Error: rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
File:                     Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft (raw, json)
Hash identifier:          aC4IR2tfc/fOfWY5IoQiUhXCOdM7jH3qq5kHazejrV0=
Subject key identifier:   B1:3A:5C:F6:0E:9B:0C:66:95:D9:DF:81:DA:3F:B1:5F:DC:96:81:62
Authority key identifier: 2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D
Certificate issuer:       /CN=F369C49AAF/serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
Certificate serial:       039B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
Manifest number:          0399
Signing time:             Sun 11 Oct 2026 04:09:35 +0000
Manifest this update:     Sun 11 Oct 2026 04:09:34 +0000
Manifest next update:     Tue 13 Oct 2026 04:09:34 +0000
Files and hashes:         1: Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl (hash: viAgEmbNYbHSbHeYtA7fYE4exsLXzKItCegmsWju/Ko=)
                          2: 3F101946015F11EFB16E3011017001B1.roa (hash: Xh6nt99XUHYlPadPzPRYk3ee0GvJbKhlgYL2g7hGR5Q=)
                          3: 24C76BB01CB611F180AD77A3DAE4EC9C.roa (hash: WQDzjdynXr1/DFrDYosPyJCdGsQEmA9RMtr5aVeseUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C49AAF, serialNumber=2ACFC68188405AC544505291C58E47F85E2B327D
        Validity
            Not Before: Oct 11 04:09:34 2026 GMT
            Not After : Oct 13 04:09:34 2026 GMT
        Subject: CN=6acb0bfe-18f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:66:3b:8a:36:c9:1d:7d:a2:5b:d3:69:f9:39:
                    64:47:d9:05:c6:b1:65:29:8d:6a:5f:47:08:49:50:
                    63:98:aa:26:cd:a1:f7:86:b9:6d:c7:30:2f:48:5c:
                    66:6f:75:e3:1a:eb:41:97:08:4b:3c:0e:24:10:f1:
                    5d:c4:62:e1:2a:95:b5:d0:1a:96:e1:eb:92:ac:dd:
                    d7:78:78:0f:4d:4e:7d:62:8e:95:61:0d:39:a3:9d:
                    11:11:fa:0a:7d:45:50:59:c9:22:67:35:5c:35:3a:
                    41:9f:a5:73:9d:31:f2:79:4b:bd:8b:b7:26:74:b3:
                    fc:59:89:d9:a3:07:ce:f5:b1:39:1a:62:f8:d3:15:
                    61:51:0a:ba:8c:00:87:6a:e4:d7:4b:5a:74:e3:90:
                    eb:05:33:0c:11:98:b0:59:53:d0:6f:ba:4e:17:58:
                    cb:c0:8f:47:87:11:b3:4e:54:be:fb:d1:9f:47:19:
                    1e:99:5c:b9:43:7f:23:c5:bc:3e:c7:85:d3:e5:ed:
                    f8:89:1d:a2:cf:6f:06:ec:77:40:24:9c:56:c8:8e:
                    b7:49:51:dd:ba:5a:59:32:3a:34:68:b1:fd:35:63:
                    1b:47:93:e8:e9:fa:a1:13:d7:6e:10:d9:ee:2b:3f:
                    b3:6a:03:55:c2:e7:22:fd:64:0f:4d:ec:56:03:76:
                    36:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3A:5C:F6:0E:9B:0C:66:95:D9:DF:81:DA:3F:B1:5F:DC:96:81:62
            X509v3 Authority Key Identifier:
                keyid:2A:CF:C6:81:88:40:5A:C5:44:50:52:91:C5:8E:47:F8:5E:2B:32:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C49A/6FB80BE2015C11EFB3D61AFB007001B1/Ks_GgYhAWsVEUFKRxY5H-F4rMn0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c1:ab:ae:b0:56:67:26:7b:ca:de:22:20:21:7d:0a:7f:c1:
         fb:c8:3e:fb:35:ed:9c:76:e7:5d:31:5a:60:9a:1c:88:ac:24:
         ed:7f:75:29:ba:f9:1d:7a:15:39:cf:e5:14:cc:d3:f5:ae:fe:
         e6:b0:b8:ee:4c:5b:07:cb:68:c9:e7:98:a0:ac:71:82:20:11:
         01:b0:38:3e:ed:ac:22:2e:8e:f2:50:a5:41:d2:69:dd:b9:82:
         38:1f:55:7c:85:4b:c6:30:46:e3:b6:09:4f:8e:6f:b2:56:ad:
         e8:0a:50:61:ed:bd:f8:db:e8:a2:70:21:fd:3e:ce:0e:63:b0:
         30:e5:b9:0c:29:31:96:04:e8:ad:fb:d4:11:94:a6:de:c7:d7:
         87:84:c1:7d:21:9d:d5:cb:91:77:4c:5f:d1:80:ba:70:a1:69:
         10:8f:2d:ce:0c:92:36:eb:d7:f9:73:1b:75:40:5f:4d:ec:c2:
         4a:d6:8c:3c:03:02:21:43:9c:07:8c:72:7f:28:fe:5e:37:66:
         e7:93:4a:2d:48:0e:e8:6c:43:29:15:57:49:89:1d:2f:3d:aa:
         00:90:5d:e6:79:a4:0f:95:77:85:c7:54:f4:9c:c5:50:79:dd:
         b7:72:ef:20:0f:7e:1e:e8:ec:38:68:f9:b2:21:20:41:4c:b1:
         54:c5:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:47:29 2026 by rpki-client