Error: rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.mft
File:                     gYaDikiRYMghuM_8XQJ0D7JlPGw.mft (raw, json)
Hash identifier:          N8FVLXfYWJfLOaCXyK9nLPgzA0te9FNI28ZvNinRu7Y=
Subject key identifier:   49:D4:0B:CE:00:68:5E:09:55:58:5B:D5:93:75:96:07:21:37:23:20
Authority key identifier: 81:86:83:8A:48:91:60:C8:21:B8:CF:FC:5D:02:74:0F:B2:65:3C:6C
Certificate issuer:       /CN=F364B7D8AF/serialNumber=8186838A489160C821B8CFFC5D02740FB2653C6C
Certificate serial:       5D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gYaDikiRYMghuM_8XQJ0D7JlPGw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.mft
Manifest number:          5C
Signing time:             Mon 26 Oct 2026 05:49:48 +0000
Manifest this update:     Mon 26 Oct 2026 05:49:47 +0000
Manifest next update:     Wed 28 Oct 2026 05:49:47 +0000
Files and hashes:         1: gYaDikiRYMghuM_8XQJ0D7JlPGw.crl (hash: VCeSel1H1lg4g0/Pq7YK8G7aTwTG0Xdmv9Xgds6xlrk=)
                          2: 276941508A5B11F184038BA4CE1D38B0.roa (hash: 8Lur71HSXtruAQrQk3ojkG+TOypBkD0fVphqS4aVw5k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gYaDikiRYMghuM_8XQJ0D7JlPGw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B7D8AF, serialNumber=8186838A489160C821B8CFFC5D02740FB2653C6C
        Validity
            Not Before: Oct 26 05:49:47 2026 GMT
            Not After : Oct 28 05:49:47 2026 GMT
        Subject: CN=6adee9fc-403b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:79:66:4b:5d:00:47:2e:e1:34:70:12:5e:2d:
                    af:bf:d0:59:63:3e:81:7e:12:1b:b0:b9:82:7a:12:
                    58:fa:0c:f6:b1:f9:f6:c2:b4:5e:07:5e:96:a1:27:
                    14:21:ea:30:30:2f:5b:3a:36:81:81:10:fa:3f:6a:
                    2e:24:e2:31:49:3c:aa:b0:90:45:c9:dc:28:5b:4c:
                    6a:c9:80:15:0d:69:c0:64:70:3f:9e:7c:fe:07:26:
                    bd:93:5c:65:29:15:41:b2:65:4b:8d:19:a1:ad:77:
                    97:a4:7d:e7:31:76:9c:e2:3f:35:5b:6f:63:91:0b:
                    6d:98:d9:ef:a5:4b:f5:b7:d8:73:75:d6:09:6d:10:
                    05:ea:db:52:63:cb:c4:bf:bf:ca:59:6e:b7:62:4c:
                    e1:11:be:af:1f:68:43:3c:e2:40:8b:7c:ed:ec:c1:
                    10:72:1e:38:a1:29:5f:1e:ee:4e:83:5e:fc:85:c5:
                    aa:c4:29:3b:c1:d3:ee:5d:cc:46:73:db:57:59:0d:
                    29:eb:9e:90:28:fe:8b:84:f9:dd:da:29:39:b9:b2:
                    75:11:a3:85:2a:43:cd:61:5c:af:b8:0b:5c:c0:b5:
                    5f:23:9c:17:b1:06:6e:ea:11:16:ab:64:3c:c6:ed:
                    96:41:ed:c4:38:68:76:ed:f4:3b:bf:ed:9a:ab:4c:
                    9d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D4:0B:CE:00:68:5E:09:55:58:5B:D5:93:75:96:07:21:37:23:20
            X509v3 Authority Key Identifier:
                keyid:81:86:83:8A:48:91:60:C8:21:B8:CF:FC:5D:02:74:0F:B2:65:3C:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gYaDikiRYMghuM_8XQJ0D7JlPGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B7D8/7402C8428A5611F1B8F03F05CF1D38B0/gYaDikiRYMghuM_8XQJ0D7JlPGw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:52:3b:b3:60:58:7d:7f:70:fe:4a:b9:8f:29:cb:5a:ce:dd:
         6c:a2:e0:f5:b5:b2:ff:54:81:dc:57:88:11:c9:0e:50:86:84:
         5d:64:cc:80:27:b4:0c:a6:0e:d7:56:42:8a:4d:69:ae:57:8e:
         32:e7:bf:3f:c9:44:0e:f2:2c:70:67:d2:f9:bf:2d:df:a7:1c:
         15:3a:2b:4b:be:77:e7:f4:49:a3:cf:c0:5d:b8:39:bf:c7:4b:
         64:29:b8:2f:f1:92:05:13:71:f7:ce:92:49:13:22:03:70:13:
         a8:6a:83:6e:33:57:b7:5f:a7:d1:8d:51:15:c0:1c:4f:a1:c5:
         43:ea:21:ee:84:2f:c7:fe:73:50:c3:d9:81:53:c7:45:6e:64:
         4c:b1:37:0f:58:cf:37:a0:7d:d8:3e:eb:7d:92:d9:22:ae:a6:
         2a:34:84:12:ab:e5:52:9a:de:bb:9a:46:fb:f6:a2:81:d6:b4:
         1b:da:2a:75:e3:99:4b:93:e6:79:b8:b1:2c:01:bc:d7:70:7f:
         4c:4f:93:c9:75:64:90:0c:91:45:77:9f:a6:fa:e1:b0:1e:1f:
         4b:fe:f7:02:25:fd:0f:36:82:92:26:f6:3c:8c:d1:ab:d9:49:
         73:5b:d1:ed:70:cb:42:a8:54:73:ba:56:5f:9b:78:18:97:27:
         69:42:c1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:32:39 2026 by rpki-client