Error: rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
File:                     BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft (raw, json)
Hash identifier:          FXmWqLJWrx80yzqUZCKixE36ZC2w1nGFV8/Bn/tPsWQ=
Subject key identifier:   EB:4A:D7:D2:8E:D8:53:78:0A:E6:D6:8F:8E:2E:6F:5A:92:0B:22:02
Authority key identifier: 04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07
Certificate issuer:       /CN=F3615826RI/serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
Certificate serial:       0788
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
Manifest number:          0788
Signing time:             Mon 28 Sep 2026 02:18:09 +0000
Manifest this update:     Mon 28 Sep 2026 02:18:08 +0000
Manifest next update:     Wed 30 Sep 2026 02:18:08 +0000
Files and hashes:         1: BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl (hash: t/tCRS2hswvPtk27p3WekYnRAvsvjqv3QY3q5UGCPt0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                          rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826RI, serialNumber=04C90B0F6B6E5994F66587E370F7F7CBE6611207
        Validity
            Not Before: Sep 28 02:18:08 2026 GMT
            Not After : Sep 30 02:18:08 2026 GMT
        Subject: CN=6ab9ce61-07cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:98:12:06:bc:04:92:73:1e:33:40:be:fd:82:
                    05:5e:bf:0c:4a:e5:8b:45:0c:cf:df:38:cc:96:8f:
                    22:04:e5:2c:18:c6:40:69:f2:5f:33:61:51:aa:17:
                    80:ba:da:30:8c:d7:ec:2d:64:e4:ce:e7:7e:91:cd:
                    72:f1:22:d6:58:88:69:3f:45:55:f1:25:88:75:fb:
                    cb:0f:d4:5b:2b:64:4e:c4:86:6d:42:21:2e:f2:bf:
                    a9:f8:6a:93:41:d2:3d:3c:ee:91:a1:6d:93:c7:42:
                    ab:84:3d:06:01:0e:c8:2f:23:74:18:61:78:a5:87:
                    b5:5f:c1:94:4f:53:b3:04:9c:7c:94:32:3c:21:cc:
                    82:94:19:1c:b8:b8:69:de:6a:ae:86:1e:0f:93:ac:
                    03:58:e8:0a:79:24:0c:5a:88:53:7e:8f:9d:c1:cb:
                    f3:1f:1c:30:96:3e:ff:dc:34:2f:c1:72:23:79:04:
                    21:07:5e:f4:f0:f2:be:97:d4:4b:66:d3:02:ae:83:
                    74:e4:c1:ac:09:d0:17:c2:47:35:b8:d9:ec:f5:a9:
                    25:41:a4:ba:da:89:08:99:c5:79:76:46:5d:73:79:
                    cf:68:40:97:e9:e1:be:18:8c:75:45:03:6a:97:c3:
                    b2:82:08:b7:82:92:cd:72:f6:f9:85:4b:ed:4b:78:
                    ba:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4A:D7:D2:8E:D8:53:78:0A:E6:D6:8F:8E:2E:6F:5A:92:0B:22:02
            X509v3 Authority Key Identifier:
                keyid:04:C9:0B:0F:6B:6E:59:94:F6:65:87:E3:70:F7:F7:CB:E6:61:12:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/4459251CF05711EBA5C8D138D8A014CE/BMkLD2tuWZT2ZYfjcPf3y-ZhEgc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:b1:f1:cd:cb:f6:b4:90:68:44:c4:24:be:25:19:88:ed:2d:
         fb:0b:68:84:44:31:87:f3:c6:1e:3f:66:17:f1:8d:79:ea:79:
         a6:99:fe:13:dd:f7:ab:23:ad:37:83:47:51:2f:7c:2e:77:10:
         1d:a0:ed:8a:0b:8d:91:34:c3:6a:57:d4:68:9c:d5:5f:40:43:
         86:69:38:93:ee:16:f3:6d:e0:77:19:27:96:2a:a6:5e:48:d0:
         39:09:38:24:6f:57:4f:da:ce:bc:44:24:4e:10:0a:c1:6c:42:
         e6:12:4b:02:5e:fc:61:1e:ae:24:dc:9f:e9:d4:94:f0:1f:78:
         4f:00:89:91:1a:c3:2b:80:81:16:b9:08:97:7b:e0:de:84:a7:
         68:32:04:11:a2:8c:5d:dc:c0:44:ea:16:1e:c6:03:b4:05:ad:
         8b:f5:20:09:64:b2:8f:9e:5f:9f:8d:a7:87:32:56:12:9e:87:
         69:71:54:bd:73:70:42:b9:7f:fa:ba:35:b1:89:d5:eb:0c:c2:
         9b:5e:08:e8:01:0a:bd:53:9f:75:79:3d:6c:5c:40:09:ef:db:
         70:0d:0e:d4:47:c8:0c:ff:c3:88:8e:4e:11:c3:be:38:08:0d:
         d7:90:2b:17:23:ed:c2:a9:e0:43:c5:06:44:f4:5e:99:e7:41:
         bf:9a:f0:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:20:49 2026 by rpki-client