Error: rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
File:                     BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft (raw, json)
Hash identifier:          w4Fx61/YHeOpg3XcKEflJmzByaebxFsM6MaK9KZ9WYY=
Subject key identifier:   00:F4:89:92:D3:9C:19:A7:BD:33:9D:38:1F:0C:8E:DD:19:75:B3:DC
Authority key identifier: 04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5
Certificate issuer:       /CN=F362B2F5AF/serialNumber=04C70D0FE10C8F6B2AF827B7C66617ADC2EF21E5
Certificate serial:       01EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
Manifest number:          01E9
Signing time:             Sun 20 Sep 2026 04:53:58 +0000
Manifest this update:     Sun 20 Sep 2026 04:53:57 +0000
Manifest next update:     Tue 22 Sep 2026 04:53:57 +0000
Files and hashes:         1: BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl (hash: PcDIMarzGaK24WN7D5p+qM9iJEv5hjgh/vMvaqF6/YA=)
                          2: 39B8368C3BAA11F09A3A42CEDAE4EC9C.roa (hash: NGOVvxGcMctTOcLjdKtNGDdIQDHinApagvdcC37+4wQ=)
                          3: F3CD790A3B9211F0B6A215B9DAE4EC9C.roa (hash: uy0pfZG46ZecPcXleZMS+n60uaQG5DsddR4RCRLej+Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B2F5AF, serialNumber=04C70D0FE10C8F6B2AF827B7C66617ADC2EF21E5
        Validity
            Not Before: Sep 20 04:53:57 2026 GMT
            Not After : Sep 22 04:53:57 2026 GMT
        Subject: CN=6aaf66e6-ebd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:17:74:91:63:64:b7:16:55:43:8d:cc:3d:52:
                    f1:0f:f2:a0:52:7f:be:ef:c7:f7:e2:ae:34:82:0d:
                    a4:b5:51:c5:bc:a7:18:bf:21:5b:5c:df:e6:12:5c:
                    46:a7:ca:c1:73:30:7c:ef:16:4d:83:4a:84:38:ad:
                    b0:55:f3:06:b0:47:fc:35:4b:ab:11:fa:16:ca:ee:
                    5f:85:83:ad:24:a0:2d:c4:80:bf:d6:7f:f0:c3:6d:
                    ab:db:d2:38:f8:c2:0e:23:a8:b3:2c:c7:d8:7a:d5:
                    87:42:3b:80:42:0a:55:55:d4:45:da:f5:db:2f:be:
                    cb:b7:95:3b:c1:8c:ec:4d:70:5f:47:39:79:2b:3c:
                    b3:af:68:76:22:63:71:7c:44:d7:90:95:1f:0a:67:
                    9d:7f:48:3c:2f:aa:10:7e:97:59:f1:23:40:9a:b5:
                    0b:c7:67:08:81:41:40:4f:c8:43:f3:de:38:34:19:
                    96:cf:33:d1:78:3f:80:e6:0c:39:13:83:90:cc:91:
                    6c:10:9c:1c:1c:ce:e6:4b:36:53:4b:d8:34:57:77:
                    2b:a8:98:e6:3d:e7:9e:34:eb:3c:4e:81:bd:b4:87:
                    ae:43:22:0a:45:9d:27:0d:ac:8f:1c:77:29:6c:56:
                    f6:60:9b:46:16:48:f0:86:2c:13:78:ed:64:a4:cd:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F4:89:92:D3:9C:19:A7:BD:33:9D:38:1F:0C:8E:DD:19:75:B3:DC
            X509v3 Authority Key Identifier:
                keyid:04:C7:0D:0F:E1:0C:8F:6B:2A:F8:27:B7:C6:66:17:AD:C2:EF:21:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BMcND-EMj2sq-Ce3xmYXrcLvIeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B2F5/B5C786A63B9111F0A0FE1AB2DAE4EC9C/BMcND-EMj2sq-Ce3xmYXrcLvIeU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:74:4e:cc:df:55:11:d2:36:64:3a:4c:c9:01:ff:ea:a2:45:
         61:48:6d:fe:25:52:d9:05:08:ea:11:84:c0:2b:54:a0:72:25:
         d5:7c:e8:07:5e:75:bd:55:3b:d4:34:b6:44:62:68:e0:e0:13:
         3b:e1:7d:24:a4:49:4d:85:f8:26:2f:a9:7a:fa:57:9f:c9:21:
         75:85:7c:bb:44:93:25:9b:08:6a:b1:a3:e9:04:a2:e9:30:88:
         22:c6:41:67:ca:46:f9:e9:5f:d0:1f:54:8c:2b:07:9f:85:bd:
         36:cf:fb:82:d3:96:72:21:8b:b8:74:c3:d3:c4:8d:90:dc:e7:
         46:01:19:d5:31:72:f8:49:26:7a:07:10:4d:6e:9e:63:20:dc:
         aa:f6:8d:b8:1b:79:d5:bc:49:67:99:02:42:5b:ad:17:a4:96:
         b7:df:2f:30:ee:a3:14:66:50:ad:3e:b6:1e:40:18:5e:85:83:
         6c:8f:bf:3a:1f:67:ab:d4:a8:3e:01:74:19:89:bd:12:ea:61:
         19:24:f4:62:d2:50:37:be:28:0b:29:0e:0a:f8:98:67:1f:9d:
         07:9d:57:84:69:3c:40:64:e3:a8:27:3d:2b:c3:74:00:b5:15:
         15:ae:4c:ff:4f:dd:10:af:30:ac:e9:04:19:0b:ca:90:b8:7b:
         8d:c2:11:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:12 2026 by rpki-client