Error: rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod

Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.mft
File:                     BV2xv5rQWDg8Yo45MgDWts5fcJA.mft (raw, json)
Hash identifier:          idKlLo6dzI+26AGXDv/Uq7i76d8gMC9twYxMGN6h4kw=
Subject key identifier:   E5:16:FB:9C:C5:DE:FD:96:99:7E:D5:0E:BA:92:58:6E:76:61:44:03
Authority key identifier: 05:5D:B1:BF:9A:D0:58:38:3C:62:8E:39:32:00:D6:B6:CE:5F:70:90
Certificate issuer:       /CN=F3630683AF/serialNumber=055DB1BF9AD058383C628E393200D6B6CE5F7090
Certificate serial:       060B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BV2xv5rQWDg8Yo45MgDWts5fcJA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.mft
Manifest number:          0609
Signing time:             Sun 20 Sep 2026 02:53:07 +0000
Manifest this update:     Sun 20 Sep 2026 02:53:06 +0000
Manifest next update:     Tue 22 Sep 2026 02:53:06 +0000
Files and hashes:         1: BV2xv5rQWDg8Yo45MgDWts5fcJA.crl (hash: 5/7rP9Kg6RmhoJVJ7WMJAohA3RIRXUBS+TE/zj/a/DQ=)
                          2: 0FE932948A5411F1B0F1C1F8CE1D38B0.roa (hash: UV4fI+ELmdndwcNe0ccR8EQbX1usYYEiLqx5vzIKh6o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BV2xv5rQWDg8Yo45MgDWts5fcJA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1547 (0x60b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630683AF, serialNumber=055DB1BF9AD058383C628E393200D6B6CE5F7090
        Validity
            Not Before: Sep 20 02:53:06 2026 GMT
            Not After : Sep 22 02:53:06 2026 GMT
        Subject: CN=6aaf4a93-807e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:1a:03:f6:8e:13:06:e1:ae:76:78:5e:d3:
                    7a:0f:3a:50:c8:65:bd:b5:c6:2f:39:49:4c:e8:d4:
                    ab:4d:41:35:f2:3b:3b:df:92:c4:b3:33:f4:ee:08:
                    06:fd:2b:46:fe:96:f3:a2:ce:d7:32:37:0f:45:f2:
                    ac:1b:e7:80:e4:93:05:a2:63:97:1d:9a:92:15:0b:
                    a2:60:48:16:05:7e:4e:3b:8b:f0:62:15:c7:94:23:
                    24:ee:22:ac:11:1a:3d:84:6f:10:10:fe:b4:fb:fd:
                    06:c1:0b:b4:7b:6f:32:4c:d8:10:e1:de:d5:ba:d3:
                    3c:c5:b0:cc:8f:fa:7f:39:f7:2d:d8:48:81:4e:af:
                    d6:22:49:ae:77:85:5a:68:9a:8f:a5:00:bf:d9:1b:
                    67:e1:db:27:25:49:b5:82:7c:c4:9e:17:de:10:33:
                    5f:6a:17:37:a4:71:f7:61:33:bd:cd:9e:a9:31:da:
                    de:21:f8:a8:8e:e1:4f:c4:aa:5b:eb:73:52:1c:ea:
                    27:c8:37:60:90:37:fc:69:04:fd:8c:4d:da:1a:9d:
                    43:1e:98:3f:37:6a:9a:6f:2b:eb:fe:fd:50:f7:6f:
                    a8:b1:01:db:e3:b5:d3:f7:74:fb:71:1d:4f:cf:e8:
                    71:fb:75:77:d3:58:6d:2a:95:8d:43:b5:5b:0b:b2:
                    88:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:16:FB:9C:C5:DE:FD:96:99:7E:D5:0E:BA:92:58:6E:76:61:44:03
            X509v3 Authority Key Identifier:
                keyid:05:5D:B1:BF:9A:D0:58:38:3C:62:8E:39:32:00:D6:B6:CE:5F:70:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BV2xv5rQWDg8Yo45MgDWts5fcJA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630683/2B834ABA188611ED817C489EF1222468/BV2xv5rQWDg8Yo45MgDWts5fcJA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:19:ad:4b:a9:75:90:08:2d:2e:7e:d1:9a:01:ef:3d:48:e3:
         9f:da:4a:81:eb:9c:50:30:53:5a:e9:5b:9a:44:d1:87:16:55:
         06:54:5a:5f:34:c9:d7:40:b4:b0:64:8b:2d:2c:8e:54:bf:8f:
         3c:be:8e:a2:e6:eb:8e:53:c4:0b:ed:cf:79:6e:96:6a:7d:d6:
         c9:d4:db:ef:97:15:bb:91:02:a8:f1:7b:67:3f:05:41:09:20:
         fc:26:a0:60:1b:e0:e9:ae:49:66:6e:b7:2e:18:9e:7b:7d:d6:
         fd:33:1e:5b:c4:25:86:f1:f6:d8:e4:6e:0f:67:66:53:5a:18:
         77:e6:de:51:4b:3e:42:57:4c:12:9c:6a:7c:92:29:ec:ce:e8:
         3f:c8:f8:45:33:91:7b:0d:59:36:16:0c:b3:f0:bc:21:69:c9:
         86:3e:1f:7d:7e:d5:b8:57:df:ba:06:1f:a2:60:54:94:1d:0f:
         d7:63:ae:dd:89:9c:15:8e:36:3f:f1:f5:2a:1d:88:48:ad:86:
         17:fe:2a:17:fa:54:c8:fd:13:9b:43:e3:d1:54:51:72:ec:e2:
         21:6d:04:15:97:ac:ba:1f:4c:fe:92:50:b9:4e:e4:d8:74:88:
         30:1a:0e:35:1c:28:0a:ec:87:60:c4:05:dd:5d:0c:88:25:16:
         5c:a7:c1:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:58:19 2026 by rpki-client