Error: rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
File:                     gwNZld4YydatS8u5zZWhUE2fyh8.mft (raw, json)
Hash identifier:          4WrpT+ybjTBGjOLsiMfHDGm5DJeUpy/bs0f8dYr3FP8=
Subject key identifier:   D9:FF:7E:05:72:40:27:C4:43:88:95:D9:F3:BE:4B:B0:8A:B1:73:F2
Authority key identifier: 83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F
Certificate issuer:       /CN=F365C604AF/serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
Certificate serial:       0718
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
Manifest number:          0712
Signing time:             Thu 15 Oct 2026 02:32:58 +0000
Manifest this update:     Thu 15 Oct 2026 02:32:57 +0000
Manifest next update:     Sat 17 Oct 2026 02:32:57 +0000
Files and hashes:         1: gwNZld4YydatS8u5zZWhUE2fyh8.crl (hash: IonhmMi8qjDXHTqzNXVBFam9WNwHq+q5fcbl8BhGbZM=)
                          2: 02707C5C62A511F1976E8CBBCE1D38B0.roa (hash: kNlQ3mI3ploUs0QlA/2XC5+Kyx3mrdz6GAvOc4Ju8cA=)
                          3: 4A39ED9E216811F1B9641F8FDAE4EC9C.roa (hash: ZEu/gRkS0nHQNfo1XGm/zqNOd7PN310lh4RpfKuvGtc=)
                          4: 2CF4FE9462A511F1B1DDADBBCE1D38B0.roa (hash: GqJucNYDpIuYnpt/MQEVvwSpSmQVeT3e1+hg4TnCJVk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1816 (0x718)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C604AF, serialNumber=83035995DE18C9D6AD4BCBB9CD95A1504D9FCA1F
        Validity
            Not Before: Oct 15 02:32:57 2026 GMT
            Not After : Oct 17 02:32:57 2026 GMT
        Subject: CN=6ad03b59-f7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:e6:47:34:7a:ca:93:ad:17:3c:29:d3:79:
                    ec:34:46:63:7c:e3:7b:a0:6d:1c:46:8a:6f:df:8a:
                    1f:09:54:55:6e:de:90:e5:57:35:fa:61:af:38:92:
                    f9:b1:1b:b2:2d:25:90:45:03:a3:a8:9a:71:7d:9a:
                    18:0e:93:9f:8a:40:c3:1b:2f:24:e5:ee:41:17:a5:
                    c4:5a:7d:eb:51:58:08:09:67:8c:4b:f0:17:19:6b:
                    ee:e1:bf:77:06:1b:12:c2:03:c7:9b:4a:57:dc:88:
                    9f:75:37:c9:30:e9:d3:11:dd:67:a0:5d:3f:37:77:
                    7f:e6:14:7c:e2:de:1c:86:ec:86:52:93:ac:7e:08:
                    df:fc:31:40:73:5d:3f:92:4b:5c:5a:43:85:37:96:
                    a1:0b:05:e6:15:02:bf:95:7e:36:c2:67:0f:bd:5b:
                    4c:30:b9:95:6c:3e:78:fd:25:18:59:a8:c2:57:16:
                    9c:2f:fe:46:f7:5c:cb:50:cf:92:3b:22:e6:3d:a1:
                    17:46:3e:1e:ad:be:72:e5:b3:bb:2f:7c:b3:19:16:
                    e8:23:84:7e:03:8c:4f:5f:e6:7b:1c:86:c8:e6:e7:
                    48:01:92:ea:d9:dd:c2:71:eb:08:2f:4e:a8:6c:77:
                    ed:3c:af:7a:cc:b5:27:1c:53:9b:25:3a:60:ec:72:
                    bc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FF:7E:05:72:40:27:C4:43:88:95:D9:F3:BE:4B:B0:8A:B1:73:F2
            X509v3 Authority Key Identifier:
                keyid:83:03:59:95:DE:18:C9:D6:AD:4B:CB:B9:CD:95:A1:50:4D:9F:CA:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gwNZld4YydatS8u5zZWhUE2fyh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C604/340A4E06624511ECAA933A9B5A40D577/gwNZld4YydatS8u5zZWhUE2fyh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:0d:9a:af:17:e4:ed:27:fc:ad:54:47:d5:fc:b8:c5:82:90:
         a6:8a:aa:e8:7d:87:75:b1:26:5e:eb:ab:01:1f:43:45:5b:3c:
         b8:83:98:ea:e0:6d:c2:76:ba:b2:cc:ed:4f:c4:d3:0c:4e:62:
         59:02:1c:b5:f2:8e:1f:f2:ae:f8:dd:64:43:3f:32:95:68:c8:
         7a:d3:3f:c2:1e:2d:05:85:b9:ee:38:51:9f:d6:09:5d:25:71:
         1e:78:2c:d6:c8:e8:8e:18:74:4d:53:b1:c9:f4:6f:ca:37:ae:
         2d:59:4a:07:85:d8:b7:de:e3:5d:08:b3:d8:2c:74:2d:e3:d2:
         ec:c4:90:81:4d:22:af:4b:07:51:1c:d5:34:f1:65:6e:43:be:
         c1:9b:6f:55:00:4a:f2:67:35:59:ae:e8:c2:99:4c:d8:59:39:
         29:f5:35:e2:89:3c:61:f6:4d:13:a0:8c:1e:23:37:46:cf:05:
         0c:a1:a6:2d:7f:cd:ff:d8:0b:38:3c:8c:f4:df:76:1a:6f:0a:
         66:45:19:44:79:52:0b:af:ce:89:c8:8b:de:a6:8c:7f:4d:65:
         7f:01:f3:dc:dc:b4:60:df:8e:7f:3e:65:cf:d4:c6:f4:39:df:
         f3:f2:ed:12:d7:aa:d6:7c:a7:e4:e2:31:20:9c:1c:f4:3f:60:
         04:ed:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:42:10 2026 by rpki-client