Error: rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
File:                     -wkj-GnVLjM4ArnFPXizuoZUMMw.mft (raw, json)
Hash identifier:          VF9NPs3zYOYedWigW10L6AFPzVa0i0Vuckdwl3wBy+A=
Subject key identifier:   97:C9:49:CE:5E:2F:C4:EC:E2:AA:88:5E:ED:F6:D5:24:94:11:F7:29
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Certificate issuer:       /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial:       0601
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
Manifest number:          05F8
Signing time:             Tue 22 Sep 2026 02:58:12 +0000
Manifest this update:     Tue 22 Sep 2026 02:58:11 +0000
Manifest next update:     Thu 24 Sep 2026 02:58:11 +0000
Files and hashes:         1: -wkj-GnVLjM4ArnFPXizuoZUMMw.crl (hash: vbb00HoYoUoTHiy5VliX5Lo9KMiT0z//954LRuvy94Q=)
                          2: 4B454DAA8A6D11F1A0B53D0FCF1D38B0.roa (hash: 1A0L1uPFsmbrXqK3o6gBdtlVfG97lH1yGo2/hTF0JqM=)
                          3: 4B67D68A8A6E11F184D19A14CF1D38B0.roa (hash: mQKkOZp4IJ77KNXjngRxYZITAGUOeXF20aGNVpbflBA=)
                          4: 294052808A6E11F1A4749014CF1D38B0.roa (hash: YiyEUT/QFYS6/b8U7AFIlPC+Y4DtjYaVbmQ5D0jAWoc=)
                          5: E3C653308A6D11F1A6412914CF1D38B0.roa (hash: p9hlGzewGMaj5gPBDqvEO3e2S+ZbZso+XQB0hn7n8wY=)
                          6: 8ADC1A3E8A6D11F180BD560FCF1D38B0.roa (hash: rjs89YTmGWh9XUMaq59FoPkx586pjsdr+zg9OuFmDk8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1537 (0x601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Validity
            Not Before: Sep 22 02:58:11 2026 GMT
            Not After : Sep 24 02:58:11 2026 GMT
        Subject: CN=6ab1eec4-9b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:61:30:42:1a:79:f0:32:2f:d1:51:32:83:
                    de:c0:bb:d8:3b:dd:5c:10:44:62:22:6f:08:37:20:
                    13:79:ee:68:3b:7c:22:36:c6:46:0f:2c:cb:50:60:
                    fe:2a:c2:f4:10:a9:7f:76:5a:89:85:d4:73:0d:d8:
                    b9:fb:98:89:8e:66:57:d3:2e:34:a3:0a:f1:67:0b:
                    54:93:cc:8f:18:1e:d0:e8:b8:e4:8f:a6:f1:af:e3:
                    33:81:c3:af:de:5b:37:f6:34:ec:5e:45:39:2d:64:
                    83:07:37:f7:aa:d7:d1:43:df:87:1d:f4:64:6c:4e:
                    33:ea:4c:df:ea:68:cb:da:30:0e:78:93:37:16:9d:
                    d0:65:40:a6:6d:08:7d:49:86:9f:f6:66:b3:08:17:
                    01:42:27:74:b1:13:85:a2:ef:9b:b0:cf:b2:08:41:
                    8f:d5:43:71:1b:22:c7:9e:a9:97:25:26:36:bf:02:
                    0c:2b:c2:a3:a8:e4:4f:d3:a0:55:ad:95:64:b4:a6:
                    5e:56:66:1b:01:b0:5c:c8:d8:3f:ab:a8:06:e2:ba:
                    da:7d:b5:6e:a6:35:69:9c:8b:2c:b2:b8:2b:85:d6:
                    b8:e3:29:d3:f8:e8:b5:78:b1:5a:8f:4d:c7:2d:f3:
                    ce:0e:e5:3b:b9:f3:9a:7d:df:28:2f:ae:36:52:27:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:49:CE:5E:2F:C4:EC:E2:AA:88:5E:ED:F6:D5:24:94:11:F7:29
            X509v3 Authority Key Identifier:
                keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:75:9a:3a:e3:90:eb:23:b7:09:8c:11:d7:40:74:25:89:
         ba:e9:64:e7:54:c5:12:e1:82:5d:21:3d:c9:52:ef:3e:71:7a:
         c5:9c:84:f5:ee:b7:fc:d9:dd:91:81:d9:fa:e8:f7:40:47:3c:
         de:c6:8a:9f:57:c6:43:19:9e:14:f4:c7:2b:83:d4:2c:1d:a3:
         a3:25:01:e4:72:90:5b:e6:ba:2b:e9:9f:52:ee:78:cf:86:d9:
         05:41:75:92:10:fe:5a:dc:6a:b3:56:00:ed:aa:8d:86:8f:f1:
         54:a8:25:0e:df:32:d1:64:8c:e6:be:1c:d4:e5:f4:48:14:49:
         11:86:0d:35:6d:a5:4a:ea:34:77:c8:05:e2:5b:d6:cb:3e:c8:
         b7:8c:9c:f8:8f:bb:3e:7f:ba:00:ff:e3:8c:7d:93:57:e1:b6:
         0e:5b:a7:d9:39:03:63:28:36:ff:f1:8b:21:b1:a5:70:0c:cf:
         81:c2:b5:36:b1:1d:8f:20:d3:21:53:3e:74:b9:c5:db:32:4e:
         11:fb:9c:04:d3:54:bc:02:b9:ff:29:f0:ae:45:a0:22:eb:6c:
         e8:99:1f:02:3e:ee:07:0b:82:90:ac:b2:c6:c9:64:10:89:4d:
         eb:1a:a2:71:e1:25:c9:c4:14:9a:6a:b3:d6:bf:c1:d3:eb:d3:
         bf:6f:30:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:29:09 2026 by rpki-client