Error: rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
File:                     ki0mxmsPTvhSNY472eGm8bVde4c.mft (raw, json)
Hash identifier:          ivNqpQymswJyL2sVrWYQeOlX9/REkUR5i28DMMvJ288=
Subject key identifier:   83:64:13:CB:F4:62:3D:82:6B:32:68:63:10:28:D5:87:07:B5:C3:9E
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Certificate issuer:       /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial:       057F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
Manifest number:          0575
Signing time:             Thu 10 Sep 2026 03:07:47 +0000
Manifest this update:     Thu 10 Sep 2026 03:07:46 +0000
Manifest next update:     Sat 12 Sep 2026 03:07:46 +0000
Files and hashes:         1: ki0mxmsPTvhSNY472eGm8bVde4c.crl (hash: CswZF0/l8YfDnB901zDrnJEMZOWBWeTD4FslgPnB82s=)
                          2: FF2158528AA711F1B550CFF0CE1D38B0.roa (hash: cZ1trg8d+F5o+UUdS9EJoldliC9ZeXJBsBQSd753BjQ=)
                          3: 992D4D268AA711F195A7CFECCE1D38B0.roa (hash: sZQhcPLiBX/Tc/KviHIxHQCpBR2q2wGBC3IndjYyl3M=)
                          4: 42CD7A328AA711F1BDD8B5ECCE1D38B0.roa (hash: DuDVtP8ufRkIHxwSxkSH7iTRXAL2+9UFTBMr8aoAQDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:07:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
        Validity
            Not Before: Sep 10 03:07:46 2026 GMT
            Not After : Sep 12 03:07:46 2026 GMT
        Subject: CN=6aa21f03-2093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7a:96:0b:b2:4b:1f:b2:f2:ed:1e:8b:33:78:
                    49:3c:8d:86:2e:db:d9:a8:ab:af:4c:79:c3:77:8f:
                    f3:24:82:60:ee:79:37:91:76:e0:ed:d1:95:20:27:
                    d1:ff:c6:d3:85:aa:67:d4:76:ff:ad:a4:78:4c:31:
                    c1:5e:4b:e6:35:9b:08:88:a7:c6:76:49:eb:d2:4d:
                    52:92:a2:48:fa:f0:0d:43:3c:83:f0:e3:c1:3c:82:
                    8c:70:89:c9:86:27:3a:47:7d:b6:6b:59:ac:27:5b:
                    d4:70:61:6d:0a:78:51:ea:64:55:6d:af:d2:3c:b3:
                    37:3f:f2:34:86:e0:56:b9:2a:0c:77:3b:f1:e5:95:
                    31:6b:41:c3:8a:00:df:28:57:d6:29:60:66:4e:c2:
                    f5:4d:d6:4b:f6:b5:35:23:85:36:aa:89:86:6a:0e:
                    35:59:23:32:58:60:7c:01:e6:41:e4:62:50:a9:78:
                    0e:17:e7:7f:56:e3:0e:73:2b:ab:15:2a:58:80:41:
                    26:b9:54:ca:07:fc:02:03:fb:0d:7a:52:c8:b1:85:
                    8e:13:96:7d:eb:9b:08:c6:d8:ea:68:67:e9:b6:30:
                    4d:20:32:b1:d5:e3:c9:f9:b3:53:f2:93:75:8b:3b:
                    f6:c6:ce:91:21:f7:49:49:1b:f4:68:88:92:f8:56:
                    d3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:64:13:CB:F4:62:3D:82:6B:32:68:63:10:28:D5:87:07:B5:C3:9E
            X509v3 Authority Key Identifier:
                keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:2f:6b:37:77:5b:a9:77:9a:ab:ad:56:b4:8b:87:00:35:12:
         0e:ba:17:1c:94:1b:0f:23:c1:60:e1:8e:4f:10:00:91:7e:c5:
         0a:a9:54:82:1e:ea:08:16:80:19:e7:74:e1:7d:c8:1d:e2:2e:
         a9:02:db:0c:a5:1c:8f:f6:ab:80:87:89:0b:dd:4f:7b:09:c0:
         a7:37:77:a5:57:81:3e:25:54:46:f9:7a:f9:19:8c:2f:8e:c0:
         7f:25:27:61:55:22:b2:8c:44:09:ec:5a:8e:85:70:74:28:36:
         f7:1f:37:57:b5:24:c0:94:42:d0:74:0f:83:bd:81:7d:bd:11:
         8f:be:3c:19:c8:3e:27:90:48:11:0a:38:58:6e:44:b5:d8:23:
         2e:e1:98:bd:04:43:cf:5d:2c:40:44:a4:73:6f:a1:ef:56:74:
         8e:21:70:28:9e:b1:cb:c8:46:b2:f4:bd:a5:8c:4c:2e:98:b8:
         db:53:8a:91:74:44:31:dc:48:54:71:23:78:ec:6d:0e:13:64:
         1f:97:2d:cb:3d:98:6b:33:62:d1:fe:20:c2:3e:fd:36:a5:91:
         a4:9d:a2:72:fb:62:8f:94:12:04:0c:79:26:37:2d:c3:58:a2:
         bd:89:ad:5a:7a:02:3b:f9:22:40:9f:c0:21:c3:9e:eb:d4:77:
         74:ce:1c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:18:51 2026 by rpki-client