43:0a:36:ff:50:f3:46:52:
                    8c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:07:20:D9:31:B5:F6:43:08:CD:E9:72:86:61:F6:E4:9F:D8:79:FB
            X509v3 Authority Key Identifier:
                keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b1:67:61:04:52:5d:0d:43:12:5a:3f:9e:1f:37:05:ed:ec:
         6c:d8:79:58:8a:b9:a5:e3:90:bb:8a:90:b5:8b:f6:ae:df:5c:
         57:57:dd:14:67:bf:2e:71:31:84:45:b6:0c:6c:79:71:87:72:
         0c:41:00:0e:25:06:32:d6:f0:0d:4e:73:a7:d0:fb:5b:77:d5:
         da:15:ff:a6:01:59:5b:59:97:16:88:7f:a0:2b:d3:ac:80:69:
         0d:c7:0b:27:03:8e:ee:48:86:ea:08:e0:41:bc:ad:32:b3:8d:
         c6:7d:27:4d:3c:3f:bf:ba:e2:a7:a2:b5:84:83:5d:92:45:cb:
         a5:f5:27:aa:f8:9b:04:48:a7:e0:f5:8c:b6:91:6c:8a:ee:5d:
         78:d9:4f:65:b0:ae:f3:92:33:99:88:a4:38:cd:3a:a4:97:bb:
         50:e0:91:e6:32:ab:e4:d2:ea:34:82:23:ed:3b:1d:cc:70:c9:
         d4:d8:8d:02:2f:4d:0f:2e:3a:81:7c:f8:15:36:d8:a0:54:00:
         bd:8f:6c:5f:b0:b9:61:80:7e:cd:38:f5:49:6f:47:4d:78:63:
         a9:7b:44:d4:d3:8e:89:62:f7:fe:f6:6e:81:10:78:5f:8f:cf:
         0b:ee:45:e1:96:51:3b:1e:59:86:e0:eb:28:7d:81:51:4c:15:
         b7:5c:01:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:10:53 2026 by rpki-client