Error: rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
File:                     ki0mxmsPTvhSNY472eGm8bVde4c.mft (raw, json)
Hash identifier:          BvGwOE6Goi6WpTOhCvTp0F9zmVbYiX+OpAcgX+8MHNY=
Subject key identifier:   E6:6A:13:A1:59:61:D4:F5:98:8C:1E:9C:15:9D:F4:D4:07:77:FB:44
Authority key identifier: 92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87
Certificate issuer:       /CN=F367972FAF/serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
Certificate serial:       05B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
Manifest number:          05A6
Signing time:             Wed 28 Oct 2026 03:07:17 +0000
Manifest this update:     Wed 28 Oct 2026 03:07:17 +0000
Manifest next update:     Fri 30 Oct 2026 03:07:17 +0000
Files and hashes:         1: ki0mxmsPTvhSNY472eGm8bVde4c.crl (hash: LF5A/QYhmNrWaOCAeBoJo8Y711yOP51DEeldDEbyWbk=)
                          2: FF2158528AA711F1B550CFF0CE1D38B0.roa (hash: cZ1trg8d+F5o+UUdS9EJoldliC9ZeXJBsBQSd753BjQ=)
                          3: 992D4D268AA711F195A7CFECCE1D38B0.roa (hash: sZQhcPLiBX/Tc/KviHIxHQCpBR2q2wGBC3IndjYyl3M=)
                          4: 42CD7A328AA711F1BDD8B5ECCE1D38B0.roa (hash: DuDVtP8ufRkIHxwSxkSH7iTRXAL2+9UFTBMr8aoAQDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 03:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456 (0x5b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FAF, serialNumber=922D26C66B0F4EF852358E3BD9E1A6F1B55D7B87
        Validity
            Not Before: Oct 28 03:07:17 2026 GMT
            Not After : Oct 30 03:07:17 2026 GMT
        Subject: CN=6ae166e5-5cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:5f:e7:80:f7:cb:b5:06:8b:5b:4e:c6:2d:
                    70:ce:58:a3:9c:4c:36:6c:5e:b8:ba:2d:3f:2f:39:
                    ee:5f:09:1a:93:77:f3:0b:da:3e:44:b6:f2:d3:4d:
                    e0:bc:85:48:d6:53:64:69:e3:89:f8:da:ed:86:d9:
                    a3:06:10:ba:b3:92:5d:6b:7b:90:a5:c6:fd:b2:9a:
                    5f:f8:e8:65:48:1b:5b:05:14:53:21:ab:07:cc:21:
                    7a:cd:03:42:1b:e0:b9:67:c4:c5:d4:e6:1e:b9:51:
                    33:7b:d0:16:54:94:8d:a0:e6:ab:13:11:b7:f2:b0:
                    4f:da:a8:70:0d:f1:16:66:df:33:15:b3:56:74:6a:
                    d6:6a:f8:28:c5:80:18:70:fd:6b:67:e5:b1:ab:6e:
                    ea:7a:2a:8b:5f:50:ba:df:a7:0c:fb:4b:62:ae:3f:
                    59:f6:14:95:82:1c:8d:dc:99:28:e4:57:12:e3:37:
                    7b:10:70:65:28:42:58:46:de:10:1d:0d:77:ef:96:
                    99:ed:1d:1c:c0:a3:21:f5:4d:13:b9:f1:f3:02:33:
                    cd:2d:7a:0d:e5:5d:59:f2:b6:3a:00:df:23:54:5e:
                    9c:1b:05:72:a6:69:71:98:95:18:95:0f:c4:df:35:
                    2c:28:b0:42:ae:b9:1e:e7:96:13:36:96:35:fb:0e:
                    f4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6A:13:A1:59:61:D4:F5:98:8C:1E:9C:15:9D:F4:D4:07:77:FB:44
            X509v3 Authority Key Identifier:
                keyid:92:2D:26:C6:6B:0F:4E:F8:52:35:8E:3B:D9:E1:A6:F1:B5:5D:7B:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki0mxmsPTvhSNY472eGm8bVde4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/6110705C901011ED9475399BF1222468/ki0mxmsPTvhSNY472eGm8bVde4c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:62:15:a7:71:95:e7:cc:50:8e:86:40:1a:5e:9d:9f:c9:de:
         a9:8b:52:25:a6:cc:25:ef:bc:5c:10:00:f3:c1:4b:d6:06:e3:
         c7:62:3c:6d:76:80:4e:fe:32:de:0b:0e:bc:e6:4f:c5:2b:19:
         ea:00:13:4e:3e:a6:93:4e:a2:33:c5:d3:e4:3a:27:67:5f:6c:
         b2:07:49:1f:6d:7e:19:26:50:9a:6f:10:a3:e5:29:18:8d:41:
         c0:c5:50:63:8d:34:ea:e5:68:9a:e1:a4:e5:fc:db:48:bc:d2:
         6a:b0:f5:79:da:97:98:11:5a:f9:9e:69:71:95:fc:02:6d:e2:
         40:75:ea:77:ec:dc:79:60:d0:ee:38:76:4c:33:8a:0f:72:fd:
         d7:a7:f4:aa:bc:47:83:da:01:d0:10:ac:f9:68:1e:87:57:1f:
         fb:43:41:b8:7b:81:31:5c:99:2a:a5:85:16:e1:c0:31:59:db:
         77:8c:99:4d:2e:56:98:0c:40:dd:6e:c5:b6:56:d0:27:a3:5d:
         32:12:d1:e3:67:55:87:d6:32:f3:9a:ab:05:84:c4:fb:9d:cb:
         68:d4:95:bc:e7:c6:23:c5:1b:0c:d1:cf:8d:ca:43:5a:1c:ff:
         b7:80:25:43:f9:92:ef:51:18:15:9a:48:ea:e1:ed:e0:e1:ba:
         d1:46:1a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 01:42:47 2026 by rpki-client