Error: rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
File:                     gwNZld4YydatS8u5zZWhUE2fyh8.mft (raw, json)
Hash identifier:          z9qump+oNQLZo0pJnATUMc6ve8LIjwLXe2bAu7JfFgU=
Subject key identifier:   71:66:C4:42:CE:C6:5B:07:DD:7C:F3:FC:01:57:6C:10:C6:91:B8:7C
Authority key identifier: 83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F
Certificate issuer:       /CN=F365C604AF/serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
Certificate serial:       0705
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
Manifest number:          06FF
Signing time:             Sat 26 Sep 2026 02:34:16 +0000
Manifest this update:     Sat 26 Sep 2026 02:34:15 +0000
Manifest next update:     Mon 28 Sep 2026 02:34:15 +0000
Files and hashes:         1: gwNZld4YydatS8u5zZWhUE2fyh8.crl (hash: vC1mTSPhCrD39ZqO9YdT7Y098pTkN9fsJ5XFgWZlhUQ=)
                          2: 02707C5C62A511F1976E8CBBCE1D38B0.roa (hash: kNlQ3mI3ploUs0QlA/2XC5+Kyx3mrdz6GAvOc4Ju8cA=)
                          3: 4A39ED9E216811F1B9641F8FDAE4EC9C.roa (hash: ZEu/gRkS0nHQNfo1XGm/zqNOd7PN310lh4RpfKuvGtc=)
                          4: 2CF4FE9462A511F1B1DDADBBCE1D38B0.roa (hash: GqJucNYDpIuYnpt/MQEVvwSpSmQVeT3e1+hg4TnCJVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1797 (0x705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C604AF, serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
        Validity
            Not Before: Sep 26 02:34:15 2026 GMT
            Not After : Sep 28 02:34:15 2026 GMT
        Subject: CN=6ab72f28-d0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7f:1c:23:6f:50:05:54:55:ca:ff:78:18:c0:
                    c4:06:5d:b9:41:42:ab:fc:a6:3a:29:44:ec:aa:3a:
                    a2:3e:0a:ee:4c:aa:9b:2a:8d:b1:d7:d5:c3:e3:7c:
                    9b:67:8f:ba:90:40:e4:8c:e7:c3:57:20:30:bd:8c:
                    f4:e5:60:90:7c:80:cb:c5:e1:50:c9:b8:e3:3d:d8:
                    cf:27:af:69:eb:14:de:b4:b1:00:da:5d:58:39:59:
                    3e:24:0b:96:64:19:1a:57:99:42:a7:fd:56:2e:30:
                    87:e8:87:b7:fa:a7:72:0a:39:d9:82:b9:bd:20:2c:
                    6c:19:20:9f:4e:fb:d4:fe:7d:b2:6a:ab:d3:48:ce:
                    ac:17:6d:19:84:0a:51:c6:41:8a:38:70:7e:6e:01:
                    60:cf:7a:b5:ac:19:2e:3b:01:5c:81:4d:63:cd:67:
                    74:f7:35:cf:a8:9e:55:fb:d6:cf:a0:d2:63:6c:b7:
                    5b:3b:ac:d9:78:0a:3b:4c:65:ae:35:a5:d2:d3:c4:
                    38:c0:57:e8:60:25:b9:e3:90:71:4b:6d:cc:6f:66:
                    da:91:de:79:c6:d5:0b:cf:8e:61:77:dc:7c:81:72:
                    d9:10:00:12:51:cc:7b:0f:17:86:1a:c1:d0:02:4d:
                    30:d1:ca:95:9f:dd:07:d8:e8:65:b6:fc:d2:f6:1c:
