Error: rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
File:                     kp-MtyJC3APxF2jH_xZcaDK3U7U.mft (raw, json)
Hash identifier:          P+5SBCBEoTWTiSvuW91yWpTnOid+YI1iwmiTSlrq2QA=
Subject key identifier:   FE:8E:F7:95:85:D7:79:29:AE:CF:AD:85:22:2C:12:F4:C9:97:45:0A
Authority key identifier: 92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5
Certificate issuer:       /CN=F366E62BAF/serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
Certificate serial:       03FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
Manifest number:          03FC
Signing time:             Sun 25 Oct 2026 03:58:43 +0000
Manifest this update:     Sun 25 Oct 2026 03:58:42 +0000
Manifest next update:     Tue 27 Oct 2026 03:58:42 +0000
Files and hashes:         1: kp-MtyJC3APxF2jH_xZcaDK3U7U.crl (hash: S7z2Jgc2cYYivo1lqYvv4018ITi+KpU2gKs+q6JKj20=)
                          2: A864F076BE9611EE998D299D775412E6.roa (hash: 1SOFM20prFpQpyBQ79yS3b8vfUM/+4DhWbKvJj39ado=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1021 (0x3fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E62BAF, serialNumber=929F8CB72242DC03F11768C7FF165C6832B753B5
        Validity
            Not Before: Oct 25 03:58:42 2026 GMT
            Not After : Oct 27 03:58:42 2026 GMT
        Subject: CN=6add7e73-bd7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:64:85:03:2f:08:cf:52:20:46:e9:2e:2d:
                    79:3e:96:06:9b:08:3a:59:eb:46:02:77:11:c7:52:
                    e0:8d:a6:b8:a6:50:7a:99:36:0e:43:25:48:4d:21:
                    8d:99:0c:63:69:96:7f:95:26:03:40:87:61:8b:ee:
                    cc:a0:b0:4a:17:17:fa:37:86:3a:47:2a:fd:43:ee:
                    27:2b:f1:87:e0:a8:9e:70:3b:1f:99:bc:06:b3:b9:
                    9a:c6:95:4d:20:14:20:9d:e3:a0:c4:06:6d:e0:fb:
                    5c:01:59:dd:f6:bd:b0:2a:be:a6:16:26:ea:b0:fc:
                    4f:59:fe:56:25:a4:ee:9f:64:76:d1:43:55:e3:f5:
                    01:83:ff:75:39:f8:1a:1f:f0:6f:ef:dd:9d:8c:ed:
                    c6:8c:9a:2a:16:31:ae:c9:cc:85:be:e8:53:5b:fb:
                    ca:29:03:e5:c6:59:98:fa:0f:17:d2:65:1d:da:ba:
                    8c:e0:fb:6b:b6:fe:4f:e3:3a:87:e4:98:aa:e5:0c:
                    b8:db:33:03:21:b4:97:c2:a1:50:cb:cb:7b:c5:db:
                    89:b0:f6:d8:34:fb:78:43:c8:31:ee:9d:a9:3f:77:
                    3b:d8:a7:65:46:0b:ba:50:fb:cb:56:ef:31:3e:06:
                    4d:30:4a:8c:13:55:39:d9:83:72:ff:dc:5a:42:0f:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8E:F7:95:85:D7:79:29:AE:CF:AD:85:22:2C:12:F4:C9:97:45:0A
            X509v3 Authority Key Identifier:
                keyid:92:9F:8C:B7:22:42:DC:03:F1:17:68:C7:FF:16:5C:68:32:B7:53:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kp-MtyJC3APxF2jH_xZcaDK3U7U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E62B/B91D9518BE9011EEA70F3393775412E6/kp-MtyJC3APxF2jH_xZcaDK3U7U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3b:33:b5:fb:64:a0:4d:75:37:c5:6d:9b:99:ae:e0:2d:43:
         5d:02:d4:01:77:37:c3:78:69:a5:82:21:ce:bd:88:cd:df:8f:
         2c:a9:a1:7a:8a:ac:43:bf:11:b1:a3:81:6c:0d:5e:85:92:36:
         59:cc:3a:b9:10:1c:d0:3f:52:68:57:cc:3f:74:d0:0d:3b:04:
         dc:47:ef:03:93:56:61:b1:17:f6:6d:88:57:28:e3:ea:9d:24:
         cc:76:77:e0:5d:31:ab:cb:92:16:4c:e1:6a:d5:11:0e:b9:8f:
         b0:8e:88:37:03:4b:9e:fc:3e:a7:c1:f9:b5:35:2d:fc:b2:45:
         c2:e5:59:1c:fc:b7:df:f6:14:3b:36:f4:99:26:8d:5b:f4:dc:
         76:e3:5a:01:20:57:ab:2a:16:fc:10:ee:c9:9b:20:3c:e7:34:
         74:61:04:73:90:05:3d:0a:ff:7d:81:69:22:ea:ed:b7:51:ab:
         f0:7f:be:a5:f9:ea:78:3c:f8:f6:29:34:1e:2b:a6:f2:f7:d6:
         5d:aa:a0:73:1a:d6:b2:0a:b4:d7:31:d5:4a:b8:5e:c4:ab:49:
         cf:18:a2:06:db:d9:b4:92:a4:60:00:57:8f:03:34:92:2c:e2:
         e5:d0:6b:36:47:b1:dd:6c:2b:36:60:a7:cb:be:09:44:54:44:
         05:68:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:04:44 2026 by rpki-client