Error: rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
File:                     gAEXeatK0jDEfjKtDyaMBltYJzk.mft (raw, json)
Hash identifier:          7vAm5PQcw4qrRpdwCYX3kFqqBKKx9fT04+Evt63oLys=
Subject key identifier:   9D:C6:21:7B:01:79:C5:38:DE:A5:E1:97:45:68:58:EB:64:A6:E3:78
Authority key identifier: 80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39
Certificate issuer:       /CN=F3678405AF/serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
Certificate serial:       61
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
Manifest number:          5E
Signing time:             Wed 28 Oct 2026 05:46:53 +0000
Manifest this update:     Wed 28 Oct 2026 05:46:52 +0000
Manifest next update:     Fri 30 Oct 2026 05:46:52 +0000
Files and hashes:         1: gAEXeatK0jDEfjKtDyaMBltYJzk.crl (hash: 6GBAtXYjTl0dRC3ECe8mzWTYsEgOHU4wu5Y0I/9ea1U=)
                          2: EC3E8552925911F1861D7FC6CE1D38B0.roa (hash: wMxM6iiSP5VezernVRQAzC5Ti2yHn1gKly6ToFgfUc4=)
                          3: AFC3C4F48CFD11F1AEB72BB7CE1D38B0.roa (hash: SgKxF5/8dtqg/2YdGcT3nH3vWLieJxae9WqWx8WQJDY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678405AF, serialNumber=80011779AB4AD230C47E32AD0F268C065B582739
        Validity
            Not Before: Oct 28 05:46:52 2026 GMT
            Not After : Oct 30 05:46:52 2026 GMT
        Subject: CN=6ae18c4d-804f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ba:cf:a4:3a:8b:d0:26:c5:b8:ff:27:75:38:
                    e9:dd:db:45:a4:63:0e:7f:ab:6f:86:e4:6f:8d:e7:
                    6b:27:5c:47:cb:0d:5a:8f:2f:d6:a4:7b:8d:5f:69:
                    38:f9:9f:73:07:3b:2c:ed:9a:8a:0d:ec:93:67:24:
                    93:3b:8e:8f:3e:43:67:e4:14:63:81:95:ea:af:1f:
                    03:15:18:66:de:87:ac:90:23:1c:06:c9:53:d6:3c:
                    11:14:8e:5b:f0:e0:25:a1:6a:b6:a2:2b:11:fb:18:
                    39:3c:87:c3:b6:d3:ea:e5:dd:28:4a:0c:8f:01:b6:
                    44:82:ca:1c:5f:3d:0d:e2:cc:b1:d3:b9:a3:53:84:
                    49:e1:e0:00:90:32:c4:da:fa:f6:8c:8a:f3:ab:59:
                    1b:a5:df:8c:16:e7:86:50:03:f3:36:51:93:90:ce:
                    39:fe:bf:25:b4:28:c9:a3:a1:64:1a:dc:f3:77:a2:
                    15:6e:ba:43:8f:53:7b:2f:d5:df:71:11:6f:a1:c5:
                    e3:4b:11:a1:33:94:2b:fc:aa:b5:94:0b:b7:0a:88:
                    fb:64:a3:21:41:d1:3d:a0:97:64:9f:80:19:a7:8b:
                    02:7b:9e:e6:af:74:2b:30:64:24:60:19:19:ac:d3:
                    12:13:28:64:a9:19:f6:13:d9:da:6d:a5:d1:b5:24:
                    53:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C6:21:7B:01:79:C5:38:DE:A5:E1:97:45:68:58:EB:64:A6:E3:78
            X509v3 Authority Key Identifier:
                keyid:80:01:17:79:AB:4A:D2:30:C4:7E:32:AD:0F:26:8C:06:5B:58:27:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gAEXeatK0jDEfjKtDyaMBltYJzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678405/8AA6ADD28CE711F1BC0FEDB3CE1D38B0/gAEXeatK0jDEfjKtDyaMBltYJzk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d7:2c:7b:d2:5a:87:d8:93:24:78:c6:b4:a8:96:38:29:68:
         85:1c:1c:9f:46:02:88:f9:06:17:6b:f2:84:6a:6b:97:92:fd:
         c7:a6:dc:16:ab:59:81:71:90:06:8f:37:c9:0e:d4:ec:fc:d9:
         b5:56:c5:cc:7d:ed:e6:94:c6:fe:ef:c5:c2:e5:9a:4a:69:16:
         ca:9d:2e:17:32:bc:97:0f:b9:73:49:07:2c:5b:dd:f1:b1:ce:
         9c:21:98:69:91:d9:30:bc:f2:47:59:e6:b7:dd:de:27:74:a7:
         2f:f1:31:59:7d:a8:fc:ce:ab:fe:ba:26:fb:86:f2:c7:e4:64:
         71:70:a4:e1:20:47:51:30:3d:d5:1c:cd:16:05:47:89:27:5f:
         8c:ab:41:27:6a:4f:17:fc:69:54:6e:ac:b0:e6:92:84:aa:6b:
         3f:3b:c8:b3:83:0a:53:17:cf:0d:c1:0e:85:5f:19:01:cf:06:
         6e:a2:d2:0d:0d:20:9b:f0:ce:1c:e9:68:7d:9c:c2:d7:cc:c7:
         31:39:84:53:9f:6f:1e:0a:74:04:77:cb:22:b8:6e:0c:ca:a7:
         97:29:6a:b1:d1:73:f2:cf:56:a8:55:8f:9a:c6:a9:a5:f0:d1:
         6f:f8:f0:fc:5b:a2:16:1f:39:d7:e8:2a:63:c7:1f:05:b2:c2:
         f9:3d:fd:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:33:13 2026 by rpki-client