                    a5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:66:C4:42:CE:C6:5B:07:DD:7C:F3:FC:01:57:6C:10:C6:91:B8:7C
            X509v3 Authority Key Identifier:
                keyid:83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:53:58:75:0e:48:5f:bb:9b:4e:1b:8f:fa:89:2c:e3:3b:bf:
         b7:1b:b4:1f:dd:5d:7e:43:dd:05:29:1b:53:65:b2:1e:be:2a:
         a6:d9:ea:92:98:ff:07:5a:a4:a8:da:43:1f:d9:58:25:60:03:
         f0:9c:f1:4e:0a:82:f7:7e:f6:37:ae:a6:31:19:27:51:26:a1:
         f9:29:d4:b5:7c:4a:49:f3:b1:27:f2:d8:77:92:5d:38:dc:64:
         79:a9:19:0b:2c:3f:ca:95:07:11:47:ba:ef:99:fe:ba:b4:30:
         d2:96:26:3a:8b:8c:05:29:b6:5d:48:0e:81:2f:90:53:90:a5:
         e5:ad:fd:20:b1:63:30:a8:7a:75:ad:0a:d1:9b:f9:e4:fd:f7:
         e4:c9:0b:24:a3:89:a1:ec:d4:95:6c:0d:14:37:91:b8:fb:b9:
         bf:42:bd:98:f9:9e:9c:be:52:68:1f:57:7e:1e:ed:6b:4e:ab:
         b5:71:9c:ec:ee:ac:64:6c:f1:a5:94:f0:67:b7:4b:29:e6:01:
         eb:5b:8d:24:ac:62:05:e3:c5:73:61:8d:a8:0c:d0:a1:b9:48:
         ac:38:5d:e7:e6:cc:65:55:4c:1d:d2:09:45:a5:44:4f:5d:47:
         28:12:0d:f5:f9:15:96:11:96:4c:42:75:1d:5c:48:26:d0:ed:
         5f:ab:8f:15
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBwUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUM2MDRBRjExMC8GA1UEBRMoODMwMzU5OTVERTE4QzlENkFENEJDQkI5Q0Q5NUEx
NTA0RDlGQ0ExRjAeFw0yNjA5MjYwMjM0MTVaFw0yNjA5MjgwMjM0MTVaMBgxFjAU
BgNVBAMTDTZhYjcyZjI4LWQwZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLfxwjb1AFVFXK/3gYwMQGXblBQqv8pjopROyqOqI+Cu5MqpsqjbHX1cPj
fJtnj7qQQOSM58NXIDC9jPTlYJB8gMvF4VDJuOM92M8nr2nrFN60sQDaXVg5WT4k
C5ZkGRpXmUKn/VYuMIfoh7f6p3IKOdmCub0gLGwZIJ9O+9T+fbJqq9NIzqwXbRmE
ClHGQYo4cH5uAWDPerWsGS47AVyBTWPNZ3T3Nc+onlX71s+g0mNst1s7rNl4CjtM
Za41pdLTxDjAV+hgJbnjkHFLbcxvZtqR3nnG1QvPjmF33HyBctkQABJRzHsPF4Ya
wdACTTDRypWf3QfY6GW2/NL2HKUTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcWbE
Qs7GWwfdfPP8AVdsEMaRuHwwHwYDVR0jBBgwFoAUgwNZld4YydatS8u5zZWhUE2f
yh8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVDNjA0LzM0MEE0RTA2NjI0NTExRUNBQTkzM0E5QjVBNDBENTc3L2d3Tlps
ZDRZeWRhdFM4dTV6WldoVUUyZnloOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d3TlpsZDRZeWRhdFM4dTV6WldoVUUyZnloOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUM2MDQvMzQwQTRFMDY2MjQ1MTFFQ0FBOTMzQTlCNUE0
MEQ1NzcvZ3dOWmxkNFl5ZGF0Uzh1NXpaV2hVRTJmeWg4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBdU1h1Dkhfu5tOG4/6iSzjO7+3G7Qf
3V1+Q90FKRtTZbIeviqm2eqSmP8HWqSo2kMf2VglYAPwnPFOCoL3fvY3rqYxGSdR
JqH5KdS1fEpJ87En8th3kl043GR5qRkLLD/KlQcRR7rvmf66tDDSliY6i4wFKbZd
SA6BL5BTkKXlrf0gsWMwqHp1rQrRm/nk/ffkyQsko4mh7NSVbA0UN5G4+7m/Qr2Y
+Z6cvlJoH1d+Hu1rTqu1cZzs7qxkbPGllPBnt0sp5gHrW40krGIF48VzYY2oDNCh
uUisOF3n5sxlVUwd0glFpURPXUcoEg31+RWWEZZMQnUdXEgm0O1fq48V
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:15:11 2026 by rpki-client